Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/b417f8-0732-48af-b00c-bb797ce7e108/1/nRFf6cnpz97xfpJBZVksAj77KxY.mft
File: nRFf6cnpz97xfpJBZVksAj77KxY.mft (raw, json)
Hash identifier: TQPu9h3Mi9ZtMB5sWdb3lpMBwvmIIs/AgUiIRuGtbLk=
Subject key identifier: 9A:FB:9F:2D:66:CA:C8:F9:84:D2:69:D4:46:81:E2:7A:FA:1C:1B:A8
Authority key identifier: 9D:11:5F:E9:C9:E9:CF:DE:F1:7E:92:41:65:59:2C:02:3E:FB:2B:16
Certificate issuer: /CN=9d115fe9c9e9cfdef17e924165592c023efb2b16
Certificate serial: 0199FBEA8388BD9B4CB9A2A4F6686D70D57C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nRFf6cnpz97xfpJBZVksAj77KxY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/b417f8-0732-48af-b00c-bb797ce7e108/1/nRFf6cnpz97xfpJBZVksAj77KxY.mft
Manifest number: 0AF7
Signing time: Sun 19 Oct 2025 10:01:14 +0000
Manifest this update: Sun 19 Oct 2025 10:01:14 +0000
Manifest next update: Mon 20 Oct 2025 10:01:14 +0000
Files and hashes: 1: _bVk5KEYMfzUMgiBziaNKeODYT8.roa (hash: vIMcu46lRDXHK5Ht9fIkqPEvFTQHMwND+OPzypT6tAc=)
2: nRFf6cnpz97xfpJBZVksAj77KxY.crl (hash: BocCeSxzBI+qsu1KpmS2lePzIdwhViX97aUVUjlXbr8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/45/b417f8-0732-48af-b00c-bb797ce7e108/1/nRFf6cnpz97xfpJBZVksAj77KxY.crl
rsync://rpki.ripe.net/repository/DEFAULT/45/b417f8-0732-48af-b00c-bb797ce7e108/1/nRFf6cnpz97xfpJBZVksAj77KxY.mft
rsync://rpki.ripe.net/repository/DEFAULT/nRFf6cnpz97xfpJBZVksAj77KxY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:ea:83:88:bd:9b:4c:b9:a2:a4:f6:68:6d:70:d5:7c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9d115fe9c9e9cfdef17e924165592c023efb2b16
Validity
Not Before: Oct 19 10:01:14 2025 GMT
Not After : Oct 20 10:01:14 2025 GMT
Subject: CN=9afb9f2d66cac8f984d269d44681e27afa1c1ba8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:43:f6:a2:8e:f1:06:e9:df:20:71:7f:1d:15:
d4:b4:4a:b5:2b:ae:58:b8:8f:68:02:7c:43:7f:ab:
26:8f:3f:31:8e:0f:3a:dd:cf:bf:df:1d:a3:34:3b:
2b:b9:1e:4e:66:c9:41:7d:b7:2a:80:e6:d3:ee:08:
21:42:a0:83:8b:81:dc:b0:02:e6:c7:e4:1f:02:05:
88:14:39:17:8e:f4:d0:39:a0:7f:2e:00:2c:13:16:
bd:50:67:e0:40:92:34:d0:94:50:8a:60:3e:29:a4:
d6:ed:a1:89:cc:0a:b0:f9:89:d7:85:70:d9:b0:8c:
b8:15:90:53:57:4b:46:61:59:69:26:77:8e:98:6e:
98:03:01:87:b9:ac:9d:24:95:67:4f:ae:2f:67:de:
98:16:d7:67:95:37:2c:49:c3:a3:18:6e:c0:bd:bf:
ed:a7:8e:27:e5:35:10:ff:50:c2:db:bf:a2:a7:87:
fd:41:fc:fb:c7:5d:3f:a1:29:f5:fb:74:31:70:83:
cc:c3:54:bb:26:09:92:a5:f0:e1:83:37:1a:44:f2:
43:5b:45:ad:2e:4e:b3:8f:60:6c:61:2c:aa:5b:36:
ef:ff:f6:f4:4b:04:95:a6:fa:5d:31:21:53:7b:20:
27:9d:ca:65:5e:b8:e0:23:1d:98:75:49:be:af:58:
1c:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:FB:9F:2D:66:CA:C8:F9:84:D2:69:D4:46:81:E2:7A:FA:1C:1B:A8
X509v3 Authority Key Identifier:
keyid:9D:11:5F:E9:C9:E9:CF:DE:F1:7E:92:41:65:59:2C:02:3E:FB:2B:16
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nRFf6cnpz97xfpJBZVksAj77KxY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/b417f8-0732-48af-b00c-bb797ce7e108/1/nRFf6cnpz97xfpJBZVksAj77KxY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/45/b417f8-0732-48af-b00c-bb797ce7e108/1/nRFf6cnpz97xfpJBZVksAj77KxY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4c:0d:e8:87:71:78:36:7c:fe:1b:b3:92:f8:2c:35:d3:c5:7b:
c3:50:d1:82:98:9e:2a:c8:e6:14:09:dd:9e:51:0a:b6:17:fa:
7d:29:36:50:48:44:03:ff:12:6e:86:37:89:0d:0d:21:81:28:
6e:33:a9:57:27:c9:8a:ad:a4:e0:e7:5e:13:6b:af:e9:27:30:
55:56:c2:a3:fc:de:46:7d:f6:ca:6c:63:61:db:63:f0:22:02:
7e:33:40:b4:f4:1f:5e:4d:8f:14:50:12:c7:b6:ac:1c:99:40:
3e:3f:1d:52:f4:50:20:d6:6e:05:a3:7c:82:f2:ae:cb:19:fd:
e7:f3:af:80:fb:cd:b5:35:aa:a9:58:d7:d2:3d:77:81:97:b0:
53:2b:70:a8:62:c8:3f:47:98:31:a8:a4:5a:cf:6f:39:5b:d1:
12:b5:7d:f6:81:87:fe:f2:b1:0f:3f:3f:14:ee:ac:14:33:2c:
8d:65:10:e6:7c:4c:2c:7c:61:16:55:2e:94:43:18:4f:db:3d:
ca:80:67:e9:6a:80:2c:fb:a0:5f:d4:ee:0a:69:0e:ed:69:b9:
01:5d:01:bf:d7:dc:85:d4:4d:05:2c:46:3e:76:34:c3:7d:23:
f3:5a:85:1f:65:12:fa:62:41:cd:36:ae:83:0e:d3:a2:8a:6f:
94:5f:aa:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:34:43 2025 by rpki-client