Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/7f3546-4a87-4627-a019-341b9d64645d/1/b_nKXHa7Nak1PpsT4_zoDzYxYYA.mft
File: b_nKXHa7Nak1PpsT4_zoDzYxYYA.mft (raw, json)
Hash identifier: 2Z+s4VfGxJo0r3z+oQyfQqcrD9kXfTfe6xc/SWjPvHc=
Subject key identifier: 99:FE:0C:D3:BB:74:C2:84:45:0F:D5:0B:14:EC:39:A2:20:FD:65:CD
Authority key identifier: 6F:F9:CA:5C:76:BB:35:A9:35:3E:9B:13:E3:FC:E8:0F:36:31:61:80
Certificate issuer: /CN=6ff9ca5c76bb35a9353e9b13e3fce80f36316180
Certificate serial: 0199FCFD37B2C3FB68C040D5B4ECC45BA24D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/b_nKXHa7Nak1PpsT4_zoDzYxYYA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/7f3546-4a87-4627-a019-341b9d64645d/1/b_nKXHa7Nak1PpsT4_zoDzYxYYA.mft
Manifest number: 1272
Signing time: Sun 19 Oct 2025 15:01:17 +0000
Manifest this update: Sun 19 Oct 2025 15:01:17 +0000
Manifest next update: Mon 20 Oct 2025 15:01:17 +0000
Files and hashes: 1: K1yirsr-iaS7nREQciotspB8RVo.roa (hash: hy+JqcAOeQKytaM3EAomiIfLy4MHrS39bRFVCLNpTzc=)
2: b_nKXHa7Nak1PpsT4_zoDzYxYYA.crl (hash: HHwAkPPG/s6AFpkEkvjJbQo142WHgygOvJw5Najrpfw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/7f3546-4a87-4627-a019-341b9d64645d/1/b_nKXHa7Nak1PpsT4_zoDzYxYYA.crl
rsync://rpki.ripe.net/repository/DEFAULT/92/7f3546-4a87-4627-a019-341b9d64645d/1/b_nKXHa7Nak1PpsT4_zoDzYxYYA.mft
rsync://rpki.ripe.net/repository/DEFAULT/b_nKXHa7Nak1PpsT4_zoDzYxYYA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:fd:37:b2:c3:fb:68:c0:40:d5:b4:ec:c4:5b:a2:4d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ff9ca5c76bb35a9353e9b13e3fce80f36316180
Validity
Not Before: Oct 19 15:01:17 2025 GMT
Not After : Oct 20 15:01:17 2025 GMT
Subject: CN=99fe0cd3bb74c284450fd50b14ec39a220fd65cd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:6e:23:99:85:4a:03:ee:c2:15:04:43:4f:29:
cc:0b:24:a8:10:22:dd:28:d3:58:92:81:48:fd:8c:
a8:7b:70:b2:0e:04:75:c9:24:2a:94:78:7a:36:72:
33:94:ce:e4:90:03:4b:51:4d:64:95:54:76:b1:96:
68:2e:76:26:0b:6f:f9:64:80:78:04:35:02:b9:5f:
e0:23:84:08:79:59:a1:f5:a0:30:f4:1d:75:a6:4d:
3b:27:42:9e:f3:92:84:31:17:6a:01:7f:05:0f:ce:
a8:da:e2:11:ec:a9:37:77:1f:aa:3d:00:de:49:b9:
5a:c7:a1:2c:41:a4:40:9e:1c:34:16:3e:41:c9:eb:
7e:9f:88:aa:49:92:bf:ac:a3:a3:9a:ee:0d:35:f2:
80:3b:12:ff:44:01:ae:a6:cd:a6:a3:3f:81:99:db:
5a:d2:ab:da:60:36:22:cc:ed:3e:d9:e9:ef:5a:62:
13:0b:12:5d:96:6d:0b:9b:24:c8:f7:09:75:38:91:
0a:3d:38:c4:28:cb:5a:93:7d:62:b0:2e:05:56:6f:
74:ba:bd:f7:f7:9f:b8:6d:58:e9:e8:bc:ba:61:ce:
1c:6e:b0:4f:c5:01:0d:5e:1e:77:8d:13:16:86:6d:
66:72:09:63:9a:26:0b:37:9f:77:34:bf:9d:94:f3:
d2:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:FE:0C:D3:BB:74:C2:84:45:0F:D5:0B:14:EC:39:A2:20:FD:65:CD
X509v3 Authority Key Identifier:
keyid:6F:F9:CA:5C:76:BB:35:A9:35:3E:9B:13:E3:FC:E8:0F:36:31:61:80
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b_nKXHa7Nak1PpsT4_zoDzYxYYA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/7f3546-4a87-4627-a019-341b9d64645d/1/b_nKXHa7Nak1PpsT4_zoDzYxYYA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/7f3546-4a87-4627-a019-341b9d64645d/1/b_nKXHa7Nak1PpsT4_zoDzYxYYA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a5:1d:21:c9:97:f1:fc:17:7b:25:d6:f0:a7:d8:31:54:ea:45:
28:fb:a1:97:07:27:03:b9:a2:e6:63:b8:94:22:5b:7b:5a:aa:
1b:d0:89:3f:dc:e5:bc:a8:99:65:7b:ed:6b:0e:8a:17:eb:bd:
8e:79:46:9e:28:e9:f7:9b:6a:a7:40:3c:7c:c3:8c:1d:98:a6:
6c:2c:82:96:8e:09:6e:55:29:5a:1d:68:81:f2:e9:32:f9:24:
55:1f:b1:3e:b6:d6:f0:28:2e:7c:4c:92:c8:08:d0:ce:ce:26:
67:36:d3:35:64:17:62:8c:b3:2d:88:23:ca:38:1a:54:6b:8f:
b9:04:94:31:db:13:a0:42:a1:b7:2b:d7:b4:a7:b1:8a:f4:42:
b7:3a:9d:3e:a3:c2:96:1e:ff:e2:84:4d:4d:32:ed:18:08:22:
19:ed:e5:a4:b7:89:0c:7d:59:a1:43:c6:36:f6:a9:e3:38:89:
76:d5:81:bd:b8:24:c3:fd:c6:b0:a9:20:af:0d:a2:39:89:22:
47:a6:da:62:80:ad:be:bd:cc:2a:01:c7:b5:3d:0f:b9:5f:13:
e9:52:01:7a:f9:7e:74:12:7d:a0:b0:bd:06:3b:73:db:87:a3:
b5:77:be:7a:99:0f:40:1a:86:2d:9b:12:dd:f2:31:a9:f6:a7:
48:69:9d:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 17:53:06 2025 by rpki-client