Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/86/faa50f-4de1-4d1c-b803-19bf7810961b/1/nYwI9K2P6tNx2j58ArbP1on8pbo.mft
File: nYwI9K2P6tNx2j58ArbP1on8pbo.mft (raw, json)
Hash identifier: FwPcOMZTVb//YaXjyXE5KDRhmqj63ttUcSKjHj8Ty7I=
Subject key identifier: E5:46:43:80:31:54:55:E8:97:17:3C:F7:73:F4:B4:BC:D9:BC:9F:D3
Authority key identifier: 9D:8C:08:F4:AD:8F:EA:D3:71:DA:3E:7C:02:B6:CF:D6:89:FC:A5:BA
Certificate issuer: /CN=9d8c08f4ad8fead371da3e7c02b6cfd689fca5ba
Certificate serial: 0199FE7E2C09FF75358F9CB6253524AAE729
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nYwI9K2P6tNx2j58ArbP1on8pbo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/86/faa50f-4de1-4d1c-b803-19bf7810961b/1/nYwI9K2P6tNx2j58ArbP1on8pbo.mft
Manifest number: 0A40
Signing time: Sun 19 Oct 2025 22:01:45 +0000
Manifest this update: Sun 19 Oct 2025 22:01:45 +0000
Manifest next update: Mon 20 Oct 2025 22:01:45 +0000
Files and hashes: 1: nJBx_aFvLLmg9WQ03TK76fpJWGM.roa (hash: 02dNoeVE9Sy74k3q/XOECz/G2VHIiUVMONX/87WPyrU=)
2: nYwI9K2P6tNx2j58ArbP1on8pbo.crl (hash: o1kdht2rYAPz8T5bKHcvsv2YSw1iz6biTM7MuadO+xU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/86/faa50f-4de1-4d1c-b803-19bf7810961b/1/nYwI9K2P6tNx2j58ArbP1on8pbo.crl
rsync://rpki.ripe.net/repository/DEFAULT/86/faa50f-4de1-4d1c-b803-19bf7810961b/1/nYwI9K2P6tNx2j58ArbP1on8pbo.mft
rsync://rpki.ripe.net/repository/DEFAULT/nYwI9K2P6tNx2j58ArbP1on8pbo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 15:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fe:7e:2c:09:ff:75:35:8f:9c:b6:25:35:24:aa:e7:29
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9d8c08f4ad8fead371da3e7c02b6cfd689fca5ba
Validity
Not Before: Oct 19 22:01:45 2025 GMT
Not After : Oct 20 22:01:45 2025 GMT
Subject: CN=e5464380315455e897173cf773f4b4bcd9bc9fd3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:44:64:b4:cb:44:32:62:40:0c:b7:40:c0:58:
dd:9b:12:78:09:74:54:31:87:c4:53:a7:8b:e7:a5:
dc:3c:bf:58:4d:3e:92:d5:f8:38:2e:6c:15:7a:7c:
c1:75:26:df:0f:0c:77:5a:c6:b5:ae:82:ef:e5:fd:
e3:6a:59:f2:3e:58:f2:c9:d4:a8:0f:9d:7d:b5:91:
a9:b6:bb:32:bb:2e:c2:d4:4a:ef:74:2f:09:60:f0:
6d:b7:c0:78:21:86:ce:5b:2e:58:aa:d1:eb:38:1c:
9c:03:85:fa:b0:3a:1a:b1:82:4b:11:5a:04:3f:ce:
c7:a8:3b:0d:84:8f:ad:ff:96:1c:bb:de:b4:d5:c0:
bd:5c:31:53:b2:61:0e:69:c9:9a:1c:32:10:35:14:
c7:87:4e:77:77:9c:7d:6f:b8:bd:88:49:95:a7:42:
ae:03:6b:64:13:b8:ce:64:69:18:38:45:56:31:09:
24:f6:f2:17:9a:af:54:dd:58:d5:3c:28:43:15:f2:
e7:20:6a:48:a6:38:3e:e2:ad:5b:6e:d7:21:f7:2d:
ba:3a:f8:c2:ab:bf:96:a4:fd:98:2d:47:51:46:2f:
4a:61:e0:a0:07:93:6d:0d:5b:20:f5:f0:7d:c3:49:
f1:b7:bd:a5:e7:2f:3c:90:7b:b9:2a:ba:ad:b0:aa:
17:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:46:43:80:31:54:55:E8:97:17:3C:F7:73:F4:B4:BC:D9:BC:9F:D3
X509v3 Authority Key Identifier:
keyid:9D:8C:08:F4:AD:8F:EA:D3:71:DA:3E:7C:02:B6:CF:D6:89:FC:A5:BA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nYwI9K2P6tNx2j58ArbP1on8pbo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/faa50f-4de1-4d1c-b803-19bf7810961b/1/nYwI9K2P6tNx2j58ArbP1on8pbo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/86/faa50f-4de1-4d1c-b803-19bf7810961b/1/nYwI9K2P6tNx2j58ArbP1on8pbo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0f:d7:16:fe:a3:96:78:fe:5d:85:08:db:c4:12:b5:4e:be:6e:
5e:f3:50:d6:ba:8c:64:d7:ac:24:b0:92:ae:18:d7:55:b9:c8:
30:0e:c5:05:e6:ea:42:99:8b:87:2e:11:23:44:85:d5:e3:08:
13:d6:46:cd:04:3f:cc:5a:ae:63:a4:62:9d:df:be:ee:c5:e0:
7d:d5:a7:40:f5:63:17:b5:0b:d4:79:5c:81:48:b4:2c:bc:d4:
07:e2:b5:81:39:4a:7a:0a:f2:ed:23:93:23:86:a3:1c:e3:42:
3e:a9:4d:cf:f5:ee:a8:d8:33:ba:61:c5:1d:53:8e:cc:99:10:
18:63:65:52:52:e4:fd:18:b5:01:3f:6d:ce:30:36:d0:53:46:
e3:07:cc:c3:04:f8:83:89:7e:db:4a:3e:7d:60:be:99:69:94:
cd:84:a7:36:1a:7b:72:fc:23:ee:1c:27:75:5b:6d:d8:c2:73:
f0:4c:96:f7:bf:4b:41:29:7b:37:49:26:5c:16:32:35:a3:32:
e7:68:18:0c:39:51:92:7c:6c:07:c5:a7:7f:33:e9:bf:97:ca:
26:85:ea:36:60:c9:ff:f0:ef:e2:64:98:5d:34:31:3a:56:e9:
76:ae:71:0d:29:46:4a:70:bb:5b:75:f8:33:00:f8:aa:1e:52:
e2:be:4b:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 01:17:43 2025 by rpki-client