Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/2688b6-da70-4abd-8f59-1a831b599c18/1/nhUzxHAsLMtang6HqyetVrFfLHY.mft
File: nhUzxHAsLMtang6HqyetVrFfLHY.mft (raw, json)
Hash identifier: PvyAZ7QAPrxtzVmMxKlLO7uHdRmpUdS8z25ZJgdVGI0=
Subject key identifier: F5:2F:82:FC:97:F6:D2:EE:6A:8B:73:D3:5D:29:F6:4A:FB:32:10:C3
Authority key identifier: 9E:15:33:C4:70:2C:2C:CB:5A:9E:0E:87:AB:27:AD:56:B1:5F:2C:76
Certificate issuer: /CN=9e1533c4702c2ccb5a9e0e87ab27ad56b15f2c76
Certificate serial: 0199FC214578E5CDD00DE3ECDEBEFEFF681D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nhUzxHAsLMtang6HqyetVrFfLHY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/2688b6-da70-4abd-8f59-1a831b599c18/1/nhUzxHAsLMtang6HqyetVrFfLHY.mft
Manifest number: 0DB6
Signing time: Sun 19 Oct 2025 11:01:02 +0000
Manifest this update: Sun 19 Oct 2025 11:01:02 +0000
Manifest next update: Mon 20 Oct 2025 11:01:02 +0000
Files and hashes: 1: RYaLU7P7StEvfIaG8O_HUuwrXWg.roa (hash: YEpuYm5zeKipnH1+lgwVkLpZPGAKbbKNqPvP2OUt0Mc=)
2: g1QBI0oBpZMDfLnVbzlJh58dtno.roa (hash: DThH0UYff9JRlzHoLRkutIVBWjbtodZbQuiDh8h2xSo=)
3: nhUzxHAsLMtang6HqyetVrFfLHY.crl (hash: oqAleYXG37K4GRJo+jgwB/3DQXaX7lVuULvZOzfBRPY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/09/2688b6-da70-4abd-8f59-1a831b599c18/1/nhUzxHAsLMtang6HqyetVrFfLHY.crl
rsync://rpki.ripe.net/repository/DEFAULT/09/2688b6-da70-4abd-8f59-1a831b599c18/1/nhUzxHAsLMtang6HqyetVrFfLHY.mft
rsync://rpki.ripe.net/repository/DEFAULT/nhUzxHAsLMtang6HqyetVrFfLHY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:01:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:21:45:78:e5:cd:d0:0d:e3:ec:de:be:fe:ff:68:1d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9e1533c4702c2ccb5a9e0e87ab27ad56b15f2c76
Validity
Not Before: Oct 19 11:01:02 2025 GMT
Not After : Oct 20 11:01:02 2025 GMT
Subject: CN=f52f82fc97f6d2ee6a8b73d35d29f64afb3210c3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:02:44:04:77:b3:7f:a7:74:c3:5c:23:50:7e:
d1:62:04:0f:8a:e9:81:1b:40:0d:3c:a0:b0:9e:c5:
84:6c:33:41:3f:0a:de:d3:56:76:08:2a:b9:cc:a3:
8f:77:30:63:f6:6f:7d:39:15:4f:a2:21:cc:17:ee:
00:f4:b5:31:ce:a0:b4:a2:9e:9a:8f:0e:fb:bd:6e:
4a:f0:82:e6:5f:cd:24:3c:8e:5c:a2:5c:65:52:93:
3f:eb:a2:f8:32:9c:56:cb:1d:10:1d:ef:a4:e7:04:
de:b6:c3:99:30:0e:ab:da:8e:fa:0c:ba:66:22:93:
22:b5:da:e8:01:48:e0:b4:f4:e9:ad:ee:b4:e0:e9:
e1:18:a0:cb:c9:1a:48:48:56:f8:a5:69:1a:ef:74:
49:59:e7:9f:5e:bf:fb:d1:15:ae:c5:2d:1b:2e:98:
62:9a:16:95:3d:19:8e:16:4b:44:02:4b:fe:be:68:
93:95:93:fb:aa:f0:7f:25:f4:42:82:dc:54:ca:bf:
49:0f:5c:e0:c2:2b:23:47:33:a3:37:b2:75:11:ac:
aa:ce:71:f5:dd:2c:0b:c5:a9:cf:c6:ad:20:59:8b:
52:b1:a9:42:58:43:62:24:0c:f5:ee:ee:2c:c2:cb:
47:35:d0:e1:27:37:db:57:54:0e:c1:0d:db:76:a1:
0e:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:2F:82:FC:97:F6:D2:EE:6A:8B:73:D3:5D:29:F6:4A:FB:32:10:C3
X509v3 Authority Key Identifier:
keyid:9E:15:33:C4:70:2C:2C:CB:5A:9E:0E:87:AB:27:AD:56:B1:5F:2C:76
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nhUzxHAsLMtang6HqyetVrFfLHY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/2688b6-da70-4abd-8f59-1a831b599c18/1/nhUzxHAsLMtang6HqyetVrFfLHY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/09/2688b6-da70-4abd-8f59-1a831b599c18/1/nhUzxHAsLMtang6HqyetVrFfLHY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5e:6a:cc:3b:10:b9:a6:9d:03:b6:0f:e9:5d:e8:76:0e:92:8e:
78:25:9f:ed:46:2f:60:0a:62:7a:18:15:45:78:aa:76:98:b1:
3c:2e:b6:15:3d:ac:76:5f:9b:46:b6:5a:36:9a:27:9d:3c:cd:
7a:84:26:cd:66:19:a5:ad:53:26:e3:e5:6d:6f:02:94:ed:15:
22:8a:98:0e:12:58:0f:bb:cb:67:02:57:82:4c:42:e3:1a:ca:
c9:ec:f3:c6:09:dc:5f:4a:68:ff:84:93:25:73:de:83:b2:0d:
fd:4a:b3:37:b6:ba:46:48:2d:31:6c:c3:0c:f9:91:eb:8a:fe:
24:e1:ce:db:ad:98:f8:ae:28:a9:80:2d:86:6c:8b:d5:ba:52:
25:d2:0d:08:22:fc:73:bc:ff:43:19:ae:e6:be:95:fc:7f:1c:
89:b5:e6:14:42:c9:6f:ff:a2:2f:6f:70:ea:7b:28:aa:ff:3b:
dd:d6:36:26:21:07:24:7b:16:fe:46:e7:8b:78:cb:e1:8e:05:
46:19:92:0a:a1:f9:3d:28:d2:17:da:c3:12:a9:72:8e:c1:83:
e1:28:b7:f9:d6:fd:3e:d5:18:87:43:46:1e:7f:67:e8:66:3b:
d5:77:7a:8e:60:e1:61:e0:6e:06:02:bd:f7:dc:14:3a:ae:31:
96:26:7a:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 17:54:15 2025 by rpki-client