Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/60e51f-b803-474d-b27a-f2990ceb94ec/1/nfGF6Z_-YRUnoOlDMRUf_i7nKuk.mft
File: nfGF6Z_-YRUnoOlDMRUf_i7nKuk.mft (raw, json)
Hash identifier: 8IIKbr7hVuEsZgkTIi9ouLIcwbx8W/VnzuGPgyty7Dk=
Subject key identifier: B2:1C:45:6A:98:F2:1E:4D:70:BE:96:C2:4A:E6:EC:9F:51:C8:A6:B0
Authority key identifier: 9D:F1:85:E9:9F:FE:61:15:27:A0:E9:43:31:15:1F:FE:2E:E7:2A:E9
Certificate issuer: /CN=9df185e99ffe611527a0e94331151ffe2ee72ae9
Certificate serial: 0199FFC8345D3DC2757C2837EC2C5239D0CA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nfGF6Z_-YRUnoOlDMRUf_i7nKuk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/60e51f-b803-474d-b27a-f2990ceb94ec/1/nfGF6Z_-YRUnoOlDMRUf_i7nKuk.mft
Manifest number: 0964
Signing time: Mon 20 Oct 2025 04:02:14 +0000
Manifest this update: Mon 20 Oct 2025 04:02:14 +0000
Manifest next update: Tue 21 Oct 2025 04:02:14 +0000
Files and hashes: 1: 91cINY9woI_zH6e1r3Wkrenr7Yg.roa (hash: 3OQuboWAG+RQMvSWcHif8T7bhj5yD9lJGrTB5RXF988=)
2: nfGF6Z_-YRUnoOlDMRUf_i7nKuk.crl (hash: tuutCv5dxrLojctwuQnfwlyiTR0zy/OoACkCOugiwWc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/17/60e51f-b803-474d-b27a-f2990ceb94ec/1/nfGF6Z_-YRUnoOlDMRUf_i7nKuk.crl
rsync://rpki.ripe.net/repository/DEFAULT/17/60e51f-b803-474d-b27a-f2990ceb94ec/1/nfGF6Z_-YRUnoOlDMRUf_i7nKuk.mft
rsync://rpki.ripe.net/repository/DEFAULT/nfGF6Z_-YRUnoOlDMRUf_i7nKuk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 04:02:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:ff:c8:34:5d:3d:c2:75:7c:28:37:ec:2c:52:39:d0:ca
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9df185e99ffe611527a0e94331151ffe2ee72ae9
Validity
Not Before: Oct 20 04:02:14 2025 GMT
Not After : Oct 21 04:02:14 2025 GMT
Subject: CN=b21c456a98f21e4d70be96c24ae6ec9f51c8a6b0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ed:ac:00:36:1f:84:4d:6a:10:42:53:d0:2f:36:
49:30:45:e0:5d:d7:71:88:24:84:14:2f:0d:de:ac:
71:f9:63:ff:a5:d5:13:83:56:a4:65:b4:2d:8d:fb:
94:e6:8c:89:30:9d:92:3e:4b:46:1e:ab:d6:16:25:
f7:dc:e0:63:eb:ce:51:aa:7d:c2:3f:27:c5:ff:ee:
85:7e:90:72:7e:c8:3d:47:88:1f:8a:8e:b5:73:bf:
78:00:1f:fd:62:f3:c1:d3:17:ab:46:22:85:a8:16:
27:a6:29:73:31:20:a9:8c:98:fd:39:d2:d2:a7:37:
ca:70:f5:b5:5d:59:12:72:13:08:60:a0:7c:50:36:
91:6b:e9:80:84:e2:0a:4d:21:7a:70:80:da:a1:40:
1c:d9:0f:dc:9f:7e:20:ba:47:3e:53:bf:7a:99:06:
49:69:d4:93:43:3f:51:08:b1:7e:a4:d9:7f:a1:62:
e1:29:36:54:83:de:d5:66:b0:3a:17:85:18:a0:cb:
1d:86:24:1d:ef:19:b0:73:cb:65:f8:aa:0b:25:ab:
ac:26:93:26:50:d3:6c:e9:95:60:4e:72:d2:dc:fd:
28:90:f0:c9:96:52:a7:14:a0:cc:53:04:37:4f:5f:
5f:ee:9d:71:70:3e:76:73:dc:0a:5f:b3:22:e6:a1:
52:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:1C:45:6A:98:F2:1E:4D:70:BE:96:C2:4A:E6:EC:9F:51:C8:A6:B0
X509v3 Authority Key Identifier:
keyid:9D:F1:85:E9:9F:FE:61:15:27:A0:E9:43:31:15:1F:FE:2E:E7:2A:E9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nfGF6Z_-YRUnoOlDMRUf_i7nKuk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/60e51f-b803-474d-b27a-f2990ceb94ec/1/nfGF6Z_-YRUnoOlDMRUf_i7nKuk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/17/60e51f-b803-474d-b27a-f2990ceb94ec/1/nfGF6Z_-YRUnoOlDMRUf_i7nKuk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3c:05:db:1d:d7:9a:8f:e7:a5:92:4b:70:61:a7:aa:de:f9:ab:
10:bb:3b:f3:a0:6f:ca:1c:ff:d8:e9:bf:33:78:91:05:db:2d:
6f:e8:0f:c1:92:4b:3b:51:48:35:37:f2:2e:5d:a8:de:98:e7:
df:b9:fd:89:f6:ea:ad:e3:94:1c:67:39:dd:39:0d:94:74:6f:
fb:53:4a:84:3a:58:f2:c0:f5:5d:61:84:af:39:09:ef:27:87:
11:f2:df:93:0d:70:48:5f:ac:8e:87:d1:25:dc:e1:0b:d1:45:
d7:4e:29:38:ef:fc:bd:e6:49:0a:fb:6d:ef:47:8d:6e:f7:32:
ac:38:b5:08:50:63:e8:1d:ae:24:e8:6e:ec:b6:13:ff:d0:f1:
b6:10:cd:d9:7e:0e:1e:ce:70:3d:d6:14:33:87:74:86:dc:1b:
36:1b:65:ee:90:16:b7:bb:11:b9:58:9f:c4:82:a3:29:c2:1a:
2d:34:21:06:51:18:3f:eb:fb:54:d6:77:56:b1:71:c5:e2:78:
a7:ac:49:35:ce:20:fa:85:a4:7f:a9:6d:40:26:4d:9e:a5:b4:
5e:b2:ba:4c:15:25:a6:d4:3d:c7:21:33:89:6c:e8:34:82:f2:
7c:b2:10:75:bc:72:92:78:d1:6d:d4:e5:7a:2e:3a:7f:f6:de:
de:9e:97:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 13:12:11 2025 by rpki-client