Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/6fe110-2b31-4fed-a56b-5ad5d29d72dd/1/nPReAK4WTmeqE1SFcjfQmt8nyVI.mft
File: nPReAK4WTmeqE1SFcjfQmt8nyVI.mft (raw, json)
Hash identifier: FZoYblbGPprrtz2UTrC+z45fgOTkV/tPDGWdCRjPd6g=
Subject key identifier: 30:D1:7A:59:5B:A8:39:50:69:FA:A3:0A:31:B9:A9:7F:62:1F:4B:A1
Authority key identifier: 9C:F4:5E:00:AE:16:4E:67:AA:13:54:85:72:37:D0:9A:DF:27:C9:52
Certificate issuer: /CN=9cf45e00ae164e67aa1354857237d09adf27c952
Certificate serial: 0199FDD902F3C09477BEE13B24E8FBCC2FFC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nPReAK4WTmeqE1SFcjfQmt8nyVI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/6fe110-2b31-4fed-a56b-5ad5d29d72dd/1/nPReAK4WTmeqE1SFcjfQmt8nyVI.mft
Manifest number: 11BB
Signing time: Sun 19 Oct 2025 19:01:21 +0000
Manifest this update: Sun 19 Oct 2025 19:01:21 +0000
Manifest next update: Mon 20 Oct 2025 19:01:21 +0000
Files and hashes: 1: nPReAK4WTmeqE1SFcjfQmt8nyVI.crl (hash: 2gJ4u4rnJukSMWmjQNd8mtN+W8unv+A6rWlttJcBtsU=)
2: qI02I2WeIbyQJXU2kKmSYDmuGmg.roa (hash: +/v2LoWNQyCo7X5QXEt3nR9mBWrSzfmyTw/jlV14U04=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/34/6fe110-2b31-4fed-a56b-5ad5d29d72dd/1/nPReAK4WTmeqE1SFcjfQmt8nyVI.crl
rsync://rpki.ripe.net/repository/DEFAULT/34/6fe110-2b31-4fed-a56b-5ad5d29d72dd/1/nPReAK4WTmeqE1SFcjfQmt8nyVI.mft
rsync://rpki.ripe.net/repository/DEFAULT/nPReAK4WTmeqE1SFcjfQmt8nyVI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 15:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fd:d9:02:f3:c0:94:77:be:e1:3b:24:e8:fb:cc:2f:fc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9cf45e00ae164e67aa1354857237d09adf27c952
Validity
Not Before: Oct 19 19:01:21 2025 GMT
Not After : Oct 20 19:01:21 2025 GMT
Subject: CN=30d17a595ba8395069faa30a31b9a97f621f4ba1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:62:8e:9f:1e:0a:3f:f7:37:7d:3d:7a:dd:fa:
c8:97:01:c1:37:6d:e2:e0:ce:b1:18:27:84:5b:55:
fd:68:c8:28:31:13:fa:17:19:3d:de:3e:de:05:c3:
a1:fa:32:81:d8:71:8d:16:03:3a:a9:eb:ed:66:df:
59:40:c8:29:5a:67:e9:1e:e5:ca:dd:53:8f:16:98:
90:43:83:3c:12:71:cd:21:97:58:26:11:ec:a8:1a:
7a:f3:dc:4b:1d:ae:76:5e:33:8f:ef:ea:c0:02:50:
da:61:c1:94:31:a7:27:bc:c6:fc:73:de:0b:e4:2f:
45:8f:fc:7f:da:ac:f4:76:5b:20:5d:0e:be:b4:aa:
39:e0:81:5d:d3:e8:66:59:9f:c9:9d:26:50:41:a1:
d1:82:59:b9:61:44:d1:a4:7d:20:8c:e1:a4:7b:5a:
83:22:7a:16:22:6f:b5:47:ae:5a:11:ec:88:f9:1f:
25:38:79:b3:d8:f2:f5:96:33:a3:a4:0d:8b:8b:bc:
2f:08:64:7e:cf:48:16:f4:bd:9b:6c:92:95:65:7a:
b7:7c:67:43:e5:6d:1a:69:ef:62:01:81:90:8e:c3:
58:35:e7:f8:38:63:c8:0a:d9:2f:26:fd:01:30:ac:
fc:a5:d8:1a:52:88:1b:8a:2a:50:2f:4d:61:df:03:
89:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:D1:7A:59:5B:A8:39:50:69:FA:A3:0A:31:B9:A9:7F:62:1F:4B:A1
X509v3 Authority Key Identifier:
keyid:9C:F4:5E:00:AE:16:4E:67:AA:13:54:85:72:37:D0:9A:DF:27:C9:52
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nPReAK4WTmeqE1SFcjfQmt8nyVI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/6fe110-2b31-4fed-a56b-5ad5d29d72dd/1/nPReAK4WTmeqE1SFcjfQmt8nyVI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/34/6fe110-2b31-4fed-a56b-5ad5d29d72dd/1/nPReAK4WTmeqE1SFcjfQmt8nyVI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
52:04:04:39:5a:cd:ed:44:02:0f:23:87:5f:b1:c9:93:1c:6f:
2d:44:da:ea:5e:49:cb:3d:24:a4:47:df:33:0d:15:5d:58:6d:
4e:5e:e7:11:5e:b2:40:e8:8e:73:6b:ad:6e:51:29:89:7d:3e:
a4:ba:d5:d9:90:a5:a5:77:31:8c:30:8c:f6:69:da:10:82:e7:
80:7a:86:d7:28:59:84:81:54:3c:47:f7:96:0a:80:76:37:81:
2f:9d:34:b6:cb:d9:1e:51:ff:2e:cb:6f:27:de:ed:27:96:7c:
e5:c1:72:c3:59:9b:97:72:ad:32:84:51:55:94:25:61:f9:5b:
20:97:48:3d:9a:a3:50:fd:87:8d:e7:72:e0:f3:42:57:4d:84:
83:aa:3a:60:22:8e:01:f6:c8:94:dd:10:ca:1e:ff:e7:6f:99:
06:c6:2e:ec:33:33:9a:3b:1f:50:a3:13:89:78:f3:d3:8a:d4:
db:b0:39:38:0e:d3:97:ba:43:6a:21:a2:3b:3e:fb:92:cc:e0:
d8:fb:fd:4f:63:22:40:09:88:47:46:3b:3f:45:2f:b7:6d:e3:
bb:d9:39:f8:b6:bd:53:ca:f4:79:8c:0f:8d:ff:f7:03:10:04:
86:98:c7:d2:8c:0f:b2:2b:95:92:2d:fb:f8:5b:70:5c:63:11:
44:df:b2:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 00:02:22 2025 by rpki-client