Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/90/304c76-9960-4979-860c-89a68e5a2110/1/nYnnxT6SR534EXHrqvI2CgN8Mkg.mft
File: nYnnxT6SR534EXHrqvI2CgN8Mkg.mft (raw, json)
Hash identifier: kpH4I0xVWJvdZ3itG/Bgs+aKkVDidCm8qVWI0CDNkGM=
Subject key identifier: DC:2A:4F:22:C1:D4:BF:49:C1:EF:4D:2B:0A:FF:7F:0F:30:D5:BB:3A
Authority key identifier: 9D:89:E7:C5:3E:92:47:9D:F8:11:71:EB:AA:F2:36:0A:03:7C:32:48
Certificate issuer: /CN=9d89e7c53e92479df81171ebaaf2360a037c3248
Certificate serial: 0199FBEB8A895D9492BE3E09ED259894F873
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nYnnxT6SR534EXHrqvI2CgN8Mkg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/90/304c76-9960-4979-860c-89a68e5a2110/1/nYnnxT6SR534EXHrqvI2CgN8Mkg.mft
Manifest number: 0F90
Signing time: Sun 19 Oct 2025 10:02:21 +0000
Manifest this update: Sun 19 Oct 2025 10:02:21 +0000
Manifest next update: Mon 20 Oct 2025 10:02:21 +0000
Files and hashes: 1: VuAVCD-mhoc5i9vtP0A_gPbk1w8.roa (hash: js4ojfLf5VJc1gb3AG5cMspDXL3JZYEKqGj/N4sAQU8=)
2: nYnnxT6SR534EXHrqvI2CgN8Mkg.crl (hash: cvNQDwXuhSndg590KtAbbEKx+a7JzT7DupT7UWwyaXo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/90/304c76-9960-4979-860c-89a68e5a2110/1/nYnnxT6SR534EXHrqvI2CgN8Mkg.crl
rsync://rpki.ripe.net/repository/DEFAULT/90/304c76-9960-4979-860c-89a68e5a2110/1/nYnnxT6SR534EXHrqvI2CgN8Mkg.mft
rsync://rpki.ripe.net/repository/DEFAULT/nYnnxT6SR534EXHrqvI2CgN8Mkg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:eb:8a:89:5d:94:92:be:3e:09:ed:25:98:94:f8:73
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9d89e7c53e92479df81171ebaaf2360a037c3248
Validity
Not Before: Oct 19 10:02:21 2025 GMT
Not After : Oct 20 10:02:21 2025 GMT
Subject: CN=dc2a4f22c1d4bf49c1ef4d2b0aff7f0f30d5bb3a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:4f:b4:2d:b4:90:2a:1b:6e:1e:3a:17:c9:e4:
98:24:e0:65:22:31:1c:e3:90:dd:6e:70:64:b6:58:
0f:c5:72:06:23:d6:36:6b:ef:07:c1:f9:aa:aa:08:
9d:53:14:7d:d1:13:00:af:b6:a8:b7:21:1d:02:7d:
12:87:87:58:31:ee:cf:d7:2f:2f:15:ec:61:13:54:
31:1d:8e:d4:d2:2b:33:80:a0:09:eb:93:69:c1:80:
e5:7f:e6:83:ff:96:44:78:a2:21:40:50:7c:fa:39:
e6:c6:a5:2c:79:ad:8a:cc:81:59:3d:2e:94:ec:1e:
4e:86:8c:62:57:3b:c0:ed:22:0e:38:47:68:17:f4:
54:67:2e:c6:f7:1d:d8:75:33:5f:c8:bd:c5:ef:5f:
7a:0e:d0:a3:a4:0b:a8:e7:b2:7f:24:bd:3b:ad:28:
30:ed:b8:8b:c4:27:76:50:91:88:a5:7d:3e:3c:e0:
de:4d:ba:f7:2a:bd:ac:81:a1:54:00:48:0f:f0:c7:
dc:b3:1b:c1:cc:05:20:f7:cd:01:31:55:d5:76:a6:
61:16:b4:b0:9a:b0:42:9e:ba:b0:29:f7:02:ed:6c:
0c:d9:1e:61:5b:52:4c:73:c0:e3:5c:d6:6f:c8:a5:
51:0d:32:05:81:0b:9b:ac:07:cb:41:5b:a4:08:db:
29:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:2A:4F:22:C1:D4:BF:49:C1:EF:4D:2B:0A:FF:7F:0F:30:D5:BB:3A
X509v3 Authority Key Identifier:
keyid:9D:89:E7:C5:3E:92:47:9D:F8:11:71:EB:AA:F2:36:0A:03:7C:32:48
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nYnnxT6SR534EXHrqvI2CgN8Mkg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/304c76-9960-4979-860c-89a68e5a2110/1/nYnnxT6SR534EXHrqvI2CgN8Mkg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/90/304c76-9960-4979-860c-89a68e5a2110/1/nYnnxT6SR534EXHrqvI2CgN8Mkg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
15:ae:1a:30:24:74:df:b2:41:22:ac:12:6e:db:6c:a1:61:ac:
ee:68:b1:eb:03:3b:44:7a:ef:eb:e5:f9:aa:88:43:e7:df:ad:
87:be:d4:eb:33:f6:08:ef:b0:60:45:9d:1c:c2:a5:5f:b0:97:
5a:3c:b8:6b:3f:8a:92:ff:e7:4a:c9:80:1a:99:48:6f:8a:3b:
8e:75:1d:a9:3b:96:78:96:29:4f:61:cb:a6:a9:a3:b2:68:ad:
2c:85:42:ee:60:1e:30:87:ce:73:70:c9:b8:73:a7:68:c8:c3:
60:a9:8e:e6:72:1e:59:64:b0:c9:7c:d1:75:54:64:63:b9:37:
01:0f:5d:de:b4:81:ec:c3:b4:b1:5d:e2:21:a6:ed:41:88:85:
f2:aa:b7:ad:be:c0:92:b4:98:30:47:ae:26:c6:d7:d2:af:04:
28:09:ca:98:08:48:4b:22:2a:88:cf:36:a4:5f:78:9d:be:0c:
6b:44:24:e3:0e:03:f1:2f:ba:01:7f:50:d5:20:12:07:47:25:
d9:96:af:0a:b2:05:c5:87:03:83:0c:de:31:eb:01:73:c6:ed:
8e:55:67:44:64:fd:81:7c:91:74:48:7d:ea:d5:c2:a6:ab:bc:
ba:71:9e:48:26:81:b1:03:d6:ce:fd:19:3c:1f:69:e4:bd:eb:
63:d3:37:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:39:26 2025 by rpki-client