Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b6/e29852-7e5c-452a-9e73-0c10dc507173/1/Nv1unnrLN1gyW7PkJFkY8yT_7aE.mft
File: Nv1unnrLN1gyW7PkJFkY8yT_7aE.mft (raw, json)
Hash identifier: vieHbaK/w5NfO035qM5gOWKURbPIZ+IelNVwtgaSHVI=
Subject key identifier: 85:62:1F:68:C5:3C:4A:5A:F7:03:A0:1F:C8:1E:BF:06:26:06:00:F6
Authority key identifier: 36:FD:6E:9E:7A:CB:37:58:32:5B:B3:E4:24:59:18:F3:24:FF:ED:A1
Certificate issuer: /CN=36fd6e9e7acb3758325bb3e4245918f324ffeda1
Certificate serial: 019A725CAC2B5272908929CF36EA2CAB6F74
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Nv1unnrLN1gyW7PkJFkY8yT_7aE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b6/e29852-7e5c-452a-9e73-0c10dc507173/1/Nv1unnrLN1gyW7PkJFkY8yT_7aE.mft
Manifest number: 06C8
Signing time: Tue 11 Nov 2025 10:01:07 +0000
Manifest this update: Tue 11 Nov 2025 10:01:07 +0000
Manifest next update: Wed 12 Nov 2025 10:01:07 +0000
Files and hashes: 1: GPRnxVZYbgXJj70_iEKvlXgPN24.roa (hash: 4zWTgka5oRO1IFS4EYqUZybX548raJeNOyBzsRKEzd0=)
2: Nv1unnrLN1gyW7PkJFkY8yT_7aE.crl (hash: dj//vxMCJdgoQ3JBcYT6clVdqfFS9kvUCSMiJbOGRe4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b6/e29852-7e5c-452a-9e73-0c10dc507173/1/Nv1unnrLN1gyW7PkJFkY8yT_7aE.crl
rsync://rpki.ripe.net/repository/DEFAULT/b6/e29852-7e5c-452a-9e73-0c10dc507173/1/Nv1unnrLN1gyW7PkJFkY8yT_7aE.mft
rsync://rpki.ripe.net/repository/DEFAULT/Nv1unnrLN1gyW7PkJFkY8yT_7aE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:5c:ac:2b:52:72:90:89:29:cf:36:ea:2c:ab:6f:74
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=36fd6e9e7acb3758325bb3e4245918f324ffeda1
Validity
Not Before: Nov 11 10:01:07 2025 GMT
Not After : Nov 12 10:01:07 2025 GMT
Subject: CN=85621f68c53c4a5af703a01fc81ebf06260600f6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:dc:b1:9b:41:6e:ef:9a:bf:f4:52:01:9a:27:
43:0e:6e:ec:16:de:3e:a3:7a:76:e7:8d:0a:e2:65:
f7:b5:bb:cf:e4:50:e8:19:62:45:8a:37:ba:86:d9:
f6:5a:0b:bf:9e:3d:93:8e:21:7c:e9:8e:77:35:40:
28:0a:2b:c3:17:4e:15:05:bc:7e:21:3e:f5:d4:52:
38:40:c9:e9:63:95:e4:e1:c7:9a:9b:d4:4f:a0:0a:
ef:13:f1:a7:93:35:bd:3d:17:72:96:15:f7:0b:35:
04:45:10:5c:42:64:ce:66:1f:9a:78:f6:8f:ac:9a:
c7:bd:2a:a3:e1:3e:bf:a8:01:de:7d:c3:ba:58:05:
fd:59:52:3c:f1:b2:9b:19:4b:f6:22:65:6e:fe:3b:
16:9d:91:b7:ee:9f:41:06:fa:fe:9b:ac:86:b2:ff:
92:0f:db:07:0d:51:06:9d:f8:76:c4:1f:1a:5f:98:
4e:56:31:94:a3:e0:5e:c3:f3:f8:b9:fa:93:17:9a:
04:65:cb:4f:27:ce:a0:5f:fa:28:e8:08:ab:b6:ff:
d5:64:eb:aa:83:76:26:fe:8b:8c:e2:50:61:bc:8b:
34:75:89:cd:3b:71:e1:fc:f6:7e:98:78:b8:68:da:
be:62:59:09:42:57:2a:fa:c6:00:88:26:35:8d:03:
94:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:62:1F:68:C5:3C:4A:5A:F7:03:A0:1F:C8:1E:BF:06:26:06:00:F6
X509v3 Authority Key Identifier:
keyid:36:FD:6E:9E:7A:CB:37:58:32:5B:B3:E4:24:59:18:F3:24:FF:ED:A1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Nv1unnrLN1gyW7PkJFkY8yT_7aE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/e29852-7e5c-452a-9e73-0c10dc507173/1/Nv1unnrLN1gyW7PkJFkY8yT_7aE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/e29852-7e5c-452a-9e73-0c10dc507173/1/Nv1unnrLN1gyW7PkJFkY8yT_7aE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
59:58:ee:1d:7e:d1:ae:44:b2:cc:72:aa:4b:cb:2a:5d:d5:11:
b9:16:fa:3a:ed:5e:12:c9:bd:03:61:81:4b:81:c4:13:3a:6e:
8e:e0:95:23:9f:62:1a:d0:c7:c5:ba:b8:6f:1e:1b:74:d5:bc:
cc:12:c0:b1:b4:c3:8c:c6:4b:19:fd:60:4d:d9:57:bd:41:d8:
69:98:8d:d5:00:4e:85:9f:81:b7:89:44:77:6e:ce:7a:3a:e8:
b4:ad:f5:b4:84:a4:4e:c0:af:22:1a:0f:5f:b3:4d:a8:76:4c:
5f:c1:15:00:2e:72:32:fe:26:a8:ad:02:19:b5:05:e8:59:05:
be:fb:4a:47:3d:c3:b8:4d:5e:18:d3:df:9a:56:df:f9:ed:d2:
b5:f0:4e:fa:40:79:62:09:ca:1f:f6:66:60:98:e5:78:ad:2f:
93:59:12:b2:03:1e:cc:7f:54:31:e6:3e:a3:ce:b6:60:1a:4e:
5b:c2:90:d1:96:65:4f:ae:46:6a:8f:48:63:01:b1:69:f5:ad:
a2:b3:e1:6f:5e:d2:fc:b6:7f:b3:4c:65:e3:d1:b5:97:f8:94:
ee:fc:44:6e:3e:d7:da:d4:9f:e7:b2:7a:7a:73:45:83:14:85:
8b:c9:09:85:7a:7a:f3:ac:3e:7f:1a:20:19:bd:dd:3e:96:37:
4d:7c:a9:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 14:18:42 2025 by rpki-client