Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/8ad573-5977-4d76-83eb-bb0319213a29/1/ncAOnjBGWR-LpVJEgN33xvxMYOA.mft
File: ncAOnjBGWR-LpVJEgN33xvxMYOA.mft (raw, json)
Hash identifier: 6AJJIix1ruAP99i3cGDXRqKg61OQ4qdzFQN+EM8d9KE=
Subject key identifier: AF:6B:0D:BC:A1:A4:DB:0B:45:E5:4A:60:EB:E2:B9:18:23:75:DB:EA
Authority key identifier: 9D:C0:0E:9E:30:46:59:1F:8B:A5:52:44:80:DD:F7:C6:FC:4C:60:E0
Certificate issuer: /CN=9dc00e9e3046591f8ba5524480ddf7c6fc4c60e0
Certificate serial: 0199FBEBF66BAD42D503DAD39F49F3B7FDFA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ncAOnjBGWR-LpVJEgN33xvxMYOA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/8ad573-5977-4d76-83eb-bb0319213a29/1/ncAOnjBGWR-LpVJEgN33xvxMYOA.mft
Manifest number: 16E3
Signing time: Sun 19 Oct 2025 10:02:49 +0000
Manifest this update: Sun 19 Oct 2025 10:02:49 +0000
Manifest next update: Mon 20 Oct 2025 10:02:49 +0000
Files and hashes: 1: 49p4f0dafsUXZtr4zEkfdPg2MR0.roa (hash: Ja9qdubtQvHDpWVThEVb+wOD8jEOhZZePM5clLlMPts=)
2: ncAOnjBGWR-LpVJEgN33xvxMYOA.crl (hash: Y/jSsFS4vFx99m5LMTxRWsu4CqWLbH5TbvLTcNuXZwA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/80/8ad573-5977-4d76-83eb-bb0319213a29/1/ncAOnjBGWR-LpVJEgN33xvxMYOA.crl
rsync://rpki.ripe.net/repository/DEFAULT/80/8ad573-5977-4d76-83eb-bb0319213a29/1/ncAOnjBGWR-LpVJEgN33xvxMYOA.mft
rsync://rpki.ripe.net/repository/DEFAULT/ncAOnjBGWR-LpVJEgN33xvxMYOA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:eb:f6:6b:ad:42:d5:03:da:d3:9f:49:f3:b7:fd:fa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9dc00e9e3046591f8ba5524480ddf7c6fc4c60e0
Validity
Not Before: Oct 19 10:02:49 2025 GMT
Not After : Oct 20 10:02:49 2025 GMT
Subject: CN=af6b0dbca1a4db0b45e54a60ebe2b9182375dbea
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:ee:af:22:3b:b4:b7:1b:57:9c:36:31:a6:22:
04:20:4a:fe:d4:c2:ae:62:4c:a1:7e:34:29:ed:1d:
8b:d7:4c:10:b1:cc:d6:87:ad:c2:b6:6f:fd:8e:be:
2e:d7:3e:70:19:b3:11:39:2c:64:1c:f2:34:f9:f2:
05:60:e7:bd:f9:fe:b8:4a:2a:25:43:d2:75:f2:57:
28:db:1e:09:48:c1:71:7d:e1:86:5e:be:d1:e7:b0:
89:96:3d:21:23:de:02:eb:3c:76:9f:c0:3b:99:08:
32:fc:9f:72:00:3c:ba:a5:5f:5e:5e:dc:32:1b:1b:
d6:9a:b4:0d:69:a1:a8:3f:fa:5f:e5:73:be:ee:ec:
62:53:da:0e:90:ce:b4:4e:61:e3:e5:7b:46:a8:b3:
ee:b5:97:8b:8f:19:32:68:e8:0d:b8:07:d6:8f:84:
2f:27:54:35:2f:3c:ea:ac:f9:2d:6e:39:16:3d:25:
92:72:53:4b:91:cf:f3:0f:9a:40:f8:a1:fb:1e:02:
8e:c1:bc:c1:ed:f6:ef:3c:51:99:95:8c:11:79:da:
a3:6f:77:a1:a7:af:f2:00:d3:14:33:d3:1e:4c:a7:
94:55:f2:65:28:5f:89:77:f0:89:42:13:ca:5d:dc:
60:fc:95:c0:71:31:b7:34:46:be:97:52:38:cf:cc:
15:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:6B:0D:BC:A1:A4:DB:0B:45:E5:4A:60:EB:E2:B9:18:23:75:DB:EA
X509v3 Authority Key Identifier:
keyid:9D:C0:0E:9E:30:46:59:1F:8B:A5:52:44:80:DD:F7:C6:FC:4C:60:E0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ncAOnjBGWR-LpVJEgN33xvxMYOA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/8ad573-5977-4d76-83eb-bb0319213a29/1/ncAOnjBGWR-LpVJEgN33xvxMYOA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/8ad573-5977-4d76-83eb-bb0319213a29/1/ncAOnjBGWR-LpVJEgN33xvxMYOA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4a:51:97:e9:d9:ef:b5:ea:74:29:95:64:5e:f6:8c:25:1b:31:
56:c3:85:0c:24:3b:4a:52:08:c3:9a:c9:0b:a7:23:db:1a:c3:
97:d1:41:e9:45:39:ec:09:d6:3e:0f:6c:56:12:24:0b:0e:10:
c7:df:34:c7:91:f6:88:13:f8:57:6e:a8:2f:e5:98:5e:45:01:
64:be:8c:65:8a:a5:c1:61:0c:db:df:53:2b:99:86:b1:05:e5:
ad:5b:0b:bf:2c:55:ff:da:2d:67:b5:b7:83:4d:b2:da:cb:f4:
71:56:83:65:55:ec:1f:c1:a0:93:1a:1c:84:a1:97:0d:12:59:
b9:d4:e2:04:b2:e0:38:a1:ce:89:db:2a:fc:5d:f7:86:33:51:
2e:36:6a:e5:b9:58:b3:d3:1a:cd:f6:cf:1d:9e:53:ed:71:ba:
0b:2e:13:6d:f3:96:1a:07:db:d0:ce:cc:73:58:41:8d:51:03:
e8:7f:0a:e0:80:5b:51:a0:f1:4a:62:e0:6a:f4:c3:82:c5:fb:
01:ff:09:05:b9:61:f1:2f:a0:0c:30:2a:66:94:af:ef:7a:e4:
38:c0:f5:78:e5:ac:74:9e:99:b7:1b:60:da:74:99:79:db:5e:
19:d7:89:70:b8:e8:c4:0e:21:df:7e:a6:86:ce:b3:a7:91:a0:
fb:9f:b5:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:40:52 2025 by rpki-client