Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/af3da0-af92-41b8-87bf-d58b094df06c/1/NOT2Cw5Qhybd5owcJV0EvSGjoYM.mft
File: NOT2Cw5Qhybd5owcJV0EvSGjoYM.mft (raw, json)
Hash identifier: zVrsRUfMXy+sYpwiO0rfL3y5aH5zsS/o6A6UCmrJ4xo=
Subject key identifier: 9C:0F:57:AB:E9:C8:B9:2B:87:25:92:46:A5:0C:09:EE:3A:88:C8:C2
Authority key identifier: 34:E4:F6:0B:0E:50:87:26:DD:E6:8C:1C:25:5D:04:BD:21:A3:A1:83
Certificate issuer: /CN=34e4f60b0e508726dde68c1c255d04bd21a3a183
Certificate serial: 0199FF226962F2E7524DC8579D683C7AFD8F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NOT2Cw5Qhybd5owcJV0EvSGjoYM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/af3da0-af92-41b8-87bf-d58b094df06c/1/NOT2Cw5Qhybd5owcJV0EvSGjoYM.mft
Manifest number: 0AB9
Signing time: Mon 20 Oct 2025 01:01:09 +0000
Manifest this update: Mon 20 Oct 2025 01:01:09 +0000
Manifest next update: Tue 21 Oct 2025 01:01:09 +0000
Files and hashes: 1: DTF9ONSmCnj34QSV3oz7U0spqDo.roa (hash: Kw2YkPP6grSzeM7Vvpfj0GyDu4r4ER5vZalMBblwx+c=)
2: E6k1jw4wXKpNwPeTnRfj4VbFPUQ.roa (hash: hTQ5VP+ecunyC7viVfskT54aK8ITC6qcoUrC0ZEyNns=)
3: NOT2Cw5Qhybd5owcJV0EvSGjoYM.crl (hash: XyD31kDuSxlUceAChBnat6p11PHO0/NTy5LwKJgiSO0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a7/af3da0-af92-41b8-87bf-d58b094df06c/1/NOT2Cw5Qhybd5owcJV0EvSGjoYM.crl
rsync://rpki.ripe.net/repository/DEFAULT/a7/af3da0-af92-41b8-87bf-d58b094df06c/1/NOT2Cw5Qhybd5owcJV0EvSGjoYM.mft
rsync://rpki.ripe.net/repository/DEFAULT/NOT2Cw5Qhybd5owcJV0EvSGjoYM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 20:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:ff:22:69:62:f2:e7:52:4d:c8:57:9d:68:3c:7a:fd:8f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=34e4f60b0e508726dde68c1c255d04bd21a3a183
Validity
Not Before: Oct 20 01:01:09 2025 GMT
Not After : Oct 21 01:01:09 2025 GMT
Subject: CN=9c0f57abe9c8b92b87259246a50c09ee3a88c8c2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:75:60:84:0b:2f:ed:93:6e:04:97:a5:5f:50:
de:00:28:f0:77:c3:62:4d:8f:38:93:66:67:a2:7e:
de:e4:f2:ec:7d:3b:e2:15:34:0e:4c:16:28:9d:2c:
b0:9f:ff:b8:56:2f:ed:ef:fd:f9:8a:49:c3:98:dd:
73:0f:e9:f6:ac:09:24:e7:d3:00:fd:1c:16:49:15:
e3:b4:fa:f9:1c:ed:48:72:50:e2:56:23:3d:01:2f:
40:5a:5c:0f:8f:cc:9b:ea:6c:4f:40:48:04:dc:e0:
e0:92:e6:73:4e:3b:2c:f2:f4:c2:d0:80:3a:d5:b9:
17:54:c9:d8:00:ef:0e:4f:3d:90:e3:d7:0d:76:d2:
cf:54:02:05:e0:67:a4:0d:00:ec:73:cb:71:5f:d0:
f4:66:68:4e:73:37:0a:aa:71:fe:62:bc:d3:10:2a:
52:47:22:4e:f9:93:4c:9c:d8:8b:8b:4e:5d:b9:05:
b1:cb:52:8b:b1:6d:24:80:6e:5e:45:2f:24:76:ca:
20:24:67:61:7f:f0:85:85:47:53:cf:71:f9:7c:72:
6c:5c:d8:dd:f9:e2:fe:cd:0e:af:6c:a7:17:f6:5e:
c1:ee:15:a7:52:a7:45:30:8a:6f:48:4a:ba:c4:b7:
8f:e9:35:0b:a1:43:8e:62:c8:45:45:a9:f9:b4:8e:
31:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:0F:57:AB:E9:C8:B9:2B:87:25:92:46:A5:0C:09:EE:3A:88:C8:C2
X509v3 Authority Key Identifier:
keyid:34:E4:F6:0B:0E:50:87:26:DD:E6:8C:1C:25:5D:04:BD:21:A3:A1:83
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NOT2Cw5Qhybd5owcJV0EvSGjoYM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/af3da0-af92-41b8-87bf-d58b094df06c/1/NOT2Cw5Qhybd5owcJV0EvSGjoYM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/af3da0-af92-41b8-87bf-d58b094df06c/1/NOT2Cw5Qhybd5owcJV0EvSGjoYM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
81:55:7d:a7:e4:20:9c:2a:8b:56:5b:9b:9d:c3:76:a4:2b:89:
94:7e:3c:37:24:3b:b1:a2:63:d6:be:e5:f1:4e:a9:50:3b:52:
c0:4e:bf:e6:f3:a4:73:ff:fa:21:a4:13:2c:fd:d2:93:85:69:
f2:46:6a:4f:79:e9:0b:e6:8e:45:74:c8:cf:d6:2f:61:31:a4:
ce:ec:75:e0:7a:f7:f1:d1:cf:54:c0:32:09:34:62:b0:66:d2:
7f:0b:5a:5c:b7:7f:98:38:5a:fb:59:f9:db:76:b9:e2:a2:c8:
86:76:46:27:e7:68:65:1b:5b:24:da:89:18:7f:a2:51:b1:e0:
15:50:a3:cd:86:52:1c:8f:36:d6:ff:a8:49:47:7b:86:72:15:
2b:ed:11:a3:cf:0e:0c:5e:7a:55:ab:d6:25:a5:c6:85:3a:a5:
03:c8:0c:e4:97:71:71:4a:bc:1a:c0:6a:2b:0d:0c:b7:0d:5d:
9c:4e:f4:78:6c:2c:52:3b:db:aa:ed:e6:d0:c7:92:e4:42:86:
f6:63:6d:37:a7:4a:d2:58:db:c1:ad:1b:e1:64:5b:3f:9c:09:
e2:3c:43:83:54:13:50:cc:37:1a:03:62:8d:e4:32:44:05:2f:
40:bd:ab:a7:78:c1:7f:70:48:ec:86:d3:7e:be:96:48:8c:d4:
58:30:65:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 05:55:43 2025 by rpki-client