Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c2/1186e4-0c14-4b80-9981-e875103faf12/1/nMXDXZhobz2KOHQXGxQyh_Xj5zM.mft
File: nMXDXZhobz2KOHQXGxQyh_Xj5zM.mft (raw, json)
Hash identifier: nSRmddtlCD67VSA7WeHF75Eg+0wxQ1a23bqofJ5vWYE=
Subject key identifier: 8B:73:74:F8:AF:E2:F3:EB:F9:8F:57:6C:30:3B:93:04:4A:20:04:EE
Authority key identifier: 9C:C5:C3:5D:98:68:6F:3D:8A:38:74:17:1B:14:32:87:F5:E3:E7:33
Certificate issuer: /CN=9cc5c35d98686f3d8a3874171b143287f5e3e733
Certificate serial: 0199FCFDC0BCCDF2F5645555F9BF25C42F25
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nMXDXZhobz2KOHQXGxQyh_Xj5zM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c2/1186e4-0c14-4b80-9981-e875103faf12/1/nMXDXZhobz2KOHQXGxQyh_Xj5zM.mft
Manifest number: 0305
Signing time: Sun 19 Oct 2025 15:01:52 +0000
Manifest this update: Sun 19 Oct 2025 15:01:52 +0000
Manifest next update: Mon 20 Oct 2025 15:01:52 +0000
Files and hashes: 1: BqZIe6gQs5PVIE84eQo2_DOFBSU.roa (hash: U/7+ugA60UPkZBbdU298MJ3Zk+Vay3cife8TG24P130=)
2: nMXDXZhobz2KOHQXGxQyh_Xj5zM.crl (hash: P4tMJKwib0qgWThArB0wuObHIqGPHFPPM8tReT3gkNY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c2/1186e4-0c14-4b80-9981-e875103faf12/1/nMXDXZhobz2KOHQXGxQyh_Xj5zM.crl
rsync://rpki.ripe.net/repository/DEFAULT/c2/1186e4-0c14-4b80-9981-e875103faf12/1/nMXDXZhobz2KOHQXGxQyh_Xj5zM.mft
rsync://rpki.ripe.net/repository/DEFAULT/nMXDXZhobz2KOHQXGxQyh_Xj5zM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:fd:c0:bc:cd:f2:f5:64:55:55:f9:bf:25:c4:2f:25
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9cc5c35d98686f3d8a3874171b143287f5e3e733
Validity
Not Before: Oct 19 15:01:52 2025 GMT
Not After : Oct 20 15:01:52 2025 GMT
Subject: CN=8b7374f8afe2f3ebf98f576c303b93044a2004ee
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:0f:0e:78:38:44:80:3d:46:2f:58:2f:88:4e:
8c:9b:10:84:e7:2f:f6:67:2d:c7:7f:9c:6d:84:ab:
5b:95:74:72:a6:33:80:65:ee:b0:9d:eb:ed:19:44:
f5:34:28:60:0c:30:90:91:33:a2:9f:fa:83:ea:45:
ef:38:a8:f9:87:5d:b0:b4:4b:af:4b:3d:2e:39:ed:
5a:72:89:85:9e:75:90:8f:0b:4c:b8:92:7c:4a:01:
5d:25:19:b0:4a:e4:a1:77:fc:a5:4e:5a:53:a2:b2:
e4:ba:bb:5c:41:9a:b4:eb:99:d4:14:8a:3f:6b:79:
d5:4e:77:cc:04:35:1e:d8:3e:44:86:db:a1:99:53:
ec:8a:fd:0e:59:9e:84:8b:25:21:1c:eb:4d:b4:a3:
fb:92:38:58:83:56:10:cf:57:89:bc:0d:eb:6d:0e:
27:54:e7:84:3a:9a:0a:2f:30:68:61:3f:30:b1:2c:
28:4c:a3:78:bb:c7:de:b1:c7:08:f4:2e:47:48:dd:
72:dc:7c:51:47:64:1d:a8:45:81:eb:f9:f6:c1:d5:
92:c2:ce:ff:36:9f:57:f7:49:9b:ee:f5:e9:67:18:
3d:23:cb:0d:3d:85:b7:4b:c9:7e:0a:8b:97:c6:5f:
14:f5:e6:6c:75:2e:f6:f3:86:e2:b8:1f:15:ba:f3:
60:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:73:74:F8:AF:E2:F3:EB:F9:8F:57:6C:30:3B:93:04:4A:20:04:EE
X509v3 Authority Key Identifier:
keyid:9C:C5:C3:5D:98:68:6F:3D:8A:38:74:17:1B:14:32:87:F5:E3:E7:33
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nMXDXZhobz2KOHQXGxQyh_Xj5zM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/1186e4-0c14-4b80-9981-e875103faf12/1/nMXDXZhobz2KOHQXGxQyh_Xj5zM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/1186e4-0c14-4b80-9981-e875103faf12/1/nMXDXZhobz2KOHQXGxQyh_Xj5zM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
59:fc:bf:72:d5:a3:99:31:b9:fc:2c:65:c2:ef:d3:f4:44:07:
7d:e5:1e:57:3c:9c:15:fc:fc:20:ca:5e:9e:d1:88:fe:cb:01:
e9:9c:49:37:56:e6:85:81:6d:dd:7e:33:ed:fd:da:9f:e0:10:
35:1a:ca:d2:fa:8d:64:40:f1:06:65:a7:9d:da:ff:5f:d8:eb:
4d:6d:ea:41:bd:e0:a8:15:b0:2b:a5:f5:e3:1c:d7:d3:b6:79:
d0:a6:75:40:ab:d0:c8:2e:45:84:e4:f4:d5:63:c9:1b:72:3f:
81:4b:73:c3:06:22:9e:fb:34:dc:1f:5e:0f:83:20:5f:2d:e0:
4a:15:45:e7:36:be:d3:3b:e2:e5:bc:0f:94:cc:12:da:54:bd:
e6:6c:58:5b:91:8b:03:14:ca:ae:78:92:54:dc:64:a8:f9:ca:
7f:5a:c0:b6:72:c0:fa:15:53:45:1d:f2:2e:ae:5b:d1:82:47:
b1:54:90:32:f4:c2:f9:8f:09:c5:90:f2:cb:94:19:c8:20:b7:
71:5c:da:6e:e3:f0:61:63:f4:52:1e:37:76:06:a4:09:54:b1:
36:f9:d0:71:42:6d:5f:69:cb:a8:4e:db:7a:da:7e:4f:9d:27:
bb:18:5f:ac:8f:8f:9b:46:9d:14:bb:1f:62:e9:92:2e:e0:cf:
8e:7a:52:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 20:59:29 2025 by rpki-client