Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1a/93686d-11f5-4e3e-b5c4-43843c2e943b/1/nSEPIlkJOq9FKFkipYjppmGrqfo.mft
File: nSEPIlkJOq9FKFkipYjppmGrqfo.mft (raw, json)
Hash identifier: eZdWHhOIaqyx6ktMWBmpHnsuqb64EUKxNp1AjvjKPxA=
Subject key identifier: DD:CA:11:90:2E:E7:8C:C0:40:5F:85:FF:2F:55:42:84:56:38:B7:28
Authority key identifier: 9D:21:0F:22:59:09:3A:AF:45:28:59:22:A5:88:E9:A6:61:AB:A9:FA
Certificate issuer: /CN=9d210f2259093aaf45285922a588e9a661aba9fa
Certificate serial: 0199FCC6AFB8429FE064BC0A19C7E2922B66
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nSEPIlkJOq9FKFkipYjppmGrqfo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1a/93686d-11f5-4e3e-b5c4-43843c2e943b/1/nSEPIlkJOq9FKFkipYjppmGrqfo.mft
Manifest number: 16E5
Signing time: Sun 19 Oct 2025 14:01:43 +0000
Manifest this update: Sun 19 Oct 2025 14:01:43 +0000
Manifest next update: Mon 20 Oct 2025 14:01:43 +0000
Files and hashes: 1: 1W9zXul869RZscsvs7l5z3KjagI.roa (hash: EcxA9lzR2QkCH8ycmVrRxS2eQO5K8wXyLJAAeSf93c8=)
2: 3NRb9X1EKhOfFj7W1iZuXgUl__c.roa (hash: uat5CyrD021kDb22T/rEGSo6dcpWqYuVdcsqucMCWpU=)
3: AWMfWviNywiou7vcfcntqdl-hKo.roa (hash: a1Kd8HUSNMKFctyJDa6Wjjq1nah5PsW35BpRbQ1fKHY=)
4: D3EjnAQUfp_ywCnYpZvDSwPB4oc.roa (hash: FQWh81XYEPS1XmDh6Irb063J9GhFKg9biAGn32Ht5ds=)
5: LEzl9Qk7MYNbOqPpMlU1Ohh8PNA.roa (hash: UHP2n+X3SSu6vIRko8Q/5h8jCVqX5aAXirgs1zpJmP8=)
6: iT5JpsMQzoMkf4XPO_VvntnOa0w.roa (hash: VTobQYz4A3NOi/P7D09YiSGAxG3/JaBEWHaxO+F1IFg=)
7: nSEPIlkJOq9FKFkipYjppmGrqfo.crl (hash: YO+lq0n9cIwABp2yvtrRljylRpCoWOxYxShhCqZNR/s=)
8: wNwYQ8mCvTdznk-R9cIS2uXjf8g.roa (hash: K+cjCT9KGnhV7mdPVbb2wa5gxtLw72aubK2ACr6NLQ8=)
9: ykvaDunnWrInYG8JYdl8FUnhb8E.roa (hash: Ow01zePEbOrkUb4yW1o1FSsU+vG0+EPGDtmmuCC0/g0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1a/93686d-11f5-4e3e-b5c4-43843c2e943b/1/nSEPIlkJOq9FKFkipYjppmGrqfo.crl
rsync://rpki.ripe.net/repository/DEFAULT/1a/93686d-11f5-4e3e-b5c4-43843c2e943b/1/nSEPIlkJOq9FKFkipYjppmGrqfo.mft
rsync://rpki.ripe.net/repository/DEFAULT/nSEPIlkJOq9FKFkipYjppmGrqfo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:c6:af:b8:42:9f:e0:64:bc:0a:19:c7:e2:92:2b:66
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9d210f2259093aaf45285922a588e9a661aba9fa
Validity
Not Before: Oct 19 14:01:43 2025 GMT
Not After : Oct 20 14:01:43 2025 GMT
Subject: CN=ddca11902ee78cc0405f85ff2f5542845638b728
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:95:78:d5:35:eb:fe:26:45:92:74:ed:4f:1f:
34:d2:13:40:00:71:75:76:c0:96:10:15:0f:cf:86:
01:c0:f9:28:c1:87:62:dc:b2:a2:d3:4f:96:9a:20:
1a:f3:2f:2f:56:d0:97:ec:73:12:fb:57:bf:d4:c6:
41:3d:59:f6:27:7e:7d:79:a8:99:dc:90:21:80:8b:
45:30:a3:31:5a:b4:11:1f:90:93:09:db:79:c8:c1:
03:03:df:93:57:e9:3d:c8:bf:9f:f5:4d:ec:62:7a:
b5:73:6c:68:36:63:5b:dc:f7:83:d1:7e:44:30:bb:
20:a3:c3:3d:58:07:8d:d3:0a:6c:a4:17:32:87:51:
f0:83:1d:d5:d1:ef:ad:86:26:a9:83:7d:61:f8:f9:
2c:06:63:e6:42:41:ca:4e:63:96:ae:bb:e4:a6:a9:
30:94:e0:59:4d:22:90:98:6a:40:55:7e:3f:54:8f:
4c:c0:18:56:f3:b6:a4:d5:1c:fe:10:ee:21:46:9b:
24:11:9f:e2:d3:87:65:08:5a:0d:35:36:e5:c4:eb:
51:9d:25:61:b2:79:df:bc:c9:3b:d1:e9:a3:42:de:
89:36:4b:76:95:46:73:10:d4:e4:f2:4a:6c:bc:b4:
6c:be:4d:c5:30:33:d5:36:99:7b:98:16:cb:a3:91:
df:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:CA:11:90:2E:E7:8C:C0:40:5F:85:FF:2F:55:42:84:56:38:B7:28
X509v3 Authority Key Identifier:
keyid:9D:21:0F:22:59:09:3A:AF:45:28:59:22:A5:88:E9:A6:61:AB:A9:FA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nSEPIlkJOq9FKFkipYjppmGrqfo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/93686d-11f5-4e3e-b5c4-43843c2e943b/1/nSEPIlkJOq9FKFkipYjppmGrqfo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/93686d-11f5-4e3e-b5c4-43843c2e943b/1/nSEPIlkJOq9FKFkipYjppmGrqfo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
60:94:33:8c:b8:b0:4e:a2:2c:3d:23:f8:c8:a9:4d:a6:01:87:
4c:96:4d:fd:32:7d:1e:11:f6:a3:c2:37:23:e5:c6:f3:0f:a7:
93:f4:f0:1c:d7:25:b9:73:9d:5a:7b:29:e1:80:a9:86:e3:ec:
3b:eb:53:be:2e:27:eb:23:ac:04:51:8d:44:ce:57:86:4e:b5:
66:77:cb:c6:c6:ac:d1:80:63:4c:c4:50:ee:00:b6:d5:07:dd:
09:74:5b:a4:ec:70:78:48:54:63:46:d7:ba:55:b0:d1:21:39:
55:24:d9:b9:71:22:d6:57:2f:4f:e5:24:8b:10:68:fe:ae:1e:
3e:06:1d:2b:73:ab:7d:e1:4f:cd:5d:9d:3e:f5:b4:24:5f:22:
e7:6a:92:48:d8:a2:1a:8e:34:51:ea:32:93:bc:fb:8f:bd:6e:
30:d3:cb:eb:dd:e4:5e:f4:0b:76:de:6f:6d:36:83:56:45:c3:
96:b7:71:a1:a7:8e:26:7c:54:43:f6:6d:24:90:f4:7c:0a:37:
48:c7:72:23:8e:16:ff:04:d6:34:48:8c:16:87:e6:44:7d:d2:
b8:9d:b7:8c:26:7e:67:9e:ee:d2:c7:16:73:db:5b:e6:7b:90:
40:99:33:aa:8e:be:30:6a:fa:01:bd:2c:8c:6a:1f:74:c4:dc:
5c:ea:d3:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 17:54:34 2025 by rpki-client