Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6f/5d6ebd-a8ee-474c-b71a-a642cc85bc71/1/niN_MrrhSoH9on6ylGDDoO2jQkA.mft
File: niN_MrrhSoH9on6ylGDDoO2jQkA.mft (raw, json)
Hash identifier: BUR3kkotwImTVdjpbRlJIjqcq+oZja3rfExecRDaRRU=
Subject key identifier: 5C:48:14:D7:B9:C0:AE:D7:6D:77:F3:11:11:A5:D8:A6:E3:10:3A:57
Authority key identifier: 9E:23:7F:32:BA:E1:4A:81:FD:A2:7E:B2:94:60:C3:A0:ED:A3:42:40
Certificate issuer: /CN=9e237f32bae14a81fda27eb29460c3a0eda34240
Certificate serial: 0199FD3452F071EE9119309BFA19B58CBF04
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/niN_MrrhSoH9on6ylGDDoO2jQkA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6f/5d6ebd-a8ee-474c-b71a-a642cc85bc71/1/niN_MrrhSoH9on6ylGDDoO2jQkA.mft
Manifest number: 0EE9
Signing time: Sun 19 Oct 2025 16:01:28 +0000
Manifest this update: Sun 19 Oct 2025 16:01:28 +0000
Manifest next update: Mon 20 Oct 2025 16:01:28 +0000
Files and hashes: 1: duyGpoRiUSXpX71VT4XYnZHmGlA.roa (hash: BUaqTN98K6qCPpPRz7Abj2KUlyE692OgtKSmoKCDJkM=)
2: niN_MrrhSoH9on6ylGDDoO2jQkA.crl (hash: JQnQaT2Q9Yt2qkDE2prgwo1irg23McEolwO707F1c9U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6f/5d6ebd-a8ee-474c-b71a-a642cc85bc71/1/niN_MrrhSoH9on6ylGDDoO2jQkA.crl
rsync://rpki.ripe.net/repository/DEFAULT/6f/5d6ebd-a8ee-474c-b71a-a642cc85bc71/1/niN_MrrhSoH9on6ylGDDoO2jQkA.mft
rsync://rpki.ripe.net/repository/DEFAULT/niN_MrrhSoH9on6ylGDDoO2jQkA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 15:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fd:34:52:f0:71:ee:91:19:30:9b:fa:19:b5:8c:bf:04
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9e237f32bae14a81fda27eb29460c3a0eda34240
Validity
Not Before: Oct 19 16:01:28 2025 GMT
Not After : Oct 20 16:01:28 2025 GMT
Subject: CN=5c4814d7b9c0aed76d77f31111a5d8a6e3103a57
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:2a:23:3e:c5:5b:8f:be:d0:83:12:4c:89:31:
f7:0a:71:e8:0f:e2:af:7f:be:f5:32:b2:06:ca:ef:
96:23:e8:8a:97:ed:84:cd:0a:f6:64:09:9c:9f:19:
35:68:bf:cb:56:37:37:8d:0f:82:b9:11:ff:52:f8:
fe:c7:6b:da:e1:20:46:a9:4b:24:c5:9e:b9:e6:be:
a8:93:8a:bd:6b:8d:f0:30:52:bd:38:88:91:32:dd:
e2:07:da:d3:65:7e:8e:ad:89:cc:b7:34:1f:2d:12:
81:e8:89:72:97:0a:3f:60:61:c8:f9:ef:8e:29:1e:
cd:0c:1b:40:e1:19:ab:b3:41:b0:ce:64:af:6b:0f:
ba:23:16:5e:62:af:40:e2:a2:42:46:77:75:54:4c:
02:fe:c7:6f:b7:ab:0e:55:58:8c:19:0e:d4:8d:c9:
be:e4:b4:db:59:eb:70:c4:d7:43:ec:02:66:a3:21:
e3:21:e2:77:32:01:9b:fb:be:c3:40:6d:21:46:4c:
1a:83:a1:3c:2c:68:5e:fa:d6:36:ef:e0:34:44:71:
74:75:05:14:a5:95:3a:1c:76:ca:c5:71:29:d8:cb:
f2:91:e8:0a:28:85:0e:4b:e2:c0:88:01:b3:29:93:
fb:0b:24:9a:d2:40:2a:30:6d:69:0c:7c:97:ec:10:
00:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:48:14:D7:B9:C0:AE:D7:6D:77:F3:11:11:A5:D8:A6:E3:10:3A:57
X509v3 Authority Key Identifier:
keyid:9E:23:7F:32:BA:E1:4A:81:FD:A2:7E:B2:94:60:C3:A0:ED:A3:42:40
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/niN_MrrhSoH9on6ylGDDoO2jQkA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/5d6ebd-a8ee-474c-b71a-a642cc85bc71/1/niN_MrrhSoH9on6ylGDDoO2jQkA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/5d6ebd-a8ee-474c-b71a-a642cc85bc71/1/niN_MrrhSoH9on6ylGDDoO2jQkA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
02:f7:08:d4:e6:95:41:b9:6b:ac:e0:77:8a:b9:da:77:dc:06:
89:b1:10:cb:40:6a:04:41:8f:0a:c7:09:d2:b8:e4:d0:4b:04:
6f:cc:74:33:19:12:d7:be:c4:f4:80:b2:3a:dd:df:82:39:01:
c7:45:24:52:5c:6d:68:76:3c:9f:59:2c:10:74:ee:f0:c3:b9:
fc:40:e7:bf:86:6f:2e:0a:37:6f:a5:fe:e7:a7:02:03:33:26:
9b:c4:68:3a:49:72:09:4c:ef:0f:1f:8c:44:ef:eb:25:9c:c3:
04:72:4e:0e:21:a5:55:f7:d1:cf:9b:23:76:17:74:e3:29:d0:
bb:6b:8e:97:04:43:19:84:e9:5f:ff:ee:ba:4c:51:43:5e:3a:
78:fc:48:1d:0f:10:7e:06:e7:0b:b5:b3:b8:5a:a7:aa:3d:8a:
00:c3:fa:78:eb:19:b9:48:1a:00:8b:77:63:20:5d:c9:30:57:
4e:b1:40:da:37:d3:f3:dd:37:2c:c5:56:0a:18:f9:90:24:95:
b7:c7:6c:f5:14:33:de:11:91:b0:cd:94:8a:d1:2a:f8:67:b6:
18:57:80:dd:88:8c:33:27:bd:75:13:e8:3a:d7:ed:56:72:8b:
c7:0f:d4:0b:79:5e:5c:ab:89:77:82:64:98:60:fc:95:19:35:
b8:1b:9d:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 22:30:04 2025 by rpki-client