Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5c/2dbe04-43a8-4963-8e86-3fe8f896e551/1/nynoVUAgve-hfFVhQ4-0uvWDH1I.mft
File: nynoVUAgve-hfFVhQ4-0uvWDH1I.mft (raw, json)
Hash identifier: DUs7oKdlA6CJATcu0K2E9ckjuJnOwOE0UmzQUrig9dM=
Subject key identifier: C4:0C:60:81:38:44:38:0D:69:0E:9B:10:EE:5D:63:EC:5E:54:97:75
Authority key identifier: 9F:29:E8:55:40:20:BD:EF:A1:7C:55:61:43:8F:B4:BA:F5:83:1F:52
Certificate issuer: /CN=9f29e8554020bdefa17c5561438fb4baf5831f52
Certificate serial: 0199FBEB5E2D772178B68B0901EDD8735662
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nynoVUAgve-hfFVhQ4-0uvWDH1I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5c/2dbe04-43a8-4963-8e86-3fe8f896e551/1/nynoVUAgve-hfFVhQ4-0uvWDH1I.mft
Manifest number: 09FB
Signing time: Sun 19 Oct 2025 10:02:10 +0000
Manifest this update: Sun 19 Oct 2025 10:02:10 +0000
Manifest next update: Mon 20 Oct 2025 10:02:10 +0000
Files and hashes: 1: ZcSRf0HxnWHQIw5MIAf_WL9oY6A.roa (hash: cP2ZkY5lLDgrJYkw2lqKqOmENJRMWCl82XCDZbZfylY=)
2: dk4GVxnPxj9mrIWRHBmkYZR_RAY.roa (hash: eaMuW15awNbcED9U+mZfT6o28nxoJ9RTD5vuUNkkC90=)
3: nynoVUAgve-hfFVhQ4-0uvWDH1I.crl (hash: d+H35/A3JwKNR1rfYuhxmOotMIwRwADscOIpmcgd/xM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5c/2dbe04-43a8-4963-8e86-3fe8f896e551/1/nynoVUAgve-hfFVhQ4-0uvWDH1I.crl
rsync://rpki.ripe.net/repository/DEFAULT/5c/2dbe04-43a8-4963-8e86-3fe8f896e551/1/nynoVUAgve-hfFVhQ4-0uvWDH1I.mft
rsync://rpki.ripe.net/repository/DEFAULT/nynoVUAgve-hfFVhQ4-0uvWDH1I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:eb:5e:2d:77:21:78:b6:8b:09:01:ed:d8:73:56:62
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9f29e8554020bdefa17c5561438fb4baf5831f52
Validity
Not Before: Oct 19 10:02:10 2025 GMT
Not After : Oct 20 10:02:10 2025 GMT
Subject: CN=c40c60813844380d690e9b10ee5d63ec5e549775
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:d4:d6:e7:63:49:0f:28:ad:83:53:de:51:21:
ab:b5:5f:59:c5:d1:e0:35:5a:64:71:4d:53:36:19:
7c:7a:ba:48:75:a4:d4:f1:31:be:43:48:40:72:33:
2e:ef:65:38:1e:c5:a2:69:ad:f1:ff:b5:45:94:08:
18:86:d1:3f:d5:c8:de:f9:24:f8:d0:32:c6:ae:62:
27:c6:f6:f0:b0:d2:8d:9c:78:55:08:7a:1f:93:d1:
8f:f3:1d:b9:9b:82:ec:bf:d3:52:86:ac:fa:cf:cd:
a9:4f:11:2c:b7:a1:53:8c:45:13:25:43:02:62:db:
44:bc:89:6a:f5:20:51:1c:a5:eb:fb:a6:69:06:49:
e4:9a:c7:cb:64:7b:5e:a5:4e:5b:6f:58:70:2a:ab:
bb:88:c8:56:7a:bb:c6:48:d1:bc:51:ab:b4:1c:44:
29:26:72:0b:35:79:bd:cd:23:03:8f:be:5d:cf:78:
3c:36:41:9b:ae:7c:0d:ce:73:3b:62:37:8f:b1:80:
df:b1:63:66:9a:6d:af:08:6c:4d:0a:d8:18:f6:c9:
fb:81:a0:30:8c:98:87:24:c2:df:48:cd:09:c4:de:
0e:b0:68:c0:59:b3:dc:da:4e:9c:c9:a0:bc:a8:fd:
c0:8e:20:e4:f6:72:e4:20:f1:99:19:30:53:14:41:
d0:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:0C:60:81:38:44:38:0D:69:0E:9B:10:EE:5D:63:EC:5E:54:97:75
X509v3 Authority Key Identifier:
keyid:9F:29:E8:55:40:20:BD:EF:A1:7C:55:61:43:8F:B4:BA:F5:83:1F:52
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nynoVUAgve-hfFVhQ4-0uvWDH1I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/2dbe04-43a8-4963-8e86-3fe8f896e551/1/nynoVUAgve-hfFVhQ4-0uvWDH1I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/2dbe04-43a8-4963-8e86-3fe8f896e551/1/nynoVUAgve-hfFVhQ4-0uvWDH1I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3c:00:dd:fe:3a:99:aa:5c:0c:f3:dc:bf:81:a2:01:ed:69:37:
8f:49:ff:bc:69:c9:ae:e2:95:f3:e2:59:08:64:54:de:9d:ca:
61:f5:02:f0:58:42:07:47:3b:7a:e5:c9:b1:58:c3:c4:0d:bf:
51:66:ad:ca:a0:af:d2:3b:4b:54:e0:2a:f9:67:9b:41:9f:72:
f1:c1:fc:34:31:f4:0b:a1:8c:b2:e7:77:6e:03:48:ac:f4:c2:
70:c6:1f:25:ed:b6:65:21:56:69:82:6d:13:71:e7:2d:9e:87:
97:6e:cc:38:3a:c6:54:2d:0d:eb:55:31:af:44:d9:97:5c:41:
36:08:3c:79:06:a3:1b:c1:46:c0:cd:52:fc:17:60:3a:cf:53:
db:b8:95:b4:79:ee:14:65:83:14:f7:e0:d5:56:a8:b0:fc:ae:
f9:6a:59:e3:cb:20:fc:f8:36:23:93:31:e9:bb:b3:b7:d8:14:
3a:80:8b:4a:97:b8:17:7f:50:03:d1:2c:4c:b2:ec:70:ba:1a:
38:fd:34:bd:b3:4e:bc:0f:70:32:74:25:a9:87:02:fb:7f:62:
89:f5:48:bf:1e:13:51:e8:03:62:54:6f:81:e5:ee:a2:a1:9f:
bc:d2:39:d6:73:56:fc:11:6f:14:3e:89:06:28:cb:99:60:bf:
94:b8:a5:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:32:34 2025 by rpki-client