Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/83/79a605-6072-4142-856e-d8e1835693cd/1/nrKJ89nhO-Z6JEtyvSSUWywyCmM.mft
File: nrKJ89nhO-Z6JEtyvSSUWywyCmM.mft (raw, json)
Hash identifier: ABlf3n44+cWJeDQBPJ/iZ7mQMwWKNKxqKsz9KqawXFY=
Subject key identifier: 0A:7C:AE:58:56:9F:E2:52:AE:DE:87:25:F4:9F:3E:F4:5D:F2:CD:FD
Authority key identifier: 9E:B2:89:F3:D9:E1:3B:E6:7A:24:4B:72:BD:24:94:5B:2C:32:0A:63
Certificate issuer: /CN=9eb289f3d9e13be67a244b72bd24945b2c320a63
Certificate serial: 0199FB7CAF990B743A1FDBC4D7C46A9FA1D0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nrKJ89nhO-Z6JEtyvSSUWywyCmM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/83/79a605-6072-4142-856e-d8e1835693cd/1/nrKJ89nhO-Z6JEtyvSSUWywyCmM.mft
Manifest number: 10BE
Signing time: Sun 19 Oct 2025 08:01:16 +0000
Manifest this update: Sun 19 Oct 2025 08:01:16 +0000
Manifest next update: Mon 20 Oct 2025 08:01:16 +0000
Files and hashes: 1: ftSo4Eg6cJOGHafsmdK7G5PlnAg.roa (hash: 6neyZwVBnZqx4smqdcitrT/v+77yfwQ7GJ0kV3y5qqs=)
2: nrKJ89nhO-Z6JEtyvSSUWywyCmM.crl (hash: LANjKB6vAzs5WkgnqwzgO1ix1dwN/TpxAI56byE9QrE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/83/79a605-6072-4142-856e-d8e1835693cd/1/nrKJ89nhO-Z6JEtyvSSUWywyCmM.crl
rsync://rpki.ripe.net/repository/DEFAULT/83/79a605-6072-4142-856e-d8e1835693cd/1/nrKJ89nhO-Z6JEtyvSSUWywyCmM.mft
rsync://rpki.ripe.net/repository/DEFAULT/nrKJ89nhO-Z6JEtyvSSUWywyCmM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 08:01:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:7c:af:99:0b:74:3a:1f:db:c4:d7:c4:6a:9f:a1:d0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9eb289f3d9e13be67a244b72bd24945b2c320a63
Validity
Not Before: Oct 19 08:01:16 2025 GMT
Not After : Oct 20 08:01:16 2025 GMT
Subject: CN=0a7cae58569fe252aede8725f49f3ef45df2cdfd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:aa:23:93:f0:49:94:c2:2d:6b:ce:49:01:d4:
78:a3:f2:31:83:6b:9f:e0:39:60:6a:2f:6b:39:27:
85:de:de:96:0c:ec:9e:b8:3c:38:4b:01:92:55:88:
eb:be:fa:35:d9:f9:53:24:c9:40:2c:fa:45:2e:0b:
b4:0e:c4:bf:1d:4c:ea:a2:9e:b0:91:37:03:14:f4:
74:99:63:30:83:2b:6f:e1:f6:f4:d5:ec:c9:f7:e1:
12:b4:b0:ff:19:63:31:a1:e1:e6:c3:d7:59:1f:84:
71:cd:f4:c6:0c:91:89:03:b6:61:dd:ef:e6:a1:e1:
e5:67:25:85:11:02:57:6b:b6:ef:32:f9:25:34:15:
42:97:e5:dc:45:24:2e:96:9e:a1:81:5d:ee:78:20:
f7:36:7e:4c:4e:af:1e:9f:a2:d5:18:6f:31:d2:f3:
a8:54:6b:af:31:a4:c6:6e:81:26:ec:53:62:c0:14:
34:6f:c5:fd:1b:f8:22:d2:e4:39:86:79:dc:b5:da:
57:7d:8c:15:3b:94:31:63:67:34:1b:42:6f:37:4d:
f2:9d:24:b1:a7:e9:69:00:2b:74:a0:0a:44:0c:7a:
7c:5a:51:43:ce:36:29:ef:99:e4:d0:ab:42:78:cb:
de:2d:ea:fc:57:4a:46:42:24:b8:cb:58:f5:b3:8c:
4a:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:7C:AE:58:56:9F:E2:52:AE:DE:87:25:F4:9F:3E:F4:5D:F2:CD:FD
X509v3 Authority Key Identifier:
keyid:9E:B2:89:F3:D9:E1:3B:E6:7A:24:4B:72:BD:24:94:5B:2C:32:0A:63
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nrKJ89nhO-Z6JEtyvSSUWywyCmM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/83/79a605-6072-4142-856e-d8e1835693cd/1/nrKJ89nhO-Z6JEtyvSSUWywyCmM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/83/79a605-6072-4142-856e-d8e1835693cd/1/nrKJ89nhO-Z6JEtyvSSUWywyCmM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
24:4a:a4:4e:66:3d:49:29:b8:3c:aa:2c:6b:0f:7e:eb:4e:6e:
94:5c:59:0a:00:a6:fa:35:a9:66:42:46:a1:9d:c2:ae:78:33:
32:a0:b2:4a:e9:e7:bb:25:99:5f:59:07:07:a1:f3:69:7d:ee:
9c:29:4e:c1:4f:ab:d8:e4:94:9a:81:53:dd:4a:fe:4b:4a:f8:
14:7d:f6:c5:6c:db:21:ba:6c:ff:e2:39:39:ba:fd:4b:82:35:
eb:ff:99:3f:7a:c9:4b:19:5a:d2:8d:8e:52:c6:32:fe:79:d7:
5d:63:ef:8b:e1:f9:9e:b8:8b:a6:04:b0:c4:fb:8f:30:36:ad:
aa:b5:2c:35:5d:36:c9:5a:04:53:43:27:6f:df:a7:59:56:ee:
a2:55:8c:67:32:f8:82:ad:b2:e7:23:56:56:34:5c:10:4e:34:
d1:27:bc:fd:ad:60:92:08:96:ab:c5:ac:04:fd:6f:0e:5f:06:
7b:29:be:2d:13:d3:d9:99:d7:13:b4:b1:a7:d7:b2:70:e8:af:
dd:3b:d9:1d:79:52:e0:ac:3f:5e:71:67:ca:c6:5e:7a:23:07:
da:49:70:ae:48:92:6a:a5:be:65:5b:97:34:f2:ba:6d:a3:f4:
68:ed:98:1c:8b:6e:f2:6e:bb:80:3f:5d:25:89:43:73:33:f1:
58:99:2c:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 18:20:16 2025 by rpki-client