Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/d0a0a0-d25a-4746-9139-a71456df9997/1/NRNbgbbB7dL29bwcYIpfyf6SZHQ.mft
File: NRNbgbbB7dL29bwcYIpfyf6SZHQ.mft (raw, json)
Hash identifier: rkcloa1yJ5MBY6JtgS/WVd07Ynxba0GKfA69LMm/D1k=
Subject key identifier: C6:09:1D:77:31:96:79:DC:D3:AB:D9:7E:35:77:D8:05:0F:B0:50:BD
Authority key identifier: 35:13:5B:81:B6:C1:ED:D2:F6:F5:BC:1C:60:8A:5F:C9:FE:92:64:74
Certificate issuer: /CN=35135b81b6c1edd2f6f5bc1c608a5fc9fe926474
Certificate serial: 0199FC58B7ED15DA3F309CA6D4E7F93350EB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NRNbgbbB7dL29bwcYIpfyf6SZHQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/d0a0a0-d25a-4746-9139-a71456df9997/1/NRNbgbbB7dL29bwcYIpfyf6SZHQ.mft
Manifest number: 16E2
Signing time: Sun 19 Oct 2025 12:01:36 +0000
Manifest this update: Sun 19 Oct 2025 12:01:36 +0000
Manifest next update: Mon 20 Oct 2025 12:01:36 +0000
Files and hashes: 1: 1J9DcCYd3Q_jdEJtp8cZUA8fk9c.roa (hash: iH5nOf9Pb3Kl/sC7b3allhtNGpIaxcmUvhP78iH8szA=)
2: Cefp2MinUNICkZh50zBZ0en6wPE.roa (hash: iKM2SPROiv8Ajxn8AK2LTCg5zV1U+o0PTw/lw68hm5M=)
3: IUaglXMoCfWHYoEHDvfMOLW0gCo.roa (hash: SIDwg/N1xEcZG6CVXI1MxQJ23X7MPqohUnh5tpikeYs=)
4: NRNbgbbB7dL29bwcYIpfyf6SZHQ.crl (hash: iETt1AyAIq3lsF02w+W7aN5thNxdAz6knvIdB7Qs5Lk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5b/d0a0a0-d25a-4746-9139-a71456df9997/1/NRNbgbbB7dL29bwcYIpfyf6SZHQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/5b/d0a0a0-d25a-4746-9139-a71456df9997/1/NRNbgbbB7dL29bwcYIpfyf6SZHQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/NRNbgbbB7dL29bwcYIpfyf6SZHQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:58:b7:ed:15:da:3f:30:9c:a6:d4:e7:f9:33:50:eb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=35135b81b6c1edd2f6f5bc1c608a5fc9fe926474
Validity
Not Before: Oct 19 12:01:36 2025 GMT
Not After : Oct 20 12:01:36 2025 GMT
Subject: CN=c6091d77319679dcd3abd97e3577d8050fb050bd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:18:e5:89:2e:1b:d8:d8:dd:67:3b:c4:b0:7a:
7d:97:49:03:f7:85:df:5b:69:76:7f:3c:d9:e5:58:
eb:c2:2f:fb:79:12:e9:34:8f:d3:49:40:97:db:f1:
9b:3b:1d:f8:28:0c:b8:91:7b:5c:47:ac:96:f4:f2:
5a:47:d8:2d:83:d3:0b:c1:14:34:fa:9b:db:0b:29:
20:b6:70:24:c5:a7:09:9c:50:61:db:d9:46:f6:1b:
96:f5:01:11:ee:85:b4:e2:36:3a:c0:04:7f:12:ca:
0d:04:73:0a:16:6c:f2:5c:58:a6:68:81:5a:10:76:
97:b4:f6:e7:d1:d8:d8:9c:d6:a5:3e:6b:9b:e9:ea:
fb:8d:9e:14:27:1a:35:7c:26:cc:2b:0f:bd:e3:f8:
7f:9a:5d:3b:c0:47:7f:5f:d2:a3:6a:d7:bd:39:d6:
1b:68:78:6d:52:49:a8:ea:fb:16:69:81:2c:03:09:
18:4d:7e:cf:91:b1:ec:5b:e7:06:39:24:4a:c7:85:
24:42:83:32:b6:d3:08:bc:ae:37:b6:01:de:41:82:
1f:72:d9:15:97:de:5c:e6:70:9d:05:39:3b:d7:f9:
ca:aa:35:58:bd:57:3c:ac:56:5a:46:88:7a:f0:3f:
4c:1f:a4:04:e4:45:8d:92:7e:77:be:b1:77:5a:51:
b7:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:09:1D:77:31:96:79:DC:D3:AB:D9:7E:35:77:D8:05:0F:B0:50:BD
X509v3 Authority Key Identifier:
keyid:35:13:5B:81:B6:C1:ED:D2:F6:F5:BC:1C:60:8A:5F:C9:FE:92:64:74
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NRNbgbbB7dL29bwcYIpfyf6SZHQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/d0a0a0-d25a-4746-9139-a71456df9997/1/NRNbgbbB7dL29bwcYIpfyf6SZHQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/d0a0a0-d25a-4746-9139-a71456df9997/1/NRNbgbbB7dL29bwcYIpfyf6SZHQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1e:47:6a:ca:e5:19:44:d5:a1:6f:83:2b:cb:87:e6:f3:f8:ae:
b2:8b:5c:86:60:63:8c:54:28:4c:23:4c:95:69:de:2a:6a:c8:
85:6b:47:6b:f1:3a:f6:ee:95:d9:8f:9e:26:e3:d8:bf:08:8c:
87:03:e1:3e:ee:a7:32:cf:8d:bf:e4:fc:b0:d1:c9:b8:10:cd:
4d:e5:e6:a5:df:60:37:63:7f:ce:5e:9a:91:35:7c:ec:12:11:
c9:60:42:33:62:6e:e1:f4:c7:e1:fb:0a:d1:0a:ab:11:cd:70:
76:cb:5d:95:10:71:fb:ec:de:53:f0:e6:a2:3d:0b:a6:3c:ad:
70:cf:88:b9:75:22:62:9a:b0:77:18:f0:08:eb:d7:c5:67:be:
24:66:df:d5:7c:45:ee:cd:66:c5:85:aa:d5:7d:a8:93:99:78:
1f:1c:37:fc:1a:f8:7a:09:f7:80:12:d8:d1:2a:ee:ed:f4:4e:
8d:31:c5:1d:91:d7:de:07:d3:b0:7d:d4:bb:e1:ce:3d:ea:b4:
2a:7f:d2:f9:7b:61:25:84:be:d7:bc:f6:55:f8:ce:64:b6:7a:
36:d0:cb:58:e5:01:7b:74:f1:06:7c:46:2d:c1:80:79:04:03:
89:c0:a5:e6:4d:e4:d3:0f:b2:69:e2:90:b2:f1:e4:86:90:9d:
89:28:2b:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:25:56 2025 by rpki-client