Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fc/f17722-e58b-4452-8135-eaa5acf35fd1/1/nNZ9EDPKRytbuA_VlruDbRLiImE.mft
File: nNZ9EDPKRytbuA_VlruDbRLiImE.mft (raw, json)
Hash identifier: VktCzvGNcE8c7skximYd9oy/jP5xFCV9VjTyfWqiBx0=
Subject key identifier: 74:34:26:69:64:BC:B0:4D:B7:AF:9E:3C:78:01:D2:C0:B1:8A:C8:6B
Authority key identifier: 9C:D6:7D:10:33:CA:47:2B:5B:B8:0F:D5:96:BB:83:6D:12:E2:22:61
Certificate issuer: /CN=9cd67d1033ca472b5bb80fd596bb836d12e22261
Certificate serial: 019A725CB42F8D8909D8C1EC5E3E5522A8F3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nNZ9EDPKRytbuA_VlruDbRLiImE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fc/f17722-e58b-4452-8135-eaa5acf35fd1/1/nNZ9EDPKRytbuA_VlruDbRLiImE.mft
Manifest number: 0D10
Signing time: Tue 11 Nov 2025 10:01:09 +0000
Manifest this update: Tue 11 Nov 2025 10:01:09 +0000
Manifest next update: Wed 12 Nov 2025 10:01:09 +0000
Files and hashes: 1: nNZ9EDPKRytbuA_VlruDbRLiImE.crl (hash: Zee9UyGozeGcbzoX6f6Nl6uW9hxxTBMLg27yQgagg1c=)
2: vJEpt2EZ5UHOHzXUt6_FIB9pq2c.roa (hash: wfxwNWs85u9qLCuI6Hzz2FjX0JN3uzdqSv3NQ+LC9RE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fc/f17722-e58b-4452-8135-eaa5acf35fd1/1/nNZ9EDPKRytbuA_VlruDbRLiImE.crl
rsync://rpki.ripe.net/repository/DEFAULT/fc/f17722-e58b-4452-8135-eaa5acf35fd1/1/nNZ9EDPKRytbuA_VlruDbRLiImE.mft
rsync://rpki.ripe.net/repository/DEFAULT/nNZ9EDPKRytbuA_VlruDbRLiImE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:5c:b4:2f:8d:89:09:d8:c1:ec:5e:3e:55:22:a8:f3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9cd67d1033ca472b5bb80fd596bb836d12e22261
Validity
Not Before: Nov 11 10:01:09 2025 GMT
Not After : Nov 12 10:01:09 2025 GMT
Subject: CN=7434266964bcb04db7af9e3c7801d2c0b18ac86b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:8d:02:67:dd:b6:97:51:9a:9f:06:4b:c3:c7:
ca:37:e5:f0:d0:c8:87:cb:b3:c3:7a:77:c8:56:5b:
f2:af:ac:ff:b3:44:cb:9f:ec:8d:b7:5e:a4:5f:34:
17:e3:90:dc:dd:56:c5:ac:9a:92:f8:4e:55:aa:db:
a7:f7:ec:1e:c2:39:d5:94:3d:30:bb:d3:14:29:be:
a0:77:ed:55:b0:20:33:14:81:cd:92:2e:44:21:24:
b9:47:de:10:5b:5f:03:13:55:28:28:1e:f7:76:ea:
4a:8c:32:8d:db:6b:66:f3:18:be:fa:69:ff:10:b9:
a3:f5:9e:ce:19:04:0b:da:4b:c6:41:6a:73:c8:e9:
de:20:f7:6c:ad:ea:2a:70:f9:ff:07:3a:c7:7c:34:
f4:3c:7b:43:89:b9:2d:fc:2a:09:8b:16:b3:f1:3a:
b8:55:a5:34:23:0e:f2:de:27:47:9f:2c:2e:e1:52:
b6:8d:e2:7f:cb:da:15:b7:ba:8d:b3:db:c8:1a:3c:
fb:09:b5:fb:ee:d1:e8:8b:d6:ad:28:50:44:a0:b5:
b9:12:62:66:e3:97:fe:37:5b:dc:df:42:51:73:f4:
b7:cf:b5:c0:80:6b:e3:ae:eb:37:2d:87:01:83:bd:
0a:93:a6:36:aa:f5:4e:ac:c8:8d:83:6c:51:99:89:
11:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:34:26:69:64:BC:B0:4D:B7:AF:9E:3C:78:01:D2:C0:B1:8A:C8:6B
X509v3 Authority Key Identifier:
keyid:9C:D6:7D:10:33:CA:47:2B:5B:B8:0F:D5:96:BB:83:6D:12:E2:22:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nNZ9EDPKRytbuA_VlruDbRLiImE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/f17722-e58b-4452-8135-eaa5acf35fd1/1/nNZ9EDPKRytbuA_VlruDbRLiImE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/f17722-e58b-4452-8135-eaa5acf35fd1/1/nNZ9EDPKRytbuA_VlruDbRLiImE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
34:5f:fb:56:db:1a:69:cf:7c:1a:3e:9f:52:ee:12:68:2b:89:
ca:a4:d3:fe:a5:cc:36:a4:bb:ae:7a:c2:cb:3e:17:bf:ff:49:
c0:1e:a1:51:8b:5a:61:a6:0c:f4:db:86:56:3f:24:df:b7:d3:
70:22:b3:87:66:bf:82:40:4f:25:02:05:ec:d3:de:bd:54:16:
23:36:95:8d:af:06:8f:f9:3f:c2:09:e2:8c:ce:c5:96:fd:2b:
eb:fa:cc:f6:45:93:68:dd:e1:2c:ab:75:bc:26:5a:27:b0:7f:
3d:82:49:aa:28:e4:ce:4f:3a:cd:7e:b8:5f:b4:29:4d:72:30:
ee:ba:b7:a5:1c:92:49:72:01:c9:7c:b4:41:68:b8:82:ab:30:
52:51:73:a7:e0:ab:32:ed:56:9b:fa:1b:95:19:50:76:a2:55:
3e:2f:76:c0:43:50:42:bb:ca:1a:6a:20:94:6c:d9:06:01:78:
d5:5f:7b:1e:65:ae:27:0b:dd:bb:29:3e:c9:31:e6:bf:1a:d7:
ab:ac:70:69:fa:c9:65:ec:f9:83:58:9e:2c:e2:ea:cb:69:e1:
3d:d5:84:90:0e:a0:55:c0:8d:bf:77:6f:7c:c2:27:00:a9:38:
d3:1a:ed:7a:92:64:33:c1:00:6a:87:98:5c:ca:a0:e9:fe:d7:
e0:81:17:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 12:46:43 2025 by rpki-client