Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e8/6b0e0e-8be5-4bf9-b427-70d63107d05d/1/nOItyiotsKWf5WaByNHEBnenRbU.mft
File: nOItyiotsKWf5WaByNHEBnenRbU.mft (raw, json)
Hash identifier: dvsStuBFv3ry8HA+nVa7sg77IcTv/RIgJ9xMMssica0=
Subject key identifier: 36:9A:36:E7:05:D6:DD:1F:FC:35:ED:09:A4:62:72:C4:6F:3E:AA:83
Authority key identifier: 9C:E2:2D:CA:2A:2D:B0:A5:9F:E5:66:81:C8:D1:C4:06:77:A7:45:B5
Certificate issuer: /CN=9ce22dca2a2db0a59fe56681c8d1c40677a745b5
Certificate serial: 019A71B853334D7A818F36073F8ACD9B683A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nOItyiotsKWf5WaByNHEBnenRbU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e8/6b0e0e-8be5-4bf9-b427-70d63107d05d/1/nOItyiotsKWf5WaByNHEBnenRbU.mft
Manifest number: 12DD
Signing time: Tue 11 Nov 2025 07:01:36 +0000
Manifest this update: Tue 11 Nov 2025 07:01:36 +0000
Manifest next update: Wed 12 Nov 2025 07:01:36 +0000
Files and hashes: 1: SgrL7DiM5GSLyUl02rPic8LO2xM.roa (hash: mfGk2oXMS3Dskm6xFi6bjI6ao91mV5GgJuEh/2dC5PU=)
2: nOItyiotsKWf5WaByNHEBnenRbU.crl (hash: GWB/rhERFxQewmd4OSezJ3t7Jc3eGK7qtrWZp78I6bE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e8/6b0e0e-8be5-4bf9-b427-70d63107d05d/1/nOItyiotsKWf5WaByNHEBnenRbU.crl
rsync://rpki.ripe.net/repository/DEFAULT/e8/6b0e0e-8be5-4bf9-b427-70d63107d05d/1/nOItyiotsKWf5WaByNHEBnenRbU.mft
rsync://rpki.ripe.net/repository/DEFAULT/nOItyiotsKWf5WaByNHEBnenRbU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 07:01:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:b8:53:33:4d:7a:81:8f:36:07:3f:8a:cd:9b:68:3a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9ce22dca2a2db0a59fe56681c8d1c40677a745b5
Validity
Not Before: Nov 11 07:01:36 2025 GMT
Not After : Nov 12 07:01:36 2025 GMT
Subject: CN=369a36e705d6dd1ffc35ed09a46272c46f3eaa83
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:5a:19:1c:e1:16:8a:ba:cf:ca:00:00:50:c9:
7f:a1:bc:8f:6f:40:11:a2:2c:0d:06:39:70:50:9b:
a3:05:f7:9b:21:ea:f7:9b:c3:07:cd:4c:0a:96:1b:
e9:5a:89:ce:d4:58:68:6a:72:a4:df:52:eb:f3:ae:
f9:76:16:f2:12:8e:17:1e:68:8d:50:9a:df:3e:69:
d1:5d:8a:3c:0b:2a:4d:55:a7:d2:1e:ae:ff:2d:71:
2b:b3:bf:c1:54:4a:d3:8d:dc:8c:57:1d:dd:87:5f:
39:bc:e3:4f:49:74:cc:a4:ed:0a:84:91:dd:28:5e:
ac:40:c1:ee:8f:2f:c4:8b:44:e0:a2:02:32:9b:50:
8c:03:28:4b:5c:0b:16:58:eb:64:5f:db:16:3f:f3:
21:2c:eb:ab:65:76:7a:be:0f:40:c9:0e:1a:a3:ab:
06:67:27:e2:94:bc:c6:7a:b7:c3:db:1a:78:dd:1c:
21:87:c4:42:e3:8a:48:a2:f9:b0:da:c9:b5:6d:38:
6b:29:d5:8b:ca:d7:a4:01:68:d4:53:3c:bb:96:7e:
4a:9f:2d:be:b6:4c:0d:c8:af:54:78:5d:0b:fe:06:
3b:a2:0d:f0:0c:d3:e9:2f:20:f1:9f:dd:3a:2f:1a:
7b:1f:8c:8e:f9:dc:83:c0:c9:ff:47:ae:10:19:fb:
bb:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:9A:36:E7:05:D6:DD:1F:FC:35:ED:09:A4:62:72:C4:6F:3E:AA:83
X509v3 Authority Key Identifier:
keyid:9C:E2:2D:CA:2A:2D:B0:A5:9F:E5:66:81:C8:D1:C4:06:77:A7:45:B5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nOItyiotsKWf5WaByNHEBnenRbU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/6b0e0e-8be5-4bf9-b427-70d63107d05d/1/nOItyiotsKWf5WaByNHEBnenRbU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/6b0e0e-8be5-4bf9-b427-70d63107d05d/1/nOItyiotsKWf5WaByNHEBnenRbU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
17:e8:90:43:3f:f3:9d:9d:60:34:38:f9:74:ab:1b:e8:0e:9f:
36:7d:19:47:da:24:ba:41:96:ab:93:8e:a6:02:c8:88:90:ff:
8a:ba:8c:14:0b:99:6e:37:97:1f:70:07:69:50:f0:9e:9a:12:
78:6d:c4:4f:47:60:3c:76:b6:ee:ef:2e:e7:49:a9:4f:44:4f:
fa:22:c9:15:64:aa:1b:7e:9c:9f:5a:4a:82:05:51:75:87:da:
01:81:65:19:eb:c9:c9:9d:c3:c0:8f:87:8b:f4:d0:7b:72:15:
00:9e:90:9c:9c:61:cc:3f:7e:73:1c:c4:44:87:8e:97:d9:67:
e0:27:7d:2f:01:9b:7e:29:f6:a8:48:7c:b6:4c:c3:22:26:57:
95:37:41:3a:25:1f:8f:b8:86:ea:8a:65:18:71:91:1d:e8:cf:
d1:2a:23:e1:a6:db:d0:9a:0a:ae:e3:5d:03:87:53:ef:b2:c8:
82:68:48:50:de:bb:05:8b:0e:80:5f:fe:b0:db:46:76:95:f3:
4c:f4:ea:72:ad:f3:46:ce:68:f2:f1:85:7f:a5:c1:d1:9c:9b:
b8:b1:aa:93:fa:ef:f7:29:18:d5:e3:e2:ea:32:78:5a:c6:b0:
b1:4f:82:c2:d8:bb:95:f0:ae:d1:a4:2b:ed:d3:1f:54:fb:b7:
d3:22:a4:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 13:12:29 2025 by rpki-client