Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/1f969c-e387-46fd-8624-dc7f0c094b39/1/nOiU8ddzHplhcZvh7ZmEaPy6vqk.mft
File: nOiU8ddzHplhcZvh7ZmEaPy6vqk.mft (raw, json)
Hash identifier: yJzjXpa/2/WI2HF5aeGdIT39r0vDxHyniaL/jBd6+2U=
Subject key identifier: 3F:EC:04:4A:6B:17:C3:74:A6:E4:3E:06:68:50:57:33:61:04:59:E3
Authority key identifier: 9C:E8:94:F1:D7:73:1E:99:61:71:9B:E1:ED:99:84:68:FC:BA:BE:A9
Certificate issuer: /CN=9ce894f1d7731e9961719be1ed998468fcbabea9
Certificate serial: 0199FD344353F1B2DF6457D3900DF1318710
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nOiU8ddzHplhcZvh7ZmEaPy6vqk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/1f969c-e387-46fd-8624-dc7f0c094b39/1/nOiU8ddzHplhcZvh7ZmEaPy6vqk.mft
Manifest number: 16C9
Signing time: Sun 19 Oct 2025 16:01:24 +0000
Manifest this update: Sun 19 Oct 2025 16:01:24 +0000
Manifest next update: Mon 20 Oct 2025 16:01:24 +0000
Files and hashes: 1: nOiU8ddzHplhcZvh7ZmEaPy6vqk.crl (hash: bgEpehoPURmQKPDb0K6X+RsNguwPVa/g6DMxAj8W9oM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b0/1f969c-e387-46fd-8624-dc7f0c094b39/1/nOiU8ddzHplhcZvh7ZmEaPy6vqk.crl
rsync://rpki.ripe.net/repository/DEFAULT/b0/1f969c-e387-46fd-8624-dc7f0c094b39/1/nOiU8ddzHplhcZvh7ZmEaPy6vqk.mft
rsync://rpki.ripe.net/repository/DEFAULT/nOiU8ddzHplhcZvh7ZmEaPy6vqk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 15:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fd:34:43:53:f1:b2:df:64:57:d3:90:0d:f1:31:87:10
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9ce894f1d7731e9961719be1ed998468fcbabea9
Validity
Not Before: Oct 19 16:01:24 2025 GMT
Not After : Oct 20 16:01:24 2025 GMT
Subject: CN=3fec044a6b17c374a6e43e0668505733610459e3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:7b:a1:1f:8b:62:2d:28:68:e3:c3:0a:4a:e1:
25:a5:50:8e:9e:63:23:48:05:f6:47:f3:d5:fe:7f:
b9:26:98:1f:4d:6f:40:ed:bd:bf:e8:5b:e8:cc:51:
73:21:7e:fe:9d:5d:22:39:26:e9:36:b9:f2:cb:cd:
3a:ad:82:57:43:8a:1a:ef:71:da:f9:52:37:c5:f2:
49:ef:35:05:0f:4b:d1:52:fe:2c:33:67:1e:33:6a:
a4:18:f8:f1:f4:c6:e1:32:3f:a4:04:a2:89:e7:f0:
fd:44:75:00:3d:2d:2e:d5:dd:cb:0d:d8:96:ee:11:
24:20:99:f6:56:0d:65:12:be:a3:4c:83:8f:ec:06:
05:14:dc:8f:2d:66:6a:95:0f:10:a8:3b:55:81:7c:
c0:67:66:33:fa:28:15:11:25:86:45:e4:04:ae:9a:
16:8b:39:df:78:87:a2:8e:93:06:7c:49:85:d2:3c:
7d:d2:4d:f2:7b:a5:8e:b8:3d:a9:31:06:4b:36:56:
6f:aa:e8:6b:37:28:e9:d9:b9:46:be:ea:43:44:7f:
a5:b9:82:be:7a:35:c5:83:23:9a:6c:82:ab:86:d5:
40:de:0a:13:88:ad:a5:c0:47:0a:f2:df:a5:73:2f:
7b:04:c2:c3:7d:6c:16:45:e1:53:fb:21:44:c4:84:
78:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:EC:04:4A:6B:17:C3:74:A6:E4:3E:06:68:50:57:33:61:04:59:E3
X509v3 Authority Key Identifier:
keyid:9C:E8:94:F1:D7:73:1E:99:61:71:9B:E1:ED:99:84:68:FC:BA:BE:A9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nOiU8ddzHplhcZvh7ZmEaPy6vqk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/1f969c-e387-46fd-8624-dc7f0c094b39/1/nOiU8ddzHplhcZvh7ZmEaPy6vqk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/1f969c-e387-46fd-8624-dc7f0c094b39/1/nOiU8ddzHplhcZvh7ZmEaPy6vqk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6d:ba:dd:f2:5d:8f:ef:7c:96:34:0d:3c:8e:80:c6:d0:db:02:
29:f1:10:22:72:d8:d8:c5:96:a0:b9:2e:20:c9:91:a9:ef:8b:
56:9f:75:54:36:ef:59:4a:e1:f5:54:58:45:0e:94:6e:1c:b6:
9f:29:8c:3f:6b:e5:94:81:fa:5e:38:e1:af:7e:4a:15:2c:87:
83:c6:46:fd:bc:8c:80:44:7f:a7:f2:9c:69:d0:db:ac:3e:c6:
c7:49:6f:a8:96:5c:4e:c0:06:87:48:e2:58:89:c2:fb:b1:38:
8c:d5:be:94:e0:b1:28:97:d5:5f:7c:52:19:f7:a7:b4:cb:29:
55:81:64:0e:f8:61:b0:04:6e:dd:42:fc:95:25:c5:ba:e3:18:
1a:44:9f:84:31:57:9c:df:5a:a6:0e:96:de:e6:4b:e4:51:cd:
21:96:60:47:6e:25:dc:bf:c6:7d:a1:1c:1b:24:da:2f:c8:e5:
f3:d7:3b:10:5c:ae:c0:45:b2:5a:eb:14:3a:d2:71:41:8f:05:
8c:f1:dc:16:b2:77:74:5a:90:10:8d:9e:6c:d6:cf:90:dd:99:
77:85:4f:7b:19:59:98:84:7a:aa:ef:2b:65:f2:93:74:15:8c:
14:47:1d:8c:f9:af:ec:63:e6:82:87:c6:c9:1a:02:43:e7:f9:
f7:93:81:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 01:17:59 2025 by rpki-client