Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b9/e96ef4-4f45-47c0-bebf-fa3e0901f240/1/Nv46kSY-LoMZwqZ45imFHQnnfw0.mft
File: Nv46kSY-LoMZwqZ45imFHQnnfw0.mft (raw, json)
Hash identifier: bsX1my4Z8s+WwZ2WzS5dybV3c6zxdgEchgTXH8YZc6c=
Subject key identifier: E6:66:A4:13:88:69:3A:B8:2C:B5:46:BF:B4:F7:B2:DA:0D:C0:45:C0
Authority key identifier: 36:FE:3A:91:26:3E:2E:83:19:C2:A6:78:E6:29:85:1D:09:E7:7F:0D
Certificate issuer: /CN=36fe3a91263e2e8319c2a678e629851d09e77f0d
Certificate serial: 019938DEC5CE12F740A706BC8777275EBAB2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Nv46kSY-LoMZwqZ45imFHQnnfw0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b9/e96ef4-4f45-47c0-bebf-fa3e0901f240/1/Nv46kSY-LoMZwqZ45imFHQnnfw0.mft
Manifest number: 0CB0
Signing time: Thu 11 Sep 2025 13:02:27 +0000
Manifest this update: Thu 11 Sep 2025 13:02:27 +0000
Manifest next update: Fri 12 Sep 2025 13:02:27 +0000
Files and hashes: 1: Nv46kSY-LoMZwqZ45imFHQnnfw0.crl (hash: h5QKsqaFY4+gVLGwbmaA02oKKk7O/vFJiz0XMRmOIt4=)
2: R_dc828vlc27bxXSMzahF76dopg.roa (hash: U9Dh8EyuA2m2THZyqCUiwh3xOZkz+ZLmhUNE1mbIxTM=)
3: yzgxHb39JlWgV-6OUyl9AE4hQAQ.roa (hash: pG2NZjpFYDlbN9iuGT1kUvmnDeM4noZC3E54rEDkwXo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b9/e96ef4-4f45-47c0-bebf-fa3e0901f240/1/Nv46kSY-LoMZwqZ45imFHQnnfw0.crl
rsync://rpki.ripe.net/repository/DEFAULT/b9/e96ef4-4f45-47c0-bebf-fa3e0901f240/1/Nv46kSY-LoMZwqZ45imFHQnnfw0.mft
rsync://rpki.ripe.net/repository/DEFAULT/Nv46kSY-LoMZwqZ45imFHQnnfw0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 12 Sep 2025 13:02:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:38:de:c5:ce:12:f7:40:a7:06:bc:87:77:27:5e:ba:b2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=36fe3a91263e2e8319c2a678e629851d09e77f0d
Validity
Not Before: Sep 11 13:02:27 2025 GMT
Not After : Sep 12 13:02:27 2025 GMT
Subject: CN=e666a41388693ab82cb546bfb4f7b2da0dc045c0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:d2:ba:40:93:47:3c:2f:1b:94:31:f7:03:43:
77:65:8b:42:9e:95:18:a1:08:82:cb:29:b1:00:31:
02:ed:b3:e9:14:16:f1:22:a7:d1:fb:e8:80:b3:f4:
e8:d0:a2:4b:20:22:e9:5b:73:fb:0c:6d:8f:30:11:
47:e7:d7:d0:c2:e6:a7:41:e6:92:b0:7c:c6:2c:87:
e9:f7:9f:0e:9a:c4:0d:a4:f5:41:ba:63:a8:e2:db:
03:0b:55:ff:5e:06:7c:96:76:36:43:1e:74:76:fb:
94:f5:bd:d7:37:17:96:68:a2:a9:99:97:df:3c:8e:
4c:8c:e1:20:8a:4c:0c:af:c1:f8:51:51:4f:d5:6a:
5e:38:71:13:5c:d6:13:e6:4f:e4:b9:ce:76:2c:14:
f4:14:9d:db:32:a4:8b:1a:08:1a:ee:c7:40:aa:4d:
29:8c:84:6b:3e:de:60:a3:a9:95:4f:b0:5e:41:74:
80:b3:a7:96:c8:70:6e:51:49:72:bb:37:04:1c:af:
f6:15:b6:8c:99:b0:e9:70:2a:6f:50:32:52:95:ac:
96:23:d6:03:a4:d5:d7:25:b8:b1:eb:a9:28:53:1b:
6a:87:ec:c6:4c:4f:72:67:e0:da:2e:91:25:47:2a:
b7:92:62:79:00:88:ff:4b:4d:f3:b7:ed:98:c7:89:
8e:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E6:66:A4:13:88:69:3A:B8:2C:B5:46:BF:B4:F7:B2:DA:0D:C0:45:C0
X509v3 Authority Key Identifier:
keyid:36:FE:3A:91:26:3E:2E:83:19:C2:A6:78:E6:29:85:1D:09:E7:7F:0D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Nv46kSY-LoMZwqZ45imFHQnnfw0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/e96ef4-4f45-47c0-bebf-fa3e0901f240/1/Nv46kSY-LoMZwqZ45imFHQnnfw0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/e96ef4-4f45-47c0-bebf-fa3e0901f240/1/Nv46kSY-LoMZwqZ45imFHQnnfw0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
aa:5f:37:e6:fd:f9:22:c0:ca:54:cf:3c:bc:a6:8f:34:d0:a1:
6d:e3:3f:c5:b9:6f:48:ef:1d:98:19:cb:aa:bf:ba:7d:3f:71:
b5:07:cb:64:c5:b3:28:37:3b:97:cb:df:11:ed:1f:ff:86:cb:
f5:49:82:8a:77:80:d1:19:35:95:82:3b:83:7f:21:05:76:d1:
5d:71:4c:f7:a9:d0:41:18:b0:83:90:96:30:77:06:dd:ff:9e:
ef:fb:2f:c6:a1:19:56:71:3a:ab:10:dc:0b:6c:53:1a:0f:07:
bd:7d:ce:58:f5:48:12:58:08:39:63:d1:a1:2e:73:45:38:e0:
f2:46:c8:59:1e:7f:1e:e1:f5:7a:d1:da:57:9f:75:e0:dd:07:
62:85:c1:d7:36:83:d3:16:a0:8a:fa:a0:b3:ce:5a:e5:95:78:
96:99:2a:c2:2e:b0:10:a1:a9:1c:79:db:99:e8:d3:24:b4:18:
72:25:c4:c8:df:56:15:ac:50:d0:fa:d4:51:3c:7a:c3:e4:23:
6a:86:39:c5:c3:56:96:33:bc:bc:73:90:d0:e9:b5:5d:20:08:
03:10:44:6b:31:4f:87:be:94:aa:9a:17:ff:73:c4:2e:eb:26:
56:87:d1:f1:22:ae:98:19:86:d8:65:6c:20:fe:39:11:3f:53:
48:83:9e:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 11 21:23:15 2025 by rpki-client