Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7e/83e1fe-3d48-4cd6-a60b-6b27336d269e/1/nHEi8vf6UwvxqP_Plqkw9psw94Y.mft
File: nHEi8vf6UwvxqP_Plqkw9psw94Y.mft (raw, json)
Hash identifier: k/aZIVbI57WoOTar0xBV8oDLYT0JctLr+aTPvvxwyGQ=
Subject key identifier: 94:8D:E3:D6:B6:71:8F:76:D8:8E:95:C0:CD:BF:F6:15:E7:1F:FF:84
Authority key identifier: 9C:71:22:F2:F7:FA:53:0B:F1:A8:FF:CF:96:A9:30:F6:9B:30:F7:86
Certificate issuer: /CN=9c7122f2f7fa530bf1a8ffcf96a930f69b30f786
Certificate serial: 0199FC58C95E76FF7EB8713CFECBDD63DAD9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nHEi8vf6UwvxqP_Plqkw9psw94Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7e/83e1fe-3d48-4cd6-a60b-6b27336d269e/1/nHEi8vf6UwvxqP_Plqkw9psw94Y.mft
Manifest number: 03EA
Signing time: Sun 19 Oct 2025 12:01:41 +0000
Manifest this update: Sun 19 Oct 2025 12:01:41 +0000
Manifest next update: Mon 20 Oct 2025 12:01:41 +0000
Files and hashes: 1: Jf1OKx1njasgUepF7NPQjYFePjY.roa (hash: +FbY8K3ltw3fRzjGzqv270MBVQe3sjgedLIQtn2lOs0=)
2: nHEi8vf6UwvxqP_Plqkw9psw94Y.crl (hash: OPW2J3sSetXEH2D2nuaE4fT+cZyfuHAR7xOYG/K/NBs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7e/83e1fe-3d48-4cd6-a60b-6b27336d269e/1/nHEi8vf6UwvxqP_Plqkw9psw94Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/7e/83e1fe-3d48-4cd6-a60b-6b27336d269e/1/nHEi8vf6UwvxqP_Plqkw9psw94Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/nHEi8vf6UwvxqP_Plqkw9psw94Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:58:c9:5e:76:ff:7e:b8:71:3c:fe:cb:dd:63:da:d9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9c7122f2f7fa530bf1a8ffcf96a930f69b30f786
Validity
Not Before: Oct 19 12:01:41 2025 GMT
Not After : Oct 20 12:01:41 2025 GMT
Subject: CN=948de3d6b6718f76d88e95c0cdbff615e71fff84
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:ba:41:70:52:63:c0:57:18:f1:33:9d:de:5c:
7a:9a:09:7a:25:7c:ff:24:8f:3d:4a:3c:41:dc:e2:
80:61:40:10:d6:16:3f:04:0e:b5:4a:e4:ff:79:6f:
92:ef:e2:9b:21:6d:dd:53:60:9b:ff:4a:5c:0a:ab:
7e:6c:d7:91:89:76:19:72:7e:6f:82:8f:72:b3:ec:
b3:fa:54:b1:50:37:b2:2c:08:96:b3:8a:a6:6e:e3:
21:f1:fa:74:ca:db:aa:b9:9c:e8:7b:2b:5c:31:d5:
3d:44:97:14:b7:3b:f2:a9:1a:4f:7e:21:11:dd:53:
67:be:72:09:2b:33:93:f7:b1:67:9d:2c:87:23:1a:
db:61:d8:cc:90:59:e7:bd:16:31:44:d4:7f:d4:fc:
e4:fb:42:79:e4:cc:fc:91:37:27:4c:5a:5e:c2:57:
15:67:43:25:ed:4a:35:91:ee:fb:4b:48:45:a8:fb:
44:f0:33:3b:5e:e8:69:e5:89:44:af:1d:6d:2c:d9:
31:ea:50:22:72:65:d8:e8:ad:a0:2f:17:3f:8d:4f:
89:dd:26:dd:cf:ec:96:e2:27:6b:26:20:2b:c8:b3:
99:61:fe:dc:9c:b5:b5:1d:e3:49:55:49:ea:30:a6:
ca:b6:dd:84:0d:56:4c:fa:a3:bf:f1:29:02:a5:41:
28:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:8D:E3:D6:B6:71:8F:76:D8:8E:95:C0:CD:BF:F6:15:E7:1F:FF:84
X509v3 Authority Key Identifier:
keyid:9C:71:22:F2:F7:FA:53:0B:F1:A8:FF:CF:96:A9:30:F6:9B:30:F7:86
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nHEi8vf6UwvxqP_Plqkw9psw94Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/83e1fe-3d48-4cd6-a60b-6b27336d269e/1/nHEi8vf6UwvxqP_Plqkw9psw94Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/83e1fe-3d48-4cd6-a60b-6b27336d269e/1/nHEi8vf6UwvxqP_Plqkw9psw94Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
12:71:e6:57:c8:74:82:e5:7d:f6:31:17:76:5e:86:bf:1c:49:
0a:e3:d2:2a:db:71:13:ce:96:09:84:a4:6d:09:d8:a1:80:1d:
37:47:f9:a2:fc:78:49:1a:23:3f:92:5b:ca:46:c9:d2:ad:ac:
95:a1:ed:cd:04:ec:4a:6b:8a:34:da:ef:a6:72:c4:a9:47:02:
49:bd:28:9a:23:6f:15:3c:94:be:3c:b2:5d:35:b4:7f:83:56:
80:79:34:a0:dd:1a:d5:6c:90:83:09:75:41:81:fa:28:8b:07:
fb:e3:b3:4a:19:be:7f:cf:d1:14:2a:4a:76:6a:a7:1e:fa:db:
f0:80:d9:71:5f:97:38:90:bc:97:77:ae:a6:88:ec:f1:ca:99:
87:ca:0a:e2:b6:7b:96:33:9e:1f:7b:30:c6:b4:e3:85:87:bc:
87:a4:38:4e:86:4a:f6:bd:e4:f3:ce:a4:0f:d2:27:9b:bf:ea:
11:0c:8c:17:3a:bc:9c:bb:d6:47:99:bf:c8:23:3f:12:c1:82:
a8:7c:5c:ee:61:01:7a:d2:03:fb:5c:64:06:1f:79:f6:00:47:
6f:e9:d0:b4:4c:25:f9:38:79:a9:99:bc:9b:d0:b5:27:ba:e5:
25:78:6f:36:03:21:65:73:ef:62:6d:b9:dc:5b:68:30:dd:0e:
43:04:55:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 18:24:33 2025 by rpki-client