Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f3/4c7379-3649-41de-89f7-d56374e1157a/1/nAqMF3kR9kwwVXNogVueZ9j8PA8.mft
File: nAqMF3kR9kwwVXNogVueZ9j8PA8.mft (raw, json)
Hash identifier: kUbRkGZplFL3zAT6VrMDXVq6jBhRZ/Ky1U8OxGAb5Nw=
Subject key identifier: 95:10:B9:15:C8:98:2E:0C:D6:E5:8E:C8:4D:C8:4D:62:9C:A1:1A:AE
Authority key identifier: 9C:0A:8C:17:79:11:F6:4C:30:55:73:68:81:5B:9E:67:D8:FC:3C:0F
Certificate issuer: /CN=9c0a8c177911f64c30557368815b9e67d8fc3c0f
Certificate serial: 0199FCFD2DF546A1A9411B75E220D90DAF7F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nAqMF3kR9kwwVXNogVueZ9j8PA8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f3/4c7379-3649-41de-89f7-d56374e1157a/1/nAqMF3kR9kwwVXNogVueZ9j8PA8.mft
Manifest number: 0CF4
Signing time: Sun 19 Oct 2025 15:01:14 +0000
Manifest this update: Sun 19 Oct 2025 15:01:14 +0000
Manifest next update: Mon 20 Oct 2025 15:01:14 +0000
Files and hashes: 1: d6blSjaqO2EcEPuhj7EsQzjBTt0.roa (hash: 4jd/vZVphNUOF+ezj/NTHKtL7kzqYpJOJYm6eI+27Hw=)
2: nAqMF3kR9kwwVXNogVueZ9j8PA8.crl (hash: zqwS5I0YLkNK21cvH2aE+vOYRiQGZzJnnPB4jkCL7SY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f3/4c7379-3649-41de-89f7-d56374e1157a/1/nAqMF3kR9kwwVXNogVueZ9j8PA8.crl
rsync://rpki.ripe.net/repository/DEFAULT/f3/4c7379-3649-41de-89f7-d56374e1157a/1/nAqMF3kR9kwwVXNogVueZ9j8PA8.mft
rsync://rpki.ripe.net/repository/DEFAULT/nAqMF3kR9kwwVXNogVueZ9j8PA8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:fd:2d:f5:46:a1:a9:41:1b:75:e2:20:d9:0d:af:7f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9c0a8c177911f64c30557368815b9e67d8fc3c0f
Validity
Not Before: Oct 19 15:01:14 2025 GMT
Not After : Oct 20 15:01:14 2025 GMT
Subject: CN=9510b915c8982e0cd6e58ec84dc84d629ca11aae
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:dc:b3:b3:d8:f8:52:54:9f:01:08:73:83:34:
45:1a:a7:df:0e:98:64:3b:f8:6d:c3:23:d7:6e:14:
ae:7a:43:bd:e6:60:43:09:52:e6:12:95:01:52:bd:
1e:d7:51:c0:60:6c:a1:57:fe:d4:8e:0f:c9:9e:4b:
0e:a9:31:79:e2:11:4d:5c:0d:7d:e4:3f:f8:9f:2b:
90:87:61:2d:2d:e8:e9:84:fa:42:af:38:2c:f4:3e:
9a:af:90:57:8d:14:06:5c:fb:ed:2f:5f:fe:23:57:
d1:71:36:ae:b3:ca:b7:24:b2:ea:5a:ba:83:c7:9a:
84:7c:91:39:59:46:c2:1c:d6:cc:13:6a:05:e6:e8:
48:88:4f:55:3a:4d:77:2e:11:b4:8c:08:a1:35:99:
4f:a0:c5:1d:ba:9d:68:c4:5d:12:bf:91:a8:0d:80:
00:e1:56:15:96:3a:76:46:fb:2a:43:8c:9f:97:f5:
2e:33:09:de:86:a7:58:8f:52:d4:84:2c:70:0d:85:
f0:99:3d:21:fc:43:72:fb:ec:fc:c1:70:01:cd:16:
6a:c7:35:b6:88:24:27:24:49:29:e6:33:a4:d7:44:
c2:72:20:22:bb:13:96:c9:2b:8e:ec:7c:7b:3b:21:
f3:9e:a8:ed:d4:ed:d5:9c:f9:2f:96:5a:52:37:52:
af:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:10:B9:15:C8:98:2E:0C:D6:E5:8E:C8:4D:C8:4D:62:9C:A1:1A:AE
X509v3 Authority Key Identifier:
keyid:9C:0A:8C:17:79:11:F6:4C:30:55:73:68:81:5B:9E:67:D8:FC:3C:0F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nAqMF3kR9kwwVXNogVueZ9j8PA8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/4c7379-3649-41de-89f7-d56374e1157a/1/nAqMF3kR9kwwVXNogVueZ9j8PA8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/4c7379-3649-41de-89f7-d56374e1157a/1/nAqMF3kR9kwwVXNogVueZ9j8PA8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
12:0e:77:1a:dc:c9:52:39:db:da:bb:b5:12:4c:a6:8e:ff:57:
48:df:69:a9:cc:3f:ba:e3:ff:47:57:48:0f:e7:ed:50:a3:c6:
6b:51:eb:ab:52:ec:be:16:c7:17:70:e9:d6:7d:d9:89:84:c6:
59:91:6f:33:dd:81:9e:7f:45:cd:12:20:6c:b7:05:5c:d3:88:
e6:f9:cb:9f:89:51:47:f4:7d:8d:e4:17:38:69:78:7e:5c:2a:
0d:de:2e:58:12:4d:95:cf:b5:ac:f1:81:cd:12:2f:01:ce:d3:
28:5e:c5:bc:69:44:8d:1e:25:75:b9:79:f1:73:2c:09:49:03:
f9:72:da:ff:d9:3f:a6:39:7e:37:8b:fd:22:18:3d:5f:6a:66:
63:b1:26:55:e0:b9:bf:fc:ce:91:eb:34:2b:11:a1:5a:05:5e:
38:b5:d5:63:41:3a:28:8b:45:14:5e:38:09:0c:93:af:0b:8a:
b6:5c:0e:b5:a8:12:14:5e:a3:66:11:fa:be:1d:64:ac:b5:b3:
96:9b:27:45:78:a6:1f:19:a9:60:bd:b3:fb:08:f6:8d:c0:a3:
b5:c8:84:7c:6c:36:f9:20:45:ea:34:09:18:da:bf:38:66:a2:
6f:8e:11:d6:8c:8d:85:4f:b6:f2:da:a4:5e:e7:7a:7a:35:51:
b1:f5:ed:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 20:50:01 2025 by rpki-client