Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/e67e82-74d1-4598-80ee-ce0e97bab6a7/1/nJGTyUKgcOtue3bTPBFwwauqq8A.mft
File: nJGTyUKgcOtue3bTPBFwwauqq8A.mft (raw, json)
Hash identifier: YcssXQIDrKjz1+PWnxKATSUtWuSvOgd2J3Yxvg7YIz0=
Subject key identifier: 41:83:D0:07:64:9E:4F:1B:81:4D:5A:2D:84:D0:38:4B:EB:7E:03:4D
Authority key identifier: 9C:91:93:C9:42:A0:70:EB:6E:7B:76:D3:3C:11:70:C1:AB:AA:AB:C0
Certificate issuer: /CN=9c9193c942a070eb6e7b76d33c1170c1abaaabc0
Certificate serial: 0199FD6AF152BD884BDBA32808875667764F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nJGTyUKgcOtue3bTPBFwwauqq8A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d4/e67e82-74d1-4598-80ee-ce0e97bab6a7/1/nJGTyUKgcOtue3bTPBFwwauqq8A.mft
Manifest number: 01E8
Signing time: Sun 19 Oct 2025 17:01:08 +0000
Manifest this update: Sun 19 Oct 2025 17:01:08 +0000
Manifest next update: Mon 20 Oct 2025 17:01:08 +0000
Files and hashes: 1: nJGTyUKgcOtue3bTPBFwwauqq8A.crl (hash: gwXw32wCPAVjzV1nk024513x+liA9+8A5Oy+ayg8TsQ=)
2: zsKGqfleCvDMwN0xjyFpS4xkenw.roa (hash: i/u/9VVtT03r4id3fmUnH+SfZ7Nvzq19dchi8Dl+uKg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d4/e67e82-74d1-4598-80ee-ce0e97bab6a7/1/nJGTyUKgcOtue3bTPBFwwauqq8A.crl
rsync://rpki.ripe.net/repository/DEFAULT/d4/e67e82-74d1-4598-80ee-ce0e97bab6a7/1/nJGTyUKgcOtue3bTPBFwwauqq8A.mft
rsync://rpki.ripe.net/repository/DEFAULT/nJGTyUKgcOtue3bTPBFwwauqq8A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fd:6a:f1:52:bd:88:4b:db:a3:28:08:87:56:67:76:4f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9c9193c942a070eb6e7b76d33c1170c1abaaabc0
Validity
Not Before: Oct 19 17:01:08 2025 GMT
Not After : Oct 20 17:01:08 2025 GMT
Subject: CN=4183d007649e4f1b814d5a2d84d0384beb7e034d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:25:e0:9c:b1:a3:ef:72:5a:cd:6d:98:45:3b:
91:fe:1c:55:31:61:d5:f3:a8:5a:4e:71:98:44:5c:
4b:be:6f:8e:57:6a:ae:26:59:51:47:1d:bc:8a:1b:
7e:43:a6:7e:3d:35:b7:2e:c8:c9:91:43:15:e3:f3:
05:2a:67:07:41:68:53:ce:c3:06:73:49:1c:2a:81:
f2:e0:66:70:39:00:f8:b4:e9:ca:7d:63:5b:4b:fd:
4b:ea:8d:e5:6c:7c:04:a8:09:4e:ea:13:0f:c2:a8:
12:df:69:9a:1a:e6:ff:8f:f3:4c:0e:f0:52:9d:cf:
c8:bd:e8:dd:61:f4:19:80:d1:4b:bd:9c:9e:ac:3a:
65:4d:eb:8c:ca:80:b8:af:9a:b0:29:76:21:36:ac:
63:9b:66:72:44:ae:6f:a0:fa:b8:c7:c3:24:f3:18:
4b:6e:24:ae:1d:fd:45:16:4d:06:73:8f:69:f3:42:
cc:43:d8:0e:02:3a:5f:10:04:13:d2:cc:4a:58:37:
b8:6e:d2:bf:01:88:87:d6:9a:87:86:4e:ce:b2:2c:
24:c5:73:ff:3b:74:c8:1d:70:e1:70:20:f9:9e:bd:
6b:78:a3:66:13:10:a7:1c:a4:81:f1:6c:65:5a:c0:
f5:2e:a1:30:06:4b:8f:78:24:57:93:74:a2:4a:57:
e8:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:83:D0:07:64:9E:4F:1B:81:4D:5A:2D:84:D0:38:4B:EB:7E:03:4D
X509v3 Authority Key Identifier:
keyid:9C:91:93:C9:42:A0:70:EB:6E:7B:76:D3:3C:11:70:C1:AB:AA:AB:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nJGTyUKgcOtue3bTPBFwwauqq8A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/e67e82-74d1-4598-80ee-ce0e97bab6a7/1/nJGTyUKgcOtue3bTPBFwwauqq8A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/e67e82-74d1-4598-80ee-ce0e97bab6a7/1/nJGTyUKgcOtue3bTPBFwwauqq8A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b2:55:cd:9f:07:5a:f3:af:08:33:2a:5d:57:d2:7e:ff:4a:8b:
26:36:00:a0:d2:3b:cb:b4:8c:44:89:bd:92:a7:58:28:6a:4d:
bb:c2:d3:ae:2e:68:77:db:89:77:5f:1a:e1:21:e1:47:ce:58:
19:8a:31:a6:ae:c7:6b:45:46:ec:b0:8a:43:02:31:89:c1:74:
4e:f9:0a:0d:45:c8:91:12:39:80:db:ad:01:ae:7e:d2:f1:b3:
1d:fa:63:6c:90:ce:e7:bc:3e:fe:de:00:2e:15:ce:00:19:0d:
99:92:97:30:6e:85:04:2b:7e:85:8a:45:25:8f:63:4a:20:08:
63:c0:7c:71:0c:5d:9f:f1:41:98:79:44:69:51:7b:38:51:f1:
04:63:ea:ac:6b:5a:e5:27:7b:89:47:de:b4:54:41:fe:1d:b4:
76:73:22:5c:8c:f2:df:7b:0d:0f:5b:3b:5e:b7:c9:da:5f:46:
20:2e:67:13:52:51:19:2c:c9:e1:2d:10:05:4f:12:3a:e1:d2:
8f:37:0f:4c:2e:5c:af:a1:36:bd:bf:75:4a:92:ea:51:9f:e3:
e3:47:15:4d:2c:21:9b:32:6e:e1:00:27:ea:19:bd:dc:e9:06:
e9:07:3b:1c:aa:86:ef:eb:7f:d4:57:39:1a:5e:3d:67:61:cf:
d4:5e:ba:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 20:43:47 2025 by rpki-client