
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/b947da-e2f2-4cdd-ab30-624cd19e1aad/1/nAK6r7b7qr_o-oTdJp9bopIPFYM.mft
File: nAK6r7b7qr_o-oTdJp9bopIPFYM.mft (raw, json)
Hash identifier: /jYA3pVVoG1Q3w3QJfoSMtYgKVLEeE0EiBorjrPinAQ=
Subject key identifier: 0F:F9:42:7E:3F:AA:3D:F0:1C:7C:06:1C:BC:A3:42:74:A6:80:2A:E1
Authority key identifier: 9C:02:BA:AF:B6:FB:AA:BF:E8:FA:84:DD:26:9F:5B:A2:92:0F:15:83
Certificate issuer: /CN=9c02baafb6fbaabfe8fa84dd269f5ba2920f1583
Certificate serial: 0199FC583C9002F45D71A32E2E14436EEB72
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nAK6r7b7qr_o-oTdJp9bopIPFYM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e2/b947da-e2f2-4cdd-ab30-624cd19e1aad/1/nAK6r7b7qr_o-oTdJp9bopIPFYM.mft
Manifest number: 16DD
Signing time: Sun 19 Oct 2025 12:01:05 +0000
Manifest this update: Sun 19 Oct 2025 12:01:05 +0000
Manifest next update: Mon 20 Oct 2025 12:01:05 +0000
Files and hashes: 1: nAK6r7b7qr_o-oTdJp9bopIPFYM.crl (hash: EsHcBxMCb0AP0Wf3Qh6xF/fWB/C0r/fjLs1rLoVagDE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e2/b947da-e2f2-4cdd-ab30-624cd19e1aad/1/nAK6r7b7qr_o-oTdJp9bopIPFYM.crl
rsync://rpki.ripe.net/repository/DEFAULT/e2/b947da-e2f2-4cdd-ab30-624cd19e1aad/1/nAK6r7b7qr_o-oTdJp9bopIPFYM.mft
rsync://rpki.ripe.net/repository/DEFAULT/nAK6r7b7qr_o-oTdJp9bopIPFYM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:58:3c:90:02:f4:5d:71:a3:2e:2e:14:43:6e:eb:72
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9c02baafb6fbaabfe8fa84dd269f5ba2920f1583
Validity
Not Before: Oct 19 12:01:05 2025 GMT
Not After : Oct 20 12:01:05 2025 GMT
Subject: CN=0ff9427e3faa3df01c7c061cbca34274a6802ae1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:37:93:b3:0c:bf:ed:89:84:6c:f5:89:7b:49:
d8:d1:84:f5:4e:c7:f2:7b:b1:3e:2d:f0:04:c4:69:
6a:f8:87:99:e0:03:e5:14:e1:99:f3:d7:30:8a:5d:
e8:a8:9b:26:2a:ed:f0:40:8e:93:fe:d8:fb:ac:33:
a5:8a:20:7b:e5:9d:9a:48:8a:1a:74:e5:37:34:27:
36:08:0a:2e:bf:d9:06:ab:80:63:6a:6b:7f:d8:45:
2f:30:3b:5b:91:cf:d8:63:9b:aa:37:e1:4a:d9:0f:
eb:b6:78:f1:77:9e:6e:ff:7b:eb:53:03:34:7e:8e:
df:2f:a0:3a:b1:14:29:ef:44:2f:22:b7:89:d9:6a:
84:b4:38:c7:5c:c3:8f:26:98:8b:4f:fa:14:cb:1f:
60:79:7b:c0:7f:f2:5e:6e:8b:88:20:2d:d8:11:77:
a7:32:f9:17:91:de:ec:bc:4a:a1:c2:c2:54:7c:b6:
63:ed:8d:56:85:d5:c7:2a:a3:2a:89:c5:fa:68:18:
e4:33:c8:33:11:2c:6d:67:ff:90:ac:3a:8f:7d:fc:
58:1d:f6:e1:85:84:18:d7:9f:ad:3e:e3:83:07:b8:
17:bc:9d:08:c0:b4:49:ed:d8:ae:18:e8:56:03:28:
fa:d3:1e:b2:ea:1c:af:f7:05:9e:cf:2b:79:c5:ea:
c9:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:F9:42:7E:3F:AA:3D:F0:1C:7C:06:1C:BC:A3:42:74:A6:80:2A:E1
X509v3 Authority Key Identifier:
keyid:9C:02:BA:AF:B6:FB:AA:BF:E8:FA:84:DD:26:9F:5B:A2:92:0F:15:83
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nAK6r7b7qr_o-oTdJp9bopIPFYM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/b947da-e2f2-4cdd-ab30-624cd19e1aad/1/nAK6r7b7qr_o-oTdJp9bopIPFYM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/b947da-e2f2-4cdd-ab30-624cd19e1aad/1/nAK6r7b7qr_o-oTdJp9bopIPFYM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
35:1b:69:31:c2:fc:4a:a3:c1:41:31:4d:37:8d:09:34:96:4c:
07:d7:82:7d:37:c4:6a:60:f3:ae:87:50:2a:95:58:63:9e:46:
e7:66:1a:2d:28:ec:e6:99:b4:26:ec:9d:ad:1d:23:9e:cb:b4:
6e:91:39:3f:9b:5b:72:78:d0:5b:eb:03:9b:9a:13:fd:db:42:
29:ad:a0:90:6b:ec:bd:7d:d7:f1:25:c0:d3:df:21:25:4f:cd:
a4:f7:aa:97:54:9e:59:5f:a3:e2:57:53:ff:d5:af:00:fa:5f:
a5:47:c9:c7:58:bb:ba:b7:44:16:1c:d1:0f:ea:ad:6f:82:70:
fe:19:c3:53:3a:9a:b8:c8:44:19:9d:96:46:30:f8:71:43:0e:
91:01:73:e1:8d:6f:96:37:14:76:9f:50:15:0b:bb:3f:3e:e4:
ec:62:b3:01:3b:fa:de:93:58:ec:31:1d:0e:7c:05:4e:50:f1:
23:f0:9c:4e:bb:4b:8f:5d:23:3a:2a:0d:9a:25:9d:c4:c2:2b:
f3:16:2f:32:5a:37:07:4a:ee:95:40:05:d9:af:8b:2b:76:83:
af:d5:db:d8:3a:07:13:29:55:87:00:b9:05:3f:b1:14:12:50:
d0:d0:2d:ab:b2:5e:44:fb:f5:aa:cc:dd:4a:99:c0:fd:24:ed:
65:1a:fa:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:15:15 2025 by rpki-client