Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ad/465556-70d1-4152-a65a-6c63e152242d/1/0NbmVQW09OT08x2QuLIaOnz7Dr8.mft
File: 0NbmVQW09OT08x2QuLIaOnz7Dr8.mft (raw, json)
Hash identifier: BjcUuN2yO2X1J0aHAn4UWnOMM28+G8hGTBO5Cvuxt2A=
Subject key identifier: 27:9E:47:8C:25:9E:FD:1D:38:17:C4:FF:F1:64:1B:6F:35:55:9A:7E
Authority key identifier: D0:D6:E6:55:05:B4:F4:E4:F4:F3:1D:90:B8:B2:1A:3A:7C:FB:0E:BF
Certificate issuer: /CN=d0d6e65505b4f4e4f4f31d90b8b21a3a7cfb0ebf
Certificate serial: 019A71B804A6C4141F40A2875ED64A22FF8A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0NbmVQW09OT08x2QuLIaOnz7Dr8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ad/465556-70d1-4152-a65a-6c63e152242d/1/0NbmVQW09OT08x2QuLIaOnz7Dr8.mft
Manifest number: 0C93
Signing time: Tue 11 Nov 2025 07:01:16 +0000
Manifest this update: Tue 11 Nov 2025 07:01:16 +0000
Manifest next update: Wed 12 Nov 2025 07:01:16 +0000
Files and hashes: 1: 0NbmVQW09OT08x2QuLIaOnz7Dr8.crl (hash: JTQZzw4iKUSyA8enxP1c5mYynaCObaax4yQZ5EyY8SA=)
2: RLT9vWKmEAqKt6hEtNsyMWI1h0c.roa (hash: xBu31AarPg6SaGrJFYKlAHmm3Mw8LW1iAP2FYDxCvXE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ad/465556-70d1-4152-a65a-6c63e152242d/1/0NbmVQW09OT08x2QuLIaOnz7Dr8.crl
rsync://rpki.ripe.net/repository/DEFAULT/ad/465556-70d1-4152-a65a-6c63e152242d/1/0NbmVQW09OT08x2QuLIaOnz7Dr8.mft
rsync://rpki.ripe.net/repository/DEFAULT/0NbmVQW09OT08x2QuLIaOnz7Dr8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 07:01:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:b8:04:a6:c4:14:1f:40:a2:87:5e:d6:4a:22:ff:8a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d0d6e65505b4f4e4f4f31d90b8b21a3a7cfb0ebf
Validity
Not Before: Nov 11 07:01:16 2025 GMT
Not After : Nov 12 07:01:16 2025 GMT
Subject: CN=279e478c259efd1d3817c4fff1641b6f35559a7e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:38:f3:df:49:3a:03:1b:5f:ea:0d:e4:f2:c0:
75:f7:e1:34:43:3c:a2:fb:3c:77:73:95:00:b4:b8:
c3:86:65:37:b7:73:78:3d:f2:db:14:48:19:8a:d5:
86:e9:17:02:5e:69:46:22:37:a0:20:d8:4a:49:3b:
eb:b4:36:1b:bc:0a:20:e3:ef:90:56:3b:6c:a0:fe:
91:6f:e9:9d:d1:9a:ed:12:77:3a:59:27:ec:f0:a0:
5b:53:59:ad:6e:9d:2f:0a:f0:a0:3e:4a:0f:cc:ec:
6c:c0:de:6c:0c:d5:37:5c:bf:8c:ac:69:8e:38:7c:
72:13:fc:6e:66:c2:54:71:f7:fe:30:9b:b5:02:fb:
00:71:c4:6f:56:27:a1:d9:0c:c3:9b:20:ac:14:94:
f5:8a:99:40:ba:4f:99:29:56:cd:ab:39:af:83:9a:
d3:84:60:99:9c:cc:24:ff:3c:e4:1d:b9:8a:55:84:
3f:1c:96:ac:92:10:21:98:47:aa:bb:a2:6b:81:9f:
b0:52:0f:7b:02:7e:cd:a9:32:d9:cc:0f:fa:dc:3d:
23:e4:ee:1d:da:ae:20:9c:27:a1:e8:03:fd:00:23:
2d:91:4d:eb:cc:4b:96:21:29:9d:51:f2:bd:de:fa:
9f:24:8a:f6:64:f2:05:b4:6b:b2:4c:0c:81:55:ba:
f0:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:9E:47:8C:25:9E:FD:1D:38:17:C4:FF:F1:64:1B:6F:35:55:9A:7E
X509v3 Authority Key Identifier:
keyid:D0:D6:E6:55:05:B4:F4:E4:F4:F3:1D:90:B8:B2:1A:3A:7C:FB:0E:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0NbmVQW09OT08x2QuLIaOnz7Dr8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/465556-70d1-4152-a65a-6c63e152242d/1/0NbmVQW09OT08x2QuLIaOnz7Dr8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/465556-70d1-4152-a65a-6c63e152242d/1/0NbmVQW09OT08x2QuLIaOnz7Dr8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
81:86:d5:68:e2:d6:c6:d9:13:67:dc:23:e8:1e:48:67:ee:ab:
e4:3a:c3:fc:9f:4c:10:50:ab:b5:a9:8b:21:bd:f3:0e:88:32:
0c:09:40:02:e1:ec:c0:33:85:d3:8c:6b:21:e7:bd:91:a3:0b:
b7:fb:6f:50:5a:8c:36:6d:c7:98:75:6a:40:ff:6f:a0:c2:c5:
2b:4b:4c:6b:5d:48:74:81:e5:e1:21:b1:c7:84:80:39:54:2c:
5a:81:f8:57:c7:c0:ff:ae:89:a9:bb:ab:0c:a5:7b:b5:dd:56:
b6:d8:23:3d:88:c4:8f:dc:be:03:66:28:68:02:79:16:57:d3:
ff:1b:2c:61:ed:ac:f9:bd:97:01:23:24:82:c4:e1:84:0c:7d:
e6:86:62:5a:d0:b0:a8:d3:34:f5:32:a2:f6:82:01:77:29:a6:
13:f4:9b:fb:bb:c9:ca:fc:18:d1:ab:d1:fe:67:7d:75:f3:bb:
c2:fd:d6:6a:63:8d:bc:ca:34:8b:aa:8a:49:21:24:fa:73:76:
21:09:1e:b8:ae:6e:65:a2:e6:b3:64:26:84:1e:73:6a:40:c6:
7f:4e:62:ad:41:89:4f:bf:7d:37:57:12:48:95:47:4c:b4:07:
ff:01:21:49:38:3b:5f:e3:14:1d:58:89:b0:eb:04:a1:54:04:
08:82:3a:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 14:06:38 2025 by rpki-client