Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/eaa4d0-8d1d-4cc1-8b22-450395fb88fa/1/nJKqU9MpCqgDeZNTNdufzD_9Kao.mft
File: nJKqU9MpCqgDeZNTNdufzD_9Kao.mft (raw, json)
Hash identifier: h9bzvmfiHAytwpS1vtldl4i5KoIwaQfY1mSZ3yztNsI=
Subject key identifier: 96:B7:E6:32:70:F1:8B:6A:23:3A:51:3D:4B:F1:CD:CC:AB:6D:92:B0
Authority key identifier: 9C:92:AA:53:D3:29:0A:A8:03:79:93:53:35:DB:9F:CC:3F:FD:29:AA
Certificate issuer: /CN=9c92aa53d3290aa80379935335db9fcc3ffd29aa
Certificate serial: 0199FBEBD878DCE871541C50EBE83BBD9063
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nJKqU9MpCqgDeZNTNdufzD_9Kao.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/eaa4d0-8d1d-4cc1-8b22-450395fb88fa/1/nJKqU9MpCqgDeZNTNdufzD_9Kao.mft
Manifest number: 03CA
Signing time: Sun 19 Oct 2025 10:02:41 +0000
Manifest this update: Sun 19 Oct 2025 10:02:41 +0000
Manifest next update: Mon 20 Oct 2025 10:02:41 +0000
Files and hashes: 1: If4EKlwd9K1sFMswbVmwiqIL9EU.roa (hash: Xi+2lm3juwWtv3l4CgI611xVpcAT1z+T6D2yne87CLU=)
2: nJKqU9MpCqgDeZNTNdufzD_9Kao.crl (hash: miq/tmkfYTDD91LEoWR43moyvBsToDnPmx4TQ2ShwyA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4c/eaa4d0-8d1d-4cc1-8b22-450395fb88fa/1/nJKqU9MpCqgDeZNTNdufzD_9Kao.crl
rsync://rpki.ripe.net/repository/DEFAULT/4c/eaa4d0-8d1d-4cc1-8b22-450395fb88fa/1/nJKqU9MpCqgDeZNTNdufzD_9Kao.mft
rsync://rpki.ripe.net/repository/DEFAULT/nJKqU9MpCqgDeZNTNdufzD_9Kao.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 10:02:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:eb:d8:78:dc:e8:71:54:1c:50:eb:e8:3b:bd:90:63
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9c92aa53d3290aa80379935335db9fcc3ffd29aa
Validity
Not Before: Oct 19 10:02:41 2025 GMT
Not After : Oct 20 10:02:41 2025 GMT
Subject: CN=96b7e63270f18b6a233a513d4bf1cdccab6d92b0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:c4:d2:4b:08:ad:e6:dd:68:3f:db:39:44:7a:
2c:38:0f:49:e0:fc:ef:76:d3:b4:16:ad:ff:e1:a9:
37:9e:61:ab:ea:02:8e:15:52:06:d2:51:47:5d:ab:
ed:99:ed:60:0d:7f:5f:da:0b:7a:d6:7e:39:d9:05:
26:bd:85:d3:7d:c6:a0:c2:ee:56:a1:92:3a:38:ae:
2c:d9:3c:30:a5:ce:94:fd:1e:97:a7:4a:77:73:b9:
9b:77:86:cc:9c:9d:1d:b8:54:c6:e9:bc:1f:e5:b8:
ae:12:59:6d:30:7c:5b:dc:29:a4:b2:1f:64:8d:bb:
af:9b:31:d8:ca:c1:63:00:18:29:63:38:b4:7b:ca:
3f:91:e5:c8:9a:51:1f:ce:89:fd:37:28:ea:3e:7b:
8a:88:b5:64:f9:79:d4:c6:ea:ab:d4:25:64:19:71:
9f:89:f3:6f:7e:cb:cf:aa:ac:fc:91:c1:1b:96:dc:
a9:2f:a1:39:4b:fd:f9:55:33:e6:68:d6:a0:40:2e:
ec:a6:14:fb:f0:ea:ec:12:90:a9:2a:be:16:d6:ed:
96:53:b3:d1:08:8f:68:44:de:4b:9f:69:65:10:0b:
64:48:ad:56:77:80:fb:09:20:af:5c:84:11:90:4d:
02:0b:d3:70:c7:fc:d4:0c:6b:0c:ec:2b:87:59:57:
53:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:B7:E6:32:70:F1:8B:6A:23:3A:51:3D:4B:F1:CD:CC:AB:6D:92:B0
X509v3 Authority Key Identifier:
keyid:9C:92:AA:53:D3:29:0A:A8:03:79:93:53:35:DB:9F:CC:3F:FD:29:AA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nJKqU9MpCqgDeZNTNdufzD_9Kao.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/eaa4d0-8d1d-4cc1-8b22-450395fb88fa/1/nJKqU9MpCqgDeZNTNdufzD_9Kao.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/eaa4d0-8d1d-4cc1-8b22-450395fb88fa/1/nJKqU9MpCqgDeZNTNdufzD_9Kao.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
05:a6:08:70:45:d9:30:eb:2d:98:5e:2a:8a:b0:a2:73:81:68:
77:cd:70:f2:eb:58:78:94:41:89:ea:6b:d4:72:da:53:19:30:
2d:39:ea:71:31:a4:53:57:bb:04:40:7c:ea:92:66:d2:56:c2:
30:9a:af:ae:ee:14:30:6f:65:2d:a6:15:94:04:e8:4a:d1:7c:
6d:38:e7:22:3a:3f:e3:8a:23:d6:54:e0:1c:a5:73:e0:ed:ed:
d8:6c:4a:2d:74:cb:6c:2c:b6:b8:8c:03:04:92:46:db:44:5f:
6b:bd:7a:4c:bb:96:b0:91:84:6a:fc:99:af:36:8d:20:85:c4:
a3:f0:d2:21:40:c2:32:6d:96:d2:1f:36:64:70:97:0b:dd:ea:
7b:33:0e:74:e0:0c:91:7b:b1:c7:5c:2b:fc:3d:8a:4c:d2:28:
17:6e:01:e9:94:e1:c9:79:2c:f5:92:76:0f:2a:59:64:f9:cf:
5c:ef:3f:ae:f2:30:3d:34:29:6f:6e:d6:fb:a7:79:c3:ad:76:
cf:ef:27:07:30:ee:72:7c:b2:cd:87:63:c8:2a:bf:40:38:fd:
4d:8e:2d:f9:77:28:ef:b2:b8:98:3a:12:a1:2d:cf:21:8e:74:
85:02:1d:96:12:a5:73:d9:b1:a4:ab:d5:f3:dc:1f:80:86:90:
3c:b2:b7:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 18:24:27 2025 by rpki-client