Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/9ff9c7-d329-45a6-898a-9d959abce526/1/nT67qfosrShqyRJ2V1dF9hXo-nE.mft
File: nT67qfosrShqyRJ2V1dF9hXo-nE.mft (raw, json)
Hash identifier: H9pwf6GPFeludDHVgXG9uJAQbQSYGsAb3mEM9tQZ2gk=
Subject key identifier: AC:89:1B:8A:CA:6C:02:72:E2:4A:22:21:85:EF:C1:7C:F8:39:A1:27
Authority key identifier: 9D:3E:BB:A9:FA:2C:AD:28:6A:C9:12:76:57:57:45:F6:15:E8:FA:71
Certificate issuer: /CN=9d3ebba9fa2cad286ac91276575745f615e8fa71
Certificate serial: 0199FCFD735232F5EE7D65AAA3FA82FCDFB9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nT67qfosrShqyRJ2V1dF9hXo-nE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/9ff9c7-d329-45a6-898a-9d959abce526/1/nT67qfosrShqyRJ2V1dF9hXo-nE.mft
Manifest number: 0A7C
Signing time: Sun 19 Oct 2025 15:01:32 +0000
Manifest this update: Sun 19 Oct 2025 15:01:32 +0000
Manifest next update: Mon 20 Oct 2025 15:01:32 +0000
Files and hashes: 1: _O2K9lYrU1ufrJyVF92JtVYbIao.roa (hash: opCkasUjE09S1Hv7hZM9HKqW92oCRoLsRmm8L97k62Q=)
2: nT67qfosrShqyRJ2V1dF9hXo-nE.crl (hash: vniK8wgyzFTGVHgNPS058a46GzhXdVBQgdrLqs+n5z4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5b/9ff9c7-d329-45a6-898a-9d959abce526/1/nT67qfosrShqyRJ2V1dF9hXo-nE.crl
rsync://rpki.ripe.net/repository/DEFAULT/5b/9ff9c7-d329-45a6-898a-9d959abce526/1/nT67qfosrShqyRJ2V1dF9hXo-nE.mft
rsync://rpki.ripe.net/repository/DEFAULT/nT67qfosrShqyRJ2V1dF9hXo-nE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:fd:73:52:32:f5:ee:7d:65:aa:a3:fa:82:fc:df:b9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9d3ebba9fa2cad286ac91276575745f615e8fa71
Validity
Not Before: Oct 19 15:01:32 2025 GMT
Not After : Oct 20 15:01:32 2025 GMT
Subject: CN=ac891b8aca6c0272e24a222185efc17cf839a127
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:d8:51:26:68:97:f1:dc:1d:c8:2a:48:f2:16:
72:3b:b5:3c:21:24:a0:cb:94:24:ad:ba:75:35:36:
83:23:43:23:36:24:9a:f9:3f:4e:c1:1d:39:de:5b:
87:8f:4d:32:ce:64:37:14:0c:f6:95:ac:33:a3:5b:
29:98:da:31:32:4b:5b:08:45:00:ff:bf:3d:64:c4:
ec:9e:41:34:b4:cd:10:2f:2b:d6:6c:ff:e8:03:42:
df:92:cd:d1:30:88:6a:9b:dd:68:34:39:77:6e:3f:
20:f6:42:82:0b:5d:04:42:fb:03:19:7c:c0:50:7e:
c5:e7:f4:46:05:8a:63:ae:0b:e6:df:b7:c9:1f:95:
3e:89:06:8c:3c:90:dc:69:e0:a3:5a:d0:8c:72:c1:
06:4c:3a:42:c0:17:78:ae:57:e9:e9:e4:a9:55:e6:
a6:10:9a:3a:ac:0d:a2:f8:2b:8e:6b:47:28:06:d5:
eb:c4:f9:1f:40:05:05:4a:3a:3c:59:df:8b:05:16:
2b:ae:bd:83:cd:16:13:00:15:20:4b:e1:5f:83:72:
7e:d3:f2:e8:32:b3:ae:4d:02:e3:93:33:af:cf:cc:
5c:79:52:c6:69:53:c9:0b:0e:99:74:04:28:d8:8b:
ba:d7:06:ef:ca:c1:19:17:eb:c1:9c:20:e8:37:0e:
b7:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:89:1B:8A:CA:6C:02:72:E2:4A:22:21:85:EF:C1:7C:F8:39:A1:27
X509v3 Authority Key Identifier:
keyid:9D:3E:BB:A9:FA:2C:AD:28:6A:C9:12:76:57:57:45:F6:15:E8:FA:71
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nT67qfosrShqyRJ2V1dF9hXo-nE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/9ff9c7-d329-45a6-898a-9d959abce526/1/nT67qfosrShqyRJ2V1dF9hXo-nE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/9ff9c7-d329-45a6-898a-9d959abce526/1/nT67qfosrShqyRJ2V1dF9hXo-nE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2a:9e:66:6e:5d:e0:1b:7b:c6:42:63:c7:02:db:1d:84:f9:bd:
b8:35:4b:19:8b:0b:93:29:81:50:30:bb:7c:e4:c2:18:1f:4e:
d6:2e:b3:98:1d:12:94:8d:cb:5d:ff:fb:71:fa:06:b3:5b:af:
13:8d:06:3b:63:84:f5:5b:05:84:59:27:85:32:bd:34:a6:38:
0a:2a:6e:89:bc:6f:75:14:26:fd:12:da:53:a0:1f:2b:30:82:
e8:c1:0d:fd:42:35:78:78:4b:2b:83:7f:41:da:03:97:3d:0c:
93:a5:ae:1c:cb:20:1f:e8:12:27:98:b4:e5:23:c1:7c:6b:a3:
88:4b:b7:7a:c6:a4:04:b1:9e:7d:64:d8:04:dd:b3:aa:dd:97:
79:d0:bb:86:82:cc:a2:b0:81:cc:f1:0a:fd:4d:2c:e7:eb:24:
ac:02:d1:b8:08:33:bb:61:94:d9:03:41:78:ae:7d:e5:9b:00:
92:ea:57:dc:8a:a9:22:8d:01:aa:a3:80:48:a2:3c:a8:ed:64:
93:e2:74:79:36:8b:db:20:3b:4a:c8:3e:2a:eb:28:ec:a4:8c:
31:49:f1:41:e2:3d:50:f3:db:6d:fc:af:41:04:bd:4f:4d:be:
c2:f2:0b:e4:4e:66:9e:a0:ea:ee:82:ff:40:c1:17:04:95:61:
d5:53:3c:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 20:59:57 2025 by rpki-client