Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f2/9841ff-c886-4da0-957a-f2f0955da1ad/1/nG_8tbXi3kVRrPm0WvJC25RYTlo.mft
File: nG_8tbXi3kVRrPm0WvJC25RYTlo.mft (raw, json)
Hash identifier: pDO1v+JESLUf0OuNLkqYrF3XTEmqQTVBSfG7pWyqZHI=
Subject key identifier: 17:0B:7E:86:02:75:52:6D:06:44:79:58:66:B3:90:C6:9F:B0:52:5B
Authority key identifier: 9C:6F:FC:B5:B5:E2:DE:45:51:AC:F9:B4:5A:F2:42:DB:94:58:4E:5A
Certificate issuer: /CN=9c6ffcb5b5e2de4551acf9b45af242db94584e5a
Certificate serial: 0199FCC61723BCC1AB772B332A4A0164A144
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nG_8tbXi3kVRrPm0WvJC25RYTlo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f2/9841ff-c886-4da0-957a-f2f0955da1ad/1/nG_8tbXi3kVRrPm0WvJC25RYTlo.mft
Manifest number: 0199
Signing time: Sun 19 Oct 2025 14:01:04 +0000
Manifest this update: Sun 19 Oct 2025 14:01:04 +0000
Manifest next update: Mon 20 Oct 2025 14:01:04 +0000
Files and hashes: 1: JwRtsxKsHclcBB-A4e8ZZ-jD4D0.roa (hash: qJiNznI8TYONtH5aWUgF2Zivyd6LUikgOFyMXC2FJUY=)
2: c1fGsP0bCEH6cCis_UoQKhD3CSY.roa (hash: tV98uAPL9NGHun4KK73liMuNDYczrIrsIhzMw0qt0ig=)
3: nG_8tbXi3kVRrPm0WvJC25RYTlo.crl (hash: uieCc3oJ1GOMm8WYyS+8t1QyQSi/xRMbaPFg6DlU4XM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f2/9841ff-c886-4da0-957a-f2f0955da1ad/1/nG_8tbXi3kVRrPm0WvJC25RYTlo.crl
rsync://rpki.ripe.net/repository/DEFAULT/f2/9841ff-c886-4da0-957a-f2f0955da1ad/1/nG_8tbXi3kVRrPm0WvJC25RYTlo.mft
rsync://rpki.ripe.net/repository/DEFAULT/nG_8tbXi3kVRrPm0WvJC25RYTlo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:c6:17:23:bc:c1:ab:77:2b:33:2a:4a:01:64:a1:44
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9c6ffcb5b5e2de4551acf9b45af242db94584e5a
Validity
Not Before: Oct 19 14:01:04 2025 GMT
Not After : Oct 20 14:01:04 2025 GMT
Subject: CN=170b7e860275526d0644795866b390c69fb0525b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:20:fa:73:47:64:d2:80:dc:44:59:87:ab:7f:
22:d8:b0:79:c2:6c:f1:2f:fd:31:ab:c8:fd:9a:f7:
9e:b4:7c:c9:33:8c:ac:61:a6:f2:f0:4f:03:a8:f1:
cf:ff:be:8a:bc:97:a2:10:56:c4:d5:a4:bf:1d:e1:
a0:f7:67:c2:92:6e:77:00:b8:63:db:53:cb:94:20:
a5:0c:a4:16:e9:e3:c5:7a:bf:35:cb:eb:36:83:c2:
37:5e:9d:2a:db:4b:63:d0:43:07:64:46:a6:47:34:
dd:dd:4d:57:76:60:50:ca:2d:86:cd:9d:95:a5:a5:
6d:4a:0a:94:69:30:93:2c:c7:5c:90:46:e1:19:d6:
45:e6:c6:46:ca:db:c2:a5:62:06:f2:67:70:15:b6:
6e:f1:49:10:12:26:b1:c2:fe:b2:c9:a8:55:51:3c:
5c:0c:a7:8e:51:a6:42:4e:cd:7c:ae:3b:5b:65:01:
dc:46:ac:5c:eb:db:0a:02:06:9e:59:fa:ad:be:cd:
0b:23:cb:24:f3:26:08:04:98:30:c4:03:3e:98:47:
87:8d:c5:f2:81:c0:20:e9:b1:c1:06:ff:63:27:18:
c7:9d:cb:7d:fa:89:19:43:73:6e:05:95:4c:eb:53:
8e:5b:03:1d:90:2e:20:6e:77:7c:fb:c8:92:e7:20:
3c:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:0B:7E:86:02:75:52:6D:06:44:79:58:66:B3:90:C6:9F:B0:52:5B
X509v3 Authority Key Identifier:
keyid:9C:6F:FC:B5:B5:E2:DE:45:51:AC:F9:B4:5A:F2:42:DB:94:58:4E:5A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nG_8tbXi3kVRrPm0WvJC25RYTlo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/9841ff-c886-4da0-957a-f2f0955da1ad/1/nG_8tbXi3kVRrPm0WvJC25RYTlo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/9841ff-c886-4da0-957a-f2f0955da1ad/1/nG_8tbXi3kVRrPm0WvJC25RYTlo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
45:89:49:a6:02:7a:ea:66:d0:cb:92:da:86:6a:e1:b0:d3:94:
c7:ab:06:3e:72:fb:68:6f:2c:85:55:61:7b:fb:51:fc:8a:31:
5b:87:62:8a:78:c9:c6:4a:c2:88:1e:6f:33:d5:27:a3:de:94:
66:e9:b6:c6:d6:49:d7:de:8c:8e:82:41:bb:c0:39:11:36:c4:
f9:67:68:dc:b5:8e:04:a5:5e:74:9c:70:4e:0c:fb:ca:1e:b2:
27:9f:aa:d1:af:1c:68:37:6a:c0:6b:b2:e3:df:61:4a:db:23:
54:24:ea:41:03:20:e3:3c:0a:0e:ee:bb:8a:af:d9:57:2e:97:
37:8f:fb:a1:f7:06:4b:86:ab:5f:78:57:28:ba:3d:9a:95:b7:
92:64:d1:cc:b0:41:51:15:f5:36:32:9a:f2:86:f0:33:21:09:
bf:d3:84:05:35:2d:28:d4:c8:87:ab:72:be:4e:74:23:c8:db:
de:5d:51:34:a5:b1:79:33:34:74:cb:3b:b1:9c:be:f6:66:90:
59:cc:d9:95:f6:aa:a6:db:44:c0:bd:5c:28:3c:34:65:14:63:
a4:31:c7:d7:3d:3e:e0:6c:e6:df:22:e8:60:17:5d:2a:a2:a0:
a6:99:89:b0:71:17:33:c2:f7:ff:2c:1d:49:68:18:69:56:93:
3e:c0:79:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 20:38:40 2025 by rpki-client