Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/9e8166-160f-4ce2-9017-1e151aa1afdc/1/nY85NIPUicQp_Biwk0LXbQr-QkQ.mft
File: nY85NIPUicQp_Biwk0LXbQr-QkQ.mft (raw, json)
Hash identifier: rffepSZvaupSbHGhUl9ZBZTOrWRwrUKsaUv4Vf82yN0=
Subject key identifier: 7C:37:9A:31:2B:6B:D4:A5:01:A7:13:0E:61:CF:2A:A5:8C:D0:38:08
Authority key identifier: 9D:8F:39:34:83:D4:89:C4:29:FC:18:B0:93:42:D7:6D:0A:FE:42:44
Certificate issuer: /CN=9d8f393483d489c429fc18b09342d76d0afe4244
Certificate serial: 019A4E4F4949B7E989ABF9D2797A9AA13D69
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nY85NIPUicQp_Biwk0LXbQr-QkQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e4/9e8166-160f-4ce2-9017-1e151aa1afdc/1/nY85NIPUicQp_Biwk0LXbQr-QkQ.mft
Manifest number: 12F6
Signing time: Tue 04 Nov 2025 10:00:10 +0000
Manifest this update: Tue 04 Nov 2025 10:00:10 +0000
Manifest next update: Wed 05 Nov 2025 10:00:10 +0000
Files and hashes: 1: fCKBgjNaPgCYlEAaSC02t2TX-HQ.roa (hash: z50OwHqPJLgmTj1OD+z+QDtPxp5JJkD8lN3khIG3bwQ=)
2: nY85NIPUicQp_Biwk0LXbQr-QkQ.crl (hash: eRsVMRF3SpD98qJXd6YlEVYwr/poG5UzLsECGOpb1CY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e4/9e8166-160f-4ce2-9017-1e151aa1afdc/1/nY85NIPUicQp_Biwk0LXbQr-QkQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/e4/9e8166-160f-4ce2-9017-1e151aa1afdc/1/nY85NIPUicQp_Biwk0LXbQr-QkQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/nY85NIPUicQp_Biwk0LXbQr-QkQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:4f:49:49:b7:e9:89:ab:f9:d2:79:7a:9a:a1:3d:69
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9d8f393483d489c429fc18b09342d76d0afe4244
Validity
Not Before: Nov 4 10:00:10 2025 GMT
Not After : Nov 5 10:00:10 2025 GMT
Subject: CN=7c379a312b6bd4a501a7130e61cf2aa58cd03808
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:54:85:93:aa:34:2a:c1:0e:34:96:90:18:07:
b1:6c:2c:7d:38:56:70:4a:a6:b6:05:11:4a:6d:cb:
64:8c:a3:be:1e:78:be:3b:78:88:cd:2f:ca:63:09:
0c:26:c0:1a:80:cf:ce:f5:51:5a:25:e3:f7:fa:32:
06:d7:1f:26:ff:cc:8e:d7:81:2d:cf:b6:a2:be:f2:
30:e4:2a:72:1e:50:de:55:fa:44:6f:f8:5b:d4:88:
4f:84:77:9e:27:8d:48:9d:3e:0d:20:d9:f7:c6:e7:
03:94:5f:c9:85:d8:6f:08:17:bf:6b:3b:6f:98:76:
73:df:5e:56:e2:5c:05:99:3b:c9:96:cb:2b:e3:7d:
9b:ab:69:17:67:c8:89:84:6b:73:99:80:0d:6f:14:
e0:92:7e:5e:90:66:3b:55:6c:31:76:c6:62:f0:a1:
20:f0:14:f4:ba:f7:a4:f7:c8:56:44:88:3d:49:46:
b1:ba:90:51:32:87:99:d7:40:2f:07:18:c5:e4:c1:
88:21:72:ba:a4:65:fb:fd:ca:cd:df:82:16:28:d3:
28:ac:27:52:e9:f6:39:ac:f0:c0:e7:d2:01:11:7b:
9b:e9:fe:87:63:4e:1c:31:72:6c:0b:a8:a4:cc:e4:
30:a9:25:f0:a4:a2:b1:b3:52:2e:ce:85:01:9c:44:
1e:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:37:9A:31:2B:6B:D4:A5:01:A7:13:0E:61:CF:2A:A5:8C:D0:38:08
X509v3 Authority Key Identifier:
keyid:9D:8F:39:34:83:D4:89:C4:29:FC:18:B0:93:42:D7:6D:0A:FE:42:44
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nY85NIPUicQp_Biwk0LXbQr-QkQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/9e8166-160f-4ce2-9017-1e151aa1afdc/1/nY85NIPUicQp_Biwk0LXbQr-QkQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/9e8166-160f-4ce2-9017-1e151aa1afdc/1/nY85NIPUicQp_Biwk0LXbQr-QkQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
74:84:a7:df:4b:ab:bf:17:6d:04:27:6d:08:d4:90:d1:34:00:
90:e5:53:62:71:ac:9d:47:d4:19:2b:4a:88:7a:c2:f3:a1:c7:
5a:ba:c9:87:a6:04:93:21:e0:8f:99:f7:80:26:7c:6c:6c:b1:
1f:8c:61:b3:58:38:9d:05:c7:e1:d9:b2:34:fa:5e:9a:5d:89:
f9:1c:b2:b4:41:1f:d5:fb:35:d1:3b:84:49:80:ce:a9:4e:67:
d7:6b:c1:11:1a:c3:77:ab:ce:08:7c:a7:b4:ab:c3:70:d2:53:
cb:a5:a0:62:db:ac:32:4a:7d:80:70:5c:b0:b6:b5:f5:65:f9:
f8:dc:d4:c8:c5:bf:41:55:ef:05:89:ae:a3:d1:dd:97:80:6b:
42:5b:5c:6f:4d:89:18:53:dd:85:14:df:83:e2:71:fe:80:42:
be:fb:e9:bf:50:dc:70:82:91:1a:58:6a:2c:8f:10:7c:8b:d5:
6e:61:be:31:4b:25:5b:66:73:3c:25:59:6f:7e:27:86:41:f9:
bb:d2:45:de:1b:24:c2:24:2d:49:cd:63:7c:fb:b9:61:e5:d7:
11:19:f5:9d:36:68:1d:a3:f5:c6:4a:83:63:2b:5f:41:48:68:
5b:71:37:59:b7:f7:35:04:03:5c:fc:c0:45:68:45:12:a1:b5:
53:a9:bd:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 17:35:46 2025 by rpki-client