Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ba/ed4e2c-e5ad-417a-8788-11824406bd5d/1/nOTmWuzJXURqDLZAuXZvoPgVDjw.mft
File: nOTmWuzJXURqDLZAuXZvoPgVDjw.mft (raw, json)
Hash identifier: 3UY8gy9MCHSR2FOouqZ2FYCW4dbERQqn7YtmrsIYxa8=
Subject key identifier: 9D:08:05:1F:2B:53:28:ED:A4:22:85:EB:11:60:AD:AD:57:F1:0D:96
Authority key identifier: 9C:E4:E6:5A:EC:C9:5D:44:6A:0C:B6:40:B9:76:6F:A0:F8:15:0E:3C
Certificate issuer: /CN=9ce4e65aecc95d446a0cb640b9766fa0f8150e3c
Certificate serial: 0199FBEB7F4489A27FF0329B6CD92FDE805A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nOTmWuzJXURqDLZAuXZvoPgVDjw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ba/ed4e2c-e5ad-417a-8788-11824406bd5d/1/nOTmWuzJXURqDLZAuXZvoPgVDjw.mft
Manifest number: 0FE5
Signing time: Sun 19 Oct 2025 10:02:18 +0000
Manifest this update: Sun 19 Oct 2025 10:02:18 +0000
Manifest next update: Mon 20 Oct 2025 10:02:18 +0000
Files and hashes: 1: nOTmWuzJXURqDLZAuXZvoPgVDjw.crl (hash: BBFk/WsFyiIkQzfexCotQtAzO7y2nUtfkWTGETXMHZA=)
2: wnex2LpnDh2tDYAOL_JlA2jqYbg.roa (hash: jkFPmngwGBf/VR9fqzS0+q+xo9EQNuNbpIxHsY+rxw0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ba/ed4e2c-e5ad-417a-8788-11824406bd5d/1/nOTmWuzJXURqDLZAuXZvoPgVDjw.crl
rsync://rpki.ripe.net/repository/DEFAULT/ba/ed4e2c-e5ad-417a-8788-11824406bd5d/1/nOTmWuzJXURqDLZAuXZvoPgVDjw.mft
rsync://rpki.ripe.net/repository/DEFAULT/nOTmWuzJXURqDLZAuXZvoPgVDjw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:eb:7f:44:89:a2:7f:f0:32:9b:6c:d9:2f:de:80:5a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9ce4e65aecc95d446a0cb640b9766fa0f8150e3c
Validity
Not Before: Oct 19 10:02:18 2025 GMT
Not After : Oct 20 10:02:18 2025 GMT
Subject: CN=9d08051f2b5328eda42285eb1160adad57f10d96
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:5b:bb:a0:db:e7:2e:99:8a:9c:ec:82:e6:29:
e3:50:b5:66:10:7f:80:08:1f:cb:b2:4b:e6:e7:11:
ea:fc:63:58:e8:66:ae:8c:68:20:e4:39:78:43:7f:
56:1b:ec:36:c0:2f:6a:a3:41:1d:32:5c:b5:45:67:
2e:9e:ec:b2:85:9b:53:1d:4a:8a:2f:d1:0f:e3:50:
1b:5d:df:b5:33:b5:43:ac:04:69:63:ba:97:8d:7a:
ab:a6:d5:61:89:f6:e2:68:90:bb:31:b5:18:bb:70:
f4:6b:f3:be:ac:f5:e9:6b:17:0e:46:1a:c9:72:66:
fa:e7:d5:81:0c:b3:3d:c1:f6:eb:a0:79:98:f0:18:
e4:97:b7:17:48:f3:ff:bd:66:d1:01:74:96:23:28:
88:ba:97:f1:5e:c5:fb:01:27:e0:01:3f:4d:cc:7b:
06:c5:31:70:4b:f6:04:57:03:fa:db:a2:37:9f:70:
b6:7e:0d:08:8b:13:df:f7:58:bc:22:5d:e4:d4:b5:
13:2b:dc:dd:f3:54:7b:4b:d0:3c:fa:90:c7:a3:99:
b3:1d:bc:0d:cb:2d:90:28:d5:dd:ce:13:05:9d:96:
74:34:4a:de:bb:e5:72:ee:cf:29:82:68:4c:6a:c9:
bf:58:db:ab:ea:15:17:45:49:ad:1d:05:fd:10:e7:
aa:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:08:05:1F:2B:53:28:ED:A4:22:85:EB:11:60:AD:AD:57:F1:0D:96
X509v3 Authority Key Identifier:
keyid:9C:E4:E6:5A:EC:C9:5D:44:6A:0C:B6:40:B9:76:6F:A0:F8:15:0E:3C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nOTmWuzJXURqDLZAuXZvoPgVDjw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/ed4e2c-e5ad-417a-8788-11824406bd5d/1/nOTmWuzJXURqDLZAuXZvoPgVDjw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/ed4e2c-e5ad-417a-8788-11824406bd5d/1/nOTmWuzJXURqDLZAuXZvoPgVDjw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a1:fb:e4:55:ab:4c:18:a1:33:6e:97:1b:8f:83:ee:88:55:7f:
fd:0c:c7:1a:c3:20:43:87:4d:47:69:f7:b2:e3:b9:12:52:ca:
20:82:b2:f3:e1:7e:07:e4:c2:a9:4d:d4:6b:57:dd:c5:bf:e4:
6b:dc:cf:7f:e2:ad:cf:12:84:a4:10:f4:42:4d:95:8c:86:b5:
18:25:a7:f8:1e:16:1f:75:56:f1:c3:f4:fc:d4:10:df:1d:d5:
e8:88:95:00:c0:51:0e:7c:24:0b:07:b2:5b:e8:c1:b8:2a:03:
e4:85:87:6f:ec:84:50:12:f6:a0:62:5b:ca:87:69:71:4a:6e:
20:b4:2a:4a:d3:44:eb:f8:40:e3:c8:29:c0:e7:80:8a:a5:31:
d6:f6:43:61:d1:1b:04:d4:15:57:81:14:3e:03:a5:b9:98:8c:
1a:ff:29:a1:13:5d:62:6a:24:ad:42:7f:fa:62:e7:80:78:58:
bd:ca:89:8a:ea:7d:62:00:a5:2d:e1:4c:e1:20:8f:10:9e:4a:
3a:11:36:f1:26:3e:f0:f1:6d:fa:cf:44:68:c5:ab:52:fa:78:
85:e1:96:bc:c8:74:f7:60:82:12:7f:b0:76:ca:4a:0d:55:2e:
60:7b:b4:e3:a2:95:a5:14:8f:18:9e:e9:fa:1a:16:46:1e:71:
1d:ed:67:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 13:13:23 2025 by rpki-client