Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/93/60e957-1e17-410e-91a1-96b7e0a8ee09/1/nOYfsJJrzgyvrdDysZNIiVpEgUc.mft
File: nOYfsJJrzgyvrdDysZNIiVpEgUc.mft (raw, json)
Hash identifier: yDXRboP6CHLTIYsqqsPWq2rxvfGcB07x39mEVyOaDqk=
Subject key identifier: E1:1C:F7:31:96:BE:7D:AA:A6:00:BE:E0:5F:76:10:62:18:49:86:D8
Authority key identifier: 9C:E6:1F:B0:92:6B:CE:0C:AF:AD:D0:F2:B1:93:48:89:5A:44:81:47
Certificate issuer: /CN=9ce61fb0926bce0cafadd0f2b19348895a448147
Certificate serial: 019A7149FD7BAFF06E9B9FE496D34B0146AC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nOYfsJJrzgyvrdDysZNIiVpEgUc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/93/60e957-1e17-410e-91a1-96b7e0a8ee09/1/nOYfsJJrzgyvrdDysZNIiVpEgUc.mft
Manifest number: 0311
Signing time: Tue 11 Nov 2025 05:01:05 +0000
Manifest this update: Tue 11 Nov 2025 05:01:05 +0000
Manifest next update: Wed 12 Nov 2025 05:01:05 +0000
Files and hashes: 1: 7ZCM2DGQAxMoqKS4r08nTwBlTvg.roa (hash: Nsq7TZX/LJBEuY63VFLqAaBjZcBcw7djLWbv9kH4DH4=)
2: nOYfsJJrzgyvrdDysZNIiVpEgUc.crl (hash: Xv2HS5WP24Y5KBZ/qMJ2HJjUMC/LhaywG8o298h5XHc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/93/60e957-1e17-410e-91a1-96b7e0a8ee09/1/nOYfsJJrzgyvrdDysZNIiVpEgUc.crl
rsync://rpki.ripe.net/repository/DEFAULT/93/60e957-1e17-410e-91a1-96b7e0a8ee09/1/nOYfsJJrzgyvrdDysZNIiVpEgUc.mft
rsync://rpki.ripe.net/repository/DEFAULT/nOYfsJJrzgyvrdDysZNIiVpEgUc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 05:01:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:49:fd:7b:af:f0:6e:9b:9f:e4:96:d3:4b:01:46:ac
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9ce61fb0926bce0cafadd0f2b19348895a448147
Validity
Not Before: Nov 11 05:01:05 2025 GMT
Not After : Nov 12 05:01:05 2025 GMT
Subject: CN=e11cf73196be7daaa600bee05f761062184986d8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ec:cf:a3:b9:1b:69:cc:95:d6:df:23:9e:f7:6b:
9c:60:a0:2d:e2:8c:c8:be:d8:00:f2:d8:04:50:b9:
10:49:33:8e:31:42:63:63:14:57:0d:24:f6:32:cd:
09:61:ea:35:2c:b8:c1:29:6c:a5:20:40:e7:89:3e:
ac:95:c5:29:10:51:f4:cf:56:61:ce:69:c7:f3:b3:
60:de:14:31:d4:74:b4:e5:ba:35:54:1e:4f:13:a4:
4f:04:42:dc:02:4a:69:d6:cd:94:17:3a:d2:08:6a:
cf:2b:b6:23:63:8e:e2:5f:de:45:ed:00:45:ae:fb:
68:41:be:7a:3d:7c:a4:ba:97:dc:66:ea:dd:5f:8f:
06:18:2f:7a:54:eb:9d:15:80:de:80:38:95:eb:5a:
48:df:bd:c7:60:f2:03:8b:7c:63:40:13:bb:73:68:
cd:15:90:91:37:5c:c8:6c:8c:32:96:e4:e7:6a:f3:
ce:ee:d9:f6:19:94:ee:1e:35:7d:3f:29:bb:29:66:
de:5c:7c:ff:a2:a2:17:ac:91:df:78:b3:4d:05:8a:
0c:1e:5d:11:9c:a7:73:75:04:89:13:66:03:e5:de:
94:ff:8c:b8:a3:34:66:b6:45:2c:91:fd:ba:71:69:
42:6c:ce:4f:de:7b:5c:ae:dc:29:45:79:72:c0:86:
86:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:1C:F7:31:96:BE:7D:AA:A6:00:BE:E0:5F:76:10:62:18:49:86:D8
X509v3 Authority Key Identifier:
keyid:9C:E6:1F:B0:92:6B:CE:0C:AF:AD:D0:F2:B1:93:48:89:5A:44:81:47
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nOYfsJJrzgyvrdDysZNIiVpEgUc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/93/60e957-1e17-410e-91a1-96b7e0a8ee09/1/nOYfsJJrzgyvrdDysZNIiVpEgUc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/93/60e957-1e17-410e-91a1-96b7e0a8ee09/1/nOYfsJJrzgyvrdDysZNIiVpEgUc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
55:8d:92:6d:54:e0:ca:b3:c0:56:fa:45:d6:fe:1a:b3:11:03:
e9:35:4a:62:72:85:59:aa:5d:e6:80:4c:01:16:92:b2:11:a2:
a0:f5:75:9e:a8:24:ed:55:ff:8a:4e:11:f6:86:7d:b1:f0:cb:
54:42:58:36:3c:94:1f:e9:07:06:f3:a9:c0:53:d8:6b:0a:ee:
a9:65:70:fc:25:0b:01:b1:d3:f6:85:1c:c5:fb:ee:0e:81:2e:
ea:93:48:d5:b2:92:5d:4a:e1:35:d2:57:fd:d7:bf:9b:2f:6a:
df:44:4b:20:6a:4c:43:00:23:99:17:6a:e3:73:8b:a0:74:9a:
ba:6f:d1:2e:c2:cb:53:c4:02:ec:e8:02:fa:9d:9b:5f:49:cb:
2e:59:28:13:a0:0d:88:b3:99:9f:b0:ad:3c:2b:2e:f0:b9:fb:
8d:27:b5:fe:e6:2f:5b:9e:cf:9c:aa:5b:62:36:a8:05:0f:a7:
53:f1:9a:06:b9:b5:6c:04:2e:95:71:26:d7:d3:df:78:8d:a8:
6e:90:46:eb:dc:5e:a4:8f:5a:3c:57:17:b9:6f:d8:1c:20:7e:
6e:d1:e5:53:e4:ed:ea:cd:a8:e2:2b:f0:0e:37:a4:a2:ad:8d:
d6:bf:71:1f:7b:bc:9a:89:99:fc:ed:ee:aa:a1:99:5a:07:a3:
22:ae:0e:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 12:51:56 2025 by rpki-client