Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/53/bce397-372d-4d2f-ad0a-a48ebd301671/1/nElQd51ZdVHXnEPmFqUJB96M33c.mft
File: nElQd51ZdVHXnEPmFqUJB96M33c.mft (raw, json)
Hash identifier: nAS4ux8N6DTPFO7MvcFkqkfPR7yddyKX6sqHqIy2DyA=
Subject key identifier: 27:79:C9:94:CF:0D:B3:E5:A2:41:7C:AE:19:E9:48:38:4A:7F:AE:65
Authority key identifier: 9C:49:50:77:9D:59:75:51:D7:9C:43:E6:16:A5:09:07:DE:8C:DF:77
Certificate issuer: /CN=9c4950779d597551d79c43e616a50907de8cdf77
Certificate serial: 0199FAD7C99FBF87D570031BDD473EFD1CC6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nElQd51ZdVHXnEPmFqUJB96M33c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/53/bce397-372d-4d2f-ad0a-a48ebd301671/1/nElQd51ZdVHXnEPmFqUJB96M33c.mft
Manifest number: 16E2
Signing time: Sun 19 Oct 2025 05:01:09 +0000
Manifest this update: Sun 19 Oct 2025 05:01:09 +0000
Manifest next update: Mon 20 Oct 2025 05:01:09 +0000
Files and hashes: 1: 2R1UFCZ6LPm3SJQHM7rJf5ia5HE.roa (hash: 9iVp3ax6SoInGkRmccCgwLuza4oa5BeDphs/tDw0ZLo=)
2: nElQd51ZdVHXnEPmFqUJB96M33c.crl (hash: DYx5bkop+8lcAM2k0treXmCC39IbZrQZE42fBYswaRo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/53/bce397-372d-4d2f-ad0a-a48ebd301671/1/nElQd51ZdVHXnEPmFqUJB96M33c.crl
rsync://rpki.ripe.net/repository/DEFAULT/53/bce397-372d-4d2f-ad0a-a48ebd301671/1/nElQd51ZdVHXnEPmFqUJB96M33c.mft
rsync://rpki.ripe.net/repository/DEFAULT/nElQd51ZdVHXnEPmFqUJB96M33c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 05:01:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fa:d7:c9:9f:bf:87:d5:70:03:1b:dd:47:3e:fd:1c:c6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9c4950779d597551d79c43e616a50907de8cdf77
Validity
Not Before: Oct 19 05:01:09 2025 GMT
Not After : Oct 20 05:01:09 2025 GMT
Subject: CN=2779c994cf0db3e5a2417cae19e948384a7fae65
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:09:82:46:df:9c:e9:bb:13:5e:bf:3d:4a:05:
a2:3f:e7:c0:45:32:43:01:83:38:b1:09:aa:a4:fb:
50:3e:d6:54:a5:13:71:65:6c:e2:55:09:77:89:ac:
82:a5:2f:33:0a:08:5c:d6:ed:9f:09:e4:c7:95:84:
4d:7e:84:7b:fa:61:81:8c:17:32:83:44:71:c9:5d:
0f:b3:51:0e:99:bb:1e:66:ae:1f:89:0f:11:19:73:
5c:f5:50:ad:95:37:85:23:4f:63:0f:ed:bc:4f:e8:
67:43:3c:ea:77:ce:9e:14:f1:52:ca:4b:f5:c9:64:
12:d9:47:c9:be:68:90:9b:6d:79:f0:0a:55:e4:a5:
e5:c7:0d:59:08:8d:0e:84:6f:a3:a4:5a:15:85:98:
b1:8d:52:cc:14:4f:58:39:59:23:43:75:96:3c:d7:
4f:30:4b:80:7f:f2:9c:ac:4a:ac:c0:b2:da:fd:ba:
9d:cd:c7:72:06:b7:d1:be:c7:85:23:57:8a:39:bc:
c5:c7:6d:8f:2d:dd:0a:13:a7:ad:46:34:52:4b:06:
d4:0a:89:01:8b:30:25:0f:24:73:30:ff:8b:75:39:
35:3c:39:d9:78:9b:b2:2b:c3:fd:9f:98:7c:66:ad:
bd:db:d9:75:fa:1a:e4:b2:6e:55:dd:84:b4:62:d5:
12:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:79:C9:94:CF:0D:B3:E5:A2:41:7C:AE:19:E9:48:38:4A:7F:AE:65
X509v3 Authority Key Identifier:
keyid:9C:49:50:77:9D:59:75:51:D7:9C:43:E6:16:A5:09:07:DE:8C:DF:77
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nElQd51ZdVHXnEPmFqUJB96M33c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/53/bce397-372d-4d2f-ad0a-a48ebd301671/1/nElQd51ZdVHXnEPmFqUJB96M33c.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/53/bce397-372d-4d2f-ad0a-a48ebd301671/1/nElQd51ZdVHXnEPmFqUJB96M33c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6f:1f:bb:09:90:00:f8:ba:c3:8d:87:e4:c9:15:70:a1:37:16:
81:61:32:21:8f:a6:c4:ab:85:ce:11:e2:df:60:27:2b:ff:2c:
05:83:22:83:8a:49:f5:d8:fa:70:c2:d4:dc:e8:8c:26:ca:c0:
96:67:5a:dd:9e:f6:4b:e6:c8:b5:52:bb:29:26:3f:7c:ee:31:
79:f5:a7:a7:47:7f:ce:b1:17:c8:d1:bc:39:ce:58:ba:7f:0c:
7a:c8:4f:a4:57:6b:c8:68:6d:82:a1:b7:b6:c1:13:51:3c:24:
b3:4c:8a:13:c0:b5:c7:16:f6:a5:e2:82:0e:6b:d8:ab:ab:7f:
77:49:fa:ed:82:7c:da:fa:64:6d:3b:7e:26:a9:39:dc:04:a6:
a8:b6:4b:0d:73:00:26:b7:4c:db:ad:78:05:0a:25:05:09:99:
b3:26:af:52:4a:58:76:9a:ad:af:9b:19:6a:18:25:ce:c2:8d:
fe:19:76:cd:ed:14:2e:b8:8b:c4:fa:13:b4:17:37:2d:47:75:
45:25:e4:41:cb:ff:78:66:62:1d:9b:2a:87:70:41:79:71:a6:
12:66:fd:e9:cb:05:2d:36:1f:2b:5b:91:7c:52:27:89:c8:d5:
53:ed:34:c6:df:4a:51:16:c7:3c:36:b6:f7:7f:d0:88:45:fe:
8e:19:1d:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:26:05 2025 by rpki-client