Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c1/593dd5-b907-4de8-80cd-b1db70071dde/1/nm8mIuZcLuhjUB13IUdaBe9TQ_s.mft
File: nm8mIuZcLuhjUB13IUdaBe9TQ_s.mft (raw, json)
Hash identifier: 5xIX+A7a9jo+cUUsGh/VJupfz+KIdWKcIAvdfXOxwmE=
Subject key identifier: 93:63:E6:80:B6:25:D3:88:25:F9:B1:65:97:F9:6C:55:33:A9:3F:54
Authority key identifier: 9E:6F:26:22:E6:5C:2E:E8:63:50:1D:77:21:47:5A:05:EF:53:43:FB
Certificate issuer: /CN=9e6f2622e65c2ee863501d7721475a05ef5343fb
Certificate serial: 0199FD343B96E9741292F06F84494A506225
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nm8mIuZcLuhjUB13IUdaBe9TQ_s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c1/593dd5-b907-4de8-80cd-b1db70071dde/1/nm8mIuZcLuhjUB13IUdaBe9TQ_s.mft
Manifest number: 02D8
Signing time: Sun 19 Oct 2025 16:01:22 +0000
Manifest this update: Sun 19 Oct 2025 16:01:22 +0000
Manifest next update: Mon 20 Oct 2025 16:01:22 +0000
Files and hashes: 1: cuJe5r6PJPS-jv29DbSoyr1BYdg.roa (hash: 2tGiauvihDEwDBBUXD4gVcgWbpgeD9AUpt2tKQwt6ew=)
2: nm8mIuZcLuhjUB13IUdaBe9TQ_s.crl (hash: aJ4W1zzIAjNdRmHUPqwv+ZSAJ4zcOcbOgpIjfEzKpKI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c1/593dd5-b907-4de8-80cd-b1db70071dde/1/nm8mIuZcLuhjUB13IUdaBe9TQ_s.crl
rsync://rpki.ripe.net/repository/DEFAULT/c1/593dd5-b907-4de8-80cd-b1db70071dde/1/nm8mIuZcLuhjUB13IUdaBe9TQ_s.mft
rsync://rpki.ripe.net/repository/DEFAULT/nm8mIuZcLuhjUB13IUdaBe9TQ_s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fd:34:3b:96:e9:74:12:92:f0:6f:84:49:4a:50:62:25
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9e6f2622e65c2ee863501d7721475a05ef5343fb
Validity
Not Before: Oct 19 16:01:22 2025 GMT
Not After : Oct 20 16:01:22 2025 GMT
Subject: CN=9363e680b625d38825f9b16597f96c5533a93f54
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:42:78:fc:26:86:c2:77:9b:25:53:e7:82:6d:
c0:3c:61:ab:89:b9:51:8d:e5:b4:df:6d:ca:1d:e4:
28:df:12:69:09:e6:39:8c:b2:e1:c7:6e:52:3a:0d:
ee:26:75:cc:fb:37:24:4c:03:76:92:d4:f8:89:2f:
5c:b3:4e:59:da:67:0d:43:f4:31:7b:94:be:52:30:
3e:2c:37:e0:88:ec:7c:b7:4a:b1:ab:14:45:0b:fd:
82:cb:21:81:b4:0d:7b:98:9a:0d:2f:d9:58:0f:ee:
26:0c:eb:22:78:78:a3:a7:86:bc:9d:f2:57:b8:a5:
08:eb:d9:e0:9e:71:01:b1:89:65:aa:b1:80:57:83:
4d:90:00:70:d4:5f:c6:11:07:db:74:42:6a:52:a0:
fb:66:58:1d:96:b0:f3:cd:98:c0:aa:0f:8b:71:4b:
2c:a8:6f:8f:f1:84:ca:16:98:d9:20:cc:01:55:7f:
1b:61:71:8d:7f:46:f6:f8:87:85:f6:bb:42:c6:c9:
59:46:30:84:93:a1:58:9a:db:89:e3:18:20:0c:ac:
ed:08:bb:50:b0:a0:58:a9:0d:b7:c2:be:6e:71:17:
07:85:a5:4b:a0:66:61:d7:3b:b8:96:99:37:85:cb:
33:ba:1a:4a:52:9f:1f:38:dd:29:65:14:70:fb:75:
10:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:63:E6:80:B6:25:D3:88:25:F9:B1:65:97:F9:6C:55:33:A9:3F:54
X509v3 Authority Key Identifier:
keyid:9E:6F:26:22:E6:5C:2E:E8:63:50:1D:77:21:47:5A:05:EF:53:43:FB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nm8mIuZcLuhjUB13IUdaBe9TQ_s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/593dd5-b907-4de8-80cd-b1db70071dde/1/nm8mIuZcLuhjUB13IUdaBe9TQ_s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/593dd5-b907-4de8-80cd-b1db70071dde/1/nm8mIuZcLuhjUB13IUdaBe9TQ_s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3e:f7:f6:57:57:6d:5d:82:b0:5a:fb:be:55:c9:f0:3a:c7:7c:
3b:c4:a7:2e:ac:fb:55:a8:d6:82:40:59:97:3e:c1:2e:b0:ae:
1c:d4:5e:2d:4a:ad:79:4d:3e:2d:d9:ad:09:05:b1:72:f8:1d:
bb:e1:1e:bf:88:3a:5b:a0:b1:d1:a2:9f:86:9c:a1:04:6a:8a:
06:cd:50:9e:1f:8d:bd:4b:16:58:18:31:a2:54:4a:57:bd:cf:
66:aa:41:43:06:74:af:8a:df:aa:2d:8d:b4:c0:7e:9b:d1:6f:
fc:3a:40:ad:b4:1e:81:c6:e0:30:57:1f:d5:c2:ce:e3:63:b5:
6c:4c:6e:f8:06:b5:3e:e8:fe:2c:4b:26:99:d0:31:06:27:52:
e5:5e:ac:de:57:d1:38:ad:64:48:ce:32:be:2f:ce:dc:24:e4:
ce:80:83:af:4b:26:e8:6a:7e:7e:8b:3d:e0:6e:07:ae:9c:07:
ca:10:c9:3d:d5:66:c1:06:6a:35:99:e9:35:85:81:8e:f6:cb:
ce:60:a2:af:a5:15:7e:63:bb:96:50:cf:02:32:a7:11:96:45:
40:68:98:d6:57:61:e4:fa:7a:0d:65:b4:d4:42:1d:36:26:9a:
53:2e:5b:46:52:06:0b:f2:5d:65:cf:9c:ac:64:de:af:7c:fd:
2a:2d:37:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 17:58:33 2025 by rpki-client