Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/39/962840-5169-4ff3-89f9-480734e38da8/1/nj8Vea4XZmLWY6ODTA_vgkzuAzw.mft
File: nj8Vea4XZmLWY6ODTA_vgkzuAzw.mft (raw, json)
Hash identifier: KeSiaA1Vn94YDBeeqAYp0ZOotDHPpw7XWKkzw4MGSko=
Subject key identifier: DD:8B:45:FD:0A:B3:58:0C:25:34:4A:32:51:36:D3:FC:18:BD:41:D0
Authority key identifier: 9E:3F:15:79:AE:17:66:62:D6:63:A3:83:4C:0F:EF:82:4C:EE:03:3C
Certificate issuer: /CN=9e3f1579ae176662d663a3834c0fef824cee033c
Certificate serial: 0199FCFD619C27706F198FA11D7E4D5CE1F1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nj8Vea4XZmLWY6ODTA_vgkzuAzw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/39/962840-5169-4ff3-89f9-480734e38da8/1/nj8Vea4XZmLWY6ODTA_vgkzuAzw.mft
Manifest number: 0411
Signing time: Sun 19 Oct 2025 15:01:28 +0000
Manifest this update: Sun 19 Oct 2025 15:01:28 +0000
Manifest next update: Mon 20 Oct 2025 15:01:28 +0000
Files and hashes: 1: nj8Vea4XZmLWY6ODTA_vgkzuAzw.crl (hash: JYfMjVhFc0uhORn1w55/so2JOJ0XEtPz9GUOULdY5zI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/39/962840-5169-4ff3-89f9-480734e38da8/1/nj8Vea4XZmLWY6ODTA_vgkzuAzw.crl
rsync://rpki.ripe.net/repository/DEFAULT/39/962840-5169-4ff3-89f9-480734e38da8/1/nj8Vea4XZmLWY6ODTA_vgkzuAzw.mft
rsync://rpki.ripe.net/repository/DEFAULT/nj8Vea4XZmLWY6ODTA_vgkzuAzw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:fd:61:9c:27:70:6f:19:8f:a1:1d:7e:4d:5c:e1:f1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9e3f1579ae176662d663a3834c0fef824cee033c
Validity
Not Before: Oct 19 15:01:28 2025 GMT
Not After : Oct 20 15:01:28 2025 GMT
Subject: CN=dd8b45fd0ab3580c25344a325136d3fc18bd41d0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:1b:52:5a:63:6a:c3:96:31:70:6a:e3:f6:5d:
b1:7e:31:bc:27:f4:0f:35:c9:48:ef:dc:03:c5:97:
21:23:2c:1b:10:80:7d:d6:30:5f:72:bf:3c:57:48:
b4:7d:2f:9c:f1:54:0e:b1:e5:de:ed:26:62:07:ba:
58:a8:06:75:b5:f1:ba:06:d1:5e:43:19:34:54:cc:
30:56:eb:8e:96:09:45:b5:a4:22:e4:70:1d:97:67:
12:32:08:04:0d:97:fb:26:c5:4b:aa:49:9b:be:c3:
4b:6e:bc:c1:3d:83:94:cb:90:40:6a:d0:29:30:d9:
17:25:4a:13:b2:76:d8:ea:ee:c6:23:39:c4:14:ff:
99:2e:6d:82:9e:a8:bb:bc:a9:af:5e:ac:cb:15:16:
64:79:24:27:56:bb:f5:6e:7f:28:fb:20:e4:b8:c5:
ae:d3:99:68:89:46:31:97:0a:e7:e5:33:38:0a:bf:
3c:44:1f:da:dc:48:f9:0b:fe:f2:4f:c0:24:12:96:
51:a7:bc:ea:a5:43:43:ec:40:fc:55:d4:c9:5b:3a:
55:54:fa:b9:e7:6f:03:a2:4a:f0:2d:d1:ae:1f:5b:
dd:a7:96:64:76:e4:4b:b2:0c:9d:24:d6:6b:8d:ad:
8f:80:fe:eb:ea:e1:45:6b:17:b2:eb:e2:9a:4d:e6:
2f:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:8B:45:FD:0A:B3:58:0C:25:34:4A:32:51:36:D3:FC:18:BD:41:D0
X509v3 Authority Key Identifier:
keyid:9E:3F:15:79:AE:17:66:62:D6:63:A3:83:4C:0F:EF:82:4C:EE:03:3C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nj8Vea4XZmLWY6ODTA_vgkzuAzw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/39/962840-5169-4ff3-89f9-480734e38da8/1/nj8Vea4XZmLWY6ODTA_vgkzuAzw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/39/962840-5169-4ff3-89f9-480734e38da8/1/nj8Vea4XZmLWY6ODTA_vgkzuAzw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4f:a1:c4:72:60:59:54:75:99:b4:90:c0:47:f7:c1:77:94:f3:
42:17:01:d4:a2:4a:b6:98:92:6e:8b:27:41:99:08:d9:21:f2:
68:82:4b:ac:16:80:f0:f3:83:d3:03:ba:58:2a:d6:3a:68:4d:
bc:e0:3a:32:a2:d6:de:28:1b:c9:95:ed:2e:03:e2:b2:ab:48:
c3:10:ea:7c:50:2d:4e:30:a8:39:8e:c4:0f:56:6e:a5:fd:98:
c4:5e:ee:1a:40:0e:94:e6:3f:9a:e2:71:b1:52:14:33:e4:c3:
8c:41:39:0d:ae:23:bc:fe:6a:61:36:a7:bf:58:1b:ee:36:2f:
90:a1:9e:23:73:19:9a:d3:bb:6b:a3:6a:1a:c5:0e:64:d7:ae:
08:2f:30:59:2f:1b:b7:0b:6f:f0:25:49:ef:98:a4:5c:2a:45:
3f:62:17:ca:bf:86:dc:f9:7c:a5:dd:a4:8c:95:32:bc:85:da:
4f:ec:c6:76:18:c3:ac:f2:43:f6:17:42:5c:c1:6c:98:24:26:
e6:22:9e:e5:b5:2f:c9:2b:0e:56:f2:e6:94:28:ae:5a:b7:44:
d4:21:4d:4b:b9:61:93:25:fc:71:a2:4d:ba:68:18:1f:43:fb:
15:06:fe:6a:3b:db:a4:d5:09:ec:99:d5:e2:d1:5a:9e:82:25:
42:87:d0:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 20:54:07 2025 by rpki-client