Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/50/34011d-01bf-48a1-a8c3-c9fc5f452995/1/nfToC0ytTlC3iO3xaXZxLe7_bA0.mft
File: nfToC0ytTlC3iO3xaXZxLe7_bA0.mft (raw, json)
Hash identifier: /nj8XFw1Txfut46g6M/gY6uMkux6P9VnzV9Z9I+q2bU=
Subject key identifier: 2E:A6:42:9F:8B:15:D7:35:B9:7A:98:9C:EF:1F:BA:5B:43:38:C7:29
Authority key identifier: 9D:F4:E8:0B:4C:AD:4E:50:B7:88:ED:F1:69:76:71:2D:EE:FF:6C:0D
Certificate issuer: /CN=9df4e80b4cad4e50b788edf16976712deeff6c0d
Certificate serial: 0199FE477C22A0B5E71C4BA83662B2263B34
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nfToC0ytTlC3iO3xaXZxLe7_bA0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/50/34011d-01bf-48a1-a8c3-c9fc5f452995/1/nfToC0ytTlC3iO3xaXZxLe7_bA0.mft
Manifest number: 0FB7
Signing time: Sun 19 Oct 2025 21:02:01 +0000
Manifest this update: Sun 19 Oct 2025 21:02:01 +0000
Manifest next update: Mon 20 Oct 2025 21:02:01 +0000
Files and hashes: 1: mTtxU7O_lRz_UT2tjl3cUWas7pA.roa (hash: lHDy75xFNayt8SROCAEJF8vDi//tAi35Yjt2Fy8OX04=)
2: nfToC0ytTlC3iO3xaXZxLe7_bA0.crl (hash: C3b8JbAB2os+WhCSKrYpR3qWs54f6NuCdYdDq0/5xho=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/50/34011d-01bf-48a1-a8c3-c9fc5f452995/1/nfToC0ytTlC3iO3xaXZxLe7_bA0.crl
rsync://rpki.ripe.net/repository/DEFAULT/50/34011d-01bf-48a1-a8c3-c9fc5f452995/1/nfToC0ytTlC3iO3xaXZxLe7_bA0.mft
rsync://rpki.ripe.net/repository/DEFAULT/nfToC0ytTlC3iO3xaXZxLe7_bA0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 20:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fe:47:7c:22:a0:b5:e7:1c:4b:a8:36:62:b2:26:3b:34
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9df4e80b4cad4e50b788edf16976712deeff6c0d
Validity
Not Before: Oct 19 21:02:01 2025 GMT
Not After : Oct 20 21:02:01 2025 GMT
Subject: CN=2ea6429f8b15d735b97a989cef1fba5b4338c729
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:3a:b0:08:7d:d2:ef:da:f8:c9:65:8a:36:d8:
f8:be:13:02:09:59:28:c3:3b:8b:0f:e6:b9:f9:40:
9f:9a:e6:22:41:01:d2:63:de:a4:ee:38:0a:54:c4:
9c:85:6e:01:75:e5:d5:c6:74:d2:a3:c6:71:a5:6c:
c1:72:73:1a:f9:45:1a:3f:52:f7:99:fb:9e:20:5c:
ee:2e:f8:80:61:5a:62:b1:a0:5f:ce:8b:f6:27:51:
1d:5b:84:97:89:2a:95:de:4f:e2:d6:59:47:41:fc:
64:74:e7:b9:49:c1:f8:4f:c2:78:00:5a:55:7d:a1:
0d:ec:24:71:9e:b5:c8:64:ac:b2:1b:d8:46:5d:6c:
e7:4b:67:94:d2:fb:6d:84:06:6c:2d:c7:97:3b:04:
20:27:43:b0:cd:ee:c0:06:1b:b5:c1:30:94:ba:e8:
9d:1f:52:5d:17:9d:9c:df:26:9a:9b:a7:01:b7:b2:
a7:ee:0f:1b:2c:ae:2a:2f:97:64:c3:32:4f:ea:77:
fb:0a:cc:98:53:24:00:36:fa:69:8a:48:84:e0:0b:
e5:91:27:34:bd:b6:21:fe:4c:aa:17:a5:40:9e:0b:
db:56:31:7f:8a:bb:51:40:8b:9c:d9:60:05:de:b6:
d6:f8:1c:20:69:f6:cc:af:aa:44:98:ed:51:fe:22:
b2:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:A6:42:9F:8B:15:D7:35:B9:7A:98:9C:EF:1F:BA:5B:43:38:C7:29
X509v3 Authority Key Identifier:
keyid:9D:F4:E8:0B:4C:AD:4E:50:B7:88:ED:F1:69:76:71:2D:EE:FF:6C:0D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nfToC0ytTlC3iO3xaXZxLe7_bA0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/50/34011d-01bf-48a1-a8c3-c9fc5f452995/1/nfToC0ytTlC3iO3xaXZxLe7_bA0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/50/34011d-01bf-48a1-a8c3-c9fc5f452995/1/nfToC0ytTlC3iO3xaXZxLe7_bA0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bf:30:db:57:e2:cf:0b:39:b4:da:b3:03:ae:8a:1a:50:36:45:
19:a8:54:c8:ae:2c:b6:a2:c0:00:0b:6a:5c:37:0f:35:76:ee:
59:aa:76:c1:15:dc:b8:60:f1:1c:b8:18:dc:dc:0e:f8:43:fa:
97:b3:dc:a9:ca:c0:c4:7d:79:98:ee:36:c8:dd:64:7c:56:b9:
2c:76:76:c1:3f:84:9a:d1:83:c2:1a:9b:7c:59:0d:b7:c9:10:
b4:54:e7:06:9a:fe:0d:0c:e3:67:1f:01:a5:02:88:ec:ee:86:
af:c3:d6:00:de:93:9d:bd:e6:69:ec:1e:38:ba:e8:2d:4c:9c:
c4:63:a2:08:0f:2c:56:8f:44:1e:e4:da:b2:19:06:36:6d:9b:
1c:22:61:1a:17:b6:d8:06:6b:48:c4:90:39:61:b5:e7:39:f9:
27:30:6a:8c:55:7a:48:e2:9e:a2:0b:35:85:3a:9b:47:be:f0:
79:c2:0c:7c:d3:b8:6a:d3:be:a1:19:27:ab:4e:88:9d:eb:81:
0b:ad:c1:00:5d:64:d1:fb:c0:e2:b3:27:b4:05:c1:fd:84:54:
f2:6d:56:4c:d6:38:53:ab:5c:82:e7:39:96:c6:d0:d5:cd:e6:
52:23:73:92:7f:c6:0f:02:32:05:13:94:b8:94:b1:51:a5:12:
a8:2c:91:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 02:36:47 2025 by rpki-client