Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/12/bd9e02-c424-4e14-aab7-39461aaa5be7/1/nUMDoKmZ2BGLvH6WrTjvuxRJbqI.mft
File: nUMDoKmZ2BGLvH6WrTjvuxRJbqI.mft (raw, json)
Hash identifier: Skqmzo2OKtExRMP27FVDa5pMnSFVyVvh7K8O6jXS4Oc=
Subject key identifier: 05:42:66:F4:2F:6D:07:55:49:4A:2C:7C:E1:A6:D2:01:D4:BC:8F:76
Authority key identifier: 9D:43:03:A0:A9:99:D8:11:8B:BC:7E:96:AD:38:EF:BB:14:49:6E:A2
Certificate issuer: /CN=9d4303a0a999d8118bbc7e96ad38efbb14496ea2
Certificate serial: 0199FE468B68EFBC236935A0B6A3123ADED0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nUMDoKmZ2BGLvH6WrTjvuxRJbqI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/12/bd9e02-c424-4e14-aab7-39461aaa5be7/1/nUMDoKmZ2BGLvH6WrTjvuxRJbqI.mft
Manifest number: 0877
Signing time: Sun 19 Oct 2025 21:00:59 +0000
Manifest this update: Sun 19 Oct 2025 21:00:59 +0000
Manifest next update: Mon 20 Oct 2025 21:00:59 +0000
Files and hashes: 1: bre9O2wrDggeCO-gClQtVcXHgMs.roa (hash: TZRQyZuvSyRj0lGzf2b/FG9R/6ZAoSht1L/fXzqCZUg=)
2: nUMDoKmZ2BGLvH6WrTjvuxRJbqI.crl (hash: ueUzz5lmhn2ZB1ddPW5taMxRz66QGAyciBNqPNQCLfw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/12/bd9e02-c424-4e14-aab7-39461aaa5be7/1/nUMDoKmZ2BGLvH6WrTjvuxRJbqI.crl
rsync://rpki.ripe.net/repository/DEFAULT/12/bd9e02-c424-4e14-aab7-39461aaa5be7/1/nUMDoKmZ2BGLvH6WrTjvuxRJbqI.mft
rsync://rpki.ripe.net/repository/DEFAULT/nUMDoKmZ2BGLvH6WrTjvuxRJbqI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 15:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fe:46:8b:68:ef:bc:23:69:35:a0:b6:a3:12:3a:de:d0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9d4303a0a999d8118bbc7e96ad38efbb14496ea2
Validity
Not Before: Oct 19 21:00:59 2025 GMT
Not After : Oct 20 21:00:59 2025 GMT
Subject: CN=054266f42f6d0755494a2c7ce1a6d201d4bc8f76
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:72:a8:a8:4d:9f:ef:6f:64:c7:ce:7d:44:6f:
82:af:e6:0d:4c:65:83:2c:42:de:b2:59:73:cb:2d:
73:92:03:2b:e3:ef:ad:52:e0:4d:ad:52:7f:90:e7:
ad:8f:c8:17:b4:e8:90:ef:3a:bf:c8:f9:2f:e1:16:
97:f6:91:a0:cf:cf:e1:55:bf:fa:9f:15:98:0e:01:
4a:f6:5d:d0:30:31:69:09:3c:25:df:d1:09:81:0f:
73:51:83:60:8d:f5:f4:c9:bc:91:4f:2f:d2:72:0b:
02:98:7d:51:9e:3e:0c:d1:4e:78:6b:8b:b5:1d:de:
83:72:f1:65:be:ca:cb:b5:39:33:05:76:b6:ab:0e:
2a:dd:6f:7c:2f:c8:63:43:a0:ab:80:af:ed:24:b1:
3e:02:6f:19:85:5e:2c:6c:87:34:d8:31:7f:1d:af:
fd:7f:50:80:5c:e3:76:1b:c8:86:11:12:25:f9:61:
2f:b6:fd:91:23:90:be:92:69:7e:c6:0b:9f:d1:2f:
c9:f1:ba:ad:b6:f3:0e:96:0f:b1:a8:1c:f3:bc:97:
c1:b4:3e:88:14:75:66:12:57:41:ae:57:96:58:e3:
71:36:08:d1:4c:69:87:68:59:4a:37:7b:0e:99:0b:
8d:6d:b1:ae:6c:ad:db:f8:a9:68:c7:a4:85:cd:d2:
dd:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:42:66:F4:2F:6D:07:55:49:4A:2C:7C:E1:A6:D2:01:D4:BC:8F:76
X509v3 Authority Key Identifier:
keyid:9D:43:03:A0:A9:99:D8:11:8B:BC:7E:96:AD:38:EF:BB:14:49:6E:A2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nUMDoKmZ2BGLvH6WrTjvuxRJbqI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/bd9e02-c424-4e14-aab7-39461aaa5be7/1/nUMDoKmZ2BGLvH6WrTjvuxRJbqI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/12/bd9e02-c424-4e14-aab7-39461aaa5be7/1/nUMDoKmZ2BGLvH6WrTjvuxRJbqI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5b:b1:0e:0c:7f:cc:30:a0:b8:52:ed:0f:2e:47:37:10:83:d6:
a2:d6:bc:f5:97:99:bb:c5:11:c3:7f:4c:36:61:7c:23:9b:39:
a9:24:cd:88:41:89:89:15:cb:f5:71:58:14:33:6c:0b:14:9e:
ed:14:55:5b:3a:7c:b2:28:07:dd:e2:03:00:9b:8d:09:00:8c:
84:91:88:60:5a:6d:ea:16:9a:48:dc:ae:07:6a:d1:a5:07:75:
0b:b6:27:25:d4:bb:f3:6b:14:e2:b7:15:a1:7a:87:0d:09:3d:
30:42:98:8e:9c:4b:a9:58:fe:d1:f9:96:25:c1:6a:51:52:bc:
01:3f:59:28:9c:3f:fc:fe:1c:22:33:6d:eb:e6:dc:6f:5b:1a:
22:90:31:9a:7c:8c:cf:d9:06:f9:4d:86:06:f2:c6:40:fc:cb:
86:35:b0:46:31:1d:41:6b:bb:49:f7:a7:53:bf:0d:c1:92:60:
86:84:ba:6f:7d:ad:0d:d3:70:fa:fd:de:50:36:25:4f:c1:af:
25:3e:fb:05:38:76:e3:72:fe:02:88:d5:2e:d7:a9:96:8e:b4:
a0:b5:d9:0e:2e:e7:3a:22:f6:13:75:08:4d:1f:a7:c7:31:0b:
bf:43:56:47:80:d1:48:7c:3d:09:57:45:99:c8:ca:0a:ac:27:
33:36:6a:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 23:00:20 2025 by rpki-client