Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/f8434c-0230-4adf-bd00-2829aa3df258/1/nFK2oFFHG-xR23TXJW56MKVezxo.mft
File: nFK2oFFHG-xR23TXJW56MKVezxo.mft (raw, json)
Hash identifier: 6bsVDupi8BVyjpzju0nEURk2Kxyu9jb6vDTeYQiJ7Ss=
Subject key identifier: E0:59:DA:9B:12:43:26:AA:E7:9B:49:04:87:63:9B:EB:28:29:7A:8A
Authority key identifier: 9C:52:B6:A0:51:47:1B:EC:51:DB:74:D7:25:6E:7A:30:A5:5E:CF:1A
Certificate issuer: /CN=9c52b6a051471bec51db74d7256e7a30a55ecf1a
Certificate serial: 0199FEB4A62174349293C08A43FE98E45960
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nFK2oFFHG-xR23TXJW56MKVezxo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e6/f8434c-0230-4adf-bd00-2829aa3df258/1/nFK2oFFHG-xR23TXJW56MKVezxo.mft
Manifest number: 16E4
Signing time: Sun 19 Oct 2025 23:01:15 +0000
Manifest this update: Sun 19 Oct 2025 23:01:15 +0000
Manifest next update: Mon 20 Oct 2025 23:01:15 +0000
Files and hashes: 1: CpF6aVcFa4aSib91gY7r_oRg7yk.roa (hash: g98Tlf03Q7mP804tnDVA4hODWWDgDXRhH7RoV+ttI2w=)
2: nFK2oFFHG-xR23TXJW56MKVezxo.crl (hash: bFctoNIxuL8r7XDsPkz8ozNFVKYXqWT7zfNyLnhq0lA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e6/f8434c-0230-4adf-bd00-2829aa3df258/1/nFK2oFFHG-xR23TXJW56MKVezxo.crl
rsync://rpki.ripe.net/repository/DEFAULT/e6/f8434c-0230-4adf-bd00-2829aa3df258/1/nFK2oFFHG-xR23TXJW56MKVezxo.mft
rsync://rpki.ripe.net/repository/DEFAULT/nFK2oFFHG-xR23TXJW56MKVezxo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 15:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fe:b4:a6:21:74:34:92:93:c0:8a:43:fe:98:e4:59:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9c52b6a051471bec51db74d7256e7a30a55ecf1a
Validity
Not Before: Oct 19 23:01:15 2025 GMT
Not After : Oct 20 23:01:15 2025 GMT
Subject: CN=e059da9b124326aae79b490487639beb28297a8a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:ad:01:19:a2:1f:86:fd:a9:39:3e:6f:5f:03:
0e:1b:8d:ec:3f:1d:f2:1e:1a:a6:75:98:00:fa:ca:
b3:6a:26:a3:2c:2c:f1:4f:18:84:01:71:a6:f0:9e:
4b:43:b6:1a:14:47:73:77:d8:ee:03:31:51:06:13:
71:9f:be:bc:be:79:73:a5:19:75:f2:ac:c0:11:ae:
7d:a4:f8:93:ed:6c:ef:ad:7b:4b:f4:d8:16:c5:2a:
1b:f2:6b:81:26:eb:58:94:3a:ed:83:77:89:40:0c:
13:be:22:54:34:02:dd:0d:cd:7f:4c:73:be:f3:7c:
8d:ad:83:d5:1e:b6:93:38:4e:40:da:ec:7c:f7:26:
2b:75:49:f1:2e:42:38:4f:c7:ff:76:46:65:6f:80:
24:74:79:f4:86:0f:0a:cd:dd:7f:9c:a3:89:92:84:
9a:25:03:77:22:a1:6c:93:ec:1f:ab:f7:61:ac:ca:
2a:10:61:5c:5b:1c:65:66:2f:b5:56:ee:78:b9:07:
f7:c2:4f:3d:fd:e9:17:5c:59:2c:b3:87:15:3f:aa:
b4:c5:e6:53:77:59:62:23:3a:d9:af:09:e0:f4:8b:
0f:eb:8d:b3:5f:6c:3c:5f:02:23:82:2e:08:7c:0c:
3e:b4:9d:fd:dd:54:45:48:56:cb:14:90:68:40:6d:
18:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:59:DA:9B:12:43:26:AA:E7:9B:49:04:87:63:9B:EB:28:29:7A:8A
X509v3 Authority Key Identifier:
keyid:9C:52:B6:A0:51:47:1B:EC:51:DB:74:D7:25:6E:7A:30:A5:5E:CF:1A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nFK2oFFHG-xR23TXJW56MKVezxo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/f8434c-0230-4adf-bd00-2829aa3df258/1/nFK2oFFHG-xR23TXJW56MKVezxo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/f8434c-0230-4adf-bd00-2829aa3df258/1/nFK2oFFHG-xR23TXJW56MKVezxo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0a:3d:f9:4d:91:45:78:ad:2e:20:fc:0b:52:de:88:6e:6b:58:
6b:b7:2a:1c:38:eb:8c:13:ea:4d:0f:e6:25:79:db:38:95:50:
5a:ec:a6:ce:99:e7:9b:b2:39:31:be:85:4f:1f:77:c4:19:99:
82:d4:9f:26:35:f2:64:d7:71:29:77:ae:8c:a9:21:cf:47:17:
43:be:13:2b:e0:e3:37:db:58:c5:d8:f3:74:02:a1:85:c0:54:
f4:01:b2:5c:bb:a4:0f:11:23:b3:65:7d:2d:c7:d4:c6:22:4a:
33:69:43:3b:d0:22:1e:47:30:0f:c8:d9:7a:b3:ff:7a:22:02:
ff:98:62:40:49:37:bf:44:91:d2:21:0e:f1:72:b2:ea:af:68:
52:08:9d:92:a2:b9:47:c7:4a:6d:6e:71:5a:0b:4a:a8:aa:fc:
88:33:05:c9:01:ed:42:43:c0:91:72:66:34:81:36:cd:77:ec:
b8:cf:df:d1:ac:e9:1f:25:6e:cb:46:ff:7b:67:01:4e:cb:f7:
19:8a:9d:52:9f:bc:a4:05:41:43:fc:d1:15:3d:cb:9e:cf:58:
d8:ba:cd:72:73:bc:15:d6:04:ba:10:7d:90:1c:c7:76:d9:ed:
1e:15:2f:f9:ea:18:07:b2:76:cb:14:4d:e8:1b:98:3d:d0:7a:
0f:00:03:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 01:16:11 2025 by rpki-client