Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6a/579479-7d4d-49c4-83c3-207e9b70c385/1/nBYm1f1UoXollC9v2VyDwOCIF7s.mft
File: nBYm1f1UoXollC9v2VyDwOCIF7s.mft (raw, json)
Hash identifier: EUNCsZWZPD29wBTs3wXOPbBtO2ilne7kKrlnO6/4CNA=
Subject key identifier: 4F:62:34:79:18:22:14:01:AB:0C:E1:98:BE:E9:57:47:A8:EF:21:E9
Authority key identifier: 9C:16:26:D5:FD:54:A1:7A:25:94:2F:6F:D9:5C:83:C0:E0:88:17:BB
Certificate issuer: /CN=9c1626d5fd54a17a25942f6fd95c83c0e08817bb
Certificate serial: 0199FFC7E4B64FC41FBB4EC05725A7C0642C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nBYm1f1UoXollC9v2VyDwOCIF7s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6a/579479-7d4d-49c4-83c3-207e9b70c385/1/nBYm1f1UoXollC9v2VyDwOCIF7s.mft
Manifest number: 0D76
Signing time: Mon 20 Oct 2025 04:01:54 +0000
Manifest this update: Mon 20 Oct 2025 04:01:54 +0000
Manifest next update: Tue 21 Oct 2025 04:01:54 +0000
Files and hashes: 1: idcg-tJ_CtGkzqKZfUKrfRvVQ_E.roa (hash: Nye8o2xtEJeY8siYmI8/lYTnzfEn8Ihz4z9R7JBQAZI=)
2: nBYm1f1UoXollC9v2VyDwOCIF7s.crl (hash: /T9IB6LV/xD3qVVfRe6G2rdDQJgOblK5G7aGuk2JtQw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6a/579479-7d4d-49c4-83c3-207e9b70c385/1/nBYm1f1UoXollC9v2VyDwOCIF7s.crl
rsync://rpki.ripe.net/repository/DEFAULT/6a/579479-7d4d-49c4-83c3-207e9b70c385/1/nBYm1f1UoXollC9v2VyDwOCIF7s.mft
rsync://rpki.ripe.net/repository/DEFAULT/nBYm1f1UoXollC9v2VyDwOCIF7s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 20:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:ff:c7:e4:b6:4f:c4:1f:bb:4e:c0:57:25:a7:c0:64:2c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9c1626d5fd54a17a25942f6fd95c83c0e08817bb
Validity
Not Before: Oct 20 04:01:54 2025 GMT
Not After : Oct 21 04:01:54 2025 GMT
Subject: CN=4f62347918221401ab0ce198bee95747a8ef21e9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:15:93:47:ef:03:7f:f6:41:5a:e3:7a:03:8b:
35:05:0c:df:b8:07:ba:a8:dd:bf:dd:7b:07:b8:da:
d2:1c:7e:a4:ce:a2:cf:cb:3a:d5:4f:22:cc:a6:63:
76:a7:e5:c2:28:03:b3:d3:df:46:f2:88:24:25:ce:
1e:ad:3a:de:89:33:e5:19:3e:ae:01:e9:d2:9e:ee:
ef:73:e7:35:6d:41:ce:53:5a:c6:9a:8b:d3:02:98:
b0:a4:4f:27:e6:2f:e0:cf:b8:51:23:a0:29:35:a5:
18:f5:01:bb:95:bc:08:84:27:3d:73:0a:c7:76:bb:
54:51:7c:40:92:ea:c6:0a:c8:bc:7c:73:38:1d:e1:
09:55:c0:0d:55:ae:60:2f:f8:71:b3:91:89:24:18:
14:20:02:79:05:2e:b7:2c:a6:c1:8a:8f:31:ba:1a:
46:3e:1e:a0:bd:db:8f:14:8a:3d:cf:ab:72:29:90:
f8:41:0e:78:68:4b:3a:2f:65:6c:8f:66:f8:bb:b1:
e7:7b:9f:c6:41:a0:c8:30:6a:a0:b5:8f:ce:a7:93:
74:0b:a0:03:9e:19:0c:64:6d:34:1b:65:b6:b8:8d:
a1:43:df:b2:07:80:13:b7:cd:1e:7c:c1:d8:19:9c:
6a:9c:43:b4:33:33:6f:f1:a2:fd:c1:6d:e2:06:d3:
64:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:62:34:79:18:22:14:01:AB:0C:E1:98:BE:E9:57:47:A8:EF:21:E9
X509v3 Authority Key Identifier:
keyid:9C:16:26:D5:FD:54:A1:7A:25:94:2F:6F:D9:5C:83:C0:E0:88:17:BB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nBYm1f1UoXollC9v2VyDwOCIF7s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/579479-7d4d-49c4-83c3-207e9b70c385/1/nBYm1f1UoXollC9v2VyDwOCIF7s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/579479-7d4d-49c4-83c3-207e9b70c385/1/nBYm1f1UoXollC9v2VyDwOCIF7s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4a:72:0c:dc:2a:e8:14:9e:9b:d6:f2:47:c9:01:f7:ad:bc:ea:
01:42:79:00:2a:1e:78:29:d9:93:57:21:3d:c7:25:ec:dd:e9:
09:e5:09:84:99:09:fe:a3:da:21:26:1d:c7:fe:7b:8a:cf:91:
b7:44:89:0f:fa:8d:7d:1d:85:cb:cd:2c:17:8d:f1:3d:54:aa:
2c:57:2c:c5:6b:23:0a:3f:fb:ae:6a:d7:5d:ea:ec:19:5d:65:
dc:10:2b:47:7c:d8:d1:38:11:8b:91:ce:18:e1:f1:5f:9e:61:
e6:d2:11:dd:6e:b7:c3:68:63:70:f0:d1:3a:56:b2:b0:ec:a2:
31:4b:b5:cd:86:5d:ca:85:b6:f3:76:9f:14:bb:88:11:3d:47:
83:2b:3a:0f:1a:f3:b2:3f:0c:d1:06:d2:6c:84:03:2b:f5:42:
1d:6a:16:4f:59:3e:93:6e:8c:83:58:c6:c7:21:cd:80:2a:ad:
96:be:7e:ec:da:03:2f:ff:8f:a7:cd:b0:ec:2e:96:f0:55:65:
0c:7a:12:8a:54:6e:a9:fb:a3:f2:3c:c2:2b:f1:87:2c:b1:96:
54:95:ad:7a:51:96:4d:60:05:dc:7f:66:dd:fe:e2:74:c2:8a:
e2:d8:e1:36:c4:ea:e2:0d:b8:7b:9c:39:43:f4:f1:85:37:b8:
bc:91:a4:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 06:49:18 2025 by rpki-client