Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a6/e0e433-9b36-47a6-93a2-041fd4c6ffd4/1/c-Nz_ueA7qsqkEItCtUU4ISo1hE.mft
File: c-Nz_ueA7qsqkEItCtUU4ISo1hE.mft (raw, json)
Hash identifier: VktKXiOR+gpSf3en9oZZQ27HCFQPFODWX1lgQXYjL1s=
Subject key identifier: 18:8B:9F:29:D7:5D:6E:E7:EF:8F:60:99:2D:FD:02:6D:BE:CE:A5:67
Authority key identifier: 73:E3:73:FE:E7:80:EE:AB:2A:90:42:2D:0A:D5:14:E0:84:A8:D6:11
Certificate issuer: /CN=73e373fee780eeab2a90422d0ad514e084a8d611
Certificate serial: 019A011104E99E7159B1599DE3C37987BE5C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/c-Nz_ueA7qsqkEItCtUU4ISo1hE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a6/e0e433-9b36-47a6-93a2-041fd4c6ffd4/1/c-Nz_ueA7qsqkEItCtUU4ISo1hE.mft
Manifest number: 116C
Signing time: Mon 20 Oct 2025 10:01:23 +0000
Manifest this update: Mon 20 Oct 2025 10:01:23 +0000
Manifest next update: Tue 21 Oct 2025 10:01:23 +0000
Files and hashes: 1: KP2_oc8mgsgfljoO1nuvZhPkZ0Y.roa (hash: PSZpKzA/dVK4VjiYCM36fNdW8Sa7IO0CzoAwBYd8p8Q=)
2: ObJObOD6tkIrsjtPit83s8snVBw.roa (hash: GiH6UCNIhz4rfsNfETy7cYwzvEXyf2BHh17DI++1Ies=)
3: c-Nz_ueA7qsqkEItCtUU4ISo1hE.crl (hash: zPJpJJ3F2sROD7JtvjDy0Lbw+OMIQI2O35wORu/+EUk=)
4: jmJ3eXmaKm_C4rKzs_zDcoYf_z8.roa (hash: f4DN47+xITITW5Z3XzBvZV99OJ3Lahvtt0rfcMK3ExI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a6/e0e433-9b36-47a6-93a2-041fd4c6ffd4/1/c-Nz_ueA7qsqkEItCtUU4ISo1hE.crl
rsync://rpki.ripe.net/repository/DEFAULT/a6/e0e433-9b36-47a6-93a2-041fd4c6ffd4/1/c-Nz_ueA7qsqkEItCtUU4ISo1hE.mft
rsync://rpki.ripe.net/repository/DEFAULT/c-Nz_ueA7qsqkEItCtUU4ISo1hE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 09:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:01:11:04:e9:9e:71:59:b1:59:9d:e3:c3:79:87:be:5c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=73e373fee780eeab2a90422d0ad514e084a8d611
Validity
Not Before: Oct 20 10:01:23 2025 GMT
Not After : Oct 21 10:01:23 2025 GMT
Subject: CN=188b9f29d75d6ee7ef8f60992dfd026dbecea567
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:74:59:95:c7:61:59:97:16:6d:a8:74:19:4b:
34:13:de:ac:9c:80:0c:3b:b8:3e:ec:f8:1d:ad:1c:
d5:aa:35:7a:97:7f:d4:3c:4d:54:11:cf:31:02:3b:
a7:85:5a:7e:1e:20:4a:83:bd:9c:b2:b6:2e:42:23:
5b:69:b4:4c:8e:57:32:87:de:02:3b:12:53:f6:db:
12:e4:a0:ae:47:2d:af:92:b6:07:a6:49:5d:5c:f0:
9a:c2:2e:ce:5d:2f:80:cd:f0:db:5f:61:4c:bc:27:
52:2d:2b:13:68:16:32:e5:7c:f6:0f:ea:98:17:cd:
4d:8a:43:f4:1d:02:36:c1:fa:12:d6:d5:fb:fb:5b:
1d:1a:21:45:09:a6:70:ae:e5:ac:fc:0c:2e:b2:35:
5f:df:00:03:34:ef:3c:5b:5c:31:87:18:ab:ef:77:
ad:5d:47:dc:b0:4f:e2:a9:01:58:c5:23:c5:a7:1d:
55:a9:33:2b:cd:f0:17:af:ad:b1:c2:cc:05:32:2d:
b9:bb:95:ce:b2:8a:bb:19:bd:5e:98:21:bf:cf:15:
b3:ef:e0:d2:b8:92:6d:6f:0b:7d:ec:8a:3a:f1:08:
a0:92:a9:6d:e5:af:eb:62:93:c2:84:e7:0f:bb:94:
42:aa:65:96:16:3b:90:5f:61:e2:24:26:40:c4:aa:
16:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:8B:9F:29:D7:5D:6E:E7:EF:8F:60:99:2D:FD:02:6D:BE:CE:A5:67
X509v3 Authority Key Identifier:
keyid:73:E3:73:FE:E7:80:EE:AB:2A:90:42:2D:0A:D5:14:E0:84:A8:D6:11
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/c-Nz_ueA7qsqkEItCtUU4ISo1hE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/e0e433-9b36-47a6-93a2-041fd4c6ffd4/1/c-Nz_ueA7qsqkEItCtUU4ISo1hE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/e0e433-9b36-47a6-93a2-041fd4c6ffd4/1/c-Nz_ueA7qsqkEItCtUU4ISo1hE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5f:dc:ef:7e:a4:ed:ed:83:b2:db:c8:09:0b:48:2c:66:a6:6b:
8c:ca:ab:52:20:ec:9e:89:ed:3e:96:3a:ff:94:78:16:24:55:
44:c1:cd:b7:6b:b6:a7:ca:5b:48:fe:f3:7d:e1:12:56:a7:2b:
b4:46:8e:05:21:ef:80:25:79:f0:fa:50:b7:ce:bb:25:1d:75:
39:59:74:77:32:29:4a:b1:a0:f2:20:a4:30:3d:dc:6c:89:8c:
bf:ff:4f:da:9e:fd:7a:9d:77:0d:d9:78:ed:61:50:8a:0b:bc:
b5:e4:7f:c2:b6:6c:0f:ec:f9:a6:1f:fe:41:10:1e:eb:f2:7f:
62:50:87:33:18:7c:66:59:bc:4e:92:8f:8c:e8:35:0b:35:3f:
d4:e3:02:e9:ac:ce:08:3c:8b:92:c4:d1:0c:85:50:c1:a1:a2:
9b:46:d2:65:c1:a7:22:23:1e:c1:6c:54:77:33:51:30:2f:22:
bd:8e:b5:32:0a:d6:de:34:b0:b4:fc:69:4f:1d:43:01:94:8c:
af:da:41:17:40:14:19:4b:5d:a7:27:8b:f7:fe:4a:5a:45:3d:
32:6f:b7:24:14:8e:d7:ef:d8:cb:cb:c2:37:04:b2:4d:1c:1a:
e5:4a:2b:43:b2:d3:51:01:ae:d4:26:fd:35:d8:2e:d5:64:6a:
3a:ce:76:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 13:45:12 2025 by rpki-client