Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e8/6b0e0e-8be5-4bf9-b427-70d63107d05d/1/nOItyiotsKWf5WaByNHEBnenRbU.mft
File: nOItyiotsKWf5WaByNHEBnenRbU.mft (raw, json)
Hash identifier: cDCtwhbaCtqe2O7nTSfgjKIU4WuJYrr00H26XcB1iKU=
Subject key identifier: 94:32:B8:BB:7E:4C:70:DD:91:6A:C3:61:CE:5B:E8:EF:6E:07:71:03
Authority key identifier: 9C:E2:2D:CA:2A:2D:B0:A5:9F:E5:66:81:C8:D1:C4:06:77:A7:45:B5
Certificate issuer: /CN=9ce22dca2a2db0a59fe56681c8d1c40677a745b5
Certificate serial: 0199FDD973E362C0AA8EABB3FF5AA7461BAE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nOItyiotsKWf5WaByNHEBnenRbU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e8/6b0e0e-8be5-4bf9-b427-70d63107d05d/1/nOItyiotsKWf5WaByNHEBnenRbU.mft
Manifest number: 12A1
Signing time: Sun 19 Oct 2025 19:01:50 +0000
Manifest this update: Sun 19 Oct 2025 19:01:50 +0000
Manifest next update: Mon 20 Oct 2025 19:01:50 +0000
Files and hashes: 1: SgrL7DiM5GSLyUl02rPic8LO2xM.roa (hash: mfGk2oXMS3Dskm6xFi6bjI6ao91mV5GgJuEh/2dC5PU=)
2: nOItyiotsKWf5WaByNHEBnenRbU.crl (hash: o6KPqIQiqvi1+ZDnPxctxj2XY6I2mgPvkysplQLbHB4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e8/6b0e0e-8be5-4bf9-b427-70d63107d05d/1/nOItyiotsKWf5WaByNHEBnenRbU.crl
rsync://rpki.ripe.net/repository/DEFAULT/e8/6b0e0e-8be5-4bf9-b427-70d63107d05d/1/nOItyiotsKWf5WaByNHEBnenRbU.mft
rsync://rpki.ripe.net/repository/DEFAULT/nOItyiotsKWf5WaByNHEBnenRbU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 15:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fd:d9:73:e3:62:c0:aa:8e:ab:b3:ff:5a:a7:46:1b:ae
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9ce22dca2a2db0a59fe56681c8d1c40677a745b5
Validity
Not Before: Oct 19 19:01:50 2025 GMT
Not After : Oct 20 19:01:50 2025 GMT
Subject: CN=9432b8bb7e4c70dd916ac361ce5be8ef6e077103
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:1b:21:55:4b:30:b8:6a:f7:78:26:89:ff:57:
6e:c8:97:2b:28:52:99:7b:91:a6:22:27:9b:b9:bf:
bc:8e:1c:64:88:df:ef:a9:0b:1e:5d:63:9e:2a:89:
9b:f2:cb:82:ef:6e:26:c5:55:02:90:dd:5e:78:c0:
8c:d2:86:e6:06:94:e4:af:21:a0:14:c7:a6:c0:5a:
59:85:d3:86:85:5a:87:69:5e:50:13:9f:22:bb:b2:
ae:fc:7e:1d:61:a6:54:ac:67:08:2c:31:26:01:06:
66:38:8f:fe:0e:f5:80:69:b9:b0:0d:40:88:d5:dc:
74:d3:c0:3a:f0:88:36:b1:0d:7d:c2:f3:0d:8b:13:
7f:c5:92:40:2a:c6:71:c8:95:21:00:e3:65:28:de:
af:da:f0:9a:fe:f9:61:64:7b:6e:5e:51:1d:ae:bc:
57:70:11:eb:c8:b6:20:f6:09:77:4f:ca:36:ad:4c:
e7:35:a0:4c:4b:2d:fa:0b:24:6e:81:33:87:6f:7e:
c2:82:3d:7d:39:73:9b:87:2f:84:45:bc:37:f5:f6:
fa:ee:4f:2a:d1:39:bc:d1:b0:27:ec:8b:b4:34:49:
67:fe:d4:ab:98:e6:c9:41:cf:7a:69:e6:8d:e1:8b:
f4:41:ef:52:4e:d0:18:ad:85:cc:9b:5d:d4:a0:e5:
17:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:32:B8:BB:7E:4C:70:DD:91:6A:C3:61:CE:5B:E8:EF:6E:07:71:03
X509v3 Authority Key Identifier:
keyid:9C:E2:2D:CA:2A:2D:B0:A5:9F:E5:66:81:C8:D1:C4:06:77:A7:45:B5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nOItyiotsKWf5WaByNHEBnenRbU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/6b0e0e-8be5-4bf9-b427-70d63107d05d/1/nOItyiotsKWf5WaByNHEBnenRbU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/6b0e0e-8be5-4bf9-b427-70d63107d05d/1/nOItyiotsKWf5WaByNHEBnenRbU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a3:08:88:a4:56:ed:fb:54:fb:c1:a6:95:41:a6:f6:b7:d7:9f:
9c:3b:a3:7c:79:d7:b8:88:b7:b6:1e:02:2b:24:5b:e6:24:3e:
20:95:2c:5a:65:ce:b7:72:b6:9b:13:46:89:bc:0f:13:30:e1:
42:5a:88:89:fc:dc:0f:ac:90:3d:7b:f9:9a:ff:d0:22:2d:1d:
2a:38:34:10:72:1f:fc:53:2b:ce:82:39:4e:77:11:e4:27:ab:
fb:44:a5:10:0d:ad:83:ed:98:61:84:17:67:d1:53:41:1c:bc:
cc:73:4f:00:82:eb:52:38:9c:fa:58:fc:07:51:df:61:f8:6b:
e3:a1:1f:73:7a:34:d9:c8:f7:f0:15:37:87:b5:bb:4b:c6:48:
a5:50:bb:da:7a:8e:46:bc:94:18:48:a6:78:2f:e2:1e:9a:d3:
13:e5:e9:61:87:f3:f3:ed:ae:23:6e:1f:a2:e5:92:58:19:ff:
0e:0a:85:56:b7:d6:3c:65:6d:f4:e9:a9:34:cb:af:0e:b9:91:
e1:b4:53:98:43:57:83:da:85:c8:9c:58:3f:55:e0:e6:64:52:
fe:f4:96:38:78:5f:75:47:35:35:35:ef:1a:15:2c:98:51:90:
23:41:c1:bc:df:7d:da:fe:88:9f:17:d1:b3:87:f2:29:b3:58:
b4:23:9d:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 01:18:01 2025 by rpki-client