Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/43/269f66-0fc1-4658-b367-9c30f656fd5b/1/nfWJZyvCo0XcEen_FiUA7BXa3R0.mft
File: nfWJZyvCo0XcEen_FiUA7BXa3R0.mft (raw, json)
Hash identifier: UySY1igDPMDNy+T10vg8Qb3fZETZl9pk6k1ZdDYepac=
Subject key identifier: B5:11:5A:9E:9D:B6:84:E0:2D:F8:24:88:A1:4F:85:76:C9:63:69:4D
Authority key identifier: 9D:F5:89:67:2B:C2:A3:45:DC:11:E9:FF:16:25:00:EC:15:DA:DD:1D
Certificate issuer: /CN=9df589672bc2a345dc11e9ff162500ec15dadd1d
Certificate serial: 019A51197B519BAE1521341A2B9B3CECEE92
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nfWJZyvCo0XcEen_FiUA7BXa3R0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/43/269f66-0fc1-4658-b367-9c30f656fd5b/1/nfWJZyvCo0XcEen_FiUA7BXa3R0.mft
Manifest number: 0FDD
Signing time: Tue 04 Nov 2025 23:00:15 +0000
Manifest this update: Tue 04 Nov 2025 23:00:15 +0000
Manifest next update: Wed 05 Nov 2025 23:00:15 +0000
Files and hashes: 1: 780G3tJoSimhDwBBemUbFtRI2CY.roa (hash: K/WGt3LrpuzCwaOqtNr/s3mgohgZ+wpctIfbdhQTaX0=)
2: nfWJZyvCo0XcEen_FiUA7BXa3R0.crl (hash: 040sit5zP0u3j+luB1/HI4SrG8kdZCocufBfaGC/yYY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/43/269f66-0fc1-4658-b367-9c30f656fd5b/1/nfWJZyvCo0XcEen_FiUA7BXa3R0.crl
rsync://rpki.ripe.net/repository/DEFAULT/43/269f66-0fc1-4658-b367-9c30f656fd5b/1/nfWJZyvCo0XcEen_FiUA7BXa3R0.mft
rsync://rpki.ripe.net/repository/DEFAULT/nfWJZyvCo0XcEen_FiUA7BXa3R0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 18:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:51:19:7b:51:9b:ae:15:21:34:1a:2b:9b:3c:ec:ee:92
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9df589672bc2a345dc11e9ff162500ec15dadd1d
Validity
Not Before: Nov 4 23:00:15 2025 GMT
Not After : Nov 5 23:00:15 2025 GMT
Subject: CN=b5115a9e9db684e02df82488a14f8576c963694d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:47:82:d4:6c:c1:5b:1b:af:34:42:64:28:3b:
38:29:0b:f1:95:64:ae:40:7e:41:31:0c:ea:23:d5:
d0:23:79:b0:5e:b0:39:ab:f2:9d:9c:93:45:c3:20:
d2:79:56:3e:c1:d5:e1:e9:cb:0b:66:bf:44:22:5f:
47:9f:25:6e:79:17:3f:5b:7e:13:bd:08:58:10:24:
ca:5b:a7:7d:c2:5a:92:31:58:de:e0:8c:df:49:e3:
c2:ae:61:48:37:fc:21:6c:8a:0a:45:a2:9a:ed:cf:
5e:77:4d:2b:14:0e:31:e4:b2:6e:7f:52:8f:3e:c2:
f1:12:89:6f:0c:aa:99:33:a8:46:2c:4c:d9:1f:36:
7d:f6:6c:35:5e:19:3d:40:4c:ec:83:a6:b7:c4:9e:
f1:26:29:7b:94:35:df:08:86:b3:86:79:25:91:7e:
15:ff:d5:de:c6:82:34:17:79:01:7f:3b:34:5b:59:
70:ac:f8:b8:a0:c8:33:c7:e4:0a:3f:73:46:35:98:
ec:23:bd:1f:24:2e:a0:e4:68:ed:56:b5:6a:8b:23:
64:f4:09:47:a4:d7:3d:45:ef:20:44:aa:15:79:9c:
f8:c4:4a:bf:37:a5:30:24:51:87:72:57:b2:d3:92:
d1:2f:bf:02:3b:a5:55:79:fe:ef:10:52:32:81:5a:
37:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:11:5A:9E:9D:B6:84:E0:2D:F8:24:88:A1:4F:85:76:C9:63:69:4D
X509v3 Authority Key Identifier:
keyid:9D:F5:89:67:2B:C2:A3:45:DC:11:E9:FF:16:25:00:EC:15:DA:DD:1D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nfWJZyvCo0XcEen_FiUA7BXa3R0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/43/269f66-0fc1-4658-b367-9c30f656fd5b/1/nfWJZyvCo0XcEen_FiUA7BXa3R0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/43/269f66-0fc1-4658-b367-9c30f656fd5b/1/nfWJZyvCo0XcEen_FiUA7BXa3R0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bb:a9:09:f0:ec:4f:9c:f1:a3:d7:c2:50:b7:22:49:7e:20:7a:
eb:97:ed:ef:66:51:bf:fb:e1:77:b6:8b:cb:03:d9:33:d7:9f:
a6:9f:58:0d:2c:1c:2d:b9:09:64:e9:34:ad:3a:5b:40:2a:cb:
f6:50:e9:a4:8e:5c:31:f4:43:4e:00:30:4b:a8:cd:2a:b7:71:
e6:63:5b:37:7d:9d:36:64:38:22:05:f3:51:cc:d8:cb:f8:5c:
3b:9a:b9:40:f8:b6:c7:52:56:9c:07:f6:76:60:60:aa:4a:1f:
56:76:a6:47:6c:2e:9b:5c:29:6f:94:59:f5:60:ff:f6:14:3c:
97:2b:40:26:e6:06:8a:fc:96:9c:73:90:d9:51:17:46:3d:9b:
b5:86:bc:c2:42:a0:21:c2:2d:4a:12:4c:6a:7c:dc:da:3f:28:
1e:0c:e9:7d:4c:7c:4c:2f:3e:cd:0a:30:88:f5:95:34:ba:df:
88:72:86:29:a4:05:0c:e3:7f:76:10:8d:5a:e0:fd:1c:f6:93:
06:9f:1c:e8:5d:34:f4:8b:3f:b2:20:3a:95:07:d0:1b:01:01:
12:50:dd:84:ae:c8:4c:04:74:53:9e:81:e2:44:94:53:1a:93:
14:d5:1f:90:d6:1c:dd:d3:8f:ba:3b:c2:4c:20:08:56:99:cb:
29:04:f7:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 03:11:57 2025 by rpki-client