Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f9/c284cd-b2b7-4911-b20b-b2cea7690837/1/nTbpG2LT3HwTeiiqoAbt6bnqH-Q.mft
File: nTbpG2LT3HwTeiiqoAbt6bnqH-Q.mft (raw, json)
Hash identifier: nT2tN6wv4At90wTv6jSP2wdB6ADH8u8yAw2hs9lJ6IY=
Subject key identifier: D7:81:00:42:D3:96:4D:9E:AD:63:94:8E:3A:EB:83:70:20:42:3A:D1
Authority key identifier: 9D:36:E9:1B:62:D3:DC:7C:13:7A:28:AA:A0:06:ED:E9:B9:EA:1F:E4
Certificate issuer: /CN=9d36e91b62d3dc7c137a28aaa006ede9b9ea1fe4
Certificate serial: 0199FD34593C17E02C4FB477FFEB4C1CBCF3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nTbpG2LT3HwTeiiqoAbt6bnqH-Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f9/c284cd-b2b7-4911-b20b-b2cea7690837/1/nTbpG2LT3HwTeiiqoAbt6bnqH-Q.mft
Manifest number: 0EAD
Signing time: Sun 19 Oct 2025 16:01:30 +0000
Manifest this update: Sun 19 Oct 2025 16:01:30 +0000
Manifest next update: Mon 20 Oct 2025 16:01:30 +0000
Files and hashes: 1: 1-Vqync9hKf6VKIrN5RpK5cxJuZ4.roa (hash: MtCth/AQ0N933cYX7VqkRS/iFY3KEw9X6YIsPg3Pp/U=)
2: OXX9g3YRUJUzVcg_bBkk4JValdo.roa (hash: ZCgBMUHW1tIAOZ4DRx/DGMhGuGDo8XA3rdIaP/zAdak=)
3: nTbpG2LT3HwTeiiqoAbt6bnqH-Q.crl (hash: bs8UbBnw1oTLm5RrKAOYNGEFRqUm0vH7x4jGSNCVnnQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f9/c284cd-b2b7-4911-b20b-b2cea7690837/1/nTbpG2LT3HwTeiiqoAbt6bnqH-Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/f9/c284cd-b2b7-4911-b20b-b2cea7690837/1/nTbpG2LT3HwTeiiqoAbt6bnqH-Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/nTbpG2LT3HwTeiiqoAbt6bnqH-Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fd:34:59:3c:17:e0:2c:4f:b4:77:ff:eb:4c:1c:bc:f3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9d36e91b62d3dc7c137a28aaa006ede9b9ea1fe4
Validity
Not Before: Oct 19 16:01:30 2025 GMT
Not After : Oct 20 16:01:30 2025 GMT
Subject: CN=d7810042d3964d9ead63948e3aeb837020423ad1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:33:a0:d9:cc:0d:ff:f5:8d:c6:d5:3f:ed:77:
c7:e8:f3:fd:fa:15:b1:a8:89:8c:59:c5:a7:b6:ab:
48:af:5d:28:1d:18:0e:b1:ed:1b:db:69:9a:9f:2d:
50:77:3e:a2:8b:69:46:50:63:ef:4c:67:31:bc:b3:
2c:35:12:a1:a6:e1:b1:40:b3:fc:36:30:41:87:0d:
2d:3e:a5:0a:5f:0b:67:69:a1:6a:48:0d:3e:52:be:
bb:a5:1d:6c:e9:ed:91:67:43:ed:ff:37:91:c4:6f:
04:fe:6a:58:87:42:66:26:36:f8:45:28:f4:8f:04:
2e:12:5d:1c:0a:2e:51:b7:e1:00:08:42:83:eb:9b:
9f:3c:fd:23:97:9d:0e:bc:0c:c1:12:0b:ba:0f:b0:
4d:7a:1c:02:b4:9f:ee:52:74:af:55:46:6c:3c:bb:
f4:73:64:bd:78:46:8f:b3:d3:3e:fc:0e:87:57:7c:
4b:b0:74:bd:bf:d8:b6:a1:2d:fd:89:44:9b:ed:db:
ac:4a:6e:08:69:97:80:37:d7:0c:61:00:57:b7:52:
22:a0:ee:e3:5a:23:d7:9b:55:bb:d9:91:63:9d:d0:
e3:6d:67:43:7d:ae:41:b9:79:e3:74:65:67:3a:58:
e1:9e:8a:2d:5c:06:fd:89:62:13:4c:6f:42:17:da:
eb:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:81:00:42:D3:96:4D:9E:AD:63:94:8E:3A:EB:83:70:20:42:3A:D1
X509v3 Authority Key Identifier:
keyid:9D:36:E9:1B:62:D3:DC:7C:13:7A:28:AA:A0:06:ED:E9:B9:EA:1F:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nTbpG2LT3HwTeiiqoAbt6bnqH-Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/c284cd-b2b7-4911-b20b-b2cea7690837/1/nTbpG2LT3HwTeiiqoAbt6bnqH-Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/c284cd-b2b7-4911-b20b-b2cea7690837/1/nTbpG2LT3HwTeiiqoAbt6bnqH-Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6c:60:92:1e:3a:ac:2c:a4:cd:38:c2:84:b6:c5:13:6a:96:fa:
21:04:07:e2:69:78:62:e9:97:23:3d:e9:9a:10:fb:82:c7:55:
38:96:47:8e:4d:e2:00:4f:12:78:c3:3c:fa:0c:4d:41:a7:64:
92:b3:bb:38:59:3a:fd:1e:b5:df:9c:d7:ae:3c:af:66:33:77:
70:fd:f1:72:c0:f8:56:bf:ba:8e:3f:bb:01:d3:1d:bd:1e:8a:
af:92:b9:5e:3e:fe:82:43:2c:b2:64:3c:d6:e9:fe:10:25:9c:
c3:55:b9:07:fe:88:e6:10:b0:2a:0e:1a:e5:ec:70:ad:2f:a4:
bf:ae:07:58:49:8b:5a:c7:78:5e:49:a9:29:ea:f6:49:8b:4f:
02:09:c7:8d:32:4f:96:f5:d0:a0:f6:62:5c:81:f5:47:26:5c:
9a:85:07:71:a3:c2:2f:c7:e3:b8:08:fa:78:8e:41:ef:ba:d9:
e1:fc:b9:46:b1:79:a1:9c:08:5d:c3:7b:20:da:26:ed:63:80:
bf:00:be:d2:88:f8:43:25:c5:d8:5e:94:51:67:b3:10:9a:96:
87:9b:39:3a:ba:be:76:db:94:5a:bb:e0:17:c0:22:32:48:bf:
71:e9:c1:0f:2e:34:4d:4a:11:2f:51:60:ea:22:50:af:7b:39:
27:56:ac:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 20:59:27 2025 by rpki-client