Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/af/8cce86-b0ae-4166-9042-528eff52febd/1/nCGl5M9uni5wM4ruv6DRWI1ztu8.mft
File: nCGl5M9uni5wM4ruv6DRWI1ztu8.mft (raw, json)
Hash identifier: PEW0aIKjSiTkgoUy/mmtSOZ3ygoBH6cf7rK99DsR1kc=
Subject key identifier: 95:CC:A6:7E:5F:F8:96:38:5F:4F:A1:47:9D:E4:25:17:EB:32:FA:D1
Authority key identifier: 9C:21:A5:E4:CF:6E:9E:2E:70:33:8A:EE:BF:A0:D1:58:8D:73:B6:EF
Certificate issuer: /CN=9c21a5e4cf6e9e2e70338aeebfa0d1588d73b6ef
Certificate serial: 0199FAD79FFBAA62240289AE0B06236A3783
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nCGl5M9uni5wM4ruv6DRWI1ztu8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/af/8cce86-b0ae-4166-9042-528eff52febd/1/nCGl5M9uni5wM4ruv6DRWI1ztu8.mft
Manifest number: 0A14
Signing time: Sun 19 Oct 2025 05:00:59 +0000
Manifest this update: Sun 19 Oct 2025 05:00:59 +0000
Manifest next update: Mon 20 Oct 2025 05:00:59 +0000
Files and hashes: 1: TyWL3xFpNven7KrNlaJ8v9k5JK8.roa (hash: E2+AhRY0pqwsVnmj4TP+MVDZiHT3sKt+kF6lunLkhqE=)
2: nCGl5M9uni5wM4ruv6DRWI1ztu8.crl (hash: WHRbNQYPm4GmNteEXQJzbVkvKXSMKdBdsW4mXKPqnyM=)
3: rQIqx2DMPN6bSwaHOzgkZ_qEsQE.roa (hash: Swuw4n85YJ/hs+bpmj8GLz668D6BJf6uL+FQMZ1q+FY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/af/8cce86-b0ae-4166-9042-528eff52febd/1/nCGl5M9uni5wM4ruv6DRWI1ztu8.crl
rsync://rpki.ripe.net/repository/DEFAULT/af/8cce86-b0ae-4166-9042-528eff52febd/1/nCGl5M9uni5wM4ruv6DRWI1ztu8.mft
rsync://rpki.ripe.net/repository/DEFAULT/nCGl5M9uni5wM4ruv6DRWI1ztu8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 05:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fa:d7:9f:fb:aa:62:24:02:89:ae:0b:06:23:6a:37:83
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9c21a5e4cf6e9e2e70338aeebfa0d1588d73b6ef
Validity
Not Before: Oct 19 05:00:59 2025 GMT
Not After : Oct 20 05:00:59 2025 GMT
Subject: CN=95cca67e5ff896385f4fa1479de42517eb32fad1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:18:8e:58:2a:66:59:16:df:2d:05:df:6d:d3:
46:2c:88:74:8e:d4:2d:45:9f:c8:80:75:ee:74:21:
9a:db:e9:a9:29:1b:38:36:e5:3c:7a:c8:dc:28:52:
77:d8:2d:5d:c4:bd:44:3f:1f:b1:75:45:a7:d2:eb:
3f:75:36:eb:42:de:16:8d:b3:e4:5e:63:0d:10:ff:
bb:f6:f0:2e:c4:7f:12:8b:da:fc:0a:7e:4a:d8:22:
b4:c9:a2:29:76:26:00:8c:58:ad:94:1e:ab:4d:fc:
59:26:d9:28:a2:ee:6e:e3:62:c6:e5:d2:dc:aa:c4:
57:4e:28:fe:25:13:bd:24:ae:fc:80:e8:17:c3:a0:
1a:0d:92:33:32:06:0c:70:b0:bc:75:b5:8b:c3:17:
4e:04:37:0d:7a:ef:9b:f0:40:08:f5:12:be:e3:bb:
c3:9e:68:ab:05:f1:c2:37:61:94:09:b8:60:7b:69:
27:59:ae:fa:66:a6:4e:73:d5:75:26:f1:dc:c1:e2:
d3:2d:a8:b9:bd:51:78:f2:a9:94:ef:e5:bc:de:08:
16:fa:c4:1c:46:4a:62:2a:15:95:63:cd:f4:58:d9:
6a:50:a4:61:4b:af:77:f6:86:81:c5:b2:c6:16:cb:
6a:2f:08:5f:22:79:1c:9a:10:be:8b:f0:42:30:b8:
ad:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:CC:A6:7E:5F:F8:96:38:5F:4F:A1:47:9D:E4:25:17:EB:32:FA:D1
X509v3 Authority Key Identifier:
keyid:9C:21:A5:E4:CF:6E:9E:2E:70:33:8A:EE:BF:A0:D1:58:8D:73:B6:EF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nCGl5M9uni5wM4ruv6DRWI1ztu8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/8cce86-b0ae-4166-9042-528eff52febd/1/nCGl5M9uni5wM4ruv6DRWI1ztu8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/af/8cce86-b0ae-4166-9042-528eff52febd/1/nCGl5M9uni5wM4ruv6DRWI1ztu8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
62:b4:30:e2:20:c2:3e:3a:eb:8f:c3:ea:6e:60:5e:5c:e0:28:
92:72:2a:c8:cd:c5:43:15:5e:8a:e7:2d:48:75:1a:e3:54:c1:
54:26:06:89:de:78:2e:f1:fe:14:b6:f7:4c:68:2e:fa:09:d9:
30:41:10:c3:c4:74:12:da:29:66:90:8d:df:24:57:50:b8:12:
66:e3:33:71:63:74:4c:32:ed:04:2a:ef:b9:79:fb:ec:c7:e8:
49:9e:eb:09:a5:3a:ec:03:27:da:d9:4b:99:e9:ee:0c:b3:ee:
9d:30:82:bd:62:68:e0:55:3d:e9:de:2f:0a:42:c7:2b:ae:b1:
d9:a4:6f:26:3f:97:21:b2:a4:70:4a:52:40:d0:42:df:89:48:
f7:d8:79:2c:e7:d8:3a:55:98:a0:42:d1:b2:11:cf:f1:2e:53:
12:02:0c:48:08:9e:b1:45:bd:1d:54:62:ad:4e:91:37:84:08:
52:c2:51:21:f7:41:14:29:ea:22:75:eb:fd:11:22:2c:5c:11:
f9:56:21:3e:90:83:8b:f2:e6:3a:31:34:cc:66:58:79:d9:94:
6e:29:57:ba:ab:1d:8d:87:fe:80:3d:9f:03:d5:b7:f5:53:df:
1b:e8:66:85:eb:18:6c:ae:10:54:c2:cd:91:a3:e6:75:d6:ef:
ac:81:09:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 13:10:51 2025 by rpki-client