Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c1/593dd5-b907-4de8-80cd-b1db70071dde/1/nm8mIuZcLuhjUB13IUdaBe9TQ_s.mft
File: nm8mIuZcLuhjUB13IUdaBe9TQ_s.mft (raw, json)
Hash identifier: nIqkt2MVxWM/xXPLxMlCm/Gm/egzYDctWq1v4ngSXUk=
Subject key identifier: EB:BC:CF:02:EE:B6:7F:F4:20:1A:97:FE:07:6A:C8:C6:98:10:5C:AD
Authority key identifier: 9E:6F:26:22:E6:5C:2E:E8:63:50:1D:77:21:47:5A:05:EF:53:43:FB
Certificate issuer: /CN=9e6f2622e65c2ee863501d7721475a05ef5343fb
Certificate serial: 019A25C19827B71C9340D342936318F75993
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nm8mIuZcLuhjUB13IUdaBe9TQ_s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c1/593dd5-b907-4de8-80cd-b1db70071dde/1/nm8mIuZcLuhjUB13IUdaBe9TQ_s.mft
Manifest number: 02ED
Signing time: Mon 27 Oct 2025 13:00:35 +0000
Manifest this update: Mon 27 Oct 2025 13:00:35 +0000
Manifest next update: Tue 28 Oct 2025 13:00:35 +0000
Files and hashes: 1: cuJe5r6PJPS-jv29DbSoyr1BYdg.roa (hash: 2tGiauvihDEwDBBUXD4gVcgWbpgeD9AUpt2tKQwt6ew=)
2: nm8mIuZcLuhjUB13IUdaBe9TQ_s.crl (hash: OO6J+84Wb2uY0227EeTYPrsH5dMUNXhO0vywgkPC8bM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c1/593dd5-b907-4de8-80cd-b1db70071dde/1/nm8mIuZcLuhjUB13IUdaBe9TQ_s.crl
rsync://rpki.ripe.net/repository/DEFAULT/c1/593dd5-b907-4de8-80cd-b1db70071dde/1/nm8mIuZcLuhjUB13IUdaBe9TQ_s.mft
rsync://rpki.ripe.net/repository/DEFAULT/nm8mIuZcLuhjUB13IUdaBe9TQ_s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Oct 2025 08:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:25:c1:98:27:b7:1c:93:40:d3:42:93:63:18:f7:59:93
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9e6f2622e65c2ee863501d7721475a05ef5343fb
Validity
Not Before: Oct 27 13:00:35 2025 GMT
Not After : Oct 28 13:00:35 2025 GMT
Subject: CN=ebbccf02eeb67ff4201a97fe076ac8c698105cad
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:14:4c:bb:c6:2e:de:33:e2:2e:9f:6b:13:5d:
c2:1a:f7:f7:30:67:70:82:35:f6:48:28:7d:a2:2c:
ed:b8:f3:f0:c8:c6:d9:07:f2:2d:51:f7:1b:0b:98:
86:43:42:15:d2:40:ff:44:c6:0b:5d:c1:4b:e1:e6:
93:50:39:5a:76:29:a1:94:8a:69:6e:d2:0c:d6:ca:
d9:6c:cf:30:5f:8a:f6:66:c0:e5:b7:ef:70:7d:e8:
03:d2:60:48:82:df:d2:ce:e4:ac:72:df:db:b0:9f:
ea:36:15:22:e7:65:12:2d:60:87:97:08:26:c8:c9:
78:f7:c2:b5:e2:e2:82:b4:d3:4d:71:11:d2:e2:30:
a1:fa:ed:53:bf:60:5e:e4:e1:8d:d9:a9:8c:e4:c7:
0d:b7:85:94:a8:d5:6b:94:a4:af:d0:4c:d8:2a:5d:
86:52:ea:4d:c7:5d:ec:c2:51:1d:5b:c9:d6:96:50:
18:6e:e4:91:d1:63:26:f2:de:57:57:d7:fb:6f:03:
a6:0e:35:fe:6f:52:09:4c:e3:c8:57:99:f7:e3:b5:
a6:76:25:99:d5:c1:20:38:a8:e0:e5:ef:46:65:cb:
79:ef:ff:45:61:32:da:26:c8:ac:19:12:d0:81:09:
49:e1:9f:4d:6d:b4:6c:9b:23:6f:83:a9:15:56:d2:
59:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:BC:CF:02:EE:B6:7F:F4:20:1A:97:FE:07:6A:C8:C6:98:10:5C:AD
X509v3 Authority Key Identifier:
keyid:9E:6F:26:22:E6:5C:2E:E8:63:50:1D:77:21:47:5A:05:EF:53:43:FB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nm8mIuZcLuhjUB13IUdaBe9TQ_s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/593dd5-b907-4de8-80cd-b1db70071dde/1/nm8mIuZcLuhjUB13IUdaBe9TQ_s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/593dd5-b907-4de8-80cd-b1db70071dde/1/nm8mIuZcLuhjUB13IUdaBe9TQ_s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3f:0a:75:b0:42:69:ff:cd:6f:db:ee:a0:56:fc:b4:46:69:b2:
c5:55:86:62:28:d0:84:ab:f0:c5:b4:0e:13:4a:41:62:91:ec:
d2:53:b0:a9:f9:fa:12:cc:37:da:4d:ec:07:26:63:a2:44:23:
8c:e4:dc:a8:e0:42:63:ce:01:a2:d5:53:4b:ca:fc:d7:9a:6f:
9f:88:7c:de:ab:3f:4e:33:2d:aa:f1:e8:13:bd:11:d3:33:29:
23:20:f9:c6:59:5f:44:89:eb:2f:42:8d:33:ce:d5:46:97:cd:
c3:e0:ac:be:6e:e8:4f:4c:05:74:83:38:32:a0:51:4f:99:a8:
aa:7b:5c:67:79:64:c0:5d:7e:a3:75:c3:87:39:0f:da:02:77:
0e:09:f3:d6:d9:44:08:1d:cb:38:d5:de:b0:f5:c6:1b:2a:af:
44:7c:56:10:01:20:fb:eb:ae:10:7e:fe:e5:f2:0f:66:cb:c4:
02:64:75:f1:ad:73:00:f2:69:e6:0b:d5:2f:e5:47:e1:6f:30:
f5:2a:84:16:88:c2:c6:39:73:39:ef:c6:5d:0c:b5:f9:ca:07:
a3:d0:cc:f1:67:1c:c8:c8:a9:13:90:38:71:d0:dd:d1:7f:c9:
61:53:b7:6d:76:82:56:bf:87:b8:b4:7e:17:9c:be:0e:63:b3:
d7:13:2c:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 27 14:27:48 2025 by rpki-client