Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dc/339d29-712a-4c86-9510-e4d6bcf336b7/1/nYHLUEMmdDsX02SiBIdcOcbtvAk.mft
File: nYHLUEMmdDsX02SiBIdcOcbtvAk.mft (raw, json)
Hash identifier: zSLKKDoZEw2Wa8roUUNpA41s1VXcp04dZ7I9zr8dHx4=
Subject key identifier: 05:F6:3B:C7:09:4D:16:CE:E6:1E:23:6D:7C:69:25:CD:6C:32:E6:65
Authority key identifier: 9D:81:CB:50:43:26:74:3B:17:D3:64:A2:04:87:5C:39:C6:ED:BC:09
Certificate issuer: /CN=9d81cb504326743b17d364a204875c39c6edbc09
Certificate serial: 0199FC58AD2D621A157ECA2D2335691DBE5C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nYHLUEMmdDsX02SiBIdcOcbtvAk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dc/339d29-712a-4c86-9510-e4d6bcf336b7/1/nYHLUEMmdDsX02SiBIdcOcbtvAk.mft
Manifest number: 1079
Signing time: Sun 19 Oct 2025 12:01:33 +0000
Manifest this update: Sun 19 Oct 2025 12:01:33 +0000
Manifest next update: Mon 20 Oct 2025 12:01:33 +0000
Files and hashes: 1: JP_mk9oH8p5bvlYYSWGek7KXox0.roa (hash: QozdhhJZu+Cfz+XSJNvXYpnVEpaUzqrN6lM64Dbcl70=)
2: nYHLUEMmdDsX02SiBIdcOcbtvAk.crl (hash: Qo3AMomxxWyRFtqhPXZw/NtejV76mZmmZ9OePrhL+Yg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dc/339d29-712a-4c86-9510-e4d6bcf336b7/1/nYHLUEMmdDsX02SiBIdcOcbtvAk.crl
rsync://rpki.ripe.net/repository/DEFAULT/dc/339d29-712a-4c86-9510-e4d6bcf336b7/1/nYHLUEMmdDsX02SiBIdcOcbtvAk.mft
rsync://rpki.ripe.net/repository/DEFAULT/nYHLUEMmdDsX02SiBIdcOcbtvAk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:58:ad:2d:62:1a:15:7e:ca:2d:23:35:69:1d:be:5c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9d81cb504326743b17d364a204875c39c6edbc09
Validity
Not Before: Oct 19 12:01:33 2025 GMT
Not After : Oct 20 12:01:33 2025 GMT
Subject: CN=05f63bc7094d16cee61e236d7c6925cd6c32e665
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:7f:ae:36:19:40:69:ce:1b:80:54:5b:e0:0a:
4a:90:67:83:08:6f:be:73:54:ba:f1:69:64:ad:dc:
49:f2:54:ed:4c:9a:31:e4:a6:21:78:93:92:a2:2f:
ae:0c:8a:38:84:17:61:ad:23:e6:5c:fd:3e:6e:3b:
58:f1:27:f9:7d:8b:f1:e3:b9:10:18:39:57:e9:b6:
e8:4a:4b:e3:5d:30:de:0c:9d:a8:bb:f9:29:bb:c4:
00:cc:5f:14:73:11:af:68:fb:cf:ab:d7:3a:bd:c2:
c9:dd:af:84:76:ef:3a:a9:ee:b4:c3:76:34:dc:e0:
90:e5:c8:8e:21:4d:79:9d:cb:9c:4e:46:07:a8:ca:
d9:ab:1c:02:7f:71:a3:ac:5e:76:f8:5b:4c:a0:21:
30:c3:a5:52:a5:05:32:8c:74:e2:06:c2:0e:fe:21:
79:24:ff:a3:10:6b:55:9c:93:92:ac:07:16:83:31:
10:4d:c3:da:32:b6:e9:22:bc:20:51:f8:37:14:3d:
ef:5a:33:47:0d:36:f0:4b:76:6f:98:1a:5f:ea:64:
0e:23:c3:12:8c:4e:43:42:27:f6:9f:83:62:e6:95:
b5:32:3c:21:78:b3:4c:0a:72:0d:12:94:00:78:49:
c2:67:da:ab:cb:b4:a4:2d:45:6b:ab:cd:ab:0d:ab:
61:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:F6:3B:C7:09:4D:16:CE:E6:1E:23:6D:7C:69:25:CD:6C:32:E6:65
X509v3 Authority Key Identifier:
keyid:9D:81:CB:50:43:26:74:3B:17:D3:64:A2:04:87:5C:39:C6:ED:BC:09
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nYHLUEMmdDsX02SiBIdcOcbtvAk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/339d29-712a-4c86-9510-e4d6bcf336b7/1/nYHLUEMmdDsX02SiBIdcOcbtvAk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/339d29-712a-4c86-9510-e4d6bcf336b7/1/nYHLUEMmdDsX02SiBIdcOcbtvAk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7f:5a:96:9b:5b:c5:ba:9b:ff:bb:ac:e3:f9:7a:63:a4:7b:35:
f0:49:46:80:92:c7:bd:c0:eb:2c:70:4c:ec:4a:2d:84:89:75:
f8:8b:b0:34:d9:f6:96:ad:51:8d:ef:0c:ae:bb:64:51:81:1b:
8d:74:f4:94:41:03:bf:ad:cf:2c:6e:b1:c2:74:d7:fe:17:af:
cb:19:45:d3:82:de:e9:14:e6:5a:22:60:85:8c:fb:7d:de:b2:
08:5b:b2:22:1f:75:4d:80:c7:e3:50:dc:8d:84:b0:60:c5:38:
4b:da:2d:1b:d9:6f:81:cd:3c:f9:32:e8:78:df:b7:e7:fa:30:
19:e7:eb:87:e4:9a:63:74:0b:95:0e:ec:e5:ea:de:37:3d:85:
a6:b3:70:5f:bf:04:3d:3c:fb:31:75:ac:46:26:d8:ba:54:27:
1b:e8:2a:26:d8:26:40:96:a7:d9:9a:ee:10:6e:2a:8c:c1:7a:
d4:63:3e:29:e2:76:ac:68:c2:32:9a:87:2d:a6:39:0b:e8:3b:
6d:ce:e8:76:04:94:43:dc:1e:4b:99:0d:aa:2d:ba:e7:f2:fb:
61:50:f8:0d:26:63:0c:ee:e7:1d:ca:18:bd:7f:d3:c5:ee:d8:
39:df:99:63:18:4d:0d:5c:6b:4e:4a:b9:9c:7c:9b:69:0e:62:
b6:bc:00:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 20:59:02 2025 by rpki-client