Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/99/4953ee-910f-4b8e-b464-2650edd3013f/1/1-NchPzWFtxEt_wy0PBkrHK8wfRg.mft
File: 1-NchPzWFtxEt_wy0PBkrHK8wfRg.mft (raw, json)
Hash identifier: IeBLezFr6cwrgO90m9IClH5i07AyBeY83sKpjKIeqWw=
Subject key identifier: 84:4E:1E:29:AD:C3:77:0C:FC:F7:08:2A:2B:3B:33:01:16:5C:FD:19
Authority key identifier: F8:D7:21:3F:35:85:B7:11:2D:FF:0C:B4:3C:19:2B:1C:AF:30:7D:18
Certificate issuer: /CN=f8d7213f3585b7112dff0cb43c192b1caf307d18
Certificate serial: 0199FCC62C7BFDB3F8987EF156DD84CFEC92
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-NchPzWFtxEt_wy0PBkrHK8wfRg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/99/4953ee-910f-4b8e-b464-2650edd3013f/1/1-NchPzWFtxEt_wy0PBkrHK8wfRg.mft
Manifest number: 0E9A
Signing time: Sun 19 Oct 2025 14:01:09 +0000
Manifest this update: Sun 19 Oct 2025 14:01:09 +0000
Manifest next update: Mon 20 Oct 2025 14:01:09 +0000
Files and hashes: 1: 0MrgjigrDPt6rPegZME8cXiUORo.roa (hash: 7glCaQ9Yvpvmun3d90ogrApzDsZCqJLUsDw/+14dTgE=)
2: 1-NchPzWFtxEt_wy0PBkrHK8wfRg.crl (hash: coS4MDTCNxp8udI4ghxCHHMlsUTLbW9UZlgC1r6FHyM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/99/4953ee-910f-4b8e-b464-2650edd3013f/1/1-NchPzWFtxEt_wy0PBkrHK8wfRg.crl
rsync://rpki.ripe.net/repository/DEFAULT/99/4953ee-910f-4b8e-b464-2650edd3013f/1/1-NchPzWFtxEt_wy0PBkrHK8wfRg.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-NchPzWFtxEt_wy0PBkrHK8wfRg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 14:01:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:c6:2c:7b:fd:b3:f8:98:7e:f1:56:dd:84:cf:ec:92
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f8d7213f3585b7112dff0cb43c192b1caf307d18
Validity
Not Before: Oct 19 14:01:09 2025 GMT
Not After : Oct 20 14:01:09 2025 GMT
Subject: CN=844e1e29adc3770cfcf7082a2b3b3301165cfd19
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:39:d4:87:40:f3:fd:c1:7c:ae:da:c4:17:8b:
a5:34:da:e0:c7:1a:51:79:40:4f:48:3a:18:2b:0d:
2b:b3:e2:a5:6f:c4:f3:93:4a:30:04:d1:79:31:9c:
c6:6d:ae:10:7a:21:4f:63:09:2a:19:da:20:1b:5a:
09:36:3e:3e:ac:d2:7f:d3:93:d8:23:28:f6:b0:68:
58:5b:41:0d:d6:f3:27:de:75:76:29:73:ac:76:87:
ec:8f:2e:66:15:07:1e:23:f0:a0:62:b9:39:fd:f8:
99:5a:3d:5b:c8:41:5b:da:ee:25:94:41:db:4b:d6:
04:18:72:90:6c:23:21:be:9a:e6:f4:27:eb:fa:0f:
77:b1:8b:79:31:17:e8:f5:3b:63:09:ab:87:f7:c2:
a2:b0:20:da:9c:83:2c:70:e8:d0:8c:d8:35:86:c5:
13:cf:eb:6e:22:7c:06:f8:7e:2e:76:53:d7:76:2a:
5f:ce:a9:c3:df:79:43:0c:55:c7:ec:38:72:ab:57:
05:88:97:9d:52:24:41:20:73:72:8a:9d:da:8c:6d:
c4:1a:ed:7c:dc:0c:a2:95:e0:89:8b:a2:2c:33:e6:
e6:0b:4b:a2:cd:34:c2:77:8e:f2:49:c9:78:a7:00:
a6:9c:1a:56:a4:85:18:39:bd:4d:b2:1d:88:ea:31:
e3:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:4E:1E:29:AD:C3:77:0C:FC:F7:08:2A:2B:3B:33:01:16:5C:FD:19
X509v3 Authority Key Identifier:
keyid:F8:D7:21:3F:35:85:B7:11:2D:FF:0C:B4:3C:19:2B:1C:AF:30:7D:18
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-NchPzWFtxEt_wy0PBkrHK8wfRg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/4953ee-910f-4b8e-b464-2650edd3013f/1/1-NchPzWFtxEt_wy0PBkrHK8wfRg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/99/4953ee-910f-4b8e-b464-2650edd3013f/1/1-NchPzWFtxEt_wy0PBkrHK8wfRg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
e2:8e:70:5b:49:9a:0e:de:15:73:64:6c:bf:69:40:ab:ba:d2:
dc:a8:d8:be:b0:46:43:8a:84:b2:60:14:9c:8b:62:54:85:53:
bd:92:73:c9:ed:8f:ef:4c:03:66:72:e6:67:56:c8:ca:0f:b2:
3f:ed:cf:8f:dd:0f:ee:53:ef:13:75:78:1b:ac:cf:1b:5c:89:
02:ec:e3:bd:7f:f9:23:d4:81:fd:9c:b9:94:26:70:35:2a:55:
c8:80:3d:88:ef:32:73:2d:0a:e5:55:5a:6c:f7:99:df:f5:9e:
1d:e3:63:5c:31:fe:14:13:12:4c:cb:e6:0f:1c:b9:7b:da:ca:
b3:2e:86:67:e1:ee:73:d9:c4:7e:0a:1e:9b:b1:a3:2e:48:e4:
05:aa:8c:65:4e:cf:b5:a7:8f:9f:23:08:46:3e:f0:e4:ba:ef:
aa:62:ea:a0:e4:19:7c:9e:f9:23:2c:31:cb:ba:97:0e:30:4b:
0b:d6:4b:ec:93:ea:b9:c6:a6:60:0e:e6:cd:76:f8:10:2e:82:
ee:de:e5:5f:0f:62:33:79:3a:75:39:6b:18:54:56:bf:0b:10:
80:e1:c4:84:81:a1:85:6a:88:d6:90:55:13:0d:ae:37:66:f6:
ee:51:9b:0e:2e:cf:6c:3a:6d:5e:09:10:04:61:f3:2e:5f:76:
9f:f9:d4:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 00:03:12 2025 by rpki-client