Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ba/4a02af-d548-44cf-9df8-13f898bc7d0e/1/n-mO5s-z-6g7lyrhJlO12fxwcC4.mft
File: n-mO5s-z-6g7lyrhJlO12fxwcC4.mft (raw, json)
Hash identifier: 82pUojVSBoCVNr1SuMQKdqgBxrB2c0IG54qDh4ENrJk=
Subject key identifier: 5E:75:75:A4:2E:EA:97:CD:BC:A4:5E:A0:D9:52:EF:17:CC:57:F8:E5
Authority key identifier: 9F:E9:8E:E6:CF:B3:FB:A8:3B:97:2A:E1:26:53:B5:D9:FC:70:70:2E
Certificate issuer: /CN=9fe98ee6cfb3fba83b972ae12653b5d9fc70702e
Certificate serial: 019A1F88E90BDF4CE88CF153F5A716BFDF64
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/n-mO5s-z-6g7lyrhJlO12fxwcC4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ba/4a02af-d548-44cf-9df8-13f898bc7d0e/1/n-mO5s-z-6g7lyrhJlO12fxwcC4.mft
Manifest number: 0DC8
Signing time: Sun 26 Oct 2025 08:00:57 +0000
Manifest this update: Sun 26 Oct 2025 08:00:57 +0000
Manifest next update: Mon 27 Oct 2025 08:00:57 +0000
Files and hashes: 1: 1rNQC9Pmf5K1eRYu1hkhr5zZk2Q.roa (hash: x5fQIv4POV9mBCJLuhdzQlSn9HXra5gwr9JL2VOeY1M=)
2: n-mO5s-z-6g7lyrhJlO12fxwcC4.crl (hash: /ZSFUBP2dEhjT/tgU8U75+9XPl+iWS+lT2wkdMV2WrQ=)
3: wILLHD-thZnbY2_hVwSd8tKmVuU.roa (hash: 2k1puHfj5prqotEB5UejW81dxBofSqdytblBomrOVEg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ba/4a02af-d548-44cf-9df8-13f898bc7d0e/1/n-mO5s-z-6g7lyrhJlO12fxwcC4.crl
rsync://rpki.ripe.net/repository/DEFAULT/ba/4a02af-d548-44cf-9df8-13f898bc7d0e/1/n-mO5s-z-6g7lyrhJlO12fxwcC4.mft
rsync://rpki.ripe.net/repository/DEFAULT/n-mO5s-z-6g7lyrhJlO12fxwcC4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 27 Oct 2025 05:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:1f:88:e9:0b:df:4c:e8:8c:f1:53:f5:a7:16:bf:df:64
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9fe98ee6cfb3fba83b972ae12653b5d9fc70702e
Validity
Not Before: Oct 26 08:00:57 2025 GMT
Not After : Oct 27 08:00:57 2025 GMT
Subject: CN=5e7575a42eea97cdbca45ea0d952ef17cc57f8e5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:15:6d:a4:25:47:0c:0d:7b:b6:ef:f5:a0:32:
dd:54:57:72:c7:5d:12:95:53:5f:63:08:15:55:13:
d5:a7:05:b7:62:05:80:a8:9c:40:db:79:74:1c:3d:
95:b6:71:40:10:77:94:81:f9:df:23:2c:b1:8e:4f:
00:9e:67:4e:f2:91:31:29:91:ad:22:5b:3d:1a:be:
32:b0:34:67:dd:da:53:02:0b:bd:29:f0:e0:01:28:
84:a5:97:c8:1d:77:9e:35:22:70:0a:34:95:72:c8:
64:aa:3e:af:9a:7c:1f:46:3a:15:0c:7c:39:69:da:
b4:3e:f8:3a:39:74:fc:eb:0a:67:f8:52:f3:e8:e5:
02:d6:44:ab:fa:74:73:94:92:3e:cc:d1:82:31:ae:
e2:70:34:35:be:7c:63:9d:36:39:9a:1b:47:fa:e8:
5f:7f:d0:bb:47:68:ca:71:f5:3f:38:73:ba:5b:9e:
4a:de:55:ca:97:42:a6:b3:61:ed:8a:7b:4f:21:c4:
5f:01:26:55:03:51:4a:b7:f1:20:20:9d:09:53:52:
14:6d:b5:97:2e:c2:99:02:b5:9a:8c:9b:a6:87:19:
3c:a3:3d:77:1d:5b:e4:c8:5a:ae:7a:a3:61:da:9f:
49:5d:9e:9b:1f:c7:25:e7:df:67:d5:03:37:26:ec:
2c:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:75:75:A4:2E:EA:97:CD:BC:A4:5E:A0:D9:52:EF:17:CC:57:F8:E5
X509v3 Authority Key Identifier:
keyid:9F:E9:8E:E6:CF:B3:FB:A8:3B:97:2A:E1:26:53:B5:D9:FC:70:70:2E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/n-mO5s-z-6g7lyrhJlO12fxwcC4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/4a02af-d548-44cf-9df8-13f898bc7d0e/1/n-mO5s-z-6g7lyrhJlO12fxwcC4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/4a02af-d548-44cf-9df8-13f898bc7d0e/1/n-mO5s-z-6g7lyrhJlO12fxwcC4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6e:65:d3:4d:7d:6f:91:ee:80:8a:0e:1f:8d:d1:96:3c:a6:09:
66:a2:50:a4:42:c5:10:c9:69:0c:99:1a:5e:30:71:b1:71:32:
ff:f2:37:11:25:95:2a:51:45:aa:b9:6c:d4:40:2f:46:94:b9:
c0:39:ce:84:2d:2b:62:b7:29:aa:04:de:27:88:bd:c0:b2:d5:
09:94:9a:e5:f2:9f:b2:e7:d3:69:51:30:11:5f:04:1f:f6:c7:
00:d7:8a:f6:81:0a:d3:78:52:05:1f:7b:76:07:86:24:f3:73:
d5:45:aa:4a:a9:2f:a5:81:bf:f9:97:00:c8:4d:de:c6:d3:12:
0c:6a:9a:93:f1:c8:30:e2:98:39:1e:67:d1:43:e0:2e:34:55:
b3:fb:c8:21:b5:27:e1:ec:43:98:58:dc:59:e8:29:e1:ce:4d:
11:f7:3b:5d:a6:09:38:a8:d5:eb:87:c5:be:d4:04:9e:77:b6:
a3:e5:82:1a:52:a1:47:b1:f0:99:5d:f8:04:f8:59:94:99:ba:
56:fa:5b:a9:c4:57:5d:fb:89:cd:d4:f5:2e:5a:84:52:9c:7b:
e3:6b:5c:10:69:45:3f:dc:33:5d:37:1f:45:b2:7a:16:e3:f5:
95:01:63:4d:19:19:d8:d9:ab:af:84:ff:dd:dc:ab:7b:2c:1b:
90:8e:cb:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 26 14:06:18 2025 by rpki-client