Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/06/14ead9-cbb1-4639-81a7-d8b8202d7786/1/nxvZcy5s3W50lNeRh_yoVbUZmQk.mft
File: nxvZcy5s3W50lNeRh_yoVbUZmQk.mft (raw, json)
Hash identifier: eah+8hTiRktiDl80UUd0sOO/byC6b1cjbcAjUKCyabw=
Subject key identifier: F5:83:ED:FA:3D:79:40:3C:CD:EE:72:37:27:A0:90:D6:0C:76:D2:FB
Authority key identifier: 9F:1B:D9:73:2E:6C:DD:6E:74:94:D7:91:87:FC:A8:55:B5:19:99:09
Certificate issuer: /CN=9f1bd9732e6cdd6e7494d79187fca855b5199909
Certificate serial: 0199C4C5729921D896FB6D51EA11B67F0EF3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nxvZcy5s3W50lNeRh_yoVbUZmQk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/06/14ead9-cbb1-4639-81a7-d8b8202d7786/1/nxvZcy5s3W50lNeRh_yoVbUZmQk.mft
Manifest number: 1446
Signing time: Wed 08 Oct 2025 17:01:38 +0000
Manifest this update: Wed 08 Oct 2025 17:01:38 +0000
Manifest next update: Thu 09 Oct 2025 17:01:38 +0000
Files and hashes: 1: L2MFVzLu5kpVjnsb4Kb2Ip5hD4I.roa (hash: wDHsr026DvaBiTyi7BBF/QmvI/bBUdaI/D33HJF38Y8=)
2: _JE8lnLT-86sHVAHJKlkVaAyjr4.roa (hash: UompnxxivZ8Fg0ySIbxl1tWe4K+WK1YpWsyZpIJAPwU=)
3: nxvZcy5s3W50lNeRh_yoVbUZmQk.crl (hash: CxYuPhr1njaEdr6LWPZoPkTxkgWkjTa4rhIhiq/sFy0=)
4: qdHDAHiWQsmCFoNetHDwXmdq01A.roa (hash: go8toSa0Pfxl9RGM5eMA7V4+YqEI5lyucr5i8lNbh0M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/06/14ead9-cbb1-4639-81a7-d8b8202d7786/1/nxvZcy5s3W50lNeRh_yoVbUZmQk.crl
rsync://rpki.ripe.net/repository/DEFAULT/06/14ead9-cbb1-4639-81a7-d8b8202d7786/1/nxvZcy5s3W50lNeRh_yoVbUZmQk.mft
rsync://rpki.ripe.net/repository/DEFAULT/nxvZcy5s3W50lNeRh_yoVbUZmQk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 09 Oct 2025 16:33:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:c4:c5:72:99:21:d8:96:fb:6d:51:ea:11:b6:7f:0e:f3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9f1bd9732e6cdd6e7494d79187fca855b5199909
Validity
Not Before: Oct 8 17:01:38 2025 GMT
Not After : Oct 9 17:01:38 2025 GMT
Subject: CN=f583edfa3d79403ccdee723727a090d60c76d2fb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:82:c8:dc:d7:e2:a7:05:03:5d:3a:da:4f:78:
a9:73:5b:a7:e6:bf:a0:93:dc:c8:fd:cc:d0:e2:8d:
b5:77:bc:eb:62:ba:41:fc:7b:14:68:8e:55:de:11:
f1:da:3e:40:31:6f:a9:62:90:bf:3f:a0:92:07:59:
43:09:39:42:91:0c:1b:95:66:2f:60:6e:83:96:c2:
e2:dd:2e:de:fd:b6:a8:b2:9a:09:fe:c8:d0:de:22:
e1:e7:83:98:db:0e:87:ea:15:3b:7e:56:9b:8d:9c:
d6:0c:5b:b0:81:7a:96:f5:7c:24:5c:d2:63:21:ca:
7b:c5:04:7b:2b:a7:89:63:ed:ea:a4:13:38:35:75:
c4:05:5b:98:bf:e0:35:85:af:1f:d0:ce:ab:8e:38:
55:2e:65:37:fe:10:43:c9:25:30:e0:3d:a8:f0:4e:
70:6d:c5:d4:1f:31:0b:1a:36:38:07:c9:43:20:b8:
65:3f:ef:8a:29:6f:67:cb:e8:7e:a5:3a:61:64:67:
49:ca:b9:68:44:89:9f:b0:24:30:39:e9:12:b3:5e:
d7:ed:06:f7:6e:c1:c7:38:96:cd:af:8a:b3:3a:62:
a3:1d:f4:50:4b:bf:d1:16:f6:ff:b0:16:b4:bc:69:
94:85:ab:3a:00:28:0a:bb:11:be:32:be:bf:f0:b2:
82:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:83:ED:FA:3D:79:40:3C:CD:EE:72:37:27:A0:90:D6:0C:76:D2:FB
X509v3 Authority Key Identifier:
keyid:9F:1B:D9:73:2E:6C:DD:6E:74:94:D7:91:87:FC:A8:55:B5:19:99:09
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nxvZcy5s3W50lNeRh_yoVbUZmQk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/06/14ead9-cbb1-4639-81a7-d8b8202d7786/1/nxvZcy5s3W50lNeRh_yoVbUZmQk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/06/14ead9-cbb1-4639-81a7-d8b8202d7786/1/nxvZcy5s3W50lNeRh_yoVbUZmQk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
82:49:0b:06:0c:99:0f:47:9d:89:c8:65:b3:a7:10:f7:cc:07:
8c:1a:a4:8a:72:4d:b2:b9:ce:d2:75:86:0c:c2:ad:a0:5d:4f:
e5:ed:e8:69:d6:83:a3:d7:b7:45:c6:a6:78:41:ea:be:c4:a8:
19:0b:90:03:20:a0:71:0e:4a:22:0f:3a:88:8a:6a:59:04:d4:
2d:31:12:09:63:16:b2:0f:0e:8f:aa:9a:98:41:37:a3:7d:c6:
58:5a:26:fc:da:7c:b9:d1:c9:ad:c7:d8:e4:4b:05:40:1b:06:
bb:56:6d:22:77:b2:ae:c0:44:0d:72:1c:18:9c:7a:aa:cd:be:
02:83:2e:39:e6:f9:0f:a6:46:8a:e2:ca:07:62:a2:bb:1b:3a:
10:f0:18:c3:18:36:8b:3c:9c:af:48:4f:72:12:3f:16:6f:c6:
b6:b9:94:34:6a:bb:f7:7c:d0:23:7e:46:ab:00:6f:49:53:46:
bc:08:1a:e1:e0:3a:e4:b8:e9:7d:ab:77:ca:43:fd:bd:5e:f5:
c3:f6:0d:03:c4:f3:4c:9a:dd:0b:58:f7:95:ef:c3:e1:e6:6e:
89:40:c2:f3:28:98:4c:83:17:d5:c1:8c:2a:27:35:b0:50:7b:
87:2e:2f:07:6a:60:9a:2d:03:76:a4:a6:a4:f5:5a:fc:62:28:
08:84:e9:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 8 23:13:34 2025 by rpki-client