Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dc/8c2874-ebba-4c77-96c6-c31c6d8691d0/1/njKu8AZ8TwuiDuZmNEAAWxs7iHs.mft
File: njKu8AZ8TwuiDuZmNEAAWxs7iHs.mft (raw, json)
Hash identifier: XDiCm9QGsVshWekb4CAT8kdcIqqlwxsTLApjOsLWw8g=
Subject key identifier: 15:EE:93:C8:96:CC:3F:63:2B:8A:16:57:EF:A9:8E:7A:C1:A5:97:05
Authority key identifier: 9E:32:AE:F0:06:7C:4F:0B:A2:0E:E6:66:34:40:00:5B:1B:3B:88:7B
Certificate issuer: /CN=9e32aef0067c4f0ba20ee6663440005b1b3b887b
Certificate serial: 0199FE46A1BEB154E43C7B47E09A7CA932C2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/njKu8AZ8TwuiDuZmNEAAWxs7iHs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dc/8c2874-ebba-4c77-96c6-c31c6d8691d0/1/njKu8AZ8TwuiDuZmNEAAWxs7iHs.mft
Manifest number: 16E5
Signing time: Sun 19 Oct 2025 21:01:05 +0000
Manifest this update: Sun 19 Oct 2025 21:01:05 +0000
Manifest next update: Mon 20 Oct 2025 21:01:05 +0000
Files and hashes: 1: Ssu8zhZouqLFw7AaAzwD8Rhb4ss.roa (hash: Wj2iWFYhEk6j27Vf/+D9hzlZqUC3iOCSrZa2VvDKOhs=)
2: njKu8AZ8TwuiDuZmNEAAWxs7iHs.crl (hash: c6Vukte7JXAje14N/kQ1zpowa0pfFvIcWxUaohI6LM0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dc/8c2874-ebba-4c77-96c6-c31c6d8691d0/1/njKu8AZ8TwuiDuZmNEAAWxs7iHs.crl
rsync://rpki.ripe.net/repository/DEFAULT/dc/8c2874-ebba-4c77-96c6-c31c6d8691d0/1/njKu8AZ8TwuiDuZmNEAAWxs7iHs.mft
rsync://rpki.ripe.net/repository/DEFAULT/njKu8AZ8TwuiDuZmNEAAWxs7iHs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 15:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fe:46:a1:be:b1:54:e4:3c:7b:47:e0:9a:7c:a9:32:c2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9e32aef0067c4f0ba20ee6663440005b1b3b887b
Validity
Not Before: Oct 19 21:01:05 2025 GMT
Not After : Oct 20 21:01:05 2025 GMT
Subject: CN=15ee93c896cc3f632b8a1657efa98e7ac1a59705
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:be:5a:c0:68:6b:a6:33:66:ca:be:23:35:ab:
8f:ea:e3:e4:26:dc:3f:74:79:a5:30:e2:8e:0a:ee:
dc:59:1e:9a:86:a5:7a:61:de:39:95:50:f1:0e:4a:
07:ab:8e:f7:55:5e:26:99:07:bd:94:5d:42:96:7e:
ef:ab:9c:24:49:ef:9b:75:78:91:ea:3f:be:60:b0:
bb:a1:e9:99:81:29:88:88:5e:b8:fd:3e:9c:52:36:
45:1a:50:5f:98:12:ed:75:30:c0:1d:0b:ac:06:5f:
fb:1c:e7:4e:3c:65:c4:32:0e:1a:82:6d:12:fb:bb:
93:ec:ff:ef:46:0c:00:cc:0d:91:59:05:fd:7c:33:
6d:bf:94:1e:bf:ff:a3:9c:e2:9b:08:b4:2f:30:4c:
c1:76:ef:2b:6b:28:13:f1:76:b7:f8:11:f0:c3:0c:
ab:ac:69:05:91:be:b3:33:02:c0:d3:75:92:86:a4:
27:3b:0b:cc:df:e3:8d:1e:cd:b3:4d:0e:4d:1b:59:
b8:ac:8e:8e:0e:68:9c:c4:41:e5:be:d3:0d:cc:e7:
d0:36:4a:80:19:54:e3:bc:d4:b0:14:a0:c5:74:a7:
9a:1c:88:e9:dc:85:98:16:2b:fa:51:d2:5f:16:eb:
2f:f1:85:0f:0f:cc:5f:bb:69:c4:87:9a:5a:20:16:
c5:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:EE:93:C8:96:CC:3F:63:2B:8A:16:57:EF:A9:8E:7A:C1:A5:97:05
X509v3 Authority Key Identifier:
keyid:9E:32:AE:F0:06:7C:4F:0B:A2:0E:E6:66:34:40:00:5B:1B:3B:88:7B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/njKu8AZ8TwuiDuZmNEAAWxs7iHs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/8c2874-ebba-4c77-96c6-c31c6d8691d0/1/njKu8AZ8TwuiDuZmNEAAWxs7iHs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/8c2874-ebba-4c77-96c6-c31c6d8691d0/1/njKu8AZ8TwuiDuZmNEAAWxs7iHs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2b:27:b1:6b:57:fb:ea:d2:c2:e6:9a:f7:17:19:fd:e5:ea:83:
c1:38:b7:2c:75:59:03:55:bf:6b:c4:60:3c:7f:92:7a:77:4b:
66:8b:75:37:71:d1:6c:82:d2:5d:cc:0b:5e:e2:76:ab:29:e8:
65:15:1d:28:11:35:66:57:53:b8:2e:8f:4f:0d:e1:26:f9:b1:
03:bc:c2:97:e5:26:22:ec:b4:81:76:44:e3:9e:b9:e5:67:e3:
be:32:3c:4a:e0:bf:01:20:a0:5e:33:e5:84:49:85:bf:15:15:
99:18:60:c2:45:86:ab:ec:c4:cf:f0:73:4e:81:71:8e:97:38:
64:ae:06:e3:2c:10:ab:8c:75:81:87:28:6e:a0:6e:4c:8b:39:
4d:9d:99:84:3d:05:4b:c4:87:ec:3f:da:a1:8e:97:cb:76:6f:
cb:0c:c7:18:09:e3:5c:0f:44:74:0a:dd:3f:8a:c8:6a:ee:3b:
26:e5:ee:d8:59:d0:e7:83:63:6f:a7:83:90:f5:7f:14:3f:ab:
6e:33:3d:16:1a:25:85:34:08:27:aa:b1:47:ca:4b:c9:b0:c2:
88:62:49:e8:c8:4b:24:b8:f6:4d:9b:4e:9a:88:3a:2d:a8:33:
da:a9:fd:17:db:93:ee:26:7f:a2:97:29:73:19:0d:65:9b:eb:
85:5e:51:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 00:03:03 2025 by rpki-client