Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d8/6e8444-8da5-466b-8400-7bd96d9c6286/1/nRfZOI52MabRmvsrJkJ5WiTIQIE.mft
File: nRfZOI52MabRmvsrJkJ5WiTIQIE.mft (raw, json)
Hash identifier: TrtbjOrutJexGRP9yvnEcOXjUhL8iolflHegbYPSLm8=
Subject key identifier: B4:36:51:42:A9:92:73:C6:9C:53:93:C0:27:28:40:D3:42:AF:C5:B1
Authority key identifier: 9D:17:D9:38:8E:76:31:A6:D1:9A:FB:2B:26:42:79:5A:24:C8:40:81
Certificate issuer: /CN=9d17d9388e7631a6d19afb2b2642795a24c84081
Certificate serial: 0199FC5838E83C7A7C7BC6A5A5689B4D749A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nRfZOI52MabRmvsrJkJ5WiTIQIE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d8/6e8444-8da5-466b-8400-7bd96d9c6286/1/nRfZOI52MabRmvsrJkJ5WiTIQIE.mft
Manifest number: 16E7
Signing time: Sun 19 Oct 2025 12:01:04 +0000
Manifest this update: Sun 19 Oct 2025 12:01:04 +0000
Manifest next update: Mon 20 Oct 2025 12:01:04 +0000
Files and hashes: 1: nRfZOI52MabRmvsrJkJ5WiTIQIE.crl (hash: kuZ1Zh3J17dlcMJQQLlhq5CW+7xYXGqrbhuyZ771qkA=)
2: u2BNAAC7Dm0euPOTB8HOX-QylyE.roa (hash: GNqBAmVB3is0CDKmPUm0vfs8TWmU1YL168pv/EKk5Z4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d8/6e8444-8da5-466b-8400-7bd96d9c6286/1/nRfZOI52MabRmvsrJkJ5WiTIQIE.crl
rsync://rpki.ripe.net/repository/DEFAULT/d8/6e8444-8da5-466b-8400-7bd96d9c6286/1/nRfZOI52MabRmvsrJkJ5WiTIQIE.mft
rsync://rpki.ripe.net/repository/DEFAULT/nRfZOI52MabRmvsrJkJ5WiTIQIE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:58:38:e8:3c:7a:7c:7b:c6:a5:a5:68:9b:4d:74:9a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9d17d9388e7631a6d19afb2b2642795a24c84081
Validity
Not Before: Oct 19 12:01:04 2025 GMT
Not After : Oct 20 12:01:04 2025 GMT
Subject: CN=b4365142a99273c69c5393c0272840d342afc5b1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:95:04:42:00:ae:bf:87:c0:53:54:63:60:7b:
6b:ae:79:6e:34:ce:2f:9e:cd:92:9e:9e:b3:34:fd:
3f:3e:21:cb:a1:b3:b3:7a:15:d6:0f:3a:28:95:15:
1a:e7:e8:7c:3e:03:23:d9:87:b4:4b:1b:8e:3a:db:
6a:cc:d9:23:ef:95:e3:bc:fd:f6:ae:d3:56:99:94:
c3:24:6d:54:7c:52:93:b8:59:78:b9:1c:ca:95:1b:
64:fc:c3:a4:a9:85:47:3b:d4:fa:97:3c:2e:71:11:
09:7e:74:9a:d9:df:64:ec:bd:e5:09:8f:8e:ce:39:
d5:94:25:89:1b:07:29:34:d6:3a:05:2a:49:ca:c2:
36:bd:d0:ab:15:29:5e:cb:9e:13:c9:6b:5e:96:30:
b0:99:e2:da:a7:b8:69:5c:2d:27:a8:a2:1c:4a:42:
ef:9b:91:fa:c9:75:f0:1f:be:24:aa:0c:51:33:bc:
9f:6a:9c:4a:5f:9f:39:4a:15:fb:e4:ad:3f:78:61:
63:a0:d5:cc:38:0d:88:e4:8a:1f:19:09:f7:04:01:
7a:36:ae:a8:3b:ca:cc:93:03:c1:ab:6c:af:c5:39:
56:65:6e:6e:cc:bd:a8:de:fb:62:55:01:55:56:b7:
dd:c2:c3:ce:28:3b:9f:bc:7e:03:e4:53:9c:89:4b:
82:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:36:51:42:A9:92:73:C6:9C:53:93:C0:27:28:40:D3:42:AF:C5:B1
X509v3 Authority Key Identifier:
keyid:9D:17:D9:38:8E:76:31:A6:D1:9A:FB:2B:26:42:79:5A:24:C8:40:81
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nRfZOI52MabRmvsrJkJ5WiTIQIE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/6e8444-8da5-466b-8400-7bd96d9c6286/1/nRfZOI52MabRmvsrJkJ5WiTIQIE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/6e8444-8da5-466b-8400-7bd96d9c6286/1/nRfZOI52MabRmvsrJkJ5WiTIQIE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
05:4d:a5:1c:2e:82:71:f9:7e:6d:e7:06:35:c5:1b:eb:39:4b:
1e:c4:ae:68:ab:90:4e:f5:9a:57:15:81:dc:42:61:9d:9d:0a:
3a:56:7c:c8:e0:98:7f:48:21:b3:1d:09:65:a3:b1:fd:52:6b:
5c:1b:76:8a:72:86:7e:aa:9b:a9:2b:d1:89:e2:22:ff:9c:82:
ec:7b:f5:19:a6:ce:c6:79:13:c2:47:a0:ad:d5:f1:9d:15:f6:
c8:e5:f2:0f:0c:5b:dd:3b:82:fd:5c:52:0f:43:83:06:c9:dc:
e1:7c:26:43:15:26:74:76:7a:4b:cc:c1:ef:76:0d:06:e2:35:
23:9e:aa:31:53:93:77:d9:39:ea:fe:4e:3f:ad:d2:e4:dc:85:
f1:3e:93:b3:b4:cd:ea:d5:bf:1a:02:fc:7c:ff:d4:2e:53:4c:
38:af:3f:da:0a:ab:9f:f3:6e:c2:3e:23:4a:9b:c6:4c:fe:05:
9c:f5:73:7b:1a:01:b7:4b:df:fb:05:10:99:71:a3:2b:81:88:
aa:12:8d:7c:0c:f7:69:1b:98:59:ad:cf:88:98:59:f2:53:dd:
5f:ef:a0:be:66:de:b6:74:75:fe:5c:df:49:08:e8:a1:e3:d7:
c4:e1:09:f0:80:ac:36:79:7c:13:e7:19:7f:27:c3:9f:29:b5:
00:d8:53:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 20:50:49 2025 by rpki-client