Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9d/af15eb-7a4d-4b0e-bebb-e9bede00c6af/1/nXuwBCAf0FtJ0SIfzkdZ6nC-xoQ.mft
File: nXuwBCAf0FtJ0SIfzkdZ6nC-xoQ.mft (raw, json)
Hash identifier: uRKJV5ivUYG7ofNe7oUeVV8oLAA2RqTA8lLATM+YIYU=
Subject key identifier: 1F:52:41:DC:D6:1C:A6:C2:73:E3:38:96:AC:55:2C:E4:67:46:05:21
Authority key identifier: 9D:7B:B0:04:20:1F:D0:5B:49:D1:22:1F:CE:47:59:EA:70:BE:C6:84
Certificate issuer: /CN=9d7bb004201fd05b49d1221fce4759ea70bec684
Certificate serial: 0199FE46B013FEA2F4F01F46451296311909
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nXuwBCAf0FtJ0SIfzkdZ6nC-xoQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9d/af15eb-7a4d-4b0e-bebb-e9bede00c6af/1/nXuwBCAf0FtJ0SIfzkdZ6nC-xoQ.mft
Manifest number: 16E2
Signing time: Sun 19 Oct 2025 21:01:09 +0000
Manifest this update: Sun 19 Oct 2025 21:01:09 +0000
Manifest next update: Mon 20 Oct 2025 21:01:09 +0000
Files and hashes: 1: nXuwBCAf0FtJ0SIfzkdZ6nC-xoQ.crl (hash: ViBVHOK44U5HBa4QNDh/CVglrixZIt50aT5pa/VPX5Y=)
2: qtN5JDorwotYpcUYWZc-ptH61p4.roa (hash: fKxhmPTYMHuqQdNEmPm2wnJirNcSsOemwlg1fw0Aem0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9d/af15eb-7a4d-4b0e-bebb-e9bede00c6af/1/nXuwBCAf0FtJ0SIfzkdZ6nC-xoQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/9d/af15eb-7a4d-4b0e-bebb-e9bede00c6af/1/nXuwBCAf0FtJ0SIfzkdZ6nC-xoQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/nXuwBCAf0FtJ0SIfzkdZ6nC-xoQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 15:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fe:46:b0:13:fe:a2:f4:f0:1f:46:45:12:96:31:19:09
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9d7bb004201fd05b49d1221fce4759ea70bec684
Validity
Not Before: Oct 19 21:01:09 2025 GMT
Not After : Oct 20 21:01:09 2025 GMT
Subject: CN=1f5241dcd61ca6c273e33896ac552ce467460521
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:52:6d:c5:d3:f7:49:f0:88:ad:d7:6f:e2:5a:
10:83:cf:d9:db:35:bf:f3:d5:b8:38:5a:b6:6b:75:
bc:8e:77:d1:44:bf:d7:dc:0e:d2:ef:2d:80:de:70:
1f:93:07:11:18:c0:95:c7:69:35:c9:2a:ef:e0:f3:
c1:0d:8c:67:29:31:51:29:9f:4a:19:dd:5c:f7:e9:
39:af:be:8c:d0:a4:33:e1:1c:98:cc:ee:47:4e:99:
2d:31:82:d5:b0:3c:4a:9c:c9:a4:a5:fb:76:ec:1f:
86:23:f1:6c:cf:24:1f:93:34:8e:57:4d:57:fd:16:
48:51:76:f0:0e:01:5d:06:19:7d:1a:4b:79:a7:a4:
e0:c5:dc:8e:32:fb:72:cb:5f:0f:40:f6:58:32:91:
01:89:d9:ea:83:2b:8b:2a:40:c5:6f:a4:ad:a2:63:
c4:a4:f6:78:63:0b:8a:f1:ae:af:fa:0a:f0:f2:18:
89:01:54:53:ab:04:8a:ce:ea:fb:58:21:bd:9e:78:
57:24:4a:76:49:99:97:74:41:47:c3:8e:a6:32:72:
7f:4a:60:5d:38:ef:7b:dc:2c:ce:68:61:2d:a2:c3:
ce:7f:ca:55:13:57:ac:fb:b5:3d:40:9f:fe:8f:69:
09:26:38:e8:15:9a:f8:2f:2f:65:f1:d2:df:a3:a1:
9e:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:52:41:DC:D6:1C:A6:C2:73:E3:38:96:AC:55:2C:E4:67:46:05:21
X509v3 Authority Key Identifier:
keyid:9D:7B:B0:04:20:1F:D0:5B:49:D1:22:1F:CE:47:59:EA:70:BE:C6:84
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nXuwBCAf0FtJ0SIfzkdZ6nC-xoQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/af15eb-7a4d-4b0e-bebb-e9bede00c6af/1/nXuwBCAf0FtJ0SIfzkdZ6nC-xoQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/af15eb-7a4d-4b0e-bebb-e9bede00c6af/1/nXuwBCAf0FtJ0SIfzkdZ6nC-xoQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5a:34:10:96:da:31:66:80:1b:27:f6:09:0f:4e:4e:ab:40:a3:
71:c3:2d:35:8e:82:70:26:ce:88:15:57:94:e6:ac:fa:a8:c5:
22:bc:8a:c5:ac:d9:1e:8c:c0:ec:37:d8:25:93:0c:c1:38:bf:
67:ac:ef:f5:38:00:69:23:f3:36:fd:87:3f:a1:0f:14:7e:c9:
84:ab:ab:bf:93:f8:dc:1d:75:78:85:35:1a:e0:a6:00:4e:bc:
79:b2:73:45:b8:c3:6d:da:14:b2:fe:80:39:3d:46:bd:e4:4e:
88:de:80:35:e8:e4:bc:ca:d7:10:e7:8e:73:47:2b:a5:c1:e3:
e2:5c:a4:68:b7:da:47:38:d9:80:85:5c:c0:16:6f:5f:d7:32:
7d:61:a9:da:dc:94:40:e6:af:12:50:ef:f0:54:95:4d:38:f7:
a2:7f:2b:75:68:6b:c2:9c:54:19:86:52:d3:18:c3:78:32:34:
2b:6d:4e:78:04:7f:8c:62:f3:e9:75:7e:72:e1:ec:20:2e:8e:
7c:32:b0:54:66:bf:52:6f:0f:f1:ce:0c:34:57:6a:cb:78:e5:
bf:6d:59:76:52:8a:fa:f5:63:49:00:7b:13:41:41:b3:e9:f6:
46:06:36:09:af:1c:cd:89:67:6d:bb:f7:5a:7f:4e:de:a8:59:
bc:ca:dd:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 23:05:10 2025 by rpki-client