Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/5dd7b1-e337-404d-b764-ddb0b148e46b/1/nLls5ZxZVXUw8OqkTGZFA9nEAe0.mft
File: nLls5ZxZVXUw8OqkTGZFA9nEAe0.mft (raw, json)
Hash identifier: cNUDYgc0r8QOLGFA5BN/UcG/3Xnmg+PEo4tmU6wSOoA=
Subject key identifier: D7:7D:0E:0F:A5:33:60:AE:DE:13:15:32:AE:FF:E0:6B:57:5D:84:A7
Authority key identifier: 9C:B9:6C:E5:9C:59:55:75:30:F0:EA:A4:4C:66:45:03:D9:C4:01:ED
Certificate issuer: /CN=9cb96ce59c59557530f0eaa44c664503d9c401ed
Certificate serial: 0199FC2152957D3CC4579C54C5673FC76CF7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nLls5ZxZVXUw8OqkTGZFA9nEAe0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/19/5dd7b1-e337-404d-b764-ddb0b148e46b/1/nLls5ZxZVXUw8OqkTGZFA9nEAe0.mft
Manifest number: 09B0
Signing time: Sun 19 Oct 2025 11:01:06 +0000
Manifest this update: Sun 19 Oct 2025 11:01:06 +0000
Manifest next update: Mon 20 Oct 2025 11:01:06 +0000
Files and hashes: 1: 19v0BW9D62wRoBFE5ozFJdwOMQA.roa (hash: YMLiN+GeZBDn6zKwSH23wr8pzSjB9vWlcqgXSCgH65E=)
2: 9JwtlsVNx4_up1QMmZlfBeyOaK4.roa (hash: u78W1NzQkBkN4wGgOZ6ykgdqITqsuyTPVjwEYRW9o4E=)
3: HvZFP08B7xYA2IQmujw7UzbkG0Q.roa (hash: 7DGwHO9AiazjzBsJl92PU2yw56tPjljLpvn/rYKQLdM=)
4: nLls5ZxZVXUw8OqkTGZFA9nEAe0.crl (hash: B82QG8SBjHALpZ/GsLqDegZQmQBa4jHY/yl1zm1Djyw=)
5: oR-FUhbEvQx9rEQNZ_WugrEWdnk.roa (hash: BD8t2aBzJsutTWI6CA4SIZqGlJUGz2L2fZecOB/8228=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/19/5dd7b1-e337-404d-b764-ddb0b148e46b/1/nLls5ZxZVXUw8OqkTGZFA9nEAe0.crl
rsync://rpki.ripe.net/repository/DEFAULT/19/5dd7b1-e337-404d-b764-ddb0b148e46b/1/nLls5ZxZVXUw8OqkTGZFA9nEAe0.mft
rsync://rpki.ripe.net/repository/DEFAULT/nLls5ZxZVXUw8OqkTGZFA9nEAe0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:01:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:21:52:95:7d:3c:c4:57:9c:54:c5:67:3f:c7:6c:f7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9cb96ce59c59557530f0eaa44c664503d9c401ed
Validity
Not Before: Oct 19 11:01:06 2025 GMT
Not After : Oct 20 11:01:06 2025 GMT
Subject: CN=d77d0e0fa53360aede131532aeffe06b575d84a7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:d2:3b:9b:92:92:91:57:4a:1d:52:c0:87:c7:
74:b8:cd:77:27:31:b0:e3:b6:2a:47:8a:a0:c7:5d:
88:d0:58:52:ac:e8:d6:10:5f:0f:35:ea:16:ac:8a:
7e:bb:ab:df:53:b0:b4:34:68:f0:ca:ff:08:7a:99:
fa:aa:59:a6:a3:14:ca:0a:ef:74:98:25:46:74:48:
eb:0c:df:43:77:4b:92:7c:fa:3c:dc:a9:8b:5c:1b:
93:24:a2:2b:b2:c4:48:e1:47:7d:53:c4:c3:40:95:
25:4a:8a:9e:e3:f6:09:8e:7e:df:a8:18:e1:12:c0:
58:07:b9:eb:90:03:e5:84:45:8f:ba:26:09:c2:67:
9a:88:7d:81:88:a0:75:da:fe:7d:b9:b0:8d:49:80:
72:21:ad:e8:37:8d:94:3a:1b:5d:04:40:fe:58:d1:
c0:c1:0b:52:21:b8:3b:37:20:9d:7c:40:fd:d1:22:
d0:a8:ef:d6:7d:e7:96:47:21:bc:48:31:45:8c:52:
76:37:df:bc:7f:0a:ce:6c:2b:dc:90:04:2a:6a:61:
26:58:c3:1a:17:aa:5c:a4:8b:5a:86:bb:e2:82:db:
9f:17:71:49:64:c4:44:14:32:51:9b:5c:81:9c:22:
c2:12:29:09:16:e1:a3:d6:06:0c:95:22:bf:f3:ad:
56:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:7D:0E:0F:A5:33:60:AE:DE:13:15:32:AE:FF:E0:6B:57:5D:84:A7
X509v3 Authority Key Identifier:
keyid:9C:B9:6C:E5:9C:59:55:75:30:F0:EA:A4:4C:66:45:03:D9:C4:01:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nLls5ZxZVXUw8OqkTGZFA9nEAe0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/5dd7b1-e337-404d-b764-ddb0b148e46b/1/nLls5ZxZVXUw8OqkTGZFA9nEAe0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/19/5dd7b1-e337-404d-b764-ddb0b148e46b/1/nLls5ZxZVXUw8OqkTGZFA9nEAe0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
95:f5:d0:f1:61:5f:a1:33:cc:f8:73:cb:94:84:34:4e:de:cb:
ff:4c:59:89:4d:eb:4d:ed:fa:37:74:24:37:9d:f6:49:0d:69:
64:4a:c2:0b:5e:9f:1c:c7:0a:5e:c0:6b:fd:e5:2c:e5:47:1a:
46:8f:ad:0f:a3:a0:94:01:57:4d:e1:e8:d4:4c:5c:5c:dc:57:
6b:58:49:91:74:a0:da:aa:c3:09:d2:a6:a2:1b:8b:8b:09:bb:
17:ee:cb:1e:11:1f:4f:74:3e:de:56:ea:a4:69:c4:b9:03:4a:
13:b7:16:7d:a2:86:05:56:b7:0c:76:25:8d:ab:8b:1a:3f:ff:
1b:35:21:62:96:eb:2d:e0:45:a5:33:9f:68:60:8b:fb:ff:f5:
6d:3d:e1:db:c6:82:b3:af:d4:1e:ad:64:69:2c:55:f6:06:ed:
e1:ca:21:6f:7b:ad:59:a9:6d:12:c3:d8:40:50:2a:19:9d:54:
58:9b:82:63:a7:17:a6:66:ec:48:7d:12:88:24:6d:13:75:e3:
3a:87:d1:f9:8f:f3:5d:d0:54:88:70:63:fa:e1:79:c9:c2:44:
c9:37:83:60:30:0a:a8:18:3c:4c:78:73:80:d2:b6:24:17:5a:
ac:b1:b2:96:c8:17:ed:62:a0:be:03:9a:62:38:5b:f1:90:56:
e6:92:be:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 18:01:35 2025 by rpki-client