Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fb/dcb613-93eb-4e86-895b-b1e698708f59/1/nJB6oEaogfuAUFGVIBYwYCYNfzE.mft
File: nJB6oEaogfuAUFGVIBYwYCYNfzE.mft (raw, json)
Hash identifier: ehYg3LedKmuRVD+nDOUJYU1MTy/K+49OS5AXOmAEOmQ=
Subject key identifier: 10:02:97:4C:96:8A:C3:C8:C5:72:AD:3A:71:B7:CF:9E:3D:27:15:D5
Authority key identifier: 9C:90:7A:A0:46:A8:81:FB:80:50:51:95:20:16:30:60:26:0D:7F:31
Certificate issuer: /CN=9c907aa046a881fb8050519520163060260d7f31
Certificate serial: 019A006C376920FBB64EC473F5A3F2CBE748
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nJB6oEaogfuAUFGVIBYwYCYNfzE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fb/dcb613-93eb-4e86-895b-b1e698708f59/1/nJB6oEaogfuAUFGVIBYwYCYNfzE.mft
Manifest number: 02BF
Signing time: Mon 20 Oct 2025 07:01:23 +0000
Manifest this update: Mon 20 Oct 2025 07:01:23 +0000
Manifest next update: Tue 21 Oct 2025 07:01:23 +0000
Files and hashes: 1: F86xC6xwpLDuhs7A8wZygejUMX8.roa (hash: hqY5dyyDkeBwJW2ZEKNHXzfFF8UT2R+EbGGyWHizujw=)
2: nJB6oEaogfuAUFGVIBYwYCYNfzE.crl (hash: CTH5mevv+c0N6DUnQa3s8Z7EugpRrC9htxQwBsHaYkQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fb/dcb613-93eb-4e86-895b-b1e698708f59/1/nJB6oEaogfuAUFGVIBYwYCYNfzE.crl
rsync://rpki.ripe.net/repository/DEFAULT/fb/dcb613-93eb-4e86-895b-b1e698708f59/1/nJB6oEaogfuAUFGVIBYwYCYNfzE.mft
rsync://rpki.ripe.net/repository/DEFAULT/nJB6oEaogfuAUFGVIBYwYCYNfzE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 00:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:00:6c:37:69:20:fb:b6:4e:c4:73:f5:a3:f2:cb:e7:48
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9c907aa046a881fb8050519520163060260d7f31
Validity
Not Before: Oct 20 07:01:23 2025 GMT
Not After : Oct 21 07:01:23 2025 GMT
Subject: CN=1002974c968ac3c8c572ad3a71b7cf9e3d2715d5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:8d:6e:bd:fe:0e:dc:55:ba:4c:59:19:ce:59:
06:7c:35:70:20:9b:37:93:78:40:d2:01:92:32:0a:
94:3d:77:4c:37:ad:e3:d2:59:f2:f7:81:d2:e0:2b:
22:61:17:de:77:5b:d4:3b:85:fc:98:21:c4:5b:f4:
95:27:b5:24:6e:07:4f:2f:a4:f6:5f:01:39:64:97:
5a:a4:48:dc:b9:6c:af:01:bb:03:3a:d5:5e:ad:33:
22:23:74:a5:f6:56:dc:b4:9b:0b:1c:82:8b:f1:40:
1c:17:13:c8:87:b6:06:46:43:05:c5:76:78:bf:cb:
e9:c8:22:8a:d5:b3:06:eb:25:87:3a:07:d0:e1:16:
80:cb:5e:76:80:0f:97:b7:5c:a4:4a:94:66:5e:ca:
02:14:ad:47:20:ff:8e:27:96:56:0d:c2:47:28:5c:
68:43:f1:37:f4:67:cf:dc:fd:a1:0e:40:e6:4d:c9:
a4:50:de:47:96:df:e6:20:da:6f:7a:5b:de:0c:de:
5f:8c:ad:55:88:71:70:87:18:37:9f:eb:92:ef:0b:
d7:87:40:0f:43:ae:29:46:0e:97:92:b9:f9:e8:80:
b6:94:d8:e7:e6:d7:a4:8a:ce:5b:f3:1b:1d:01:e8:
56:37:a7:f4:fb:73:50:f2:17:e6:df:37:c3:65:d8:
76:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:02:97:4C:96:8A:C3:C8:C5:72:AD:3A:71:B7:CF:9E:3D:27:15:D5
X509v3 Authority Key Identifier:
keyid:9C:90:7A:A0:46:A8:81:FB:80:50:51:95:20:16:30:60:26:0D:7F:31
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nJB6oEaogfuAUFGVIBYwYCYNfzE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/dcb613-93eb-4e86-895b-b1e698708f59/1/nJB6oEaogfuAUFGVIBYwYCYNfzE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/dcb613-93eb-4e86-895b-b1e698708f59/1/nJB6oEaogfuAUFGVIBYwYCYNfzE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
24:cb:ac:c1:1d:de:3c:b6:a3:0e:06:ff:68:c6:2a:1f:4e:cc:
f1:95:2c:70:f9:97:4d:b1:6c:64:09:b3:21:24:8a:55:fa:d5:
2a:7c:f8:f4:ce:91:d9:61:60:35:72:be:0a:72:59:8e:d5:00:
89:5d:96:2a:d3:6b:79:65:06:d5:88:bf:ce:a5:c8:2d:37:65:
8d:21:35:08:4d:19:8a:53:d7:36:01:eb:ab:57:b4:2d:24:5d:
81:15:3c:56:07:2f:55:b1:2c:e7:38:95:e7:99:87:a9:f9:cb:
9b:a6:ab:0c:54:b6:ff:6e:5f:e9:b1:b3:ac:ca:2a:c4:f6:b1:
69:94:b3:88:54:a9:60:7e:0e:d1:e4:f5:a4:67:1b:28:49:e9:
3a:b6:9a:5e:80:4b:ce:cc:78:f3:9a:2d:4a:24:29:23:aa:8f:
85:4c:75:7e:3d:37:85:f0:4f:0f:0a:28:df:b0:6e:af:97:62:
fb:47:51:bf:e1:11:37:ba:68:ee:ad:fd:e0:08:61:89:03:09:
28:a3:54:ef:dd:4a:2e:e9:18:b5:ad:02:27:9e:a7:c7:79:47:
0b:b4:71:98:c2:a0:2c:41:f8:dc:b9:44:f1:f5:1c:5b:e9:4c:
96:1f:34:f6:5e:51:58:26:5e:cf:63:35:61:00:4a:c4:87:ff:
47:48:5f:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 08:56:10 2025 by rpki-client