Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/20/788fcf-60f3-426f-9858-82f476b5cfdb/1/ncNmr2zgsan2AXOxS1_d1-C5YwY.mft
File: ncNmr2zgsan2AXOxS1_d1-C5YwY.mft (raw, json)
Hash identifier: 2olQpNv3N+vfaYAEdy4TrqS5qXAhOKX82QGFIAjVHWY=
Subject key identifier: 82:5C:11:18:81:23:6F:7A:1A:7D:6F:43:52:BC:66:36:B9:29:43:BE
Authority key identifier: 9D:C3:66:AF:6C:E0:B1:A9:F6:01:73:B1:4B:5F:DD:D7:E0:B9:63:06
Certificate issuer: /CN=9dc366af6ce0b1a9f60173b14b5fddd7e0b96306
Certificate serial: 0199FD6AFD8496085E5C832A204AFA238391
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ncNmr2zgsan2AXOxS1_d1-C5YwY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/20/788fcf-60f3-426f-9858-82f476b5cfdb/1/ncNmr2zgsan2AXOxS1_d1-C5YwY.mft
Manifest number: 16A0
Signing time: Sun 19 Oct 2025 17:01:11 +0000
Manifest this update: Sun 19 Oct 2025 17:01:11 +0000
Manifest next update: Mon 20 Oct 2025 17:01:11 +0000
Files and hashes: 1: Hq4qtu3Hmw7ihPLhHJm0o3HW0ME.roa (hash: cBO4YeU2VYitDB5gOiHBAGdFdmypsOGShw+oH/O7hOQ=)
2: ncNmr2zgsan2AXOxS1_d1-C5YwY.crl (hash: 2/GnfBeQCTJl1ryn+NlB5PEY3zB+hyOr3odqFAJZCQY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/20/788fcf-60f3-426f-9858-82f476b5cfdb/1/ncNmr2zgsan2AXOxS1_d1-C5YwY.crl
rsync://rpki.ripe.net/repository/DEFAULT/20/788fcf-60f3-426f-9858-82f476b5cfdb/1/ncNmr2zgsan2AXOxS1_d1-C5YwY.mft
rsync://rpki.ripe.net/repository/DEFAULT/ncNmr2zgsan2AXOxS1_d1-C5YwY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 15:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fd:6a:fd:84:96:08:5e:5c:83:2a:20:4a:fa:23:83:91
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9dc366af6ce0b1a9f60173b14b5fddd7e0b96306
Validity
Not Before: Oct 19 17:01:11 2025 GMT
Not After : Oct 20 17:01:11 2025 GMT
Subject: CN=825c111881236f7a1a7d6f4352bc6636b92943be
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:7f:94:f5:ac:b0:b0:73:83:a4:21:7d:9e:2a:
80:78:ff:3c:36:c6:70:78:21:db:43:d9:49:30:fb:
41:ea:79:17:6a:5c:25:9d:ea:d3:ea:78:aa:12:88:
68:27:2a:4c:4b:9f:af:95:61:91:5c:e4:4f:f6:d6:
1e:a7:1a:20:00:fe:39:a8:d7:2c:6f:22:d3:3a:05:
67:f9:2b:22:45:96:0a:fb:4e:78:47:ef:fb:3b:55:
75:4f:8b:65:43:35:58:b3:2d:b9:cc:84:cf:97:d1:
c8:77:cf:2d:be:11:76:97:c2:60:00:b3:37:dd:c2:
6d:f6:13:9b:3d:de:3a:0c:23:93:2a:21:27:74:04:
7a:c9:d0:63:4a:4f:86:b1:98:c9:95:55:d1:a1:9b:
aa:2b:7c:4d:9f:ca:18:e9:f3:71:67:91:e5:d2:87:
f9:88:e3:7b:8f:57:70:88:10:6e:0e:e5:d1:52:5b:
56:c1:47:47:02:b8:5a:6c:90:69:a0:79:53:8d:0a:
10:e9:0f:96:7e:30:c3:e7:42:26:b0:4d:70:81:3c:
20:bc:c8:a3:0a:31:67:fe:63:0a:88:37:64:93:69:
35:eb:a9:24:67:64:d0:c4:5e:c7:9d:f1:0f:fe:47:
91:0e:c4:8c:ab:76:54:ca:c5:0a:b8:d4:5e:cc:11:
b0:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:5C:11:18:81:23:6F:7A:1A:7D:6F:43:52:BC:66:36:B9:29:43:BE
X509v3 Authority Key Identifier:
keyid:9D:C3:66:AF:6C:E0:B1:A9:F6:01:73:B1:4B:5F:DD:D7:E0:B9:63:06
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ncNmr2zgsan2AXOxS1_d1-C5YwY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/20/788fcf-60f3-426f-9858-82f476b5cfdb/1/ncNmr2zgsan2AXOxS1_d1-C5YwY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/20/788fcf-60f3-426f-9858-82f476b5cfdb/1/ncNmr2zgsan2AXOxS1_d1-C5YwY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2f:89:89:2e:75:db:7a:b9:ea:5c:5c:ea:5a:d1:5f:0d:45:e3:
23:b1:b4:85:05:be:dd:16:91:19:86:d1:af:0b:4a:00:80:6a:
9e:16:ae:66:bc:e9:6e:68:88:de:71:d7:44:4c:26:98:53:7d:
55:3b:b1:db:28:3f:fd:e1:97:bc:9d:ff:c9:3c:73:3c:12:0b:
87:be:97:3c:bc:64:1e:f7:86:ae:7b:1f:cb:dd:e7:e6:08:db:
b1:01:2d:f4:e6:ba:ce:dd:ea:fa:30:74:5a:6b:42:8e:7b:a6:
0b:b9:43:f3:72:7f:c9:6a:6b:0d:58:e4:f2:45:cb:f3:13:35:
4d:b9:f2:67:27:03:9e:05:6c:24:c1:c5:2f:fc:c8:11:0d:50:
46:cc:85:c8:99:2b:cd:56:53:9d:1f:21:05:e6:6d:72:cf:e5:
d6:d9:1b:a1:f1:06:f9:d8:57:5f:dd:1f:6e:98:38:be:cc:a9:
b4:0a:0f:a2:af:0e:ad:28:e8:5d:91:fb:a5:5d:a8:09:4f:f4:
4a:e3:d4:20:eb:58:58:20:88:77:0f:5f:5c:7e:bf:56:ad:98:
99:e7:c9:d3:49:7f:5e:c5:05:97:d5:57:9a:22:55:9c:fd:0b:
85:98:e5:a3:2c:48:fe:ca:0e:a5:da:3d:c7:0e:65:82:6c:d6:
c2:56:0e:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 01:17:41 2025 by rpki-client