Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e1/f4ca79-384f-47f2-aed8-a8d00383bcdd/1/nsRI4bHg6-TpdrEg05j-dNXhNfg.mft
File: nsRI4bHg6-TpdrEg05j-dNXhNfg.mft (raw, json)
Hash identifier: n84vaWK88qWSag3diBkOZofxSZnKPxWUQWCF/2zvGAg=
Subject key identifier: 26:12:02:3A:4C:3B:34:8A:DD:CD:F0:A5:92:BD:2F:E2:77:5A:4A:E5
Authority key identifier: 9E:C4:48:E1:B1:E0:EB:E4:E9:76:B1:20:D3:98:FE:74:D5:E1:35:F8
Certificate issuer: /CN=9ec448e1b1e0ebe4e976b120d398fe74d5e135f8
Certificate serial: 0199FCFD2FECC6C4F96D3AAD2A7B042CAF72
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nsRI4bHg6-TpdrEg05j-dNXhNfg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e1/f4ca79-384f-47f2-aed8-a8d00383bcdd/1/nsRI4bHg6-TpdrEg05j-dNXhNfg.mft
Manifest number: 16E5
Signing time: Sun 19 Oct 2025 15:01:15 +0000
Manifest this update: Sun 19 Oct 2025 15:01:15 +0000
Manifest next update: Mon 20 Oct 2025 15:01:15 +0000
Files and hashes: 1: aCQlUufyFAXyfrSRh5UlYee4hhI.roa (hash: mJv4/wvWUFjjUO0qLpunwhk4Tn4azGG1QzZvm0z7rC8=)
2: nsRI4bHg6-TpdrEg05j-dNXhNfg.crl (hash: z3To+rcRvfgMCS5e14cGC+6VwgRtG1oW23WnDLEPIZc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e1/f4ca79-384f-47f2-aed8-a8d00383bcdd/1/nsRI4bHg6-TpdrEg05j-dNXhNfg.crl
rsync://rpki.ripe.net/repository/DEFAULT/e1/f4ca79-384f-47f2-aed8-a8d00383bcdd/1/nsRI4bHg6-TpdrEg05j-dNXhNfg.mft
rsync://rpki.ripe.net/repository/DEFAULT/nsRI4bHg6-TpdrEg05j-dNXhNfg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:fd:2f:ec:c6:c4:f9:6d:3a:ad:2a:7b:04:2c:af:72
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9ec448e1b1e0ebe4e976b120d398fe74d5e135f8
Validity
Not Before: Oct 19 15:01:15 2025 GMT
Not After : Oct 20 15:01:15 2025 GMT
Subject: CN=2612023a4c3b348addcdf0a592bd2fe2775a4ae5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:69:f5:b9:01:57:41:29:85:60:1b:08:06:c9:
d6:c8:69:49:27:95:df:57:15:4e:2c:bf:5c:cd:ee:
32:5c:22:7f:5f:ce:be:c7:5f:c1:c7:fb:12:75:f2:
21:09:3b:a1:fb:c8:d9:45:37:3f:d8:ba:8a:d1:dc:
b2:c4:4a:5f:8a:37:2b:8c:cb:26:f5:eb:32:62:c2:
05:ab:77:b9:d9:68:d7:fe:00:34:2b:75:39:43:2e:
77:9c:7b:52:12:0e:a8:13:c5:3f:4c:75:15:fe:b1:
09:d9:f4:1d:4a:21:ad:90:fd:a3:b7:da:93:9b:96:
77:24:a1:18:cf:d3:96:78:c8:66:a3:2b:33:cc:68:
48:36:29:f1:72:e0:eb:a7:84:f4:b1:75:9e:64:6e:
81:bb:f7:5b:45:80:db:f9:8e:54:c5:7e:3b:5d:b7:
d0:53:f8:e3:44:6a:1e:ed:3f:ec:71:a7:c7:8d:b9:
ff:94:ae:7e:e3:ff:b4:4c:d5:df:bc:c6:fb:09:4a:
b3:a7:30:37:e9:ec:88:05:89:1a:f4:b3:0e:c3:b3:
70:b0:78:83:4d:88:f0:89:81:f9:39:fe:a9:89:33:
a3:1d:db:99:c9:39:24:b3:d1:d7:41:98:e5:e4:67:
d1:dd:61:38:fc:79:f6:e0:31:f4:7c:35:ce:73:74:
59:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:12:02:3A:4C:3B:34:8A:DD:CD:F0:A5:92:BD:2F:E2:77:5A:4A:E5
X509v3 Authority Key Identifier:
keyid:9E:C4:48:E1:B1:E0:EB:E4:E9:76:B1:20:D3:98:FE:74:D5:E1:35:F8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nsRI4bHg6-TpdrEg05j-dNXhNfg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/f4ca79-384f-47f2-aed8-a8d00383bcdd/1/nsRI4bHg6-TpdrEg05j-dNXhNfg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/f4ca79-384f-47f2-aed8-a8d00383bcdd/1/nsRI4bHg6-TpdrEg05j-dNXhNfg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
56:f2:a5:28:2b:93:68:51:dc:8b:04:38:fa:7d:41:4d:82:99:
24:55:c9:f7:85:48:0d:dd:0c:9d:52:39:a1:47:48:d9:9f:76:
f6:f1:9b:32:6d:4f:b6:e5:d5:6e:77:ee:58:d1:af:04:42:5c:
11:11:68:a9:c2:11:a8:77:e7:dc:71:73:19:6a:07:9d:ad:5e:
3e:9a:d1:f0:10:2a:03:38:d7:23:ca:8b:ed:8c:d0:49:e8:b5:
9f:91:e2:8e:89:7a:a6:83:68:69:c1:ff:3d:d9:d0:06:c2:7b:
36:c1:0a:52:6b:a0:35:4b:88:dd:1e:dd:13:eb:40:66:39:67:
8d:c4:77:f2:3d:b1:e7:48:2d:61:57:b6:c2:98:c2:a6:fe:23:
62:ce:0a:26:b4:d5:46:df:fc:6b:f6:93:92:81:02:5e:72:47:
ad:6e:38:a5:c2:63:44:aa:26:7c:56:42:a8:1b:db:59:af:c4:
85:ce:b3:54:83:9a:a3:73:79:d2:9e:cf:aa:72:b7:56:0d:e2:
b3:de:9d:11:c9:b3:cd:a8:36:e2:f1:cf:cc:02:30:4b:08:b1:
dc:25:a7:dc:02:87:bb:f2:f1:cf:a5:4c:71:c3:9b:66:14:64:
dd:00:89:d7:42:d4:6d:1d:7f:a2:44:e6:3a:99:ab:e8:e9:98:
c8:67:16:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 20:37:27 2025 by rpki-client