Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/22/c920ec-07dc-469d-b884-b98bbb1637c0/1/nAqubUXQbffEJ4708hjkLbgHCUw.mft
File: nAqubUXQbffEJ4708hjkLbgHCUw.mft (raw, json)
Hash identifier: eyz8HZAhG6kcaxbta5EBXP7rkHEnmDIS4N0tZIuPrKs=
Subject key identifier: F4:FE:E2:EE:68:C8:FB:1F:30:79:EB:8C:C8:18:7A:FE:88:8E:87:08
Authority key identifier: 9C:0A:AE:6D:45:D0:6D:F7:C4:27:8E:F4:F2:18:E4:2D:B8:07:09:4C
Certificate issuer: /CN=9c0aae6d45d06df7c4278ef4f218e42db807094c
Certificate serial: 0199FC21772450372CB85D0CACD80004329B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nAqubUXQbffEJ4708hjkLbgHCUw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/22/c920ec-07dc-469d-b884-b98bbb1637c0/1/nAqubUXQbffEJ4708hjkLbgHCUw.mft
Manifest number: 16E2
Signing time: Sun 19 Oct 2025 11:01:15 +0000
Manifest this update: Sun 19 Oct 2025 11:01:15 +0000
Manifest next update: Mon 20 Oct 2025 11:01:15 +0000
Files and hashes: 1: MJMdhZnjDE7HHdif7jOifgXeBWw.roa (hash: OAM+4dNU25EOni1NCJmygQc3McNUoy2zZaTz7W6MCZg=)
2: nAqubUXQbffEJ4708hjkLbgHCUw.crl (hash: MpaXfD4Ov4TPFnfXNHzyjjoSSvh04NilB64UBRM1ipM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/22/c920ec-07dc-469d-b884-b98bbb1637c0/1/nAqubUXQbffEJ4708hjkLbgHCUw.crl
rsync://rpki.ripe.net/repository/DEFAULT/22/c920ec-07dc-469d-b884-b98bbb1637c0/1/nAqubUXQbffEJ4708hjkLbgHCUw.mft
rsync://rpki.ripe.net/repository/DEFAULT/nAqubUXQbffEJ4708hjkLbgHCUw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:01:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:21:77:24:50:37:2c:b8:5d:0c:ac:d8:00:04:32:9b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9c0aae6d45d06df7c4278ef4f218e42db807094c
Validity
Not Before: Oct 19 11:01:15 2025 GMT
Not After : Oct 20 11:01:15 2025 GMT
Subject: CN=f4fee2ee68c8fb1f3079eb8cc8187afe888e8708
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:b9:88:e9:d2:e4:2e:67:d7:e5:95:49:97:38:
f1:fa:37:85:2b:e1:6f:6f:9f:95:bb:2f:f4:1d:91:
1f:fe:2a:6d:61:6a:e9:61:c7:97:72:32:d6:ca:0f:
44:57:d5:f6:02:02:15:35:0b:b0:07:96:c2:da:eb:
22:03:f6:ed:c2:7b:c1:06:c3:42:14:b8:7a:19:42:
a7:99:4d:b2:73:ec:6d:9c:a7:7f:8c:ec:8a:ff:d2:
74:9e:bf:92:cc:b9:d3:c7:91:46:10:c8:45:89:85:
78:5a:f9:d8:76:e3:8b:6e:70:3a:65:cc:81:5f:ca:
a9:6a:da:d9:fa:10:35:47:c3:81:f5:a4:c4:b7:c3:
5a:ca:3c:a7:53:1e:4d:fc:57:c5:c6:69:47:69:3b:
44:52:c0:a7:cc:5a:ac:84:a2:64:9c:38:70:cf:32:
b0:21:48:88:90:a1:c9:61:eb:a7:90:a4:47:99:0a:
d4:06:4d:85:aa:b8:52:aa:d7:d2:fe:93:da:6e:3b:
4f:b3:1d:36:a0:cd:e3:9e:d9:0a:00:dc:4c:95:c4:
97:cc:aa:69:e2:de:3d:91:6d:7b:9e:f9:47:28:1f:
06:82:eb:cd:e5:93:fb:37:45:c0:cc:68:0e:cb:ff:
bc:65:f4:37:57:16:4a:8e:08:69:61:f0:0d:71:18:
a3:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:FE:E2:EE:68:C8:FB:1F:30:79:EB:8C:C8:18:7A:FE:88:8E:87:08
X509v3 Authority Key Identifier:
keyid:9C:0A:AE:6D:45:D0:6D:F7:C4:27:8E:F4:F2:18:E4:2D:B8:07:09:4C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nAqubUXQbffEJ4708hjkLbgHCUw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/c920ec-07dc-469d-b884-b98bbb1637c0/1/nAqubUXQbffEJ4708hjkLbgHCUw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/22/c920ec-07dc-469d-b884-b98bbb1637c0/1/nAqubUXQbffEJ4708hjkLbgHCUw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6c:5a:9d:39:60:16:e3:44:3d:55:f2:d8:22:30:9f:f9:77:a9:
7b:00:6d:15:cf:5b:f9:9d:67:3c:df:cf:04:d9:92:e0:41:b4:
60:71:a3:83:53:09:91:5b:ed:73:77:71:36:0e:b0:30:40:fb:
10:0f:8b:59:72:67:ab:8a:2f:5e:35:e0:4d:b7:84:5f:f8:0f:
f0:9f:9e:cf:87:1f:17:bf:b8:f1:4a:cb:76:aa:0d:c8:22:3d:
03:47:68:31:18:45:c7:5b:2a:c2:05:5d:b6:31:53:03:68:27:
cf:72:51:39:c4:61:61:a0:db:87:5a:c0:f1:44:7e:1f:95:55:
1e:10:a8:47:d7:04:51:96:46:c0:6f:b8:cf:f7:c7:1e:8e:4b:
fe:e1:d1:99:93:ca:1c:82:2d:ec:14:53:94:55:3f:21:1a:c4:
ae:62:a7:92:78:ae:1b:fd:de:60:ef:55:52:ff:33:81:11:f5:
2e:16:d1:04:47:f7:fd:b8:4c:ba:56:b1:8d:96:41:1f:11:a1:
4d:94:91:84:5b:8b:d3:17:95:8e:74:27:30:42:2b:10:99:84:
1a:b6:d7:1d:f1:ac:ef:6a:ed:ca:02:69:36:4f:14:78:fc:62:
57:42:09:d4:fc:57:a6:66:36:46:56:4a:a8:ff:ca:29:8f:4e:
35:43:22:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 17:57:01 2025 by rpki-client