Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fc/362958-06dd-4c04-8864-01398942fb5a/1/nMJvGM-WuGpFBrO4TMxE07NQaiA.mft
File: nMJvGM-WuGpFBrO4TMxE07NQaiA.mft (raw, json)
Hash identifier: YFN51px5sWAJT/g4Sn2z2/NX4oZKy1Ub5Jy9Qn5vOBo=
Subject key identifier: 86:B2:41:37:03:D0:7D:10:F7:F9:F3:85:57:0D:18:68:3D:D4:0C:AE
Authority key identifier: 9C:C2:6F:18:CF:96:B8:6A:45:06:B3:B8:4C:CC:44:D3:B3:50:6A:20
Certificate issuer: /CN=9cc26f18cf96b86a4506b3b84ccc44d3b3506a20
Certificate serial: 0199CAFDDE8BE1AE2E9A837B3928D096E878
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nMJvGM-WuGpFBrO4TMxE07NQaiA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fc/362958-06dd-4c04-8864-01398942fb5a/1/nMJvGM-WuGpFBrO4TMxE07NQaiA.mft
Manifest number: 0890
Signing time: Thu 09 Oct 2025 22:00:59 +0000
Manifest this update: Thu 09 Oct 2025 22:00:59 +0000
Manifest next update: Fri 10 Oct 2025 22:00:59 +0000
Files and hashes: 1: jYsRIvoDURhQER-g8gsgtrlE-uw.roa (hash: GoEsOPwpW5DP9dw5vT+vzZBcfSyAVzSYkZdL0zk1Xg8=)
2: nMJvGM-WuGpFBrO4TMxE07NQaiA.crl (hash: QPLAncLWZX+lx9F6Ve1j6ngrjP6Ksx8R2iGXPncbRlw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fc/362958-06dd-4c04-8864-01398942fb5a/1/nMJvGM-WuGpFBrO4TMxE07NQaiA.crl
rsync://rpki.ripe.net/repository/DEFAULT/fc/362958-06dd-4c04-8864-01398942fb5a/1/nMJvGM-WuGpFBrO4TMxE07NQaiA.mft
rsync://rpki.ripe.net/repository/DEFAULT/nMJvGM-WuGpFBrO4TMxE07NQaiA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 10 Oct 2025 22:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:ca:fd:de:8b:e1:ae:2e:9a:83:7b:39:28:d0:96:e8:78
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9cc26f18cf96b86a4506b3b84ccc44d3b3506a20
Validity
Not Before: Oct 9 22:00:59 2025 GMT
Not After : Oct 10 22:00:59 2025 GMT
Subject: CN=86b2413703d07d10f7f9f385570d18683dd40cae
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:b1:64:f2:5a:23:74:b7:00:78:f3:c6:09:25:
5b:92:b3:64:4a:0c:e4:d1:b9:e9:ad:8b:ae:e7:13:
81:1c:31:a8:c7:4c:c1:a5:e3:16:dd:2d:33:5b:f3:
f0:cb:bb:f1:16:57:1b:cb:f0:55:c6:7d:b5:d6:c5:
01:bd:f5:15:14:48:46:0c:2c:33:b4:8d:f6:7c:2f:
bc:79:ac:99:30:3e:24:72:bd:b3:75:4b:55:74:a8:
04:3a:a0:4d:02:b7:c8:ee:bf:e8:eb:e0:24:44:41:
2d:04:9a:c5:5f:46:f3:22:20:e8:62:31:42:c2:cd:
d7:c9:c2:4d:95:10:73:4f:a7:2b:71:01:5a:81:c5:
dc:e4:2e:82:7c:54:03:d0:b5:2e:57:33:a0:19:43:
1a:5e:7b:69:db:cb:d8:1c:ce:4e:da:b1:cb:6d:95:
6a:1c:5f:07:b4:2f:bd:a2:45:ce:95:bc:7f:32:32:
c3:b9:c2:df:d0:92:c2:4e:61:68:65:01:db:96:16:
8c:14:d8:1c:9c:ba:0b:b9:18:5b:a5:fd:db:c4:8e:
8b:19:05:b7:0c:84:54:89:28:07:27:8b:d8:03:a9:
57:84:92:c9:8b:ae:a6:6c:b9:76:c4:85:8f:28:07:
68:5f:10:55:6f:df:33:6c:90:05:12:30:9c:2c:72:
d6:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:B2:41:37:03:D0:7D:10:F7:F9:F3:85:57:0D:18:68:3D:D4:0C:AE
X509v3 Authority Key Identifier:
keyid:9C:C2:6F:18:CF:96:B8:6A:45:06:B3:B8:4C:CC:44:D3:B3:50:6A:20
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nMJvGM-WuGpFBrO4TMxE07NQaiA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/362958-06dd-4c04-8864-01398942fb5a/1/nMJvGM-WuGpFBrO4TMxE07NQaiA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/362958-06dd-4c04-8864-01398942fb5a/1/nMJvGM-WuGpFBrO4TMxE07NQaiA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4b:f5:13:9a:06:72:8b:30:a2:c4:57:ec:55:af:ea:dd:9c:fb:
44:df:3b:79:5d:5b:e9:f1:19:ac:54:5f:b7:f9:a5:00:36:12:
2d:6e:c3:fa:52:ad:19:8f:ea:c0:99:41:e3:26:a3:5a:7a:01:
81:d7:22:7a:2e:c4:ea:8e:67:bc:49:27:75:ea:c7:3f:65:69:
f8:40:91:f9:1b:b6:76:a9:56:10:1e:f2:ee:9d:18:89:66:9c:
df:a1:05:17:80:cc:58:d0:fd:9e:dc:50:33:5a:3b:9b:eb:c6:
3a:41:e8:dd:ad:ca:66:d2:fa:99:78:24:e0:61:2e:70:bf:6d:
1a:6c:a2:66:a9:eb:86:32:6c:b5:74:fe:9f:c0:0f:b6:5b:49:
c6:67:ae:3d:0f:14:a9:f4:4e:f4:db:3a:75:2d:f8:7a:7b:8d:
78:ce:0b:a1:5e:01:b2:b3:3e:06:e6:3c:35:2f:f1:5e:1e:9f:
9b:b3:3b:7f:d3:67:5e:eb:d8:74:55:c9:9f:bd:bf:af:41:c6:
c8:83:88:8b:2b:86:72:4d:0f:e2:8b:d2:71:93:3e:a8:c6:af:
c6:c1:2f:8e:1a:46:7a:59:f4:90:6d:1b:4b:17:9f:45:57:99:
8c:56:d0:06:0d:b2:01:c8:b2:bf:b2:76:1e:94:44:7c:1b:80:
2c:12:de:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 10 03:54:09 2025 by rpki-client