Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/a9bd93-92bd-4bf9-b655-adcefdaa1028/1/m-NDwvs9a40jeJq02m_NRlppBYM.mft
File: m-NDwvs9a40jeJq02m_NRlppBYM.mft (raw, json)
Hash identifier: XuJQzFad9Bur+hbWuv7Xek1ZPJ+4egLj02JiTqcvBnM=
Subject key identifier: 10:7B:EF:F6:2B:19:2C:5D:AE:4F:33:A0:D2:7A:5E:6B:70:12:4E:32
Authority key identifier: 9B:E3:43:C2:FB:3D:6B:8D:23:78:9A:B4:DA:6F:CD:46:5A:69:05:83
Certificate issuer: /CN=9be343c2fb3d6b8d23789ab4da6fcd465a690583
Certificate serial: 0199FCFD74D983DD05CED83488E4FBBC8A10
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/m-NDwvs9a40jeJq02m_NRlppBYM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e4/a9bd93-92bd-4bf9-b655-adcefdaa1028/1/m-NDwvs9a40jeJq02m_NRlppBYM.mft
Manifest number: 0ACD
Signing time: Sun 19 Oct 2025 15:01:32 +0000
Manifest this update: Sun 19 Oct 2025 15:01:32 +0000
Manifest next update: Mon 20 Oct 2025 15:01:32 +0000
Files and hashes: 1: V1rYVkHJ4iIIHNg29wauYpELwcg.roa (hash: 7R1pOTL7gS5y/fLoZFKL53bP7clTOjblHiZzRpiMJxQ=)
2: m-NDwvs9a40jeJq02m_NRlppBYM.crl (hash: thSPR+6GO96rgrDvJRw/CSgUVHku5Z7WYLrk1F/xfes=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e4/a9bd93-92bd-4bf9-b655-adcefdaa1028/1/m-NDwvs9a40jeJq02m_NRlppBYM.crl
rsync://rpki.ripe.net/repository/DEFAULT/e4/a9bd93-92bd-4bf9-b655-adcefdaa1028/1/m-NDwvs9a40jeJq02m_NRlppBYM.mft
rsync://rpki.ripe.net/repository/DEFAULT/m-NDwvs9a40jeJq02m_NRlppBYM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:fd:74:d9:83:dd:05:ce:d8:34:88:e4:fb:bc:8a:10
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9be343c2fb3d6b8d23789ab4da6fcd465a690583
Validity
Not Before: Oct 19 15:01:32 2025 GMT
Not After : Oct 20 15:01:32 2025 GMT
Subject: CN=107beff62b192c5dae4f33a0d27a5e6b70124e32
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f2:03:f9:ca:6b:74:41:4c:f2:3c:14:1b:c9:19:
7f:b6:45:de:6f:b2:40:d4:18:6f:b7:c2:67:31:da:
81:77:61:90:f4:af:b3:82:5f:f8:d0:6a:c1:43:fa:
0a:91:6e:96:a6:5d:fe:cc:a2:cd:f3:09:65:15:f3:
52:75:bf:fe:73:f2:20:55:13:00:97:bc:0f:d1:2f:
00:b7:74:7e:c7:57:e0:9e:9e:96:38:29:82:1c:ad:
00:df:16:ce:cc:0b:f4:86:95:8a:65:6c:67:15:5c:
87:27:f4:2b:19:a7:ae:e6:a9:2f:b3:34:97:4d:2b:
c2:4f:5f:d7:84:9c:d6:76:73:bf:03:ac:21:8b:52:
d2:c0:8a:8f:cd:bf:07:77:16:9b:49:55:3c:51:a2:
8b:8a:33:d4:d1:ec:02:b1:1a:40:78:ea:cc:3e:88:
73:a1:d5:2f:95:6f:77:91:ac:53:1d:20:ff:fd:b2:
9b:dc:3d:4f:83:38:f9:b8:c4:cd:db:ce:7c:4d:74:
45:c4:49:06:03:28:19:27:af:55:f0:47:96:44:84:
d8:1a:b3:9a:4a:66:8f:ef:06:d1:7a:c1:a8:71:41:
fe:f9:15:02:6b:09:e8:b4:97:9a:f0:7a:af:8b:b6:
7f:3a:8a:12:28:bd:22:32:89:b7:e1:84:17:32:26:
b1:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:7B:EF:F6:2B:19:2C:5D:AE:4F:33:A0:D2:7A:5E:6B:70:12:4E:32
X509v3 Authority Key Identifier:
keyid:9B:E3:43:C2:FB:3D:6B:8D:23:78:9A:B4:DA:6F:CD:46:5A:69:05:83
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m-NDwvs9a40jeJq02m_NRlppBYM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/a9bd93-92bd-4bf9-b655-adcefdaa1028/1/m-NDwvs9a40jeJq02m_NRlppBYM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/a9bd93-92bd-4bf9-b655-adcefdaa1028/1/m-NDwvs9a40jeJq02m_NRlppBYM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4e:ce:b5:7e:73:49:88:84:03:1b:da:7e:76:20:b1:c1:30:9d:
fd:9d:40:99:dc:64:b2:58:16:a5:46:ec:0c:5b:0d:74:be:15:
d5:79:3e:90:cf:51:34:75:cd:39:18:83:09:03:d0:8b:1e:90:
10:f0:73:76:6d:5d:98:54:d3:e3:04:5c:7d:e0:1e:e1:80:e3:
99:50:4e:81:79:22:af:94:b1:be:5b:9b:3b:27:f0:5c:b4:76:
11:76:e3:f4:60:54:1f:87:79:d3:30:9f:16:9b:92:25:55:65:
ff:c1:99:f8:ef:09:42:7d:68:7e:bb:a0:b4:f5:52:df:73:3a:
e3:80:34:62:18:f0:04:81:8d:a3:db:c5:a5:87:3a:62:97:6b:
c3:44:bc:dd:c7:7c:e2:27:43:58:c3:5b:f8:d1:a2:3b:70:a9:
6d:d9:9f:9d:65:62:75:8f:f9:2d:17:9a:b9:b9:a0:cc:7d:7d:
2c:7a:96:41:31:6b:31:eb:42:1f:e1:07:dd:32:f8:96:9b:50:
1c:51:f9:ae:96:bd:43:cd:23:cf:35:04:c8:fd:f3:5a:cd:48:
ba:36:af:70:39:e7:fe:35:0a:91:cd:4b:da:49:d3:e5:f8:78:
5d:43:9c:8e:8c:dc:01:d7:e0:cc:64:67:74:20:68:3f:1d:67:
12:34:f7:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 20:36:05 2025 by rpki-client