Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/ea9c59-9e14-4f25-86bd-7eedf4dd6c13/1/nfJK-_7N9qmcKCv1OzBPPB6PRw8.mft
File: nfJK-_7N9qmcKCv1OzBPPB6PRw8.mft (raw, json)
Hash identifier: Nahbb6GJf0l+GQH9Qcia0ulA3IcehHahERy6vN5ACNc=
Subject key identifier: 36:ED:DD:C6:94:09:E7:AE:28:20:F0:66:C9:46:2B:B3:17:4A:A9:49
Authority key identifier: 9D:F2:4A:FB:FE:CD:F6:A9:9C:28:2B:F5:3B:30:4F:3C:1E:8F:47:0F
Certificate issuer: /CN=9df24afbfecdf6a99c282bf53b304f3c1e8f470f
Certificate serial: 019A71EE70E511A7454559D2DDF969F9E96F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nfJK-_7N9qmcKCv1OzBPPB6PRw8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/ea9c59-9e14-4f25-86bd-7eedf4dd6c13/1/nfJK-_7N9qmcKCv1OzBPPB6PRw8.mft
Manifest number: 09CF
Signing time: Tue 11 Nov 2025 08:00:43 +0000
Manifest this update: Tue 11 Nov 2025 08:00:43 +0000
Manifest next update: Wed 12 Nov 2025 08:00:43 +0000
Files and hashes: 1: D6KBZtdhAp7R2Q1YiqESZQ8OeXA.roa (hash: pLl10ejVKSmOKcwrzyb02NjjAckX++6l+yonzmG4CME=)
2: nfJK-_7N9qmcKCv1OzBPPB6PRw8.crl (hash: Pp+vFMrj6OUBJ2IHhdgdZGAktSWthZYqrmTek5QA93Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1c/ea9c59-9e14-4f25-86bd-7eedf4dd6c13/1/nfJK-_7N9qmcKCv1OzBPPB6PRw8.crl
rsync://rpki.ripe.net/repository/DEFAULT/1c/ea9c59-9e14-4f25-86bd-7eedf4dd6c13/1/nfJK-_7N9qmcKCv1OzBPPB6PRw8.mft
rsync://rpki.ripe.net/repository/DEFAULT/nfJK-_7N9qmcKCv1OzBPPB6PRw8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 08:00:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:ee:70:e5:11:a7:45:45:59:d2:dd:f9:69:f9:e9:6f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9df24afbfecdf6a99c282bf53b304f3c1e8f470f
Validity
Not Before: Nov 11 08:00:43 2025 GMT
Not After : Nov 12 08:00:43 2025 GMT
Subject: CN=36edddc69409e7ae2820f066c9462bb3174aa949
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:cb:87:af:ff:8d:78:d6:07:1a:16:fc:0a:c9:
04:09:57:67:15:5c:20:f4:3c:2b:d7:07:a0:44:09:
c9:ae:aa:d8:45:e2:93:b4:f6:c3:6f:ad:8b:21:01:
62:96:fa:aa:b2:36:b2:88:7c:fb:d2:b3:76:07:00:
0d:be:61:43:e9:e7:2a:9f:0c:b3:a2:fb:dc:df:f5:
b0:70:e9:96:26:45:1f:47:f7:00:d7:6f:74:d4:5f:
36:06:b5:34:b8:15:f9:c5:c5:cf:88:17:5c:71:db:
0b:11:5d:c8:5a:03:ba:e4:85:18:4d:5b:bb:46:42:
56:5d:4c:3a:98:5d:9a:74:c0:13:8b:2b:f0:cb:73:
3f:64:72:a7:26:52:e0:ae:0f:b3:73:1e:22:a8:de:
5a:a6:77:1c:46:f5:23:e4:60:cd:8e:a8:e5:76:dc:
98:58:d7:d9:9c:57:70:e0:1e:0e:63:65:95:0d:75:
5e:c7:7d:4d:3b:dd:29:ce:40:7f:15:fc:54:3c:48:
56:c8:a5:4c:d7:c2:44:f8:8e:e4:2d:e8:5e:fd:49:
c8:67:df:f7:9f:fe:b1:8e:6e:92:ad:77:a6:45:3b:
7b:44:de:b8:a7:36:0e:9b:e5:b9:ec:6d:a0:70:b4:
90:36:59:95:67:07:2d:66:cf:19:83:a1:97:8a:52:
8a:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:ED:DD:C6:94:09:E7:AE:28:20:F0:66:C9:46:2B:B3:17:4A:A9:49
X509v3 Authority Key Identifier:
keyid:9D:F2:4A:FB:FE:CD:F6:A9:9C:28:2B:F5:3B:30:4F:3C:1E:8F:47:0F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nfJK-_7N9qmcKCv1OzBPPB6PRw8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/ea9c59-9e14-4f25-86bd-7eedf4dd6c13/1/nfJK-_7N9qmcKCv1OzBPPB6PRw8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/ea9c59-9e14-4f25-86bd-7eedf4dd6c13/1/nfJK-_7N9qmcKCv1OzBPPB6PRw8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
27:a4:f9:1a:fd:71:3f:60:1a:ab:e9:63:7c:50:2c:01:7b:6e:
01:85:d7:c0:c9:f3:22:38:5b:a7:91:ce:2e:ba:49:22:10:f5:
21:eb:fc:b6:f7:39:61:c4:06:65:0a:9c:3d:6f:52:93:0a:94:
17:89:25:9b:4e:67:2f:7d:47:91:e0:1b:6e:67:22:7d:e1:cf:
c1:34:28:3b:06:a0:a7:70:79:95:12:c2:ae:5b:a6:fb:80:63:
c3:dc:0f:2b:3e:27:7e:ba:42:56:52:6a:f0:fb:69:5d:ec:0e:
38:42:24:27:d4:5c:90:03:e3:ec:15:47:83:a0:e7:22:dd:c4:
52:a9:f4:88:76:2a:80:01:15:55:4b:fc:8b:93:ec:44:a4:9a:
49:bf:09:40:97:2d:d0:eb:e1:00:45:dd:71:94:78:3c:52:f5:
38:84:ab:a4:3b:42:e3:1d:67:8e:14:85:ad:23:66:c4:d0:3e:
f9:da:8c:26:13:63:75:58:e1:74:09:12:e2:7d:f0:44:a5:cd:
b8:8e:9c:29:c4:8f:21:04:f0:27:41:fc:04:19:95:db:96:6d:
22:71:17:8d:bf:4f:2b:3a:17:10:9d:70:7b:61:19:e2:57:ee:
41:75:29:ec:ee:ae:44:93:54:8f:b9:84:97:f2:19:bf:38:64:
35:bf:b0:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 15:49:30 2025 by rpki-client