Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ad/465556-70d1-4152-a65a-6c63e152242d/1/0NbmVQW09OT08x2QuLIaOnz7Dr8.mft
File: 0NbmVQW09OT08x2QuLIaOnz7Dr8.mft (raw, json)
Hash identifier: qRKdi0rsKIh5HLpu1pkR56IQSirUOtTwsLpygPj7IY8=
Subject key identifier: EE:F1:78:44:CE:5B:0A:3A:F9:B2:68:52:69:EC:F2:B1:57:D8:C7:88
Authority key identifier: D0:D6:E6:55:05:B4:F4:E4:F4:F3:1D:90:B8:B2:1A:3A:7C:FB:0E:BF
Certificate issuer: /CN=d0d6e65505b4f4e4f4f31d90b8b21a3a7cfb0ebf
Certificate serial: 0199FDD8BA7E8E7061A021B0327288B4C817
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0NbmVQW09OT08x2QuLIaOnz7Dr8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ad/465556-70d1-4152-a65a-6c63e152242d/1/0NbmVQW09OT08x2QuLIaOnz7Dr8.mft
Manifest number: 0C57
Signing time: Sun 19 Oct 2025 19:01:02 +0000
Manifest this update: Sun 19 Oct 2025 19:01:02 +0000
Manifest next update: Mon 20 Oct 2025 19:01:02 +0000
Files and hashes: 1: 0NbmVQW09OT08x2QuLIaOnz7Dr8.crl (hash: OjTCG3aXoH6s/91ZwuZKurXbaqYeXZCsZSlUGIaBEjE=)
2: RLT9vWKmEAqKt6hEtNsyMWI1h0c.roa (hash: xBu31AarPg6SaGrJFYKlAHmm3Mw8LW1iAP2FYDxCvXE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ad/465556-70d1-4152-a65a-6c63e152242d/1/0NbmVQW09OT08x2QuLIaOnz7Dr8.crl
rsync://rpki.ripe.net/repository/DEFAULT/ad/465556-70d1-4152-a65a-6c63e152242d/1/0NbmVQW09OT08x2QuLIaOnz7Dr8.mft
rsync://rpki.ripe.net/repository/DEFAULT/0NbmVQW09OT08x2QuLIaOnz7Dr8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 19:01:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fd:d8:ba:7e:8e:70:61:a0:21:b0:32:72:88:b4:c8:17
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d0d6e65505b4f4e4f4f31d90b8b21a3a7cfb0ebf
Validity
Not Before: Oct 19 19:01:02 2025 GMT
Not After : Oct 20 19:01:02 2025 GMT
Subject: CN=eef17844ce5b0a3af9b2685269ecf2b157d8c788
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f8:f3:06:b9:50:f4:0e:5a:ec:ea:57:2b:da:71:
4a:a8:40:66:34:8b:40:84:81:8b:f7:d6:41:f8:b6:
be:1d:1d:5c:0d:e7:90:45:b2:6b:bd:e4:e3:b9:dd:
56:c6:e1:f0:d1:ae:0c:e7:12:9f:35:7c:3a:01:04:
0e:f3:1e:f5:92:5b:1d:b8:3d:94:38:14:53:ad:1e:
46:0d:44:a1:dd:11:01:2c:b0:47:42:56:3e:b8:9e:
fb:82:91:e7:f2:bf:93:75:68:c6:d6:02:d0:bb:af:
c1:af:01:60:4e:d0:4b:9f:33:cf:10:f3:c3:30:c6:
07:f3:a9:07:fc:42:73:69:c0:b1:7f:d8:4d:21:43:
73:83:f2:57:63:f7:d6:8f:5c:22:f2:73:de:69:a4:
e3:f7:85:38:8f:25:eb:42:0d:e4:fc:f9:07:36:14:
fd:b9:3e:4a:e1:6e:8d:7a:e5:b7:c2:e5:45:bb:fc:
62:c3:cf:21:7a:6d:d3:d0:cb:63:14:84:d6:b3:11:
dc:90:49:5e:2f:6a:b6:8b:0c:da:74:15:ad:3b:bd:
fa:24:63:29:22:a9:6f:64:31:45:db:ba:7b:6e:61:
4a:d0:f7:fc:b8:56:f5:93:27:08:92:fa:cf:37:93:
0a:d0:d5:70:6a:5e:08:62:8b:95:3d:10:87:70:d3:
ab:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:F1:78:44:CE:5B:0A:3A:F9:B2:68:52:69:EC:F2:B1:57:D8:C7:88
X509v3 Authority Key Identifier:
keyid:D0:D6:E6:55:05:B4:F4:E4:F4:F3:1D:90:B8:B2:1A:3A:7C:FB:0E:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0NbmVQW09OT08x2QuLIaOnz7Dr8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/465556-70d1-4152-a65a-6c63e152242d/1/0NbmVQW09OT08x2QuLIaOnz7Dr8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/465556-70d1-4152-a65a-6c63e152242d/1/0NbmVQW09OT08x2QuLIaOnz7Dr8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
41:89:fa:e7:6e:0a:22:de:46:a0:85:fd:6c:f0:4f:e2:a9:6a:
2f:70:4b:ea:54:2c:0f:ae:e4:1b:bd:de:3d:91:4b:e6:bc:4a:
28:d9:61:7a:c6:82:3d:21:1b:90:bc:c9:5d:66:e0:16:f6:b9:
7b:4c:e9:64:86:e8:0d:91:91:27:df:a8:16:ee:70:dc:9d:f2:
09:2a:92:f1:07:23:70:3c:48:2e:04:64:4d:7d:4e:fe:c3:a3:
24:2b:d6:b6:0d:45:f2:f5:1b:a1:37:1f:9f:70:38:a7:7e:a6:
92:a7:37:33:43:6a:b6:7f:c2:40:b0:a9:34:64:01:68:c3:84:
ed:ee:0e:43:4d:ea:0f:36:d1:da:e0:7e:15:fc:70:7a:06:41:
e8:15:80:13:4c:6c:e6:3b:13:f3:5e:f7:df:60:97:40:35:14:
f8:2e:b8:81:9f:8f:5d:24:0f:90:20:c7:bd:e1:19:ab:27:ce:
98:eb:bf:87:db:d8:b3:6a:57:0d:fe:01:84:30:9f:8e:dd:31:
93:c4:3d:4b:14:08:96:20:9c:29:12:d1:fc:cb:31:7b:6c:64:
63:5e:8f:66:7a:a2:fd:d7:93:64:55:0d:1f:3a:64:35:84:b3:
43:b2:69:ee:ac:a0:61:1f:f8:d5:c5:a1:4b:51:fc:a5:53:f3:
24:22:5a:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 02:07:49 2025 by rpki-client