Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7d/7f78e3-0ccd-41fc-9883-69be037bf079/1/nmh1g4EMwAZO207-QFf1phpV5ws.mft
File: nmh1g4EMwAZO207-QFf1phpV5ws.mft (raw, json)
Hash identifier: Gos0AUkzMJDvztVVVUzMaYFtr/0lkEK57hZLIwmSOXI=
Subject key identifier: F6:97:52:B5:E5:E5:E0:7E:B7:74:04:10:78:C7:99:E0:84:72:82:33
Authority key identifier: 9E:68:75:83:81:0C:C0:06:4E:DB:4E:FE:40:57:F5:A6:1A:55:E7:0B
Certificate issuer: /CN=9e687583810cc0064edb4efe4057f5a61a55e70b
Certificate serial: 0199FC5847230651321C795A9E0DAEA188B4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nmh1g4EMwAZO207-QFf1phpV5ws.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7d/7f78e3-0ccd-41fc-9883-69be037bf079/1/nmh1g4EMwAZO207-QFf1phpV5ws.mft
Manifest number: 05B7
Signing time: Sun 19 Oct 2025 12:01:07 +0000
Manifest this update: Sun 19 Oct 2025 12:01:07 +0000
Manifest next update: Mon 20 Oct 2025 12:01:07 +0000
Files and hashes: 1: nmh1g4EMwAZO207-QFf1phpV5ws.crl (hash: 0+43NLmNklelVukOTcNAx/gpw9c5dSZCWzfLxr4RSRE=)
2: qw-aF3yIkt-72WfpE7ETeHkvHMU.roa (hash: 3nZH1KB8lozx5AtSdJomkLmrFoDBz1VyVSOmQdHc1wE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7d/7f78e3-0ccd-41fc-9883-69be037bf079/1/nmh1g4EMwAZO207-QFf1phpV5ws.crl
rsync://rpki.ripe.net/repository/DEFAULT/7d/7f78e3-0ccd-41fc-9883-69be037bf079/1/nmh1g4EMwAZO207-QFf1phpV5ws.mft
rsync://rpki.ripe.net/repository/DEFAULT/nmh1g4EMwAZO207-QFf1phpV5ws.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:58:47:23:06:51:32:1c:79:5a:9e:0d:ae:a1:88:b4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9e687583810cc0064edb4efe4057f5a61a55e70b
Validity
Not Before: Oct 19 12:01:07 2025 GMT
Not After : Oct 20 12:01:07 2025 GMT
Subject: CN=f69752b5e5e5e07eb774041078c799e084728233
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:9c:1c:4f:99:0f:68:d8:95:96:39:91:08:d5:
90:e2:82:2d:83:da:ff:36:e3:b6:04:45:3b:65:f3:
e6:d1:f6:65:57:b5:44:c9:dc:a4:ab:d5:11:a3:43:
85:20:a8:39:6f:69:48:23:9b:f2:c2:70:2b:6e:54:
27:72:80:cf:9b:ef:e1:b8:de:3c:13:a1:96:82:17:
e1:b8:6c:17:25:9b:5e:8d:d6:f8:4c:b6:cb:9a:51:
5c:f0:1c:fe:1d:ab:48:9f:32:56:90:91:9d:eb:55:
0b:72:a9:42:92:e9:f4:ed:ec:ec:dd:42:25:ce:b1:
19:8d:37:84:13:8c:e4:fa:54:d2:24:a5:31:bf:00:
4b:9a:b1:97:50:7c:b9:c5:14:9e:9e:b2:d2:b8:c3:
ba:32:6d:43:8f:60:4b:ef:4b:c4:e2:dd:b9:88:2c:
0e:5e:8b:db:9b:27:b6:b6:a1:ff:1d:79:d2:56:8d:
0c:ab:62:01:f7:9f:d3:44:9e:8a:c6:17:05:8c:c0:
ac:a0:64:7b:02:53:10:11:62:29:76:33:d7:fe:d7:
91:d7:31:a9:64:25:4c:fd:35:b7:f2:05:b9:13:ce:
0e:d5:05:b1:87:54:56:19:83:24:e4:a0:4f:a8:43:
14:59:20:f1:a3:4a:22:73:40:34:67:a0:e2:83:87:
9a:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:97:52:B5:E5:E5:E0:7E:B7:74:04:10:78:C7:99:E0:84:72:82:33
X509v3 Authority Key Identifier:
keyid:9E:68:75:83:81:0C:C0:06:4E:DB:4E:FE:40:57:F5:A6:1A:55:E7:0B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nmh1g4EMwAZO207-QFf1phpV5ws.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/7f78e3-0ccd-41fc-9883-69be037bf079/1/nmh1g4EMwAZO207-QFf1phpV5ws.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/7f78e3-0ccd-41fc-9883-69be037bf079/1/nmh1g4EMwAZO207-QFf1phpV5ws.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
01:c2:09:f8:73:68:ac:ff:a8:1e:1d:ad:f0:a7:13:32:1c:19:
53:ad:84:14:bb:a8:6a:55:9e:6c:92:92:11:aa:96:50:d1:ce:
3e:9a:75:f9:76:05:76:96:bf:a4:0a:f4:10:f3:63:6d:47:ed:
6d:61:27:ed:8c:c3:66:14:63:bd:9a:83:dc:59:3b:b0:5c:35:
42:97:b7:1d:c4:79:71:91:f0:35:a9:5b:1e:99:26:37:23:0f:
bf:9e:c3:21:ba:b5:ce:0f:fb:66:38:50:37:70:3b:34:c5:d7:
d9:2e:7f:23:8c:d8:a2:21:af:ba:0c:71:13:b9:1d:b2:d8:08:
69:c5:a9:4f:42:87:9f:fe:75:9c:e5:c0:86:26:af:b4:44:a9:
3f:2c:dd:4f:7e:f2:93:f4:c1:ab:53:c2:18:5a:da:73:a3:be:
c2:ae:66:59:be:20:fa:30:71:50:35:03:99:ec:de:4e:5f:f5:
e3:9e:1d:cc:b3:c0:02:ae:42:c4:29:8c:ec:57:35:55:ce:c7:
cf:0d:74:5e:2f:ce:c2:9a:ec:52:d0:54:bd:cc:56:fb:a3:92:
eb:eb:8d:50:77:00:01:7c:46:12:99:d7:b9:d2:f9:2c:cb:e3:
73:e7:5f:a0:be:48:cc:70:e7:19:52:77:27:b8:2f:b1:46:f7:
63:90:53:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 17:54:52 2025 by rpki-client