Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/e67e82-74d1-4598-80ee-ce0e97bab6a7/1/nJGTyUKgcOtue3bTPBFwwauqq8A.mft
File: nJGTyUKgcOtue3bTPBFwwauqq8A.mft (raw, json)
Hash identifier: Jj7XdCbd/waKYl+ZkFTBQzRpA2PFCAmB78SpU7vS/sU=
Subject key identifier: A7:08:D8:94:20:E2:03:B6:A8:E3:CA:71:C1:85:F3:7A:1E:1E:AA:9A
Authority key identifier: 9C:91:93:C9:42:A0:70:EB:6E:7B:76:D3:3C:11:70:C1:AB:AA:AB:C0
Certificate issuer: /CN=9c9193c942a070eb6e7b76d33c1170c1abaaabc0
Certificate serial: 019A526397CB7BA511692220439E217012D3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nJGTyUKgcOtue3bTPBFwwauqq8A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d4/e67e82-74d1-4598-80ee-ce0e97bab6a7/1/nJGTyUKgcOtue3bTPBFwwauqq8A.mft
Manifest number: 0214
Signing time: Wed 05 Nov 2025 05:00:49 +0000
Manifest this update: Wed 05 Nov 2025 05:00:49 +0000
Manifest next update: Thu 06 Nov 2025 05:00:49 +0000
Files and hashes: 1: nJGTyUKgcOtue3bTPBFwwauqq8A.crl (hash: 3UR4jcHHIbIHOUg3scoERNXBIcBugwGcZOkld0oAX84=)
2: zsKGqfleCvDMwN0xjyFpS4xkenw.roa (hash: i/u/9VVtT03r4id3fmUnH+SfZ7Nvzq19dchi8Dl+uKg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d4/e67e82-74d1-4598-80ee-ce0e97bab6a7/1/nJGTyUKgcOtue3bTPBFwwauqq8A.crl
rsync://rpki.ripe.net/repository/DEFAULT/d4/e67e82-74d1-4598-80ee-ce0e97bab6a7/1/nJGTyUKgcOtue3bTPBFwwauqq8A.mft
rsync://rpki.ripe.net/repository/DEFAULT/nJGTyUKgcOtue3bTPBFwwauqq8A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Nov 2025 03:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:52:63:97:cb:7b:a5:11:69:22:20:43:9e:21:70:12:d3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9c9193c942a070eb6e7b76d33c1170c1abaaabc0
Validity
Not Before: Nov 5 05:00:49 2025 GMT
Not After : Nov 6 05:00:49 2025 GMT
Subject: CN=a708d89420e203b6a8e3ca71c185f37a1e1eaa9a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:2b:df:ba:70:9e:76:57:7d:00:57:2f:14:26:
de:6b:d7:d9:00:0e:49:7a:50:05:f9:de:55:0d:07:
14:8c:8d:62:35:66:98:b6:c7:69:42:5c:48:c3:cc:
02:aa:f9:45:3a:ba:b2:15:b0:5f:9a:29:ff:03:f7:
02:c7:76:40:42:c2:01:c4:39:8a:5f:25:1a:da:d1:
77:77:5a:c1:60:56:85:08:7d:ac:81:dd:9d:27:a4:
99:b6:99:5d:f0:61:a4:ad:f3:db:64:51:45:be:b5:
2c:df:4c:84:17:55:9b:70:51:a6:f7:ac:5a:13:14:
a8:d7:8a:01:12:af:29:9d:1f:bd:2e:f2:ca:b9:22:
e4:d4:d0:25:23:10:3c:e8:97:00:c6:ee:e3:27:28:
6f:64:fa:de:75:bd:5a:7d:20:b2:95:e1:ae:d1:9e:
97:15:ea:e8:79:7e:85:e6:7f:ca:cb:2f:ee:9d:98:
f1:ad:cf:61:66:61:1c:56:70:8a:d2:28:4d:01:f9:
aa:c1:c2:a9:26:f8:0d:e7:44:94:01:d0:f7:72:07:
50:4c:b3:0e:c1:a6:8a:eb:84:03:f5:66:05:7e:d4:
33:c2:99:bd:1f:04:28:be:e9:a8:71:e1:2f:ed:5c:
16:26:36:61:29:e1:c2:1d:10:86:69:03:7e:e9:9d:
e2:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:08:D8:94:20:E2:03:B6:A8:E3:CA:71:C1:85:F3:7A:1E:1E:AA:9A
X509v3 Authority Key Identifier:
keyid:9C:91:93:C9:42:A0:70:EB:6E:7B:76:D3:3C:11:70:C1:AB:AA:AB:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nJGTyUKgcOtue3bTPBFwwauqq8A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/e67e82-74d1-4598-80ee-ce0e97bab6a7/1/nJGTyUKgcOtue3bTPBFwwauqq8A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/e67e82-74d1-4598-80ee-ce0e97bab6a7/1/nJGTyUKgcOtue3bTPBFwwauqq8A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b6:16:2b:48:b2:bf:d3:36:0c:9e:90:c5:41:a9:eb:11:24:44:
30:c0:9e:32:a9:74:d8:db:9c:19:a7:ef:4c:aa:e9:18:04:2e:
50:87:fa:bb:6c:7b:d5:91:df:06:fa:59:22:44:aa:69:28:f8:
c8:02:d5:75:8a:5d:2f:a0:3f:f9:f6:47:d3:e3:73:f1:4f:67:
83:09:17:6a:04:aa:2b:e3:bc:ea:8b:73:03:9f:b4:73:9b:7f:
d3:72:42:b6:11:21:c1:ba:30:94:18:79:32:4e:f3:0c:9e:b4:
d6:71:6e:65:c2:63:3c:df:7c:86:22:67:6e:9b:3f:b1:39:43:
4e:97:d0:a2:c1:93:b9:45:7b:f1:90:65:bf:fa:1f:e0:a1:bd:
48:ea:1f:58:83:7e:0f:87:17:bb:c2:45:ee:a5:b8:16:42:6e:
39:ca:e8:71:a0:d9:f3:b6:6c:4a:83:a4:da:2a:4b:d5:91:a2:
88:2c:32:58:03:f3:26:95:39:24:6e:ae:39:11:b2:96:39:ac:
ce:4e:b3:32:23:f9:57:16:72:6d:ba:8b:b1:6c:c6:08:d5:5c:
de:5c:ed:fa:1f:86:a4:4f:6f:d2:2e:cc:3f:61:08:f9:bd:4c:
4c:c6:dd:e0:59:36:01:a1:7d:5d:df:03:07:a7:e5:76:e3:b9:
48:ca:97:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 11:11:24 2025 by rpki-client