Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b5/0bab1f-92d6-42f0-b952-442c080ae541/1/NiYcJhdW-gOsV9G_xNuFbvgIl1o.mft
File: NiYcJhdW-gOsV9G_xNuFbvgIl1o.mft (raw, json)
Hash identifier: a6qs7N0VMxJ6z7NG0ty4OqWbSYXpfUQL3/GyPa7ahr4=
Subject key identifier: 7D:C6:DC:FA:93:24:8B:2B:CE:77:96:01:5E:B4:00:9C:9B:6E:BA:50
Authority key identifier: 36:26:1C:26:17:56:FA:03:AC:57:D1:BF:C4:DB:85:6E:F8:08:97:5A
Certificate issuer: /CN=36261c261756fa03ac57d1bfc4db856ef808975a
Certificate serial: 0199FB0F3479CA2479F06BAA2F4CC40065C4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NiYcJhdW-gOsV9G_xNuFbvgIl1o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b5/0bab1f-92d6-42f0-b952-442c080ae541/1/NiYcJhdW-gOsV9G_xNuFbvgIl1o.mft
Manifest number: 14EE
Signing time: Sun 19 Oct 2025 06:01:41 +0000
Manifest this update: Sun 19 Oct 2025 06:01:41 +0000
Manifest next update: Mon 20 Oct 2025 06:01:41 +0000
Files and hashes: 1: NiYcJhdW-gOsV9G_xNuFbvgIl1o.crl (hash: KpeZdYtmuR0zmxbqvw7M2wfLhFpvw3qCPg2W6pAhkcU=)
2: dYJMd1xHra4qPvxWQ63pWL2NPkE.roa (hash: lMxX8BkZ02l91WMGdaFajJSu4NcGeGtSFmauEg/qSlI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b5/0bab1f-92d6-42f0-b952-442c080ae541/1/NiYcJhdW-gOsV9G_xNuFbvgIl1o.crl
rsync://rpki.ripe.net/repository/DEFAULT/b5/0bab1f-92d6-42f0-b952-442c080ae541/1/NiYcJhdW-gOsV9G_xNuFbvgIl1o.mft
rsync://rpki.ripe.net/repository/DEFAULT/NiYcJhdW-gOsV9G_xNuFbvgIl1o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:0f:34:79:ca:24:79:f0:6b:aa:2f:4c:c4:00:65:c4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=36261c261756fa03ac57d1bfc4db856ef808975a
Validity
Not Before: Oct 19 06:01:41 2025 GMT
Not After : Oct 20 06:01:41 2025 GMT
Subject: CN=7dc6dcfa93248b2bce7796015eb4009c9b6eba50
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:be:f1:a6:b8:20:3d:a2:49:c3:76:bc:97:b0:
ef:e5:da:73:92:34:63:fa:8e:32:ef:24:b1:20:37:
21:44:15:c9:5e:72:36:65:ca:c1:77:85:8b:39:ec:
75:d5:57:11:20:bd:68:c7:b3:6a:38:f4:de:e6:06:
48:ac:89:4e:f2:f7:d1:17:ab:a6:23:03:af:20:ad:
94:12:c4:49:ff:29:96:45:cf:67:fc:2b:16:91:e4:
19:f8:af:a0:17:be:ea:75:f3:eb:a7:22:82:4e:5e:
f6:2e:ce:d2:14:df:28:9d:a4:79:c0:29:12:77:ae:
d8:ee:9e:62:49:d0:2e:1b:6a:f4:41:55:0a:77:84:
b4:4e:6c:8c:11:62:2a:d8:40:22:00:ea:d6:bc:46:
82:2c:70:99:2f:ab:94:2d:24:a7:19:2f:32:43:91:
4f:e9:22:36:1a:96:81:73:be:eb:ff:b6:84:55:58:
a1:f4:f1:67:63:51:6f:71:07:3e:f1:64:d9:25:38:
28:58:2f:dd:80:b7:c8:82:a0:99:10:52:f0:fc:3a:
33:4d:6c:c2:8f:48:a9:db:fd:2e:ac:7a:0c:a6:38:
0c:9e:61:54:52:78:91:a5:02:0e:e6:a3:bf:c5:28:
10:42:80:a2:0f:16:8c:62:65:a6:bb:49:09:7d:1c:
3b:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:C6:DC:FA:93:24:8B:2B:CE:77:96:01:5E:B4:00:9C:9B:6E:BA:50
X509v3 Authority Key Identifier:
keyid:36:26:1C:26:17:56:FA:03:AC:57:D1:BF:C4:DB:85:6E:F8:08:97:5A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NiYcJhdW-gOsV9G_xNuFbvgIl1o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/0bab1f-92d6-42f0-b952-442c080ae541/1/NiYcJhdW-gOsV9G_xNuFbvgIl1o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/0bab1f-92d6-42f0-b952-442c080ae541/1/NiYcJhdW-gOsV9G_xNuFbvgIl1o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6a:bd:0a:42:4c:bd:03:d4:cc:af:20:63:a8:35:ab:e4:37:c9:
c6:65:29:f9:69:61:18:f9:25:33:b3:14:84:26:32:e7:61:da:
e0:2e:c2:5c:44:28:7f:7a:a1:fa:5f:96:f3:ea:27:9f:a5:85:
14:84:a3:2b:6f:3e:17:d8:09:85:04:2c:14:08:b7:7d:5a:9d:
3e:11:0b:2b:ff:3e:b5:21:ec:c9:85:2c:38:5e:3e:44:6e:ce:
bc:fe:0c:0f:55:26:70:48:40:5e:b2:f7:59:34:eb:a6:49:a2:
98:1b:a0:3a:8b:95:3b:2c:54:12:8b:3f:d1:6d:da:ef:29:b0:
ff:62:4e:c6:32:db:91:c8:6c:17:e6:03:8a:b0:2d:13:a9:30:
d2:e0:9b:25:21:9f:52:d9:88:ca:fe:9e:8f:6e:01:6d:dd:e0:
cb:c2:33:c4:81:e0:a7:9e:58:42:8a:7a:16:19:ec:d1:b5:e0:
f0:c4:d1:50:a8:c3:10:34:70:e1:df:da:2e:8d:eb:17:27:55:
95:3b:f8:63:48:e3:45:bc:2b:1b:0c:bd:67:21:42:f5:62:6b:
93:3e:f9:de:6c:79:2d:cd:25:4b:0f:93:87:cf:55:d6:e1:5b:
89:df:04:4f:d2:ec:7a:81:09:fc:0c:91:5c:3e:ce:18:e7:6e:
3a:c6:f9:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:40:25 2025 by rpki-client