Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6e/fcad2d-86d9-42b1-b115-2fcf396253b8/1/NvdiEfPFj2yYr5nPZabx6P98Q7o.mft
File: NvdiEfPFj2yYr5nPZabx6P98Q7o.mft (raw, json)
Hash identifier: qeF3+jJI8CPe6jcbVY5HiDkLmi1XmLtXX9C7AaMZh2I=
Subject key identifier: 9B:67:4F:C3:B7:6D:48:68:E4:FD:EB:C9:58:63:09:E5:BC:A6:9D:CA
Authority key identifier: 36:F7:62:11:F3:C5:8F:6C:98:AF:99:CF:65:A6:F1:E8:FF:7C:43:BA
Certificate issuer: /CN=36f76211f3c58f6c98af99cf65a6f1e8ff7c43ba
Certificate serial: 0199FCC676E741976BD4DEB274A4158E46B0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NvdiEfPFj2yYr5nPZabx6P98Q7o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6e/fcad2d-86d9-42b1-b115-2fcf396253b8/1/NvdiEfPFj2yYr5nPZabx6P98Q7o.mft
Manifest number: 10A9
Signing time: Sun 19 Oct 2025 14:01:28 +0000
Manifest this update: Sun 19 Oct 2025 14:01:28 +0000
Manifest next update: Mon 20 Oct 2025 14:01:28 +0000
Files and hashes: 1: IMiPI_sQJpS-dko-Db8d2-Qz-B0.roa (hash: fyR22c3qbngtIbooNJXlmC6fXpgIjnWVTMNZ/hhGG0A=)
2: NvdiEfPFj2yYr5nPZabx6P98Q7o.crl (hash: QTKDbaS1gBK/qjATAaOVoq7smGEwEDCjWdfQ7TtxpFs=)
3: SAAncdb2H87xzD0WkojsMdkjI9E.roa (hash: bzjggaHNN8SzirhLiuBFGlBjgMu/vnVg8ZfnlYMY9GY=)
4: _E9iapjx7rmdCjMi6lOxJAzw41c.roa (hash: XzeBU1MqaK56hZttRGiRoj2k5rsX6aCywVY+pFC+b8Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6e/fcad2d-86d9-42b1-b115-2fcf396253b8/1/NvdiEfPFj2yYr5nPZabx6P98Q7o.crl
rsync://rpki.ripe.net/repository/DEFAULT/6e/fcad2d-86d9-42b1-b115-2fcf396253b8/1/NvdiEfPFj2yYr5nPZabx6P98Q7o.mft
rsync://rpki.ripe.net/repository/DEFAULT/NvdiEfPFj2yYr5nPZabx6P98Q7o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:c6:76:e7:41:97:6b:d4:de:b2:74:a4:15:8e:46:b0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=36f76211f3c58f6c98af99cf65a6f1e8ff7c43ba
Validity
Not Before: Oct 19 14:01:28 2025 GMT
Not After : Oct 20 14:01:28 2025 GMT
Subject: CN=9b674fc3b76d4868e4fdebc9586309e5bca69dca
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:f5:03:05:81:06:35:58:a3:57:43:ab:d9:ca:
84:f5:0c:1f:f1:15:42:04:b5:0c:a7:b2:6a:25:11:
d7:df:b4:60:54:bc:58:41:f5:fd:7a:29:6e:0a:96:
3b:91:70:5d:99:2e:9c:d3:0f:07:32:de:8c:8a:28:
42:57:79:ad:44:ff:19:6c:6c:d4:f3:ba:45:bc:80:
2d:7f:ea:a9:3b:90:65:db:b0:e8:da:e0:27:b3:22:
57:31:2e:9c:eb:f7:e5:7a:44:e3:87:8b:d1:8b:d6:
42:0f:12:06:5d:f0:a4:f4:94:35:8e:2d:72:b1:35:
df:5f:9e:f9:9c:7b:2c:4a:5c:ee:a4:96:8c:73:ec:
73:4c:a5:5a:14:05:79:0e:38:0c:1f:9d:d4:e6:2d:
50:f9:f7:97:f6:b3:6d:75:0d:35:21:c8:95:e1:28:
44:7e:25:3f:b2:61:7e:f1:12:82:12:d3:e3:cc:0b:
5e:d3:47:92:4a:66:fb:fa:4a:4e:c6:4c:e8:85:0d:
a2:c5:af:43:76:3f:4d:2e:ec:66:73:7f:8a:76:aa:
40:27:9a:f9:10:fc:83:88:97:06:b9:02:cf:26:c5:
7a:47:71:f4:e0:4b:01:73:3f:d6:61:e6:72:ae:09:
a4:5b:bc:0e:a0:bb:cc:d0:cd:9c:b9:6e:78:78:8d:
ce:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:67:4F:C3:B7:6D:48:68:E4:FD:EB:C9:58:63:09:E5:BC:A6:9D:CA
X509v3 Authority Key Identifier:
keyid:36:F7:62:11:F3:C5:8F:6C:98:AF:99:CF:65:A6:F1:E8:FF:7C:43:BA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NvdiEfPFj2yYr5nPZabx6P98Q7o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/fcad2d-86d9-42b1-b115-2fcf396253b8/1/NvdiEfPFj2yYr5nPZabx6P98Q7o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/fcad2d-86d9-42b1-b115-2fcf396253b8/1/NvdiEfPFj2yYr5nPZabx6P98Q7o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6e:6f:08:ab:dc:e7:62:10:48:56:bb:b0:d1:5b:9f:c4:e2:ac:
44:cc:84:ac:bb:02:2a:38:0a:85:46:1e:2d:cd:28:06:3a:f5:
5c:02:ce:a8:4a:73:b1:5f:4f:f4:26:8d:ce:35:31:49:17:34:
d5:36:0e:81:3b:ca:88:c4:41:60:6b:a3:ea:f4:04:88:3d:34:
63:60:dd:0b:f5:5c:47:43:f0:31:5e:7a:ac:48:89:7b:1f:d6:
e5:e7:24:27:ea:b5:e4:e4:b1:df:c6:6a:c8:3a:54:3e:cc:e2:
a6:80:8e:7a:70:1f:07:37:4d:ab:c4:ef:81:1e:ee:e7:47:29:
a4:eb:c0:95:05:36:c2:26:4d:e4:ab:72:3d:24:9a:aa:ce:e8:
af:ab:41:63:5b:05:a9:e8:b8:44:63:41:52:40:86:8d:ed:e8:
85:0c:01:15:b7:97:c4:2d:12:38:2f:02:ff:8d:8d:eb:f1:18:
38:0f:2e:1e:04:11:31:dc:33:f8:a3:3c:06:27:b8:2e:ed:d6:
a5:66:d8:19:12:55:b6:c9:cd:d4:cf:0d:ad:c8:fe:a9:13:4a:
5a:1e:f9:78:45:29:e3:62:85:05:95:c4:04:76:1c:de:1e:11:
fb:32:11:ed:68:6a:bb:80:e7:e4:c1:b5:af:07:b8:53:99:03:
a7:7c:37:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 18:32:22 2025 by rpki-client