Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/ea9c59-9e14-4f25-86bd-7eedf4dd6c13/1/nfJK-_7N9qmcKCv1OzBPPB6PRw8.mft
File: nfJK-_7N9qmcKCv1OzBPPB6PRw8.mft (raw, json)
Hash identifier: h4draVJLaxQqD8OyTikfL+sSxQSTQrQx0rlaArKa/XI=
Subject key identifier: D0:11:45:54:20:B4:F1:AF:CE:D1:74:47:22:70:41:94:C2:02:67:68
Authority key identifier: 9D:F2:4A:FB:FE:CD:F6:A9:9C:28:2B:F5:3B:30:4F:3C:1E:8F:47:0F
Certificate issuer: /CN=9df24afbfecdf6a99c282bf53b304f3c1e8f470f
Certificate serial: 0199FC215748A542077C682A95FCE4F526DF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nfJK-_7N9qmcKCv1OzBPPB6PRw8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/ea9c59-9e14-4f25-86bd-7eedf4dd6c13/1/nfJK-_7N9qmcKCv1OzBPPB6PRw8.mft
Manifest number: 0992
Signing time: Sun 19 Oct 2025 11:01:07 +0000
Manifest this update: Sun 19 Oct 2025 11:01:07 +0000
Manifest next update: Mon 20 Oct 2025 11:01:07 +0000
Files and hashes: 1: D6KBZtdhAp7R2Q1YiqESZQ8OeXA.roa (hash: pLl10ejVKSmOKcwrzyb02NjjAckX++6l+yonzmG4CME=)
2: nfJK-_7N9qmcKCv1OzBPPB6PRw8.crl (hash: 78I6ZtmB+lQHkngQb91VMazCpqiJOdAezjUf8XpYd7g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1c/ea9c59-9e14-4f25-86bd-7eedf4dd6c13/1/nfJK-_7N9qmcKCv1OzBPPB6PRw8.crl
rsync://rpki.ripe.net/repository/DEFAULT/1c/ea9c59-9e14-4f25-86bd-7eedf4dd6c13/1/nfJK-_7N9qmcKCv1OzBPPB6PRw8.mft
rsync://rpki.ripe.net/repository/DEFAULT/nfJK-_7N9qmcKCv1OzBPPB6PRw8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:01:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:21:57:48:a5:42:07:7c:68:2a:95:fc:e4:f5:26:df
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9df24afbfecdf6a99c282bf53b304f3c1e8f470f
Validity
Not Before: Oct 19 11:01:07 2025 GMT
Not After : Oct 20 11:01:07 2025 GMT
Subject: CN=d011455420b4f1afced1744722704194c2026768
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:8b:85:39:ba:dd:64:35:7b:88:0a:27:b8:a3:
97:1b:0d:38:f5:97:ed:52:1f:b1:b1:9b:4f:80:b0:
7a:80:10:93:54:7f:d2:51:60:b2:ef:95:d4:94:11:
38:74:d7:0c:a1:d4:39:01:99:04:48:39:eb:30:a6:
4b:ae:1b:f7:1b:cd:51:36:ef:85:6f:39:db:70:77:
2c:09:60:21:8c:1f:e9:a0:7d:50:b8:2a:9e:cd:d9:
c8:46:bb:4c:da:07:e6:26:0f:a7:94:e6:82:2d:5f:
22:7b:6b:36:75:3c:93:9e:9c:ab:1f:90:93:ad:28:
bb:9d:cd:a7:7b:16:e4:de:dd:22:8e:c9:d3:6c:40:
32:01:71:35:37:d9:5e:7a:1e:58:36:b3:a4:79:03:
5c:e5:84:75:5b:eb:67:03:41:ec:66:13:77:df:7a:
c7:c8:ce:db:b4:60:50:a0:1b:dd:a6:1b:59:38:3e:
09:a0:5b:28:84:68:1a:bb:7c:50:22:67:f8:1d:80:
61:ff:e4:a4:68:e7:a3:99:57:ad:b1:ba:e6:9d:a0:
31:4e:53:27:3e:a5:66:59:53:6b:73:a3:07:6f:67:
f8:0d:8c:75:60:c7:dc:c4:9c:a8:9d:d0:bd:2a:3c:
e7:49:04:59:93:eb:3b:01:5b:42:c9:55:d0:80:9d:
4c:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:11:45:54:20:B4:F1:AF:CE:D1:74:47:22:70:41:94:C2:02:67:68
X509v3 Authority Key Identifier:
keyid:9D:F2:4A:FB:FE:CD:F6:A9:9C:28:2B:F5:3B:30:4F:3C:1E:8F:47:0F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nfJK-_7N9qmcKCv1OzBPPB6PRw8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/ea9c59-9e14-4f25-86bd-7eedf4dd6c13/1/nfJK-_7N9qmcKCv1OzBPPB6PRw8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/ea9c59-9e14-4f25-86bd-7eedf4dd6c13/1/nfJK-_7N9qmcKCv1OzBPPB6PRw8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
62:cf:a3:9f:02:3a:75:1e:66:7c:41:66:2a:ce:ff:f6:42:91:
d9:ec:fd:5b:a9:b6:8d:65:fc:8a:56:bc:33:1a:9b:21:67:1c:
0a:08:cb:31:4c:d0:65:e7:b2:70:f4:77:53:87:ab:51:d7:fe:
02:cc:7c:24:0c:8f:0b:86:4e:52:20:7e:38:8c:24:a3:27:b6:
96:19:b4:22:33:86:1e:21:f3:82:3f:13:85:d9:aa:95:24:3b:
fe:63:e3:a6:3f:b7:48:b6:64:13:6f:08:8d:db:4c:df:43:4f:
7a:3f:df:25:4c:4c:97:2a:17:bf:63:35:03:3a:7f:1a:60:8b:
18:fb:df:9a:d3:05:06:25:49:4a:e3:31:71:5b:31:63:27:57:
f0:9f:62:43:70:6a:9e:b1:bd:a4:ee:bf:1b:54:92:b1:cf:ea:
60:bb:a7:32:39:5e:2d:f8:a8:4a:78:3f:b6:1a:3e:55:50:77:
32:86:f7:52:6b:fc:e0:d6:74:28:82:15:a7:5f:f3:89:d4:68:
3e:81:73:12:47:e1:2f:98:48:db:ce:0d:0e:a3:d9:c3:b7:c4:
16:59:d4:80:36:09:c4:79:76:54:c6:4d:81:d3:e2:db:cc:65:
8b:b6:b0:04:f7:72:46:ea:3a:f0:35:32:0e:4d:02:a4:9d:ff:
db:d8:a1:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 18:03:20 2025 by rpki-client