Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/84/8db8d2-6b11-4d19-8e8d-52a10425b136/1/NNsbsppK6oXhnCiS0Mg54vuUXtA.mft
File: NNsbsppK6oXhnCiS0Mg54vuUXtA.mft (raw, json)
Hash identifier: qIbEt4qmW41eN4QZGQ6SPbxtID/2FTncP3tBE1XgB2M=
Subject key identifier: CC:A1:11:1F:DD:E7:D6:72:DB:A9:0B:D3:D8:F9:1E:07:BA:F9:24:99
Authority key identifier: 34:DB:1B:B2:9A:4A:EA:85:E1:9C:28:92:D0:C8:39:E2:FB:94:5E:D0
Certificate issuer: /CN=34db1bb29a4aea85e19c2892d0c839e2fb945ed0
Certificate serial: 0199FC5911FB47CE75C5DFEA1E2FD17842E7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NNsbsppK6oXhnCiS0Mg54vuUXtA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/84/8db8d2-6b11-4d19-8e8d-52a10425b136/1/NNsbsppK6oXhnCiS0Mg54vuUXtA.mft
Manifest number: 03C2
Signing time: Sun 19 Oct 2025 12:01:59 +0000
Manifest this update: Sun 19 Oct 2025 12:01:59 +0000
Manifest next update: Mon 20 Oct 2025 12:01:59 +0000
Files and hashes: 1: MxQVcAiuW0p4EDIiEm7q3BWYvP8.roa (hash: JVFsJWGBLPgzxt9uY5l+yySS0Ei3Tn04Hx81eXPjKe4=)
2: NNsbsppK6oXhnCiS0Mg54vuUXtA.crl (hash: GA4H8oduQBtsicrprOMJHi9dWU/soCMGVNwtwcGuFww=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/84/8db8d2-6b11-4d19-8e8d-52a10425b136/1/NNsbsppK6oXhnCiS0Mg54vuUXtA.crl
rsync://rpki.ripe.net/repository/DEFAULT/84/8db8d2-6b11-4d19-8e8d-52a10425b136/1/NNsbsppK6oXhnCiS0Mg54vuUXtA.mft
rsync://rpki.ripe.net/repository/DEFAULT/NNsbsppK6oXhnCiS0Mg54vuUXtA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:59:11:fb:47:ce:75:c5:df:ea:1e:2f:d1:78:42:e7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=34db1bb29a4aea85e19c2892d0c839e2fb945ed0
Validity
Not Before: Oct 19 12:01:59 2025 GMT
Not After : Oct 20 12:01:59 2025 GMT
Subject: CN=cca1111fdde7d672dba90bd3d8f91e07baf92499
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:ee:2d:fb:eb:7d:d2:6e:92:dd:20:9a:86:05:
25:36:6f:be:c8:4a:98:8d:33:f4:9b:38:10:bc:70:
2b:cc:38:2d:7b:b3:7d:60:54:a5:5d:a3:fa:b6:40:
d7:35:1b:f9:70:b1:a1:65:06:b5:be:68:4a:c2:6b:
6b:39:b5:a3:9a:d4:93:03:18:bd:d6:e5:21:dc:15:
f0:5a:64:f5:8e:01:25:77:5d:7a:08:96:08:14:1b:
bb:00:34:8b:a8:bc:9a:a2:33:87:c9:d9:d9:28:e0:
f4:a6:ee:e0:36:e8:e9:54:c1:16:4e:1f:99:e4:cf:
fb:f8:9e:92:82:e2:e9:12:d2:6f:ca:64:79:9e:4d:
72:29:49:15:47:22:6b:db:a1:a3:0c:e1:17:03:26:
b8:31:75:5f:a0:ef:d4:aa:f4:f2:b8:40:63:cb:15:
40:45:f3:0e:19:32:fc:2b:35:78:7c:98:4b:7f:2e:
a8:ca:74:c6:31:8e:54:db:e4:93:77:ba:fd:01:c6:
09:a3:d6:54:d5:45:a2:76:a0:60:50:2b:ea:a5:6f:
ed:58:f8:e0:e2:d5:88:47:85:da:94:37:a6:c2:56:
4c:47:6d:50:48:1c:f9:ae:e4:56:2c:b3:c4:f5:d9:
0c:77:b8:ce:9c:59:c4:5c:af:2f:92:cb:bb:57:5c:
9b:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:A1:11:1F:DD:E7:D6:72:DB:A9:0B:D3:D8:F9:1E:07:BA:F9:24:99
X509v3 Authority Key Identifier:
keyid:34:DB:1B:B2:9A:4A:EA:85:E1:9C:28:92:D0:C8:39:E2:FB:94:5E:D0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NNsbsppK6oXhnCiS0Mg54vuUXtA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/8db8d2-6b11-4d19-8e8d-52a10425b136/1/NNsbsppK6oXhnCiS0Mg54vuUXtA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/84/8db8d2-6b11-4d19-8e8d-52a10425b136/1/NNsbsppK6oXhnCiS0Mg54vuUXtA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
17:85:f2:2f:66:13:ea:c4:4e:6c:36:a8:6b:4f:87:fc:33:b8:
f2:15:f0:93:53:75:70:26:a1:82:ca:2a:41:8c:7f:a3:d8:36:
16:a4:d3:a3:e9:cb:a5:ac:f0:61:74:f2:29:a6:35:e5:c1:69:
bc:da:7e:52:46:31:bf:fd:0c:e5:fc:3e:fe:a9:3a:69:62:d3:
fd:d5:03:c8:97:b2:4a:c5:34:98:e6:da:c7:9a:64:e6:d4:4f:
aa:01:97:fa:0d:d7:25:9d:74:95:d6:cd:1b:b2:e5:1a:83:fb:
22:35:76:94:51:de:0e:56:45:09:38:0c:89:d7:60:25:f1:83:
c4:2e:30:a3:bc:63:b1:ff:43:e0:60:d3:a6:f0:b3:ee:e5:f8:
e5:54:99:07:76:8c:70:c2:e6:8b:aa:ea:80:0a:30:89:4a:f9:
78:99:68:99:ec:9d:6d:af:d3:6d:0c:8e:1b:dd:e2:5d:8f:9f:
97:46:96:1e:78:1e:9f:f4:ed:5f:f9:ef:aa:a5:e4:bb:6f:99:
0a:84:c0:2a:be:8b:16:44:3a:3a:71:40:bc:aa:ef:71:7b:7c:
50:76:00:a3:fa:0b:d3:d1:09:40:a8:8d:67:bc:6c:6a:52:79:
8b:a1:5c:c2:f9:1d:7d:d1:73:f8:e7:5d:38:de:d9:15:2b:c5:
8a:55:da:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 18:06:54 2025 by rpki-client