
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/5dd7b1-e337-404d-b764-ddb0b148e46b/1/nLls5ZxZVXUw8OqkTGZFA9nEAe0.mft
File: nLls5ZxZVXUw8OqkTGZFA9nEAe0.mft (raw, json)
Hash identifier: 9NVOYJRr/04+FYoTJZzcl8Wde3GvOS3VzLIeP/B/oWM=
Subject key identifier: 52:03:4E:37:D5:99:6D:7E:E2:CC:BD:A0:95:0E:79:47:08:4C:9A:2C
Authority key identifier: 9C:B9:6C:E5:9C:59:55:75:30:F0:EA:A4:4C:66:45:03:D9:C4:01:ED
Certificate issuer: /CN=9cb96ce59c59557530f0eaa44c664503d9c401ed
Certificate serial: 0199183F916F752D78894D8A1851A1CCAC37
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nLls5ZxZVXUw8OqkTGZFA9nEAe0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/19/5dd7b1-e337-404d-b764-ddb0b148e46b/1/nLls5ZxZVXUw8OqkTGZFA9nEAe0.mft
Manifest number: 093A
Signing time: Fri 05 Sep 2025 05:00:43 +0000
Manifest this update: Fri 05 Sep 2025 05:00:43 +0000
Manifest next update: Sat 06 Sep 2025 05:00:43 +0000
Files and hashes: 1: 19v0BW9D62wRoBFE5ozFJdwOMQA.roa (hash: YMLiN+GeZBDn6zKwSH23wr8pzSjB9vWlcqgXSCgH65E=)
2: 9JwtlsVNx4_up1QMmZlfBeyOaK4.roa (hash: u78W1NzQkBkN4wGgOZ6ykgdqITqsuyTPVjwEYRW9o4E=)
3: HvZFP08B7xYA2IQmujw7UzbkG0Q.roa (hash: 7DGwHO9AiazjzBsJl92PU2yw56tPjljLpvn/rYKQLdM=)
4: nLls5ZxZVXUw8OqkTGZFA9nEAe0.crl (hash: nmDj4F/EaywtMP2UHNV+AwiZssW7T3silSnQ/RaZ/2M=)
5: oR-FUhbEvQx9rEQNZ_WugrEWdnk.roa (hash: BD8t2aBzJsutTWI6CA4SIZqGlJUGz2L2fZecOB/8228=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/19/5dd7b1-e337-404d-b764-ddb0b148e46b/1/nLls5ZxZVXUw8OqkTGZFA9nEAe0.crl
rsync://rpki.ripe.net/repository/DEFAULT/19/5dd7b1-e337-404d-b764-ddb0b148e46b/1/nLls5ZxZVXUw8OqkTGZFA9nEAe0.mft
rsync://rpki.ripe.net/repository/DEFAULT/nLls5ZxZVXUw8OqkTGZFA9nEAe0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 06 Sep 2025 01:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:18:3f:91:6f:75:2d:78:89:4d:8a:18:51:a1:cc:ac:37
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9cb96ce59c59557530f0eaa44c664503d9c401ed
Validity
Not Before: Sep 5 05:00:43 2025 GMT
Not After : Sep 6 05:00:43 2025 GMT
Subject: CN=52034e37d5996d7ee2ccbda0950e7947084c9a2c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:52:36:21:0f:54:5c:59:c2:7e:75:28:c2:aa:
a8:85:84:3c:29:d5:ac:a1:98:97:12:cd:42:3e:bf:
4f:f0:4d:bd:22:fe:8b:07:12:8e:83:06:8c:bc:f0:
30:70:49:57:74:6a:3d:d5:c6:46:b9:8c:4c:e2:a4:
5a:3a:4f:c8:6f:3e:c3:25:fc:bd:bb:78:07:ac:b4:
48:9f:39:74:50:f3:d7:4a:30:2b:d4:05:52:a2:bb:
43:10:e0:da:12:13:3d:96:93:4f:f6:ff:11:c7:ff:
ac:6e:b6:6d:57:6e:73:d9:62:2b:6d:b9:11:d8:2b:
06:ac:be:5b:b6:be:58:fe:83:4f:ad:11:7b:b9:0b:
50:0b:75:83:1f:fd:73:4c:89:e7:9a:a1:fc:40:1b:
8f:95:d6:da:1e:1d:59:b9:f7:67:a3:05:9a:aa:bc:
ae:af:f4:c1:7c:fc:61:55:35:3b:ab:ce:0b:79:57:
73:de:ce:1e:9f:2a:a7:32:02:00:db:41:c9:b1:2c:
57:19:96:c0:08:de:67:79:95:0b:3f:56:9c:d6:b6:
d3:57:bb:68:cf:e5:1b:ea:06:25:83:03:31:6f:d2:
72:d1:90:a3:19:64:68:24:79:98:83:13:87:f8:0b:
15:f3:10:f7:fa:3a:d6:a7:52:90:92:31:48:01:df:
15:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:03:4E:37:D5:99:6D:7E:E2:CC:BD:A0:95:0E:79:47:08:4C:9A:2C
X509v3 Authority Key Identifier:
keyid:9C:B9:6C:E5:9C:59:55:75:30:F0:EA:A4:4C:66:45:03:D9:C4:01:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nLls5ZxZVXUw8OqkTGZFA9nEAe0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/5dd7b1-e337-404d-b764-ddb0b148e46b/1/nLls5ZxZVXUw8OqkTGZFA9nEAe0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/19/5dd7b1-e337-404d-b764-ddb0b148e46b/1/nLls5ZxZVXUw8OqkTGZFA9nEAe0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a3:9d:f5:d5:3d:1c:14:51:d5:52:28:94:a1:b0:29:ba:60:48:
6f:40:46:ff:0b:fc:92:8d:f7:3e:75:b2:27:e2:33:92:da:2d:
0d:3c:27:9f:23:c5:8b:00:8f:12:d0:94:ca:69:fa:83:ab:f2:
4d:10:fb:92:97:cb:31:60:5b:f6:7f:da:de:12:0c:6f:08:e4:
be:b6:41:95:cd:19:4d:ef:e2:a6:5d:9a:f4:85:04:6f:b5:c8:
0f:56:a6:af:7a:b5:18:8f:d1:1e:3a:cd:dd:b7:6a:46:e5:b4:
cc:64:27:db:cd:5b:e7:67:fd:d8:82:3f:d5:13:b4:58:56:17:
2b:c1:67:79:5a:de:cf:c0:ac:2e:52:27:39:92:a4:5c:46:5e:
7a:4d:58:02:fb:97:68:a7:8c:90:f1:21:26:0c:9f:8d:dc:e2:
f9:ef:b5:ac:e9:9a:32:6b:50:31:d6:17:2d:c0:70:4a:18:71:
b4:64:96:09:d4:72:86:14:f8:ca:41:52:b8:2d:11:b6:ae:0c:
e7:bb:3c:de:fa:87:6f:08:48:6b:ce:c3:c9:44:65:b9:dd:7e:
ef:a5:20:fa:b7:d3:42:c0:c4:c7:60:a0:d9:65:61:a5:a5:d1:
96:de:94:ba:97:d1:4e:f1:6a:11:97:bf:95:42:1a:75:40:5d:
02:e4:7f:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 5 11:27:42 2025 by rpki-client