Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/eca327-d58f-491c-94c8-e3d045483412/1/nmFAOsaeKHT1Yi1-5Wjo5J8GTC4.mft
File: nmFAOsaeKHT1Yi1-5Wjo5J8GTC4.mft (raw, json)
Hash identifier: nLzIU7lGVrjokRNDFwqo1P+hgbftPiNWg36vn6Vr5SI=
Subject key identifier: 82:9C:E5:0F:0A:56:B4:68:3F:5D:B1:2D:8F:00:8C:F7:D7:67:2E:9D
Authority key identifier: 9E:61:40:3A:C6:9E:28:74:F5:62:2D:7E:E5:68:E8:E4:9F:06:4C:2E
Certificate issuer: /CN=9e61403ac69e2874f5622d7ee568e8e49f064c2e
Certificate serial: 019A522CD677D566EB3D9F15D12A9CE9022F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nmFAOsaeKHT1Yi1-5Wjo5J8GTC4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/eca327-d58f-491c-94c8-e3d045483412/1/nmFAOsaeKHT1Yi1-5Wjo5J8GTC4.mft
Manifest number: 1711
Signing time: Wed 05 Nov 2025 04:01:01 +0000
Manifest this update: Wed 05 Nov 2025 04:01:01 +0000
Manifest next update: Thu 06 Nov 2025 04:01:01 +0000
Files and hashes: 1: k80BCKNHzgDvKK_3k-MEya8lNoM.roa (hash: XRBQsFrhhLJ6RMDFPAKpPWk13Lc3Ws+YcSUdoLvIOo8=)
2: nmFAOsaeKHT1Yi1-5Wjo5J8GTC4.crl (hash: GiFJDrKn81PutuMbBSma1Wdtx3oyTUXPOugEbJ9mveA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4c/eca327-d58f-491c-94c8-e3d045483412/1/nmFAOsaeKHT1Yi1-5Wjo5J8GTC4.crl
rsync://rpki.ripe.net/repository/DEFAULT/4c/eca327-d58f-491c-94c8-e3d045483412/1/nmFAOsaeKHT1Yi1-5Wjo5J8GTC4.mft
rsync://rpki.ripe.net/repository/DEFAULT/nmFAOsaeKHT1Yi1-5Wjo5J8GTC4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Nov 2025 03:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:52:2c:d6:77:d5:66:eb:3d:9f:15:d1:2a:9c:e9:02:2f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9e61403ac69e2874f5622d7ee568e8e49f064c2e
Validity
Not Before: Nov 5 04:01:01 2025 GMT
Not After : Nov 6 04:01:01 2025 GMT
Subject: CN=829ce50f0a56b4683f5db12d8f008cf7d7672e9d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:53:62:33:cd:b6:07:c7:71:7c:00:89:05:0f:
ab:0b:9f:21:db:50:76:44:db:e3:56:21:9b:54:79:
54:2e:af:46:82:31:48:d9:a2:6b:c3:b9:c8:37:28:
7c:88:0a:09:f9:a2:ad:05:5a:b5:3b:db:b5:a5:15:
32:31:ea:a7:23:f2:b1:4c:e3:10:6b:50:12:dc:0a:
9a:59:cf:70:e7:d8:8a:15:82:5e:c0:58:b8:98:1b:
d9:08:6c:ea:d8:8c:58:1a:28:88:75:28:5e:13:3d:
82:76:a3:c9:7a:8e:69:7e:7d:e8:0e:8c:84:99:9b:
1c:d0:57:1d:1c:2c:23:71:b0:14:5e:04:d2:f5:d5:
a5:5d:c5:75:99:fb:1d:7e:bf:0b:48:e9:c2:ad:9b:
3f:ae:e8:49:38:eb:c8:7a:69:dc:86:eb:07:a7:be:
ca:b2:8c:32:5b:cf:56:1c:01:c9:e4:a6:2c:e9:99:
b9:e2:6d:d3:47:94:ea:8f:28:54:c8:93:a6:11:e4:
1d:51:02:6f:84:a1:48:e1:00:81:02:3e:17:97:da:
97:f6:32:b5:12:9d:87:02:2b:40:eb:38:02:43:5e:
d1:4e:ea:14:66:e8:cb:69:aa:70:8f:c0:e2:a4:47:
5a:26:cd:44:bf:10:a9:26:0e:10:73:bd:c9:0f:ae:
02:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:9C:E5:0F:0A:56:B4:68:3F:5D:B1:2D:8F:00:8C:F7:D7:67:2E:9D
X509v3 Authority Key Identifier:
keyid:9E:61:40:3A:C6:9E:28:74:F5:62:2D:7E:E5:68:E8:E4:9F:06:4C:2E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nmFAOsaeKHT1Yi1-5Wjo5J8GTC4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/eca327-d58f-491c-94c8-e3d045483412/1/nmFAOsaeKHT1Yi1-5Wjo5J8GTC4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/eca327-d58f-491c-94c8-e3d045483412/1/nmFAOsaeKHT1Yi1-5Wjo5J8GTC4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
85:8e:0c:88:74:57:46:6b:ed:59:0b:a9:68:9f:a0:d8:60:d2:
f9:b2:84:4f:4a:42:99:8c:7f:26:22:09:29:a9:07:5c:a4:e0:
08:dc:c7:ce:68:16:96:c2:a7:9f:8b:88:21:4a:eb:a4:d0:e9:
c1:51:3e:ec:2b:f4:ba:7f:88:0b:e2:2c:0d:80:0a:3a:2f:56:
94:07:59:d7:af:a4:bf:19:f9:94:ca:61:c7:7d:a1:aa:55:fa:
02:73:77:78:69:f2:9d:d3:63:dd:12:79:c9:9b:e9:f0:97:15:
60:a8:fc:30:79:15:9d:53:02:00:74:cd:2c:c2:a3:75:71:35:
f6:b3:91:ce:e6:15:9a:18:15:23:98:03:a1:4b:2a:d3:fc:80:
31:6f:67:cd:0e:a8:33:c9:75:df:e6:48:c1:8b:7f:35:5c:01:
f0:05:4e:cd:bf:bb:bc:10:bc:67:5f:bc:cd:a5:a8:dd:cb:e0:
53:35:a0:76:b4:18:ac:b8:0c:ee:ab:49:90:83:43:3b:d5:11:
47:b0:a6:5f:8f:81:c4:2b:aa:4e:d7:9b:3d:ff:55:7f:b4:c2:
b8:b3:4f:1e:52:58:90:c1:ba:df:34:a3:00:12:56:72:31:02:
10:0a:07:ed:26:3a:80:dd:c2:d5:a5:90:7c:76:57:91:27:bd:
3e:f8:d0:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 09:30:41 2025 by rpki-client