Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6f/5489e6-3e33-4df2-90b8-116909e43824/1/nCCRV794nmu6NODb0-_s2bIN0Gs.mft
File: nCCRV794nmu6NODb0-_s2bIN0Gs.mft (raw, json)
Hash identifier: DJMPhyYun4dgTOQgZnN2kPx7KOB9F8lFTx2ZtSv9+Zk=
Subject key identifier: CC:2F:F3:1C:5A:C0:E2:B4:2A:27:6B:D6:7A:65:8F:36:9E:55:6F:98
Authority key identifier: 9C:20:91:57:BF:78:9E:6B:BA:34:E0:DB:D3:EF:EC:D9:B2:0D:D0:6B
Certificate issuer: /CN=9c209157bf789e6bba34e0dbd3efecd9b20dd06b
Certificate serial: 0199FDDA246EA79FA03136674B3DB87A89BD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nCCRV794nmu6NODb0-_s2bIN0Gs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6f/5489e6-3e33-4df2-90b8-116909e43824/1/nCCRV794nmu6NODb0-_s2bIN0Gs.mft
Manifest number: 0E5A
Signing time: Sun 19 Oct 2025 19:02:35 +0000
Manifest this update: Sun 19 Oct 2025 19:02:35 +0000
Manifest next update: Mon 20 Oct 2025 19:02:35 +0000
Files and hashes: 1: DwD4MRqZCp-c4uFsMsWnYL0-SzA.roa (hash: 2tkEE6WjjJq4tK+YMGxG4bkpbYxQV0qlFZ5Ps3gC3Vo=)
2: nCCRV794nmu6NODb0-_s2bIN0Gs.crl (hash: 9kdq8lUtZd9SK5uK0QUysEvBImORhsbvL0Jph2/ouSA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6f/5489e6-3e33-4df2-90b8-116909e43824/1/nCCRV794nmu6NODb0-_s2bIN0Gs.crl
rsync://rpki.ripe.net/repository/DEFAULT/6f/5489e6-3e33-4df2-90b8-116909e43824/1/nCCRV794nmu6NODb0-_s2bIN0Gs.mft
rsync://rpki.ripe.net/repository/DEFAULT/nCCRV794nmu6NODb0-_s2bIN0Gs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fd:da:24:6e:a7:9f:a0:31:36:67:4b:3d:b8:7a:89:bd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9c209157bf789e6bba34e0dbd3efecd9b20dd06b
Validity
Not Before: Oct 19 19:02:35 2025 GMT
Not After : Oct 20 19:02:35 2025 GMT
Subject: CN=cc2ff31c5ac0e2b42a276bd67a658f369e556f98
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:ac:31:e8:27:ba:76:d2:08:31:be:bc:42:1a:
aa:b6:c1:05:fd:aa:73:ba:ff:7f:71:d9:16:1a:7e:
2a:91:c4:03:74:29:36:e3:65:b0:9e:27:fa:8e:a9:
94:9b:de:53:39:6f:97:99:b1:f5:1f:c1:d9:8b:d0:
1e:de:8a:92:19:90:5e:ac:ab:f4:be:bb:88:42:47:
2b:5c:4c:e1:9d:2b:69:4e:68:59:84:65:23:0c:80:
3f:90:82:b1:95:2a:c9:8a:0d:fa:cf:48:4d:f0:c9:
5a:07:20:dc:49:90:de:eb:7d:e4:d1:49:9d:3d:e7:
f2:fd:7a:63:91:73:0b:6b:54:b3:eb:8d:b0:f5:a6:
58:e4:f7:c9:c8:ec:21:bc:46:d4:ec:c5:05:f2:20:
72:8f:67:d9:bc:4b:16:81:f3:1e:28:d9:d9:1f:ea:
50:69:55:46:b7:d6:8f:bc:fe:fc:a6:39:13:78:44:
3a:4e:10:9e:0c:e4:c1:1a:22:63:21:0d:ca:ba:1e:
0c:0d:d5:05:6f:26:07:c4:6f:36:5f:aa:82:c2:8e:
ef:e5:c2:f3:a3:ed:03:6e:8c:6e:e5:6b:cf:8b:2f:
ec:23:d8:30:07:bc:18:55:07:d9:95:bd:f1:e6:75:
1a:2e:3f:85:7b:e2:19:44:c9:ec:42:af:8b:30:0b:
58:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:2F:F3:1C:5A:C0:E2:B4:2A:27:6B:D6:7A:65:8F:36:9E:55:6F:98
X509v3 Authority Key Identifier:
keyid:9C:20:91:57:BF:78:9E:6B:BA:34:E0:DB:D3:EF:EC:D9:B2:0D:D0:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nCCRV794nmu6NODb0-_s2bIN0Gs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/5489e6-3e33-4df2-90b8-116909e43824/1/nCCRV794nmu6NODb0-_s2bIN0Gs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/5489e6-3e33-4df2-90b8-116909e43824/1/nCCRV794nmu6NODb0-_s2bIN0Gs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6a:87:b8:e9:f6:4b:09:a8:bd:cd:36:a1:e1:c2:57:15:0b:52:
13:d6:62:ec:28:9e:61:02:ae:07:81:29:6f:33:8f:81:95:ed:
5c:ec:a7:44:18:0e:ae:52:36:b1:fc:d0:4c:ba:18:ba:ee:db:
be:4e:21:04:e4:50:41:30:91:45:8b:e3:f0:f6:aa:d4:4d:58:
de:ed:c3:77:db:8c:58:cb:e7:d0:70:b7:ed:59:3e:c7:95:16:
9d:f5:8a:a4:07:6b:af:72:91:c8:b8:40:38:2e:a1:4d:f0:8e:
fc:e3:64:17:f6:32:44:88:79:f5:77:65:62:a1:f5:bd:91:4a:
48:7e:7b:eb:57:93:aa:c4:c5:dc:63:c7:72:0d:7d:41:dc:1b:
c2:9b:09:30:f2:8d:74:c3:bc:a5:f8:9a:53:08:20:5f:d5:f6:
3b:77:9a:7d:e6:b6:f9:dc:b9:f3:f9:32:ae:7c:9f:6b:5f:d7:
0a:32:96:49:54:f3:e2:60:61:21:9a:ae:6d:f0:83:ce:ff:72:
57:76:35:00:50:1c:30:15:83:3f:1b:55:e0:e2:4b:88:fd:56:
8e:c9:17:b6:03:8b:9b:e4:53:c5:38:6f:0d:b7:e8:6d:bd:0c:
e9:79:28:a1:98:9f:30:ab:df:4d:8a:72:9d:3f:eb:4f:ed:a5:
0b:a5:4f:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 20:51:03 2025 by rpki-client