Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/95/cc4fe9-e48c-42da-97ea-ab57cabc18f7/1/NbA-yF0IYHprHd8f553GUcz-Pzc.mft
File: NbA-yF0IYHprHd8f553GUcz-Pzc.mft (raw, json)
Hash identifier: plwU/gz+H7A/uZpbKCq1LvFcsZAjNPWoXsCmCYRLO3E=
Subject key identifier: DE:59:A6:DF:30:24:9D:B6:49:4B:6E:8D:5F:70:CA:9A:E7:BC:13:D5
Authority key identifier: 35:B0:3E:C8:5D:08:60:7A:6B:1D:DF:1F:E7:9D:C6:51:CC:FE:3F:37
Certificate issuer: /CN=35b03ec85d08607a6b1ddf1fe79dc651ccfe3f37
Certificate serial: 019A29D4EC5C5278207F930385BB7716F60B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NbA-yF0IYHprHd8f553GUcz-Pzc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/95/cc4fe9-e48c-42da-97ea-ab57cabc18f7/1/NbA-yF0IYHprHd8f553GUcz-Pzc.mft
Manifest number: 16F9
Signing time: Tue 28 Oct 2025 08:00:11 +0000
Manifest this update: Tue 28 Oct 2025 08:00:11 +0000
Manifest next update: Wed 29 Oct 2025 08:00:11 +0000
Files and hashes: 1: EeFPhEstvW1EwmoMEs09YH1cZlE.roa (hash: zuogsczPuVIDLnfiQ5YgxbbQeRIuIE6FvsJkQLHPGfI=)
2: NbA-yF0IYHprHd8f553GUcz-Pzc.crl (hash: /420PzUzDY32aSKMEe5fQ4qAaaW8ah8wSfONbldVYxQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/95/cc4fe9-e48c-42da-97ea-ab57cabc18f7/1/NbA-yF0IYHprHd8f553GUcz-Pzc.crl
rsync://rpki.ripe.net/repository/DEFAULT/95/cc4fe9-e48c-42da-97ea-ab57cabc18f7/1/NbA-yF0IYHprHd8f553GUcz-Pzc.mft
rsync://rpki.ripe.net/repository/DEFAULT/NbA-yF0IYHprHd8f553GUcz-Pzc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Oct 2025 08:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:29:d4:ec:5c:52:78:20:7f:93:03:85:bb:77:16:f6:0b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=35b03ec85d08607a6b1ddf1fe79dc651ccfe3f37
Validity
Not Before: Oct 28 08:00:11 2025 GMT
Not After : Oct 29 08:00:11 2025 GMT
Subject: CN=de59a6df30249db6494b6e8d5f70ca9ae7bc13d5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:6f:b9:49:22:f3:f3:f8:df:98:dd:fb:59:04:
6e:0b:13:9c:fd:ca:3e:fd:4a:37:28:27:ba:18:4c:
cb:1d:6d:6a:cc:f1:e9:b7:c3:c1:01:e3:31:a5:f4:
97:bf:87:5b:7d:50:5e:a9:5d:ea:15:3c:92:86:83:
50:fc:26:e9:4b:8e:db:48:60:d7:7e:b5:53:fc:e2:
ff:0e:29:6c:7d:eb:4d:5c:44:58:61:b8:ec:8d:12:
6a:5b:0a:d9:29:b3:40:98:ab:c7:23:4b:50:dc:fd:
50:53:e0:0c:38:a4:36:7f:c5:f6:35:3e:c8:1f:6d:
7c:30:f8:02:28:57:1e:11:03:1d:5b:c9:84:87:ff:
9a:33:14:e8:a0:d6:18:bc:28:11:53:bc:56:96:cd:
5a:99:c6:d4:63:0c:f6:60:51:24:31:13:63:16:91:
cb:87:c6:17:af:59:c2:24:37:af:5a:c3:25:9a:c7:
40:00:7a:e2:08:36:d0:b1:fb:e1:88:b6:fa:5c:6d:
72:ff:5b:ab:dd:4c:89:75:70:8f:f2:11:9f:5e:b5:
42:cd:dc:56:73:2c:60:a2:f2:a7:43:f0:d1:89:f1:
ab:99:ef:98:36:22:07:6a:05:06:ed:58:f5:90:25:
d6:be:f7:74:d6:1c:6f:3c:4c:32:71:d1:9c:57:9e:
42:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:59:A6:DF:30:24:9D:B6:49:4B:6E:8D:5F:70:CA:9A:E7:BC:13:D5
X509v3 Authority Key Identifier:
keyid:35:B0:3E:C8:5D:08:60:7A:6B:1D:DF:1F:E7:9D:C6:51:CC:FE:3F:37
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NbA-yF0IYHprHd8f553GUcz-Pzc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/95/cc4fe9-e48c-42da-97ea-ab57cabc18f7/1/NbA-yF0IYHprHd8f553GUcz-Pzc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/95/cc4fe9-e48c-42da-97ea-ab57cabc18f7/1/NbA-yF0IYHprHd8f553GUcz-Pzc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
83:16:f5:b7:ea:55:8f:03:31:3c:e0:a7:a3:f3:60:3d:78:d8:
82:5f:f0:31:8b:a2:dd:99:e6:66:00:6b:dd:7f:20:5a:df:5c:
94:69:da:57:07:5a:d7:81:08:f8:88:3c:5b:66:f9:b5:27:6f:
32:9b:3d:72:49:d9:31:eb:e7:00:70:8f:72:ae:9b:b2:18:76:
97:c1:7a:0f:86:8e:c2:4e:84:01:cb:f7:a4:1f:9e:50:ef:b0:
6e:30:36:1d:3c:80:99:5d:02:16:b8:1a:75:ab:24:62:bf:5e:
ee:91:04:66:fa:54:99:f8:72:04:18:df:be:b4:69:49:10:29:
2e:87:ab:0d:4c:67:9f:91:62:b1:ca:ea:64:bb:8b:9d:d5:18:
16:99:4c:81:e4:a3:84:be:c8:99:28:9b:00:03:38:9b:c6:e7:
88:cd:c9:a4:2e:b9:04:b7:c8:83:c7:c9:79:91:fc:d4:ab:dc:
8d:54:9a:3a:c0:69:18:77:08:06:6d:0b:ed:73:c9:c2:d4:45:
8a:ed:c5:fa:96:66:fa:c7:6d:56:e8:c0:d7:df:86:d3:2d:20:
fc:ba:6c:35:92:84:78:be:17:e1:3a:bf:c6:2c:b5:d3:e5:75:
15:c1:6e:b1:c7:13:42:81:8c:17:12:d4:35:02:44:0b:b9:d3:
a3:29:07:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 28 11:26:49 2025 by rpki-client