Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/20/acf2a2-4d52-40cd-a5f8-59591389e242/1/naTpXS9Mw0pzdrc8DwObPhWPUVI.mft
File: naTpXS9Mw0pzdrc8DwObPhWPUVI.mft (raw, json)
Hash identifier: BYltA9aJAqOKnX2IlpoBpmbr+B/8PHsZx5f3JkfPXrs=
Subject key identifier: B2:94:B0:26:B2:4E:21:65:DD:E5:88:E9:FE:D7:89:31:99:8C:49:09
Authority key identifier: 9D:A4:E9:5D:2F:4C:C3:4A:73:76:B7:3C:0F:03:9B:3E:15:8F:51:52
Certificate issuer: /CN=9da4e95d2f4cc34a7376b73c0f039b3e158f5152
Certificate serial: 0199FB7CCB6B935DE8BE40CB286780CADEA3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/naTpXS9Mw0pzdrc8DwObPhWPUVI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/20/acf2a2-4d52-40cd-a5f8-59591389e242/1/naTpXS9Mw0pzdrc8DwObPhWPUVI.mft
Manifest number: 15EE
Signing time: Sun 19 Oct 2025 08:01:23 +0000
Manifest this update: Sun 19 Oct 2025 08:01:23 +0000
Manifest next update: Mon 20 Oct 2025 08:01:23 +0000
Files and hashes: 1: WYyFBT5nmwxFR4gPo5unCY2UhVc.roa (hash: Z4ZpbpPZKoHHj3yG0X2Ro2qP/JaWFIzV9WlYUI0Hg8s=)
2: j9lH8J7G3WobH4lsD15m-VsHfXA.roa (hash: qeHJX0Tapm1zxSb8XB+NF4p89KIeCYI5mpUGKGseBY0=)
3: naTpXS9Mw0pzdrc8DwObPhWPUVI.crl (hash: O02hW+CjuLUNg9uKfzLwRPxjJeevtRiMP6LsgVwchwk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/20/acf2a2-4d52-40cd-a5f8-59591389e242/1/naTpXS9Mw0pzdrc8DwObPhWPUVI.crl
rsync://rpki.ripe.net/repository/DEFAULT/20/acf2a2-4d52-40cd-a5f8-59591389e242/1/naTpXS9Mw0pzdrc8DwObPhWPUVI.mft
rsync://rpki.ripe.net/repository/DEFAULT/naTpXS9Mw0pzdrc8DwObPhWPUVI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:7c:cb:6b:93:5d:e8:be:40:cb:28:67:80:ca:de:a3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9da4e95d2f4cc34a7376b73c0f039b3e158f5152
Validity
Not Before: Oct 19 08:01:23 2025 GMT
Not After : Oct 20 08:01:23 2025 GMT
Subject: CN=b294b026b24e2165dde588e9fed78931998c4909
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:88:37:85:26:55:43:5a:11:25:06:17:12:c1:
de:45:4c:b3:e8:3b:4f:42:4f:22:1b:dd:77:2c:61:
45:d4:a0:d4:be:49:a9:f8:02:8e:60:b9:91:ba:89:
f0:0e:79:fe:d8:c8:d7:8b:74:d3:d6:63:1d:82:e0:
3b:b2:48:ea:c0:1d:db:8a:45:1a:9f:97:8e:f4:b5:
e5:48:47:8a:85:24:bb:ca:1f:f7:f2:1d:7f:06:dd:
03:bc:28:c2:ae:a7:f8:ef:94:70:02:99:79:08:21:
74:1a:e1:e3:dd:f6:be:85:14:e3:05:d7:a0:1f:ed:
45:d5:c2:d6:f5:20:32:ea:0c:6c:29:b9:b1:ab:46:
1a:1f:94:56:4b:7a:37:50:32:de:c8:04:ab:d3:c4:
f9:de:75:f7:d2:bf:81:ef:41:d0:f9:cd:c4:a6:61:
81:20:a4:28:c5:a7:af:6f:b4:a9:a6:c1:ef:25:62:
1b:fc:f7:78:52:02:ed:1e:4f:e2:8e:92:42:ec:1d:
6b:27:74:31:41:57:9c:80:5c:3a:e7:08:9f:1e:51:
65:fd:78:52:18:14:f5:1d:9a:5b:bc:5e:8b:7c:f8:
83:08:b1:d8:e6:0f:68:12:9f:96:9f:d2:60:46:4b:
84:5c:ca:43:a9:e4:63:82:e7:13:c7:17:c6:64:a3:
5f:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:94:B0:26:B2:4E:21:65:DD:E5:88:E9:FE:D7:89:31:99:8C:49:09
X509v3 Authority Key Identifier:
keyid:9D:A4:E9:5D:2F:4C:C3:4A:73:76:B7:3C:0F:03:9B:3E:15:8F:51:52
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/naTpXS9Mw0pzdrc8DwObPhWPUVI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/20/acf2a2-4d52-40cd-a5f8-59591389e242/1/naTpXS9Mw0pzdrc8DwObPhWPUVI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/20/acf2a2-4d52-40cd-a5f8-59591389e242/1/naTpXS9Mw0pzdrc8DwObPhWPUVI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
65:cd:fd:99:97:a9:4c:ab:eb:c4:a9:67:90:40:c1:9a:38:12:
26:37:b6:25:d0:e0:b6:f4:29:67:d2:01:4c:06:9a:85:13:02:
fc:0d:6e:d3:9d:4f:b0:60:06:c8:51:8b:67:5b:4a:ce:ef:1f:
8e:ef:76:e5:dc:24:b8:a1:33:8b:2a:bd:18:8c:64:a0:9a:2f:
d9:ab:aa:47:e8:1f:0d:bd:65:f9:b5:be:15:fd:4a:75:60:68:
66:8d:64:51:ad:2c:1b:ea:24:cd:31:26:83:2b:8e:04:62:f5:
27:52:64:a1:2d:15:ab:9f:c1:df:d3:62:96:cf:e7:58:71:d0:
76:d1:dd:40:a8:48:ca:54:c1:46:17:13:62:2e:e4:ff:ba:9c:
de:3e:27:4b:48:bd:bc:ac:18:15:98:37:90:6a:53:2a:99:6a:
c8:d7:63:63:ca:ec:cd:9f:eb:2e:df:12:ee:3b:55:45:f8:f9:
dd:7e:d6:19:6d:4c:22:83:6a:3b:e4:0a:fa:e9:74:5f:77:3f:
be:33:32:2e:67:40:1a:e7:2a:e9:e7:73:e8:a8:e0:6e:a0:02:
89:c2:f3:c4:a9:64:e4:ed:29:97:60:0a:80:f8:69:40:dc:34:
d1:1d:fd:2b:91:3d:0d:9d:38:b4:a0:82:90:7f:9a:9e:f5:32:
fc:37:83:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:34:28 2025 by rpki-client