Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8d/4b7c2e-089f-4708-9184-2a84acbe07ee/1/rNa-l7z-Er7L6Ct4QQR_V5cqk1o.mft
File: rNa-l7z-Er7L6Ct4QQR_V5cqk1o.mft (raw, json)
Hash identifier: qkfUaH3oDhBn9XgZiyFJXTnTUwxb6SBsq4BkbBi8aSs=
Subject key identifier: 9B:59:AC:45:E0:5D:04:B4:C9:12:7F:0B:FF:99:E7:05:CD:AB:EB:2D
Authority key identifier: AC:D6:BE:97:BC:FE:12:BE:CB:E8:2B:78:41:04:7F:57:97:2A:93:5A
Certificate issuer: /CN=acd6be97bcfe12becbe82b7841047f57972a935a
Certificate serial: 0199FDD94BEAE64719C9F01464F85B47D7AC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rNa-l7z-Er7L6Ct4QQR_V5cqk1o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8d/4b7c2e-089f-4708-9184-2a84acbe07ee/1/rNa-l7z-Er7L6Ct4QQR_V5cqk1o.mft
Manifest number: 06B7
Signing time: Sun 19 Oct 2025 19:01:40 +0000
Manifest this update: Sun 19 Oct 2025 19:01:40 +0000
Manifest next update: Mon 20 Oct 2025 19:01:40 +0000
Files and hashes: 1: 6wOJsAVY-euwnRWmrQyAWiR15SI.roa (hash: is8qHNDUGOGtnmeZTaDPuu15VlXH7W1zJ6ndggR7ME0=)
2: rNa-l7z-Er7L6Ct4QQR_V5cqk1o.crl (hash: lAeKyWMIs0uU7SpPCr+yRvDiha5Df0nYeiO24/Ncy7I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8d/4b7c2e-089f-4708-9184-2a84acbe07ee/1/rNa-l7z-Er7L6Ct4QQR_V5cqk1o.crl
rsync://rpki.ripe.net/repository/DEFAULT/8d/4b7c2e-089f-4708-9184-2a84acbe07ee/1/rNa-l7z-Er7L6Ct4QQR_V5cqk1o.mft
rsync://rpki.ripe.net/repository/DEFAULT/rNa-l7z-Er7L6Ct4QQR_V5cqk1o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fd:d9:4b:ea:e6:47:19:c9:f0:14:64:f8:5b:47:d7:ac
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=acd6be97bcfe12becbe82b7841047f57972a935a
Validity
Not Before: Oct 19 19:01:40 2025 GMT
Not After : Oct 20 19:01:40 2025 GMT
Subject: CN=9b59ac45e05d04b4c9127f0bff99e705cdabeb2d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:f3:ab:32:6b:5c:d8:02:1e:07:28:9c:27:a4:
73:8b:a6:51:3a:98:aa:8c:bf:57:6f:ee:3d:f9:ae:
8f:b7:14:14:80:2d:49:c7:58:ad:44:6d:50:46:8b:
b2:9b:bf:39:63:1f:2f:18:ff:b4:5c:7a:9e:4d:20:
04:a1:4f:4e:83:b3:c9:5b:a8:fb:9f:fb:1e:9d:2b:
7f:dd:ca:47:84:24:99:80:af:7a:83:dd:fd:6c:f6:
c0:f4:fc:71:9f:f6:b7:71:19:43:37:34:5b:3c:c1:
d9:80:72:62:c2:8e:2f:a5:a4:e7:c1:f5:a7:02:71:
c6:3a:78:5a:cc:d0:6a:59:89:b5:ae:e9:af:e4:61:
93:ed:dc:30:22:48:86:3f:53:44:9b:20:23:71:4c:
31:de:59:74:6d:b3:30:af:5e:1a:0c:bd:1c:c4:d1:
fb:bf:14:9a:7c:54:c9:74:17:68:9d:3f:f7:d6:47:
46:d5:93:a1:2f:e4:99:2b:25:5c:bd:d9:c6:a3:57:
3c:32:09:35:7f:e7:1f:ed:0c:5b:4f:99:89:a3:fc:
53:5f:7f:6e:90:cf:a3:08:a3:7a:19:a9:41:2e:8e:
2e:0a:ac:41:5b:c8:0d:9c:60:a5:d5:4c:3f:23:3d:
7d:c2:d7:e5:cf:af:e1:c6:84:2e:d5:b2:db:8e:88:
1c:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:59:AC:45:E0:5D:04:B4:C9:12:7F:0B:FF:99:E7:05:CD:AB:EB:2D
X509v3 Authority Key Identifier:
keyid:AC:D6:BE:97:BC:FE:12:BE:CB:E8:2B:78:41:04:7F:57:97:2A:93:5A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rNa-l7z-Er7L6Ct4QQR_V5cqk1o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/4b7c2e-089f-4708-9184-2a84acbe07ee/1/rNa-l7z-Er7L6Ct4QQR_V5cqk1o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/4b7c2e-089f-4708-9184-2a84acbe07ee/1/rNa-l7z-Er7L6Ct4QQR_V5cqk1o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5c:9f:29:05:f4:ad:22:32:27:90:c1:cc:a0:eb:39:af:f4:2b:
dd:03:1a:fb:da:9f:ed:79:dc:27:bf:91:ba:e6:59:01:a2:d1:
1d:24:78:86:f3:5f:aa:13:40:44:ea:ac:30:01:bf:8b:ab:c4:
fd:86:88:50:8d:1f:cd:76:6a:1f:60:13:82:c7:1b:1f:6b:b7:
47:df:fa:fb:03:58:36:99:9d:c8:c9:7b:61:6f:1f:5b:ca:ed:
29:26:dc:98:d2:68:c1:f3:53:2d:0b:7b:7c:64:78:02:d0:9b:
3f:c7:fe:ef:0e:5e:02:79:68:5e:88:14:aa:e0:a1:30:c1:af:
06:66:7c:b9:83:82:bb:82:50:95:ca:b9:d2:39:c8:39:2a:42:
2b:87:70:f9:a3:cf:92:07:7d:15:bd:c0:46:59:8e:c8:f7:cc:
ce:e5:56:5c:e8:eb:51:a9:9d:52:a8:56:10:30:a1:82:76:e7:
dd:f8:b6:f8:87:cf:bc:f1:0c:57:ea:e9:e1:b8:c7:3b:5e:f9:
de:aa:86:df:10:d8:07:01:3a:2c:2c:97:3d:41:77:b0:49:97:
60:29:74:eb:36:d6:63:46:57:62:0b:a6:55:8f:90:89:c8:5e:
d6:fd:c1:ef:a3:4e:a4:10:c7:a9:19:87:c2:49:37:4e:f8:1c:
a6:32:15:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 20:29:45 2025 by rpki-client