Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1a/ffdb69-680a-465c-a489-66c1442480de/1/nj4AxtKy-Y1RSC6UO5eT1DvzvIY.mft
File: nj4AxtKy-Y1RSC6UO5eT1DvzvIY.mft (raw, json)
Hash identifier: 1kYSxTOnzMuucQGpgBZXpe13cuvOm+Oon84S7lUBzYo=
Subject key identifier: 8F:7F:0B:B3:EF:16:B3:0D:AC:1A:6C:CF:9F:EC:B8:05:DB:93:26:14
Authority key identifier: 9E:3E:00:C6:D2:B2:F9:8D:51:48:2E:94:3B:97:93:D4:3B:F3:BC:86
Certificate issuer: /CN=9e3e00c6d2b2f98d51482e943b9793d43bf3bc86
Certificate serial: 0199FB7C8D24DDF03B2272732EB2A526460B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nj4AxtKy-Y1RSC6UO5eT1DvzvIY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1a/ffdb69-680a-465c-a489-66c1442480de/1/nj4AxtKy-Y1RSC6UO5eT1DvzvIY.mft
Manifest number: 0FE0
Signing time: Sun 19 Oct 2025 08:01:07 +0000
Manifest this update: Sun 19 Oct 2025 08:01:07 +0000
Manifest next update: Mon 20 Oct 2025 08:01:07 +0000
Files and hashes: 1: Symg0jAPVS-ti1ruCDzymyj_CR0.roa (hash: GUIXVLB8gdm1fu+e7gBbFfA+4MoEzWz7SkljoSB1b/4=)
2: nj4AxtKy-Y1RSC6UO5eT1DvzvIY.crl (hash: ui7R5VXFTg9sLLRNULN/8yc1JBNtDPczDaWnvsPcRpI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1a/ffdb69-680a-465c-a489-66c1442480de/1/nj4AxtKy-Y1RSC6UO5eT1DvzvIY.crl
rsync://rpki.ripe.net/repository/DEFAULT/1a/ffdb69-680a-465c-a489-66c1442480de/1/nj4AxtKy-Y1RSC6UO5eT1DvzvIY.mft
rsync://rpki.ripe.net/repository/DEFAULT/nj4AxtKy-Y1RSC6UO5eT1DvzvIY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 08:01:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:7c:8d:24:dd:f0:3b:22:72:73:2e:b2:a5:26:46:0b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9e3e00c6d2b2f98d51482e943b9793d43bf3bc86
Validity
Not Before: Oct 19 08:01:07 2025 GMT
Not After : Oct 20 08:01:07 2025 GMT
Subject: CN=8f7f0bb3ef16b30dac1a6ccf9fecb805db932614
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:05:aa:de:98:76:2d:06:69:49:5b:b8:7f:49:
c6:39:f0:10:bb:1c:db:77:6e:01:90:18:4d:08:4b:
ac:69:88:f6:c4:ee:21:a8:73:32:86:7f:9e:b1:9f:
bb:26:f9:d5:49:78:63:d5:db:1d:c4:70:01:e8:25:
8a:45:45:45:68:df:9f:4e:b2:3b:a1:82:0c:b1:39:
e7:23:ef:d2:68:64:9b:e9:08:2f:cd:36:20:05:87:
32:c5:ea:59:1b:90:83:62:4f:5c:fd:09:f5:c6:23:
2f:ee:5f:73:07:5c:39:72:de:09:6b:75:61:7c:bd:
fa:82:71:e2:7c:b9:ae:54:9b:0b:87:ec:6a:07:3b:
01:50:59:b6:6c:d4:88:f7:56:76:c6:f2:b4:1e:ac:
d2:d1:3b:de:77:3f:5f:f5:2e:52:90:71:e0:48:23:
74:82:ac:61:2b:2d:84:aa:b5:c7:08:f2:fe:d3:0c:
8f:a5:b4:ae:9f:66:b0:a1:b2:1c:b8:b7:12:11:f0:
b5:31:c8:a7:dc:8b:5c:b5:e7:3c:26:ee:de:d6:c8:
aa:7d:7c:9d:75:4c:f9:9c:9c:71:9e:c2:e5:da:87:
d0:ee:94:08:1c:64:af:30:4a:d7:26:82:86:e1:2d:
93:9c:5b:a1:ac:c9:1b:30:8c:0b:55:54:d4:70:b3:
07:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:7F:0B:B3:EF:16:B3:0D:AC:1A:6C:CF:9F:EC:B8:05:DB:93:26:14
X509v3 Authority Key Identifier:
keyid:9E:3E:00:C6:D2:B2:F9:8D:51:48:2E:94:3B:97:93:D4:3B:F3:BC:86
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nj4AxtKy-Y1RSC6UO5eT1DvzvIY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/ffdb69-680a-465c-a489-66c1442480de/1/nj4AxtKy-Y1RSC6UO5eT1DvzvIY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/ffdb69-680a-465c-a489-66c1442480de/1/nj4AxtKy-Y1RSC6UO5eT1DvzvIY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4d:86:08:6f:fc:55:08:9f:65:3e:91:49:94:09:e1:ea:a0:c9:
9e:d8:5f:14:29:35:57:8f:1b:a3:85:74:24:e9:f6:68:c5:e5:
55:c2:29:c0:a2:cb:3b:83:2b:3b:7f:88:fe:23:ab:76:08:df:
05:85:e4:ba:71:75:3b:0c:43:25:5a:ee:dc:62:49:53:d1:c0:
73:c7:37:61:07:2f:cb:39:71:bd:66:a1:b8:28:b0:a4:70:dc:
4f:e6:9c:1e:c7:4d:80:dc:2a:ef:59:24:1d:ff:12:99:3d:94:
79:15:29:47:39:c9:3c:4e:61:8a:cc:42:83:c6:1e:7a:ab:10:
e2:b2:d4:e7:e4:eb:5c:48:d3:75:3d:81:3c:93:ae:00:31:62:
ec:3b:8a:cc:76:08:82:b2:92:a5:7e:a0:1a:11:dc:8a:6e:44:
b2:ca:3f:8b:77:42:d8:5e:ac:f6:2c:07:a9:94:75:21:03:8b:
94:d3:17:6a:1d:d2:17:6a:9e:63:c6:02:54:8f:cb:e1:df:b1:
23:5f:87:e1:81:86:c2:c2:ea:7e:7a:ac:dd:2e:73:57:c0:e1:
5a:ec:11:52:55:74:fa:f8:18:ac:bb:f7:a4:67:20:15:f8:38:
79:86:0b:8f:b5:3c:3c:66:c3:50:3c:96:da:52:39:39:15:f6:
6c:16:1a:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 18:23:43 2025 by rpki-client