Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a4/a33b29-bef3-461d-8878-2155126b1643/1/nPxi7NyR0Rl5zB0hpHxuw3jfpDY.mft
File: nPxi7NyR0Rl5zB0hpHxuw3jfpDY.mft (raw, json)
Hash identifier: P4ICmrc1UkC93SbFziGAWEa2U8v7DnM5g1pzObHCODw=
Subject key identifier: 38:97:5E:58:45:1C:C1:37:A6:4F:79:EA:4D:52:6E:4B:99:EA:AC:EF
Authority key identifier: 9C:FC:62:EC:DC:91:D1:19:79:CC:1D:21:A4:7C:6E:C3:78:DF:A4:36
Certificate issuer: /CN=9cfc62ecdc91d11979cc1d21a47c6ec378dfa436
Certificate serial: 0199FDDA3020D0918B4AE4E0D5DF0995C534
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nPxi7NyR0Rl5zB0hpHxuw3jfpDY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a4/a33b29-bef3-461d-8878-2155126b1643/1/nPxi7NyR0Rl5zB0hpHxuw3jfpDY.mft
Manifest number: 10DD
Signing time: Sun 19 Oct 2025 19:02:38 +0000
Manifest this update: Sun 19 Oct 2025 19:02:38 +0000
Manifest next update: Mon 20 Oct 2025 19:02:38 +0000
Files and hashes: 1: BuFdaMS1qY4jt-i_y_cN4QOcG_g.roa (hash: ltXbKfkdHFu9ibmOqMdLpCxXbbDufLPF6M4KyVnL37o=)
2: nPxi7NyR0Rl5zB0hpHxuw3jfpDY.crl (hash: 4nbFvDxaEqjWheRie+2L16rZCg+2TF+JO5GrLr4f4uI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a4/a33b29-bef3-461d-8878-2155126b1643/1/nPxi7NyR0Rl5zB0hpHxuw3jfpDY.crl
rsync://rpki.ripe.net/repository/DEFAULT/a4/a33b29-bef3-461d-8878-2155126b1643/1/nPxi7NyR0Rl5zB0hpHxuw3jfpDY.mft
rsync://rpki.ripe.net/repository/DEFAULT/nPxi7NyR0Rl5zB0hpHxuw3jfpDY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fd:da:30:20:d0:91:8b:4a:e4:e0:d5:df:09:95:c5:34
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9cfc62ecdc91d11979cc1d21a47c6ec378dfa436
Validity
Not Before: Oct 19 19:02:38 2025 GMT
Not After : Oct 20 19:02:38 2025 GMT
Subject: CN=38975e58451cc137a64f79ea4d526e4b99eaacef
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:e2:83:96:65:b3:96:e4:66:51:67:55:7d:55:
57:62:9e:e7:a3:42:eb:80:68:cc:46:0b:b0:f5:63:
9a:8f:a5:fd:3e:cd:96:c2:9b:10:5d:a1:ad:f4:70:
26:42:2e:f7:61:31:19:f3:0d:2f:df:5d:05:d9:21:
95:b3:14:76:fb:06:b8:0b:68:3d:2a:77:27:00:2d:
b4:40:14:b1:3b:4c:52:4d:1a:f3:28:5e:0b:44:e6:
b7:9e:25:ab:13:11:f4:ab:07:a9:db:97:45:17:53:
93:02:c9:6f:83:4f:27:0e:ed:bf:fa:29:70:6f:11:
c4:5c:c9:b3:a3:9a:c3:33:e7:ca:3a:18:90:f7:0f:
ac:3d:69:1f:09:99:be:4d:9e:d9:58:fb:4c:88:b2:
53:5d:b9:47:f0:01:96:94:fd:52:c5:1c:9e:bc:dc:
da:ec:12:a9:ad:2d:39:d6:9d:8d:3e:cd:77:34:56:
e2:53:13:f9:6c:9b:de:d4:e3:0d:b6:10:4a:a4:54:
d7:ce:c9:9c:4f:6b:5a:72:2c:ee:b3:d7:d1:02:77:
c0:0a:c4:fb:ac:33:73:a9:b7:19:bd:07:f5:6b:03:
1e:a8:45:08:6f:81:3e:11:02:f0:eb:ba:b1:97:63:
8d:52:2f:9b:cc:4d:89:9c:5c:2c:24:6e:6c:1e:bb:
6d:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:97:5E:58:45:1C:C1:37:A6:4F:79:EA:4D:52:6E:4B:99:EA:AC:EF
X509v3 Authority Key Identifier:
keyid:9C:FC:62:EC:DC:91:D1:19:79:CC:1D:21:A4:7C:6E:C3:78:DF:A4:36
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nPxi7NyR0Rl5zB0hpHxuw3jfpDY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/a33b29-bef3-461d-8878-2155126b1643/1/nPxi7NyR0Rl5zB0hpHxuw3jfpDY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/a33b29-bef3-461d-8878-2155126b1643/1/nPxi7NyR0Rl5zB0hpHxuw3jfpDY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5a:44:02:fa:ab:84:93:05:08:d8:97:30:15:bd:db:4d:8b:8c:
ea:01:f9:d2:00:3b:36:1b:8f:bd:32:e3:87:d5:59:20:db:72:
92:d8:80:b7:d1:9e:08:3d:8b:29:cc:f1:e5:4c:ef:9b:78:e6:
fe:91:36:73:8c:01:b5:a3:63:b0:b2:14:d7:63:5d:a0:5e:4f:
9d:d0:be:72:47:d2:47:3d:62:d5:08:16:a6:a0:5b:22:c2:03:
7e:d0:24:16:3e:4c:18:5a:4a:5d:d8:3b:d9:b2:76:2c:cf:c8:
e3:07:79:2f:74:33:67:00:74:ad:2c:87:18:5f:5b:ce:1a:93:
51:71:c8:fe:b7:93:ec:7b:36:2c:be:14:fe:73:16:90:74:90:
16:b0:60:c6:32:29:2d:d0:d1:90:dd:39:9a:ac:fa:f3:4b:93:
86:7b:40:8a:4f:0f:ef:6d:c0:02:17:94:8b:c0:f4:33:ea:6f:
86:8a:ce:2f:5c:43:b9:75:6a:5d:bf:4d:95:28:c0:c0:8f:2e:
aa:cb:2a:2b:71:1d:36:82:32:50:30:1c:f1:77:42:5f:55:ea:
2b:67:13:9c:ea:c2:ca:2c:a1:b8:33:9e:dd:be:d1:06:31:33:
0e:64:e8:34:1c:6c:53:87:2d:86:5b:43:73:37:f5:b2:ef:58:
26:c9:7b:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 20:42:00 2025 by rpki-client