Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/c3c45f-5f1c-47f2-910d-396ad701230e/1/nJPrin0Z_9eAR2Ws_c8iYMbA1lk.mft
File: nJPrin0Z_9eAR2Ws_c8iYMbA1lk.mft (raw, json)
Hash identifier: igJiyBLFtMCz4IheLWM0Gr88+g5hW5zhJxHQVWoKVG0=
Subject key identifier: 65:6D:6A:73:9E:6B:12:C8:19:43:BB:A1:7A:40:FA:8C:AC:CF:FF:65
Authority key identifier: 9C:93:EB:8A:7D:19:FF:D7:80:47:65:AC:FD:CF:22:60:C6:C0:D6:59
Certificate issuer: /CN=9c93eb8a7d19ffd7804765acfdcf2260c6c0d659
Certificate serial: 0199FDD95C2AFE0E09D52F6F195089AF7BBF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nJPrin0Z_9eAR2Ws_c8iYMbA1lk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/70/c3c45f-5f1c-47f2-910d-396ad701230e/1/nJPrin0Z_9eAR2Ws_c8iYMbA1lk.mft
Manifest number: 0E76
Signing time: Sun 19 Oct 2025 19:01:44 +0000
Manifest this update: Sun 19 Oct 2025 19:01:44 +0000
Manifest next update: Mon 20 Oct 2025 19:01:44 +0000
Files and hashes: 1: jjPkPnEOvwVnAAg20Sm72ha1828.roa (hash: qBKDLKoYMFIUxr740I0l1MbmN1H/LYeCtP9acHybLHY=)
2: nJPrin0Z_9eAR2Ws_c8iYMbA1lk.crl (hash: +kAWNj7j05Sg7JIk/Xp82uMf5aQdrmqn02mBenMVq2Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/70/c3c45f-5f1c-47f2-910d-396ad701230e/1/nJPrin0Z_9eAR2Ws_c8iYMbA1lk.crl
rsync://rpki.ripe.net/repository/DEFAULT/70/c3c45f-5f1c-47f2-910d-396ad701230e/1/nJPrin0Z_9eAR2Ws_c8iYMbA1lk.mft
rsync://rpki.ripe.net/repository/DEFAULT/nJPrin0Z_9eAR2Ws_c8iYMbA1lk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 19:01:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fd:d9:5c:2a:fe:0e:09:d5:2f:6f:19:50:89:af:7b:bf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9c93eb8a7d19ffd7804765acfdcf2260c6c0d659
Validity
Not Before: Oct 19 19:01:44 2025 GMT
Not After : Oct 20 19:01:44 2025 GMT
Subject: CN=656d6a739e6b12c81943bba17a40fa8caccfff65
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:75:44:00:79:48:e7:0a:08:cc:50:94:72:29:
f1:59:08:8b:24:6f:9f:1b:fc:00:ac:76:62:13:ff:
65:b7:d8:75:41:10:41:2e:93:91:bf:a6:b1:e2:de:
82:48:d6:c6:2a:67:12:9c:51:48:77:8a:82:5f:8b:
c1:94:4d:5a:93:30:37:31:15:9c:da:9c:28:25:30:
63:4d:fe:b3:91:78:17:29:a0:52:e7:5a:f8:b3:c0:
02:8f:0b:3e:9c:13:4c:9b:8c:90:4e:71:c2:5e:cf:
e0:9e:a3:24:49:b4:64:df:7b:dd:98:9f:92:aa:f6:
34:e9:9d:4f:81:f1:f8:80:5f:f9:4d:a9:61:11:d4:
02:5a:2b:53:76:03:66:70:97:6b:71:52:3b:0c:a6:
a9:23:95:ae:69:d2:73:55:b9:c8:be:81:a5:0e:25:
34:12:ee:fa:ac:80:cb:7c:6c:81:ce:a5:10:c5:a4:
2d:56:28:38:82:17:53:44:54:5b:48:e9:e6:3a:28:
21:df:71:e3:11:2e:e2:5f:4a:d8:68:d8:30:cc:b3:
c5:7b:ee:1e:be:e5:70:5f:3d:04:ff:64:bd:25:29:
b9:4e:0d:ec:97:d0:28:07:ae:c6:66:43:f2:c1:f7:
70:b7:66:4e:0c:b4:1e:a9:bf:c9:29:c3:be:a8:73:
e1:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:6D:6A:73:9E:6B:12:C8:19:43:BB:A1:7A:40:FA:8C:AC:CF:FF:65
X509v3 Authority Key Identifier:
keyid:9C:93:EB:8A:7D:19:FF:D7:80:47:65:AC:FD:CF:22:60:C6:C0:D6:59
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nJPrin0Z_9eAR2Ws_c8iYMbA1lk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/c3c45f-5f1c-47f2-910d-396ad701230e/1/nJPrin0Z_9eAR2Ws_c8iYMbA1lk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/70/c3c45f-5f1c-47f2-910d-396ad701230e/1/nJPrin0Z_9eAR2Ws_c8iYMbA1lk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4d:32:89:70:c2:0b:a3:e1:0c:36:2e:2a:1c:2a:a5:53:08:a8:
2f:81:eb:96:0c:49:f4:c3:37:35:3b:f3:b5:b9:d6:81:ec:49:
ce:0a:82:37:d3:7c:21:73:23:4a:81:b5:18:cd:5c:3e:08:ca:
fe:a6:2c:f3:e8:00:8b:69:00:13:a5:71:66:27:59:53:6a:cf:
78:55:3e:fa:da:27:ba:a2:d2:31:95:b6:cd:3a:44:f9:cc:c6:
9e:0a:08:af:24:43:87:75:2b:8b:58:8f:b0:2b:42:a2:d5:46:
48:6c:83:fe:6e:9b:06:e3:18:f3:c0:1c:76:8c:36:f7:a4:8e:
38:b9:64:06:64:09:d4:fa:63:b1:15:05:94:83:36:cf:79:cb:
c7:5e:77:ed:39:72:96:f5:19:cb:d2:54:96:73:03:e3:7a:73:
be:8a:42:56:7f:3e:61:50:03:37:7f:ed:74:93:0c:1c:64:7a:
12:c5:ab:90:29:d7:7b:8d:c7:bb:04:bb:55:6c:c2:e6:c2:26:
84:76:2f:55:1b:37:2d:dd:cd:dc:0c:5d:7d:77:2e:ec:ee:aa:
96:88:bf:cf:c5:ea:0c:23:4c:1c:65:8e:76:15:48:92:61:31:
08:f9:8d:43:bc:db:84:c0:70:78:f8:16:8d:bc:d6:fb:b4:0e:
01:29:4d:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 04:03:45 2025 by rpki-client