Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/7fbcc6-64fd-4874-ab49-825b47c15430/1/nH-p6vOFbKTnUEFBTlHYYBgMkm8.mft
File: nH-p6vOFbKTnUEFBTlHYYBgMkm8.mft (raw, json)
Hash identifier: khcf4LUCl+obEdOEjVEHFeghmmN+xpCq3iBDEOXRhHE=
Subject key identifier: 13:62:0E:89:AB:38:25:1B:69:7C:CB:CF:4E:4B:67:81:0E:A8:44:4A
Authority key identifier: 9C:7F:A9:EA:F3:85:6C:A4:E7:50:41:41:4E:51:D8:60:18:0C:92:6F
Certificate issuer: /CN=9c7fa9eaf3856ca4e75041414e51d860180c926f
Certificate serial: 0199FCC63AC835861045EBE5BFC47FA33BD7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nH-p6vOFbKTnUEFBTlHYYBgMkm8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/7fbcc6-64fd-4874-ab49-825b47c15430/1/nH-p6vOFbKTnUEFBTlHYYBgMkm8.mft
Manifest number: 0EA4
Signing time: Sun 19 Oct 2025 14:01:13 +0000
Manifest this update: Sun 19 Oct 2025 14:01:13 +0000
Manifest next update: Mon 20 Oct 2025 14:01:13 +0000
Files and hashes: 1: SJakYTj9pb3r41qOMQrQf_YPYbc.roa (hash: tab9yW3GhAbdQLvfn40C4/W+qyYm4f+BamJUC4exFC4=)
2: nH-p6vOFbKTnUEFBTlHYYBgMkm8.crl (hash: F/s4Buhi/HhxnLDap1e2OGHl6D5ZYrLVsw0i6kkgPZg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/7fbcc6-64fd-4874-ab49-825b47c15430/1/nH-p6vOFbKTnUEFBTlHYYBgMkm8.crl
rsync://rpki.ripe.net/repository/DEFAULT/c3/7fbcc6-64fd-4874-ab49-825b47c15430/1/nH-p6vOFbKTnUEFBTlHYYBgMkm8.mft
rsync://rpki.ripe.net/repository/DEFAULT/nH-p6vOFbKTnUEFBTlHYYBgMkm8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 14:01:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:c6:3a:c8:35:86:10:45:eb:e5:bf:c4:7f:a3:3b:d7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9c7fa9eaf3856ca4e75041414e51d860180c926f
Validity
Not Before: Oct 19 14:01:13 2025 GMT
Not After : Oct 20 14:01:13 2025 GMT
Subject: CN=13620e89ab38251b697ccbcf4e4b67810ea8444a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:db:80:f7:07:96:a5:df:35:cb:24:e1:ed:84:
69:e5:bc:8a:18:d1:da:d8:fb:7d:27:6a:2b:5a:fa:
b7:45:c4:15:61:17:ac:fc:f5:99:69:e2:af:13:38:
8a:a4:b5:ad:ac:77:6d:69:46:60:c1:e3:e6:53:cb:
52:a4:03:9c:8d:e6:64:81:a6:30:a6:41:4b:c7:ff:
ed:e5:16:43:be:54:e5:3c:d6:73:16:e8:c1:ec:41:
c1:98:78:47:4b:4d:5a:d6:18:f6:8f:91:76:7c:5d:
af:46:83:31:b0:37:0b:62:fa:eb:bd:89:ef:cc:9b:
b2:7c:e8:ca:d4:43:cc:cf:5b:72:f0:bf:ba:e5:4d:
ac:4b:08:68:8b:f5:31:5d:c4:2c:ba:f8:16:f6:4d:
17:51:f6:41:92:af:3b:74:a0:0b:6e:b0:09:81:cb:
6f:06:8c:21:75:42:c7:e3:ea:90:d1:22:ec:25:1b:
44:03:83:b7:54:67:07:db:d2:19:b3:ba:88:75:e7:
7c:3c:df:9d:76:e4:26:4c:cb:84:ec:37:ea:81:f6:
41:0b:08:00:67:67:be:09:c2:41:56:aa:0c:4e:42:
03:41:04:1d:6e:60:c7:67:f8:e4:d4:91:81:69:f8:
5a:a4:29:fc:f8:7c:ae:57:1b:62:0a:87:f3:fb:7b:
6b:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:62:0E:89:AB:38:25:1B:69:7C:CB:CF:4E:4B:67:81:0E:A8:44:4A
X509v3 Authority Key Identifier:
keyid:9C:7F:A9:EA:F3:85:6C:A4:E7:50:41:41:4E:51:D8:60:18:0C:92:6F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nH-p6vOFbKTnUEFBTlHYYBgMkm8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/7fbcc6-64fd-4874-ab49-825b47c15430/1/nH-p6vOFbKTnUEFBTlHYYBgMkm8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/7fbcc6-64fd-4874-ab49-825b47c15430/1/nH-p6vOFbKTnUEFBTlHYYBgMkm8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
30:6a:4b:02:2f:30:a1:07:48:5d:7e:90:83:89:eb:3e:f4:b9:
75:da:06:1c:50:9c:a2:2d:51:34:90:73:95:67:82:9c:d4:b9:
f0:b6:4a:83:8f:0a:32:14:fe:22:23:d9:82:b4:51:13:e9:e8:
fb:85:16:ba:73:a8:2e:27:62:a0:f5:ae:bf:00:72:77:b1:59:
02:f8:2c:69:3a:e2:c1:4d:72:d8:91:1b:3b:ff:d6:e8:4f:ff:
d4:03:f3:29:c7:8f:a8:e1:32:e2:af:44:58:eb:6f:42:79:38:
61:e5:79:b6:15:56:d1:44:e5:18:2f:ea:40:f7:fe:8c:aa:8f:
f8:b9:69:da:11:63:58:45:9b:3d:57:2b:23:ff:da:3b:cb:b1:
68:0f:0f:56:3e:bb:5d:65:3f:e0:92:14:26:77:ca:29:f1:ba:
5f:77:62:9b:56:0c:2d:5b:bb:45:7a:59:9c:41:4c:0a:df:8f:
6d:0d:b7:52:ae:90:04:e4:11:11:f6:34:bc:85:39:84:53:bf:
04:05:7f:2d:0b:c4:52:5b:08:6b:e7:d1:8d:52:54:83:ed:44:
9d:ed:d4:36:9e:40:89:b4:b6:a3:91:4c:34:81:ff:88:ed:af:
c6:38:af:97:07:b2:b9:8f:3b:c5:db:86:44:f9:2e:6c:42:ed:
a3:cf:8c:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 00:02:56 2025 by rpki-client