Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/b35379-2122-4191-8821-c47e18df0371/1/nHPZRT--37gMRUO7Up_DMMH4wc4.mft
File: nHPZRT--37gMRUO7Up_DMMH4wc4.mft (raw, json)
Hash identifier: HlOvNKMJK3KWUbKMtfkS8nkHgjqz+6OjBuU3tqzoKZQ=
Subject key identifier: AA:4A:43:A8:07:D7:A2:A9:40:D9:98:56:33:03:3E:69:A0:9C:D3:E1
Authority key identifier: 9C:73:D9:45:3F:BE:DF:B8:0C:45:43:BB:52:9F:C3:30:C1:F8:C1:CE
Certificate issuer: /CN=9c73d9453fbedfb80c4543bb529fc330c1f8c1ce
Certificate serial: 0199FC590125ED2BC8A74FD7DE57C257849E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nHPZRT--37gMRUO7Up_DMMH4wc4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/b35379-2122-4191-8821-c47e18df0371/1/nHPZRT--37gMRUO7Up_DMMH4wc4.mft
Manifest number: 0C97
Signing time: Sun 19 Oct 2025 12:01:55 +0000
Manifest this update: Sun 19 Oct 2025 12:01:55 +0000
Manifest next update: Mon 20 Oct 2025 12:01:55 +0000
Files and hashes: 1: AMTfdcOhvN2UxA7mt3gv3KECuGg.roa (hash: k51GSY+oL6d3vSnVOqR7gGcER+6PBSvBsmHDXYmEq2c=)
2: IZ4_8o0uG1RVAax56_hcAW3WTtc.roa (hash: BLF9NvSAp12xGKGCWF6fmakXoIQEimqM8wkdCYNJdbY=)
3: OfxRKdN2bPZI0fvyGrpUm_OCPQs.roa (hash: lVQukuR8pvFzQlCkS5KRF6YO+By1WT+Hs0uHk5OATm0=)
4: ieAfCh_vwbBTbF3DGBJXQYMx9Pw.roa (hash: N095uXaZbk2Jvru/0oYsrQzeZ/eKCMXo6ETE3DefpcQ=)
5: j4cd6L8tYRDjLejdv94aClKAGXU.roa (hash: WlNinENED4PfFKrXHfbYinzDLlIPfYjUPCjvbvhk+i8=)
6: nHPZRT--37gMRUO7Up_DMMH4wc4.crl (hash: WVVFe7WWLUhfKIsIBaLWda1UtrEQabWwSyv/Hed4ULw=)
7: xe-87aH9X1grSznD-2-c4OZyYHo.roa (hash: S80ekAfHbqsZOpsBTbZwj0DAL1iEaOufRZ1+nQUXDqE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b0/b35379-2122-4191-8821-c47e18df0371/1/nHPZRT--37gMRUO7Up_DMMH4wc4.crl
rsync://rpki.ripe.net/repository/DEFAULT/b0/b35379-2122-4191-8821-c47e18df0371/1/nHPZRT--37gMRUO7Up_DMMH4wc4.mft
rsync://rpki.ripe.net/repository/DEFAULT/nHPZRT--37gMRUO7Up_DMMH4wc4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:59:01:25:ed:2b:c8:a7:4f:d7:de:57:c2:57:84:9e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9c73d9453fbedfb80c4543bb529fc330c1f8c1ce
Validity
Not Before: Oct 19 12:01:55 2025 GMT
Not After : Oct 20 12:01:55 2025 GMT
Subject: CN=aa4a43a807d7a2a940d9985633033e69a09cd3e1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:4c:c1:f4:33:77:0d:76:1b:98:9a:ae:9c:4a:
a2:f4:e5:fa:9a:98:79:00:de:19:be:f3:0d:03:41:
49:19:61:0b:4a:35:61:fe:ca:7e:3f:08:e4:97:50:
f6:27:85:b2:82:96:01:23:5e:72:a1:67:70:75:ca:
72:7c:c2:7e:a6:c9:fa:55:a7:2a:08:3b:d8:1c:7d:
c1:2d:fc:cf:5f:2b:0f:de:73:98:67:b9:4d:95:6d:
b9:af:7a:96:ea:3f:53:cd:82:f1:f0:10:a5:fa:ba:
d1:fd:2c:59:21:ff:bb:91:71:1c:0d:a6:06:45:50:
3f:40:65:8b:81:66:90:35:49:92:b2:15:f7:77:d1:
67:b7:9e:10:52:79:d8:a1:1a:48:09:19:92:87:ec:
a9:75:e7:35:20:32:cc:e9:27:dd:92:54:8d:c8:ee:
59:4a:88:26:16:20:f0:36:eb:e1:65:f1:e7:e2:b0:
b5:98:2a:a8:f5:d6:08:36:a3:73:1a:39:dc:0b:dc:
dc:97:43:b2:33:26:55:a4:b8:11:3f:ae:68:ac:81:
49:b0:e9:33:20:dc:08:36:42:a2:6e:b5:a7:5f:aa:
65:c8:82:a9:6c:0a:04:a9:f6:bb:42:92:85:4f:d3:
b6:f5:fa:34:6b:92:f2:55:0d:1c:ff:5e:97:10:9f:
21:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:4A:43:A8:07:D7:A2:A9:40:D9:98:56:33:03:3E:69:A0:9C:D3:E1
X509v3 Authority Key Identifier:
keyid:9C:73:D9:45:3F:BE:DF:B8:0C:45:43:BB:52:9F:C3:30:C1:F8:C1:CE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nHPZRT--37gMRUO7Up_DMMH4wc4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/b35379-2122-4191-8821-c47e18df0371/1/nHPZRT--37gMRUO7Up_DMMH4wc4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/b35379-2122-4191-8821-c47e18df0371/1/nHPZRT--37gMRUO7Up_DMMH4wc4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7d:3d:86:e9:60:76:e3:53:7a:c3:2e:a8:60:52:3d:cb:d9:a2:
b6:d4:85:4b:39:b2:c5:b1:b2:42:6c:f6:14:45:68:9c:18:3a:
2c:b1:01:dd:6c:0c:13:9d:bc:27:60:33:45:c5:7c:3d:c1:1e:
3f:d6:41:1d:fe:17:ee:7e:38:fc:d1:76:ee:ed:9f:e7:3c:fb:
6e:e3:ea:07:d7:43:90:3e:23:26:d6:ed:a6:13:02:a6:93:42:
b4:18:10:e6:fa:e2:f1:bb:72:e2:b4:b9:90:49:3f:8a:ae:2a:
e3:a0:4d:b6:d4:43:2e:de:9b:21:69:9a:f4:7e:fe:e2:e7:2d:
78:f8:93:14:32:29:de:2a:e6:6e:79:17:28:06:fc:a8:d5:78:
eb:50:63:70:e3:c1:3f:0a:37:78:42:b2:46:bf:8c:96:27:7f:
96:55:0b:1b:db:e5:46:ea:fc:70:d0:63:cb:56:6c:22:18:25:
8f:6e:cd:d7:16:8c:b4:31:da:ad:da:4d:98:f4:58:92:3d:92:
87:63:9a:ba:f9:0e:4f:40:ca:5f:59:98:1b:00:2a:43:fb:09:
56:cc:de:70:0d:87:1f:87:be:ce:95:d2:12:a1:70:44:4d:66:
13:11:2f:3e:29:14:dd:7e:df:c0:54:6a:c3:7c:db:cc:e1:47:
d6:00:ab:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 17:58:07 2025 by rpki-client