Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ee/6cda74-5514-490a-be26-b1d3bcee2c7e/1/nJ7OTm0GWTAFt3P4X6_g5RM8Ouc.mft
File: nJ7OTm0GWTAFt3P4X6_g5RM8Ouc.mft (raw, json)
Hash identifier: TZOzT/GOxWBJPpxxEKYsU+keT9RJAVFTqsqRkjhjq7U=
Subject key identifier: 7D:C5:55:E2:D1:CF:85:02:6B:5E:D3:55:E2:38:F5:52:D4:B7:94:FC
Authority key identifier: 9C:9E:CE:4E:6D:06:59:30:05:B7:73:F8:5F:AF:E0:E5:13:3C:3A:E7
Certificate issuer: /CN=9c9ece4e6d06593005b773f85fafe0e5133c3ae7
Certificate serial: 019A70DC3007961503A66BACFA74D70027C1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nJ7OTm0GWTAFt3P4X6_g5RM8Ouc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ee/6cda74-5514-490a-be26-b1d3bcee2c7e/1/nJ7OTm0GWTAFt3P4X6_g5RM8Ouc.mft
Manifest number: 3C
Signing time: Tue 11 Nov 2025 03:01:09 +0000
Manifest this update: Tue 11 Nov 2025 03:01:09 +0000
Manifest next update: Wed 12 Nov 2025 03:01:09 +0000
Files and hashes: 1: nJ7OTm0GWTAFt3P4X6_g5RM8Ouc.crl (hash: iwa44oep1Y+cZCRum41cjy+EexnY0Mvwt4Qhiy+eH+g=)
2: snaiy0AWEHDVZXAytTfYZ7Ad5Ao.roa (hash: jIS06nxKa9jnYNQWPG1sjSoEu6qmp784GSmWUBnLqhg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ee/6cda74-5514-490a-be26-b1d3bcee2c7e/1/nJ7OTm0GWTAFt3P4X6_g5RM8Ouc.crl
rsync://rpki.ripe.net/repository/DEFAULT/ee/6cda74-5514-490a-be26-b1d3bcee2c7e/1/nJ7OTm0GWTAFt3P4X6_g5RM8Ouc.mft
rsync://rpki.ripe.net/repository/DEFAULT/nJ7OTm0GWTAFt3P4X6_g5RM8Ouc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 03:01:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:70:dc:30:07:96:15:03:a6:6b:ac:fa:74:d7:00:27:c1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9c9ece4e6d06593005b773f85fafe0e5133c3ae7
Validity
Not Before: Nov 11 03:01:09 2025 GMT
Not After : Nov 12 03:01:09 2025 GMT
Subject: CN=7dc555e2d1cf85026b5ed355e238f552d4b794fc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:2a:db:fc:fe:7b:e2:9a:6f:72:2c:e4:6d:f6:
1f:a0:93:b5:ae:16:27:1e:54:7b:5f:da:0e:4e:d5:
ed:f9:de:5b:61:0a:6f:2a:93:9f:61:4c:6f:e5:d3:
3f:07:62:b3:17:0c:b2:c3:58:b4:75:20:28:c3:2c:
06:3e:0d:47:08:46:ff:07:4f:7f:b0:3c:af:16:59:
4b:49:59:85:97:41:2e:a7:15:42:9d:4f:33:7b:18:
57:3d:c9:76:ca:4c:14:be:a4:29:d2:46:f9:23:cf:
21:75:76:f9:e7:5e:f8:4e:3b:c1:e3:c7:51:b9:a9:
9d:f9:db:e5:92:79:e7:48:bd:1b:d6:c8:32:0c:a4:
69:ec:f0:f4:fe:43:64:1a:3b:59:ca:23:73:80:4c:
f3:6c:e4:37:dd:e8:95:18:00:d4:85:74:fc:73:f0:
e6:f5:60:4f:52:c5:cd:1f:8b:c6:c3:ec:c3:d0:f3:
13:80:e2:a7:47:0b:8e:a1:db:12:fb:a4:b6:a7:70:
f3:12:ee:33:e1:82:86:26:bf:57:56:ba:e9:e6:eb:
e6:86:df:42:b0:45:eb:05:79:b3:eb:0b:ca:2d:4e:
7c:e3:cb:0b:4d:c1:c3:49:ba:ad:df:a4:99:bd:cd:
83:26:33:91:39:92:50:7a:fd:d1:86:17:60:7e:00:
63:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:C5:55:E2:D1:CF:85:02:6B:5E:D3:55:E2:38:F5:52:D4:B7:94:FC
X509v3 Authority Key Identifier:
keyid:9C:9E:CE:4E:6D:06:59:30:05:B7:73:F8:5F:AF:E0:E5:13:3C:3A:E7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nJ7OTm0GWTAFt3P4X6_g5RM8Ouc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/6cda74-5514-490a-be26-b1d3bcee2c7e/1/nJ7OTm0GWTAFt3P4X6_g5RM8Ouc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/6cda74-5514-490a-be26-b1d3bcee2c7e/1/nJ7OTm0GWTAFt3P4X6_g5RM8Ouc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b3:b6:1f:e7:c5:a9:d3:7b:20:84:21:5f:a7:81:9b:2e:84:15:
bd:57:fb:d7:b0:ea:59:5b:fb:d1:dd:a0:fb:8d:43:93:73:b8:
88:b4:28:bc:c8:94:dd:8b:61:d0:77:a7:ae:47:33:a9:ff:e9:
f6:26:85:04:ce:8e:5c:0e:49:33:4f:17:5a:93:55:46:45:b8:
32:53:cd:b1:09:4f:c6:a6:62:fa:37:a2:28:5c:ab:26:e2:bd:
2b:78:05:0e:02:7c:31:5c:69:45:ec:8b:a8:2f:20:cd:a6:ed:
25:76:04:5b:cd:86:d1:75:4e:ba:d0:53:32:6a:c1:45:dd:bb:
de:ce:1d:4a:a7:cc:5b:7a:8f:54:31:75:f1:33:00:ab:4b:cd:
93:ee:6d:7d:cf:b8:c6:71:89:15:87:36:b3:5d:a9:b1:92:63:
69:aa:9e:b5:3d:82:7f:d1:e8:55:94:54:08:88:f3:27:22:af:
d8:56:e4:fb:0a:b3:6f:5c:04:07:4b:cb:2d:51:b3:b0:21:cd:
28:76:66:5a:72:d1:f1:72:54:49:47:7d:70:0f:b4:19:57:e3:
50:d4:eb:ba:77:af:bc:96:90:d1:7a:53:82:ee:2a:03:37:27:
1c:4d:77:5b:6d:8a:2f:80:65:70:9b:4a:6b:db:c6:f0:11:c8:
e0:2c:9b:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 12:37:26 2025 by rpki-client