Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/d8ac58-9a61-4852-9f2f-26f39384874f/1/nQ4wgHks-p8V8D6z_XbKaMjN4iA.mft
File: nQ4wgHks-p8V8D6z_XbKaMjN4iA.mft (raw, json)
Hash identifier: PbWKCLqG+JwAoaX/4IGpNW/h0aajQAiG99ZdGQMO36U=
Subject key identifier: D0:78:D2:82:5B:ED:57:27:60:91:3F:D8:9A:37:15:C8:0A:20:67:8D
Authority key identifier: 9D:0E:30:80:79:2C:FA:9F:15:F0:3E:B3:FD:76:CA:68:C8:CD:E2:20
Certificate issuer: /CN=9d0e3080792cfa9f15f03eb3fd76ca68c8cde220
Certificate serial: 0199FC21C2F082EC45BF74057BD732CC027E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nQ4wgHks-p8V8D6z_XbKaMjN4iA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/d8ac58-9a61-4852-9f2f-26f39384874f/1/nQ4wgHks-p8V8D6z_XbKaMjN4iA.mft
Manifest number: 09FE
Signing time: Sun 19 Oct 2025 11:01:34 +0000
Manifest this update: Sun 19 Oct 2025 11:01:34 +0000
Manifest next update: Mon 20 Oct 2025 11:01:34 +0000
Files and hashes: 1: nQ4wgHks-p8V8D6z_XbKaMjN4iA.crl (hash: E9Ad5IoueoPB9brE9a0y7r64s+uH3w41P3XrGSafgxI=)
2: rXxUdbIPPXIqdDVbiUA9acHyJIM.roa (hash: 5bx7bg2hnSlwIm9l4N1LRlEvMvEQpIFQjXIt7GUC0r0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8b/d8ac58-9a61-4852-9f2f-26f39384874f/1/nQ4wgHks-p8V8D6z_XbKaMjN4iA.crl
rsync://rpki.ripe.net/repository/DEFAULT/8b/d8ac58-9a61-4852-9f2f-26f39384874f/1/nQ4wgHks-p8V8D6z_XbKaMjN4iA.mft
rsync://rpki.ripe.net/repository/DEFAULT/nQ4wgHks-p8V8D6z_XbKaMjN4iA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:21:c2:f0:82:ec:45:bf:74:05:7b:d7:32:cc:02:7e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9d0e3080792cfa9f15f03eb3fd76ca68c8cde220
Validity
Not Before: Oct 19 11:01:34 2025 GMT
Not After : Oct 20 11:01:34 2025 GMT
Subject: CN=d078d2825bed572760913fd89a3715c80a20678d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:08:45:fc:7e:10:34:77:63:02:c3:62:e5:a0:
e6:80:73:47:e2:94:7b:7c:b8:44:96:3e:a0:08:32:
b0:e6:81:8f:98:63:dd:04:ad:68:9f:0c:2d:f4:e2:
32:94:0e:e7:e1:69:70:30:ca:46:c0:e3:5d:23:49:
1c:d9:48:4b:de:36:5c:49:2b:ea:25:49:e4:5c:96:
75:33:be:6f:62:e1:5d:17:82:d4:fa:5e:e4:36:93:
86:6a:2b:8a:3d:4d:25:d2:cd:6b:09:b9:0b:72:60:
a9:8f:dc:31:7e:0a:53:2d:d1:99:e4:5e:d5:8b:32:
91:1c:94:a5:8a:4b:d0:7b:6e:47:f1:0c:3a:26:b5:
ac:0f:86:1f:83:98:ec:78:5e:ae:0e:7b:7e:43:6c:
3e:bc:53:af:e4:eb:16:47:a1:26:04:ca:87:ce:d4:
cf:83:eb:d3:bc:75:dc:ea:22:1b:cb:18:fe:c7:1e:
e2:2d:f6:60:ef:f3:df:50:94:16:f7:2c:d0:d2:b9:
27:29:6f:07:ec:6f:5c:70:8d:4b:bb:a5:95:e9:16:
1d:f4:59:9b:54:74:14:f2:e2:b7:4b:89:4c:2f:17:
6f:bf:9d:de:13:a2:40:5b:e1:71:7e:f1:23:18:d2:
ed:a0:41:b3:1f:ba:98:b4:ef:bd:eb:4c:a0:e7:e3:
4a:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:78:D2:82:5B:ED:57:27:60:91:3F:D8:9A:37:15:C8:0A:20:67:8D
X509v3 Authority Key Identifier:
keyid:9D:0E:30:80:79:2C:FA:9F:15:F0:3E:B3:FD:76:CA:68:C8:CD:E2:20
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nQ4wgHks-p8V8D6z_XbKaMjN4iA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/d8ac58-9a61-4852-9f2f-26f39384874f/1/nQ4wgHks-p8V8D6z_XbKaMjN4iA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/d8ac58-9a61-4852-9f2f-26f39384874f/1/nQ4wgHks-p8V8D6z_XbKaMjN4iA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
51:b6:7d:0b:66:50:1e:75:b2:86:af:d3:2f:65:48:4c:55:e3:
e1:52:43:f9:5c:bd:26:21:60:ad:1b:73:c5:16:7c:a1:e6:40:
3c:23:16:e6:0c:47:f8:3d:da:17:0d:af:67:b3:5d:62:8e:f3:
a3:1c:26:ce:34:8f:2e:7c:2b:a2:44:27:c9:15:d1:95:f6:e8:
e5:1a:65:a2:d1:4a:3e:68:e0:40:f7:f4:d9:3a:09:64:66:13:
4b:82:1e:b0:ee:ee:2f:d9:e9:df:b0:b0:1c:44:cc:5c:9f:1f:
a8:89:f0:f8:c5:46:ad:94:d0:30:77:ca:78:ea:f8:5c:5f:fa:
50:ee:b2:1f:bf:65:5e:76:c1:1b:4a:c8:f1:0a:5d:69:56:65:
05:db:c4:01:61:08:2b:6e:cf:45:51:fc:db:4b:81:33:0b:34:
40:c4:26:02:02:16:c4:4f:15:e4:5b:c5:a6:63:b0:f2:e3:90:
cf:11:de:a6:ff:1b:59:09:83:4c:69:be:04:49:8d:08:13:66:
56:d9:d7:7a:86:d8:3a:a7:9b:b2:ba:18:95:99:f8:45:13:5e:
13:57:72:0e:94:77:96:6e:74:16:aa:26:1d:18:ff:b3:31:db:
c3:02:77:7e:e8:f2:03:2c:51:23:3f:a4:d1:38:b1:0a:04:93:
42:7e:cc:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:40:05 2025 by rpki-client