Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/27/dbc83e-4e42-4038-8157-8f99f9afd7a1/1/nJ_uAycbFcIzokWJ8jZacQ1DUtc.mft
File: nJ_uAycbFcIzokWJ8jZacQ1DUtc.mft (raw, json)
Hash identifier: 7lQlad8SOi8b46bkUu7N6p3qVEMvC4e+CPlzp7phv+o=
Subject key identifier: A1:3A:01:2C:25:E9:13:F0:F2:38:1C:7C:D0:CB:4F:91:15:20:14:D5
Authority key identifier: 9C:9F:EE:03:27:1B:15:C2:33:A2:45:89:F2:36:5A:71:0D:43:52:D7
Certificate issuer: /CN=9c9fee03271b15c233a24589f2365a710d4352d7
Certificate serial: 019A4E86430FDAD8E453FEDB21BB890506CD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nJ_uAycbFcIzokWJ8jZacQ1DUtc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/27/dbc83e-4e42-4038-8157-8f99f9afd7a1/1/nJ_uAycbFcIzokWJ8jZacQ1DUtc.mft
Manifest number: 170A
Signing time: Tue 04 Nov 2025 11:00:13 +0000
Manifest this update: Tue 04 Nov 2025 11:00:13 +0000
Manifest next update: Wed 05 Nov 2025 11:00:13 +0000
Files and hashes: 1: EpEEDO6av2BjZqXM7PJuDNRRddc.roa (hash: goR8NYgMvQvI2XaHVSHQ54m82iix34JIgDUIXRKLU78=)
2: nJ_uAycbFcIzokWJ8jZacQ1DUtc.crl (hash: BFxjtN6WZjsXSwcYG9mg8Fb6BhgoEkrUphqwdmITAkg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/27/dbc83e-4e42-4038-8157-8f99f9afd7a1/1/nJ_uAycbFcIzokWJ8jZacQ1DUtc.crl
rsync://rpki.ripe.net/repository/DEFAULT/27/dbc83e-4e42-4038-8157-8f99f9afd7a1/1/nJ_uAycbFcIzokWJ8jZacQ1DUtc.mft
rsync://rpki.ripe.net/repository/DEFAULT/nJ_uAycbFcIzokWJ8jZacQ1DUtc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 11:00:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:86:43:0f:da:d8:e4:53:fe:db:21:bb:89:05:06:cd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9c9fee03271b15c233a24589f2365a710d4352d7
Validity
Not Before: Nov 4 11:00:13 2025 GMT
Not After : Nov 5 11:00:13 2025 GMT
Subject: CN=a13a012c25e913f0f2381c7cd0cb4f91152014d5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:82:7b:3a:55:09:d1:89:9e:5f:bf:c2:58:52:
45:4e:43:9d:5b:86:a0:5b:d6:49:67:c6:3b:4a:f4:
f2:61:7a:9e:cf:df:5a:bd:07:b7:0c:97:b1:8f:c3:
0b:b8:92:d8:45:0e:ed:10:7f:a6:b6:2c:d7:02:a9:
d5:c6:df:51:e0:e8:83:51:06:cf:68:5c:5e:b3:e0:
93:82:0f:65:5b:b0:8c:4a:0a:74:3e:9b:a2:5d:ed:
1b:d5:3a:79:5b:d8:6e:a8:06:ce:f0:06:2f:94:9a:
1c:5f:2d:5f:7d:76:25:17:2e:0f:9b:18:41:23:e6:
31:18:0c:43:3c:22:d8:fe:d6:7f:65:9e:96:c2:0d:
05:79:e8:dd:30:95:44:96:1f:f1:a1:60:ab:cc:e6:
9d:ac:93:de:87:76:84:ef:1a:6b:92:d9:d7:e1:df:
b0:45:0f:43:c0:01:55:da:38:47:1e:61:f6:7a:d8:
d0:5b:51:79:9c:47:51:79:ed:bf:d7:42:c7:91:0e:
ef:01:ee:b2:25:af:02:51:34:8c:25:fd:b9:14:51:
e4:f1:8d:21:5b:16:4c:a1:21:9f:db:bc:2c:91:d0:
84:11:b0:72:35:33:18:bd:2a:f7:55:70:ef:e3:74:
3a:80:19:3d:1b:ec:bf:62:c4:48:ef:83:08:1f:19:
2d:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:3A:01:2C:25:E9:13:F0:F2:38:1C:7C:D0:CB:4F:91:15:20:14:D5
X509v3 Authority Key Identifier:
keyid:9C:9F:EE:03:27:1B:15:C2:33:A2:45:89:F2:36:5A:71:0D:43:52:D7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nJ_uAycbFcIzokWJ8jZacQ1DUtc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/dbc83e-4e42-4038-8157-8f99f9afd7a1/1/nJ_uAycbFcIzokWJ8jZacQ1DUtc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/27/dbc83e-4e42-4038-8157-8f99f9afd7a1/1/nJ_uAycbFcIzokWJ8jZacQ1DUtc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
56:5c:4e:88:24:68:f3:ff:c0:12:d5:81:ca:63:fe:48:d9:f3:
55:98:aa:2d:f2:dd:a8:f3:d5:2d:29:d5:82:9d:db:9a:1c:8c:
55:ee:33:bc:10:23:b1:38:06:30:91:01:36:6a:90:5b:8d:ba:
03:3c:8c:e0:6f:9e:d7:62:22:4e:68:ce:e4:63:a9:ca:27:00:
04:24:74:76:c1:fe:ce:a3:7c:45:ac:dd:0b:39:49:60:42:c3:
08:39:ee:d2:2a:6d:b0:62:f2:cc:77:36:c7:40:be:52:6a:29:
ea:3a:f2:c8:63:f4:e1:8a:c2:4c:70:4a:c1:b2:94:ce:9e:62:
9a:40:83:bb:18:bb:14:c3:be:64:9f:31:b5:00:73:52:3e:ce:
c7:31:54:20:47:3c:dc:61:85:1f:0b:b0:a1:89:5b:75:27:4a:
38:5e:70:fa:58:6f:10:e5:4d:56:bf:bb:16:85:69:53:a4:a3:
00:f9:aa:a3:af:48:79:ec:e1:4b:a7:98:4a:25:43:96:a2:81:
4e:2e:d9:70:33:c4:9a:07:c1:3a:74:f1:02:cd:77:75:a6:2c:
01:2d:23:ea:bd:3d:8f:8f:2e:f4:75:4f:4c:0a:a6:6f:43:c2:
10:9e:c4:0d:4f:1b:08:55:c6:6c:df:7e:f7:7a:a0:e9:1a:7f:
6a:30:f0:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 20:30:07 2025 by rpki-client