
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/c33a13-a54b-45bb-b0d4-a49b72a1cfe2/1/nbtiWqVb2O81QQr93Sorw1iiXtE.mft
File: nbtiWqVb2O81QQr93Sorw1iiXtE.mft (raw, json)
Hash identifier: ldw2VvXIwnd8rATfA30GuhXxFH6xDlXLuj6RGBeNnrY=
Subject key identifier: 2A:51:17:59:2F:7D:A5:5E:E2:B1:F0:07:1F:A7:C3:52:4D:87:3B:D5
Authority key identifier: 9D:BB:62:5A:A5:5B:D8:EF:35:41:0A:FD:DD:2A:2B:C3:58:A2:5E:D1
Certificate issuer: /CN=9dbb625aa55bd8ef35410afddd2a2bc358a25ed1
Certificate serial: 0199FC8F46935345AD517CDF11C4FC43DEFE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nbtiWqVb2O81QQr93Sorw1iiXtE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/c33a13-a54b-45bb-b0d4-a49b72a1cfe2/1/nbtiWqVb2O81QQr93Sorw1iiXtE.mft
Manifest number: 03EB
Signing time: Sun 19 Oct 2025 13:01:12 +0000
Manifest this update: Sun 19 Oct 2025 13:01:12 +0000
Manifest next update: Mon 20 Oct 2025 13:01:12 +0000
Files and hashes: 1: F_kIbrNoezU2xST1IGJ7znM97So.roa (hash: SL4bD3bCY+6YeKuV14y0PigmsFs9RgYCxYhDjlPIAW4=)
2: nbtiWqVb2O81QQr93Sorw1iiXtE.crl (hash: UrljdUKYp59KkqgehAdD5mklY6avDDA981eSI2tguVw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/c33a13-a54b-45bb-b0d4-a49b72a1cfe2/1/nbtiWqVb2O81QQr93Sorw1iiXtE.crl
rsync://rpki.ripe.net/repository/DEFAULT/51/c33a13-a54b-45bb-b0d4-a49b72a1cfe2/1/nbtiWqVb2O81QQr93Sorw1iiXtE.mft
rsync://rpki.ripe.net/repository/DEFAULT/nbtiWqVb2O81QQr93Sorw1iiXtE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:8f:46:93:53:45:ad:51:7c:df:11:c4:fc:43:de:fe
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9dbb625aa55bd8ef35410afddd2a2bc358a25ed1
Validity
Not Before: Oct 19 13:01:12 2025 GMT
Not After : Oct 20 13:01:12 2025 GMT
Subject: CN=2a5117592f7da55ee2b1f0071fa7c3524d873bd5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:f3:28:ab:0a:99:d3:37:7a:23:af:0d:d2:c3:
a0:85:3e:b7:c8:51:dd:89:45:48:36:d5:53:08:f3:
44:f6:bc:99:0b:e2:02:6e:9d:15:41:b8:94:36:b4:
28:4d:5e:f9:17:b9:15:a7:6b:e9:65:56:31:32:28:
ee:0c:ae:db:94:50:36:72:5b:58:e3:7b:20:9f:04:
18:8f:e9:cf:de:fd:82:05:df:20:46:43:23:bf:da:
5a:79:d2:86:55:46:7b:b4:a7:11:d8:72:1b:65:76:
32:c5:84:e6:a7:11:3d:f6:6c:17:95:94:e3:33:5d:
ef:6b:a2:c4:be:84:c2:3e:41:80:1e:d1:86:be:72:
fd:ef:c4:01:a6:6c:40:b8:76:36:c8:87:05:cb:54:
14:6b:57:8f:b6:8f:62:5b:2a:27:0d:b0:7a:75:73:
ad:20:01:b7:ef:c9:fe:bb:22:b4:29:eb:59:bf:1f:
9b:ce:f0:f0:50:05:d1:4d:06:81:ea:7d:75:85:8c:
f8:59:44:52:c5:52:28:ce:1b:c1:d7:a0:f7:2b:2a:
63:ae:83:a0:0e:3e:45:13:03:c6:27:46:23:8b:9f:
bf:09:e5:3f:da:26:e7:11:2e:cf:a2:23:e8:a0:a5:
29:4c:6a:13:79:39:ae:66:26:88:91:58:fb:b4:95:
91:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:51:17:59:2F:7D:A5:5E:E2:B1:F0:07:1F:A7:C3:52:4D:87:3B:D5
X509v3 Authority Key Identifier:
keyid:9D:BB:62:5A:A5:5B:D8:EF:35:41:0A:FD:DD:2A:2B:C3:58:A2:5E:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nbtiWqVb2O81QQr93Sorw1iiXtE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/c33a13-a54b-45bb-b0d4-a49b72a1cfe2/1/nbtiWqVb2O81QQr93Sorw1iiXtE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/c33a13-a54b-45bb-b0d4-a49b72a1cfe2/1/nbtiWqVb2O81QQr93Sorw1iiXtE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bd:31:cf:ad:56:06:84:02:b9:7b:21:c9:fd:bb:5a:4a:75:7b:
e5:fd:b0:10:30:61:e1:80:88:25:a5:19:9c:c5:97:97:84:9d:
80:ab:3c:ec:9e:b3:7c:ff:e1:e3:cc:41:58:44:b3:83:c8:a3:
a8:09:ad:fa:1e:66:ae:1e:fb:a8:d2:a0:f0:5d:6e:c3:84:08:
12:b9:87:29:ed:d5:52:b7:93:10:1e:85:70:0b:16:00:92:57:
c0:36:ee:3e:cb:1f:12:9b:d5:36:da:18:f8:86:ed:fc:7f:a0:
cb:9f:0d:af:01:f6:20:a3:cd:14:7a:95:7b:c0:58:ab:ba:c1:
19:7b:0d:4c:54:72:2d:2f:5b:6a:0a:90:bb:11:46:ea:a0:10:
8c:54:26:9b:03:b3:ce:d7:97:ce:60:66:bb:eb:b1:d8:6d:e9:
7a:26:fc:14:78:6b:ac:3a:43:34:e7:d3:49:78:24:99:25:49:
a0:04:3f:d6:98:42:65:f0:eb:8d:24:93:13:1d:43:93:3b:d4:
5f:4d:86:f9:69:9e:75:7e:f6:ac:05:4c:eb:d1:6e:d5:a1:47:
26:51:68:39:4c:1e:3c:dd:ef:55:21:36:ae:6b:7a:27:f6:18:
73:17:6f:73:63:15:68:ad:f6:99:cf:9f:8a:63:0a:e3:3d:78:
58:b1:e6:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:12:51 2025 by rpki-client