Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/aa/0e651e-90c7-4acd-97b9-a54f8e4813e7/1/nNB1iCXdic_uX97MfctlHwpdEBg.mft
File: nNB1iCXdic_uX97MfctlHwpdEBg.mft (raw, json)
Hash identifier: KINmov8GHXNwMSpOtHwEfpcyLxDmifdeRlT8xfj6PnM=
Subject key identifier: 64:53:2B:00:CE:48:76:BE:F1:02:34:20:20:F0:DC:08:96:44:20:F2
Authority key identifier: 9C:D0:75:88:25:DD:89:CF:EE:5F:DE:CC:7D:CB:65:1F:0A:5D:10:18
Certificate issuer: /CN=9cd0758825dd89cfee5fdecc7dcb651f0a5d1018
Certificate serial: 0199FE46C315F34072B1D0851B7A55FEC61B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nNB1iCXdic_uX97MfctlHwpdEBg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/aa/0e651e-90c7-4acd-97b9-a54f8e4813e7/1/nNB1iCXdic_uX97MfctlHwpdEBg.mft
Manifest number: 1631
Signing time: Sun 19 Oct 2025 21:01:14 +0000
Manifest this update: Sun 19 Oct 2025 21:01:14 +0000
Manifest next update: Mon 20 Oct 2025 21:01:14 +0000
Files and hashes: 1: 501ahkD4gjr9itS0rHitDULQOJI.roa (hash: 7QvKhQGjRnbky85nLC/mxy/1QVWGc8n8REeP6RBHa2w=)
2: mnnYxns7ruXxPgM_VNIHL5kcJa8.roa (hash: Wb/XaO0LWIZbn326Mfd8GlVkRuIOjXOck5hC67Z7SYg=)
3: nNB1iCXdic_uX97MfctlHwpdEBg.crl (hash: NsQHvVZRFAnLeABUuV3vcGKDM5aQp48ZiNETR7nnXIc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/aa/0e651e-90c7-4acd-97b9-a54f8e4813e7/1/nNB1iCXdic_uX97MfctlHwpdEBg.crl
rsync://rpki.ripe.net/repository/DEFAULT/aa/0e651e-90c7-4acd-97b9-a54f8e4813e7/1/nNB1iCXdic_uX97MfctlHwpdEBg.mft
rsync://rpki.ripe.net/repository/DEFAULT/nNB1iCXdic_uX97MfctlHwpdEBg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 15:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fe:46:c3:15:f3:40:72:b1:d0:85:1b:7a:55:fe:c6:1b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9cd0758825dd89cfee5fdecc7dcb651f0a5d1018
Validity
Not Before: Oct 19 21:01:14 2025 GMT
Not After : Oct 20 21:01:14 2025 GMT
Subject: CN=64532b00ce4876bef102342020f0dc08964420f2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:72:56:d2:92:7c:47:96:91:68:2d:7f:0c:a4:
81:cf:06:e5:f8:6d:a3:34:5f:b5:0f:54:6e:5d:57:
ff:85:87:0f:e9:14:55:36:d9:31:9f:6e:c8:1c:b9:
70:a7:d2:04:b1:9a:6b:e7:fe:1c:5d:a8:a8:66:f7:
a5:f2:02:8d:ef:ec:5a:18:e4:e9:e7:ee:c7:73:e5:
10:f0:b1:77:f2:5a:85:8e:04:36:47:c1:7d:6c:bc:
7e:a6:11:6d:97:c6:9c:f5:50:f0:47:a0:a2:55:cb:
f5:ba:bb:b4:3d:fa:cf:68:9d:06:52:39:79:a8:9c:
4c:6b:29:36:b7:11:88:1b:08:e5:f6:15:47:73:5c:
24:b1:a2:40:96:2d:78:70:c4:48:2d:44:be:29:42:
99:19:a6:6a:4e:40:e1:39:28:56:bd:01:f2:f1:ed:
7b:fc:f4:0f:22:b5:9e:47:49:1c:df:7d:2e:de:87:
7d:b5:17:c4:e9:13:13:63:a6:04:a8:db:6f:ed:77:
dd:bb:e0:90:56:ff:8b:a7:95:ea:b9:bc:ef:10:81:
d4:90:4b:53:29:b5:8b:28:ab:7f:f8:62:97:46:e1:
9b:90:8b:3d:91:5b:7a:31:85:be:95:b8:fd:f9:b2:
05:61:06:aa:2e:9b:d5:e0:1c:f3:24:bc:0a:03:b6:
6b:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:53:2B:00:CE:48:76:BE:F1:02:34:20:20:F0:DC:08:96:44:20:F2
X509v3 Authority Key Identifier:
keyid:9C:D0:75:88:25:DD:89:CF:EE:5F:DE:CC:7D:CB:65:1F:0A:5D:10:18
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nNB1iCXdic_uX97MfctlHwpdEBg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/0e651e-90c7-4acd-97b9-a54f8e4813e7/1/nNB1iCXdic_uX97MfctlHwpdEBg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/0e651e-90c7-4acd-97b9-a54f8e4813e7/1/nNB1iCXdic_uX97MfctlHwpdEBg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
49:a5:2d:66:ac:48:0c:af:8f:9f:62:29:5a:34:c2:ac:71:85:
c9:cb:fe:5d:fb:68:aa:56:33:20:63:c6:32:d5:3f:ee:25:85:
6d:60:a8:16:e0:46:29:39:7f:9a:d5:ac:2d:37:78:8b:18:52:
5d:7d:36:68:f7:2e:23:2e:de:f7:0a:1d:04:0f:dc:72:a6:b9:
70:17:0e:15:fd:a2:38:37:6a:57:e2:79:b5:4a:c5:46:c3:95:
a1:a7:02:4a:50:98:d0:48:15:6f:19:e3:dc:97:96:b8:3f:59:
01:29:36:ce:fe:c7:88:bd:fb:74:32:bf:a0:23:5f:55:b0:59:
23:dc:09:77:b4:50:50:87:e1:4d:ed:ac:45:67:a4:9e:59:d4:
73:30:14:13:00:34:60:de:99:a9:0b:b3:00:47:de:8d:17:fe:
91:2e:c1:3b:b2:7b:2d:a1:ce:cf:f1:f9:ef:17:92:3f:81:05:
31:d1:2f:06:42:75:52:3b:1c:0e:1d:6d:51:86:82:64:1f:d8:
96:3e:7e:91:d5:53:08:6a:74:d9:ee:91:f6:f6:7c:c2:f6:6a:
ee:02:61:26:29:dc:76:76:ba:eb:28:5f:6b:1d:88:26:58:51:
b1:2a:cf:01:f5:a6:fd:ab:c3:8e:df:d9:2f:8c:9e:87:c7:cb:
55:6d:42:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 01:09:11 2025 by rpki-client