Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/84/8db8d2-6b11-4d19-8e8d-52a10425b136/1/NNsbsppK6oXhnCiS0Mg54vuUXtA.mft
File: NNsbsppK6oXhnCiS0Mg54vuUXtA.mft (raw, json)
Hash identifier: cl0rmlpuHtrbYUp40GA/ExaJWGnUoVUmIoA29w/EX0A=
Subject key identifier: 9D:70:1D:83:D1:16:96:09:4E:E6:E6:E3:12:B6:AE:78:FE:61:B7:9A
Authority key identifier: 34:DB:1B:B2:9A:4A:EA:85:E1:9C:28:92:D0:C8:39:E2:FB:94:5E:D0
Certificate issuer: /CN=34db1bb29a4aea85e19c2892d0c839e2fb945ed0
Certificate serial: 019A2AB0EBFC9988AAA344B8A0651E8F6A9F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NNsbsppK6oXhnCiS0Mg54vuUXtA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/84/8db8d2-6b11-4d19-8e8d-52a10425b136/1/NNsbsppK6oXhnCiS0Mg54vuUXtA.mft
Manifest number: 03DA
Signing time: Tue 28 Oct 2025 12:00:29 +0000
Manifest this update: Tue 28 Oct 2025 12:00:29 +0000
Manifest next update: Wed 29 Oct 2025 12:00:29 +0000
Files and hashes: 1: MxQVcAiuW0p4EDIiEm7q3BWYvP8.roa (hash: JVFsJWGBLPgzxt9uY5l+yySS0Ei3Tn04Hx81eXPjKe4=)
2: NNsbsppK6oXhnCiS0Mg54vuUXtA.crl (hash: Jny5HmoyYNBGo/ltkKxVC618aDjkyHS4ynpL+Ecn5EE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/84/8db8d2-6b11-4d19-8e8d-52a10425b136/1/NNsbsppK6oXhnCiS0Mg54vuUXtA.crl
rsync://rpki.ripe.net/repository/DEFAULT/84/8db8d2-6b11-4d19-8e8d-52a10425b136/1/NNsbsppK6oXhnCiS0Mg54vuUXtA.mft
rsync://rpki.ripe.net/repository/DEFAULT/NNsbsppK6oXhnCiS0Mg54vuUXtA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Oct 2025 12:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:2a:b0:eb:fc:99:88:aa:a3:44:b8:a0:65:1e:8f:6a:9f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=34db1bb29a4aea85e19c2892d0c839e2fb945ed0
Validity
Not Before: Oct 28 12:00:29 2025 GMT
Not After : Oct 29 12:00:29 2025 GMT
Subject: CN=9d701d83d11696094ee6e6e312b6ae78fe61b79a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:4f:59:c6:df:ba:d4:af:af:f7:af:b2:7c:7e:
6e:ce:8e:40:8a:46:dc:53:0a:44:cd:e1:23:10:d5:
a3:26:36:c3:2b:b6:cd:36:d3:8e:9d:ac:05:f9:ff:
eb:53:60:fa:59:3e:df:66:2f:a6:83:88:84:f5:51:
c9:7c:a3:24:54:5d:b5:37:49:79:17:a1:0c:0b:c1:
43:fd:23:7a:3f:b3:9f:b6:3d:92:0f:46:14:6e:68:
8a:13:02:8e:f0:04:0a:07:37:9d:f0:15:e7:af:22:
72:56:f7:91:8f:b6:18:c3:93:92:af:dd:bb:e1:13:
3a:b9:02:44:6d:84:fe:0f:90:6d:0f:4c:6d:38:8b:
23:90:86:79:2e:fb:74:5f:a3:1a:7f:45:35:19:ec:
b0:da:29:d4:ad:4d:8b:62:24:a4:19:3c:cd:3a:26:
48:89:00:01:2e:31:3e:77:74:08:e1:3e:80:ce:79:
ab:64:ed:82:f8:73:56:6f:f4:e6:6b:7e:80:f9:84:
28:e0:56:02:06:56:dc:3f:11:31:ea:ab:c3:70:e3:
31:fa:cf:8f:c9:50:1d:fa:c0:fb:c2:51:44:68:e8:
3c:78:20:5d:3c:5a:c5:0e:ab:48:04:3c:6c:c9:06:
e9:ed:0d:0c:88:d8:bc:58:38:2e:d8:b4:9c:c5:ef:
1f:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:70:1D:83:D1:16:96:09:4E:E6:E6:E3:12:B6:AE:78:FE:61:B7:9A
X509v3 Authority Key Identifier:
keyid:34:DB:1B:B2:9A:4A:EA:85:E1:9C:28:92:D0:C8:39:E2:FB:94:5E:D0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NNsbsppK6oXhnCiS0Mg54vuUXtA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/8db8d2-6b11-4d19-8e8d-52a10425b136/1/NNsbsppK6oXhnCiS0Mg54vuUXtA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/84/8db8d2-6b11-4d19-8e8d-52a10425b136/1/NNsbsppK6oXhnCiS0Mg54vuUXtA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0f:65:6b:4a:b7:9f:e9:89:8a:e1:12:38:ba:2c:2c:4c:db:8f:
18:7c:56:4c:45:89:6b:fd:a8:fb:88:29:07:92:7c:e1:24:26:
eb:92:e1:6b:fe:21:fe:3e:5b:84:03:ab:f5:80:da:59:14:86:
6a:4a:61:0d:20:58:ee:09:b1:ec:11:72:91:16:e7:14:b6:8c:
8b:6d:5b:eb:3e:29:e1:17:30:5f:4a:2e:51:8f:f1:7b:f7:b5:
5e:0d:29:d4:56:40:22:1e:ab:c7:d6:1f:68:a7:6c:b5:11:bd:
5a:e0:c9:95:4e:88:b8:06:bf:00:fa:69:70:4c:6d:08:38:70:
2b:0d:db:58:40:86:aa:a5:51:54:1e:6f:b2:ba:22:27:62:60:
f1:7b:c8:5c:e8:f4:7b:5e:2c:60:18:7d:e1:63:e7:ee:d2:04:
e5:7c:c3:69:77:68:f6:88:96:41:59:9e:fe:60:f2:7a:01:ba:
32:9a:0f:d7:86:38:a3:8a:c6:9f:ac:ab:da:46:00:8d:ce:01:
ce:d8:b6:4e:3a:a3:de:96:c4:f7:1f:d7:4b:63:c1:ab:a7:63:
72:7d:34:0e:df:7b:c6:fe:1b:e6:6a:39:42:7e:69:53:58:37:
99:01:68:79:33:49:5f:58:cc:2d:25:af:0b:49:03:ed:fc:1b:
ab:ec:6f:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 28 16:21:41 2025 by rpki-client