Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d8/6e8444-8da5-466b-8400-7bd96d9c6286/1/nRfZOI52MabRmvsrJkJ5WiTIQIE.mft
File: nRfZOI52MabRmvsrJkJ5WiTIQIE.mft (raw, json)
Hash identifier: dHUzBW5B+rmmZUkjxv+7mhQpjo/i+raCr3QurTMdBzs=
Subject key identifier: 0F:D6:4F:25:60:BA:57:FE:53:EA:A1:6B:77:BC:6B:16:42:F6:0B:55
Authority key identifier: 9D:17:D9:38:8E:76:31:A6:D1:9A:FB:2B:26:42:79:5A:24:C8:40:81
Certificate issuer: /CN=9d17d9388e7631a6d19afb2b2642795a24c84081
Certificate serial: 019A552E0AE3FF26AE6E5AAEDA044D956BEB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nRfZOI52MabRmvsrJkJ5WiTIQIE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d8/6e8444-8da5-466b-8400-7bd96d9c6286/1/nRfZOI52MabRmvsrJkJ5WiTIQIE.mft
Manifest number: 1715
Signing time: Wed 05 Nov 2025 18:01:12 +0000
Manifest this update: Wed 05 Nov 2025 18:01:12 +0000
Manifest next update: Thu 06 Nov 2025 18:01:12 +0000
Files and hashes: 1: nRfZOI52MabRmvsrJkJ5WiTIQIE.crl (hash: It3XE7NtSDh6E1IHMyjWrCYfxMI9Fsoz1MLUlsNtq4s=)
2: u2BNAAC7Dm0euPOTB8HOX-QylyE.roa (hash: GNqBAmVB3is0CDKmPUm0vfs8TWmU1YL168pv/EKk5Z4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d8/6e8444-8da5-466b-8400-7bd96d9c6286/1/nRfZOI52MabRmvsrJkJ5WiTIQIE.crl
rsync://rpki.ripe.net/repository/DEFAULT/d8/6e8444-8da5-466b-8400-7bd96d9c6286/1/nRfZOI52MabRmvsrJkJ5WiTIQIE.mft
rsync://rpki.ripe.net/repository/DEFAULT/nRfZOI52MabRmvsrJkJ5WiTIQIE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Nov 2025 12:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:55:2e:0a:e3:ff:26:ae:6e:5a:ae:da:04:4d:95:6b:eb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9d17d9388e7631a6d19afb2b2642795a24c84081
Validity
Not Before: Nov 5 18:01:12 2025 GMT
Not After : Nov 6 18:01:12 2025 GMT
Subject: CN=0fd64f2560ba57fe53eaa16b77bc6b1642f60b55
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:96:78:a1:60:ad:ec:c5:b3:98:52:5b:0a:92:
d1:e5:a7:bc:0a:f2:f3:9d:7a:82:cc:cf:99:11:45:
f5:43:40:b7:14:84:2c:6b:40:3d:0a:02:b3:55:84:
e1:19:08:de:a4:80:33:c9:9e:c7:3e:3c:e4:02:d9:
23:74:15:db:06:c2:df:17:d4:65:c6:4d:de:6f:69:
5f:f0:e8:0b:ae:af:d6:df:ec:e2:20:c3:eb:c1:dd:
5e:98:67:a7:ad:28:f1:c7:32:5b:f7:95:a9:3c:60:
81:79:27:ab:59:17:80:29:74:07:e7:7a:d0:89:d4:
93:b1:8f:30:b7:d2:2d:70:cd:27:6f:c7:2c:e4:33:
25:24:a4:e7:e3:29:fc:e3:ff:fa:22:13:dc:89:6a:
df:2a:1a:ab:2f:c0:f2:1b:8b:d0:11:ae:71:df:5e:
9c:02:c7:76:ad:1d:23:50:fe:59:16:ec:85:35:c3:
96:d8:14:43:7d:74:e8:37:46:92:83:08:ed:e7:be:
58:aa:19:b6:96:56:dd:a4:75:0c:e8:78:8d:e7:8a:
6f:3b:ee:fb:a0:63:67:00:46:1f:eb:46:f6:15:04:
61:82:e8:92:0a:5c:b1:90:d9:39:af:cc:33:54:4b:
81:24:c7:9e:d1:fe:b6:b9:ca:0b:85:cc:f6:9c:8e:
38:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:D6:4F:25:60:BA:57:FE:53:EA:A1:6B:77:BC:6B:16:42:F6:0B:55
X509v3 Authority Key Identifier:
keyid:9D:17:D9:38:8E:76:31:A6:D1:9A:FB:2B:26:42:79:5A:24:C8:40:81
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nRfZOI52MabRmvsrJkJ5WiTIQIE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/6e8444-8da5-466b-8400-7bd96d9c6286/1/nRfZOI52MabRmvsrJkJ5WiTIQIE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/6e8444-8da5-466b-8400-7bd96d9c6286/1/nRfZOI52MabRmvsrJkJ5WiTIQIE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9b:65:fc:b1:a3:d4:45:10:d1:d6:5f:de:ec:67:5f:23:e0:2a:
7a:f6:ad:bb:e0:46:f5:17:6d:6e:7a:b1:c4:93:df:b2:d2:eb:
71:0e:22:b6:0e:6c:7c:6a:b7:25:28:53:1a:41:08:ef:8a:81:
db:62:95:57:c5:97:59:8b:78:6b:09:0a:79:02:3c:b3:12:da:
ce:82:32:d3:b8:0e:36:89:81:9b:12:e6:84:5d:7f:11:21:e1:
14:17:66:c6:73:7c:b9:25:4c:c7:1d:f6:65:1b:fe:b6:ec:aa:
31:58:5e:6f:33:cd:2b:57:b0:aa:2d:3a:67:5c:ca:85:e4:61:
10:d5:3f:52:07:37:e6:17:3a:c2:24:03:8b:db:f1:ea:35:1a:
41:ec:1a:be:56:eb:22:95:46:ff:a3:95:ec:58:9c:f4:02:f9:
ee:21:51:51:93:a1:68:7d:1e:11:34:99:f0:c8:7c:9a:9b:91:
f6:eb:82:8a:94:96:00:d3:c6:b5:18:56:84:d1:cf:58:28:c8:
41:e6:9e:bd:d2:eb:01:ba:14:22:bb:d9:5f:77:d8:16:3b:54:
a8:3e:97:94:8f:7b:e8:16:b0:8a:15:65:4d:66:d6:4c:e2:81:
d4:a2:64:36:52:80:67:ff:00:7d:a1:91:78:7f:27:b6:5e:f8:
87:7c:4e:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 20:47:56 2025 by rpki-client