Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/12/bd9e02-c424-4e14-aab7-39461aaa5be7/1/nUMDoKmZ2BGLvH6WrTjvuxRJbqI.mft
File: nUMDoKmZ2BGLvH6WrTjvuxRJbqI.mft (raw, json)
Hash identifier: 7aeMaPQDwIVWUKYYk00Tx+c55EZmxZwloH/3Ue5dv1w=
Subject key identifier: 96:27:2C:2F:35:A6:41:2F:50:EF:33:83:73:D1:76:59:AD:A3:5D:EF
Authority key identifier: 9D:43:03:A0:A9:99:D8:11:8B:BC:7E:96:AD:38:EF:BB:14:49:6E:A2
Certificate issuer: /CN=9d4303a0a999d8118bbc7e96ad38efbb14496ea2
Certificate serial: 0199221EAB68E580D9A531CD4C25459B3D87
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nUMDoKmZ2BGLvH6WrTjvuxRJbqI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/12/bd9e02-c424-4e14-aab7-39461aaa5be7/1/nUMDoKmZ2BGLvH6WrTjvuxRJbqI.mft
Manifest number: 0805
Signing time: Sun 07 Sep 2025 03:00:59 +0000
Manifest this update: Sun 07 Sep 2025 03:00:59 +0000
Manifest next update: Mon 08 Sep 2025 03:00:59 +0000
Files and hashes: 1: bre9O2wrDggeCO-gClQtVcXHgMs.roa (hash: TZRQyZuvSyRj0lGzf2b/FG9R/6ZAoSht1L/fXzqCZUg=)
2: nUMDoKmZ2BGLvH6WrTjvuxRJbqI.crl (hash: JDx3cFJMSUs81zAdbBfrd6DyDYn6ZfOcuZA2H2JP0l8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/12/bd9e02-c424-4e14-aab7-39461aaa5be7/1/nUMDoKmZ2BGLvH6WrTjvuxRJbqI.crl
rsync://rpki.ripe.net/repository/DEFAULT/12/bd9e02-c424-4e14-aab7-39461aaa5be7/1/nUMDoKmZ2BGLvH6WrTjvuxRJbqI.mft
rsync://rpki.ripe.net/repository/DEFAULT/nUMDoKmZ2BGLvH6WrTjvuxRJbqI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 03:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:22:1e:ab:68:e5:80:d9:a5:31:cd:4c:25:45:9b:3d:87
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9d4303a0a999d8118bbc7e96ad38efbb14496ea2
Validity
Not Before: Sep 7 03:00:59 2025 GMT
Not After : Sep 8 03:00:59 2025 GMT
Subject: CN=96272c2f35a6412f50ef338373d17659ada35def
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:5e:f2:62:2b:60:0d:18:f6:26:22:96:12:4f:
fe:ec:c9:d4:a0:c5:39:a2:b9:db:4f:4b:ae:b2:69:
33:02:e6:c1:d6:f1:d6:2f:c0:98:eb:bd:bb:49:36:
62:10:19:f2:39:03:f8:42:df:f1:6f:21:d4:b3:59:
2a:11:7b:cf:2a:67:ed:3c:8f:39:a4:e2:0d:a1:77:
58:d5:0e:e2:1d:13:05:9e:a9:4e:0f:fb:c7:dc:05:
96:64:95:f5:9e:65:56:cf:b9:92:bb:04:ec:9c:e9:
cc:aa:02:ef:0d:43:d8:87:37:12:96:51:3c:6b:95:
ca:7b:45:a7:e5:2b:33:b2:27:0d:89:cb:ea:67:bd:
98:4b:6d:14:09:a3:a2:87:39:e3:0f:e3:40:b7:98:
c3:98:74:dc:1a:f4:9f:d6:01:ab:78:49:8b:84:76:
29:2b:90:a5:20:f3:fd:2a:60:5f:13:e7:78:c8:75:
a2:29:7d:63:f4:61:88:05:f4:f5:cc:89:a7:f8:61:
6e:41:2c:4c:cd:de:a3:98:70:da:2e:43:27:22:7a:
3e:13:a8:4d:fe:c2:45:6b:92:62:23:ad:e1:81:2c:
02:b7:51:e8:23:cc:a3:b7:70:99:01:1b:30:34:c4:
09:04:82:0a:8d:b2:1d:13:30:8d:5b:f5:c5:42:20:
42:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:27:2C:2F:35:A6:41:2F:50:EF:33:83:73:D1:76:59:AD:A3:5D:EF
X509v3 Authority Key Identifier:
keyid:9D:43:03:A0:A9:99:D8:11:8B:BC:7E:96:AD:38:EF:BB:14:49:6E:A2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nUMDoKmZ2BGLvH6WrTjvuxRJbqI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/bd9e02-c424-4e14-aab7-39461aaa5be7/1/nUMDoKmZ2BGLvH6WrTjvuxRJbqI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/12/bd9e02-c424-4e14-aab7-39461aaa5be7/1/nUMDoKmZ2BGLvH6WrTjvuxRJbqI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7f:1d:20:50:13:04:40:98:6c:c0:9f:38:64:16:4b:3b:d5:c6:
0d:20:e7:93:35:38:8d:41:52:52:50:02:ff:cc:cc:53:44:6b:
f7:08:b8:3b:a1:63:ea:4b:d0:a5:05:a4:c5:7b:06:c3:18:27:
c7:23:b5:44:6e:3b:64:74:be:04:b8:1d:e5:9b:73:dd:e8:dc:
8f:4d:4f:f2:e4:72:09:04:30:6f:5d:f8:f7:4d:52:12:03:6f:
f6:b4:c4:b1:b9:83:43:17:6a:ca:aa:7c:b2:96:a2:b6:11:8c:
f6:a5:a4:13:85:d1:ac:97:b9:b3:2f:00:93:00:fd:ec:3a:d9:
01:74:bb:48:76:b2:1f:0a:3b:e7:b3:b9:2b:c8:d8:c0:11:60:
b6:db:76:ce:0e:77:d8:c6:ed:42:ea:23:01:0b:93:f2:6b:f9:
5b:43:06:cd:cb:e4:3f:b3:a8:25:68:a2:b9:e4:ad:db:51:60:
88:8c:8c:3f:8b:05:a5:a2:08:b4:e7:5e:2b:56:9e:b4:e4:82:
bb:13:1e:26:dd:d2:4d:c4:e1:53:2d:28:2e:f9:e1:84:58:42:
e1:11:5a:c9:59:3b:ad:32:f1:92:6d:c3:10:99:87:19:20:07:
d7:ff:f0:fb:0d:f3:3e:ac:05:a4:f1:ed:3c:c9:b2:61:9d:6d:
8e:97:78:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 12:20:26 2025 by rpki-client