Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/27/dbc83e-4e42-4038-8157-8f99f9afd7a1/1/nJ_uAycbFcIzokWJ8jZacQ1DUtc.mft
File: nJ_uAycbFcIzokWJ8jZacQ1DUtc.mft (raw, json)
Hash identifier: BKm4CXYCRcK+DKiMOybhjPy9v8jfSdg2YVzmr7GURhQ=
Subject key identifier: D4:BA:DD:64:29:FB:0D:57:46:77:B2:49:B3:E0:6E:B6:30:6D:6F:E3
Authority key identifier: 9C:9F:EE:03:27:1B:15:C2:33:A2:45:89:F2:36:5A:71:0D:43:52:D7
Certificate issuer: /CN=9c9fee03271b15c233a24589f2365a710d4352d7
Certificate serial: 019A7149B7E620149182CD7D9F624D213F5A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nJ_uAycbFcIzokWJ8jZacQ1DUtc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/27/dbc83e-4e42-4038-8157-8f99f9afd7a1/1/nJ_uAycbFcIzokWJ8jZacQ1DUtc.mft
Manifest number: 171C
Signing time: Tue 11 Nov 2025 05:00:47 +0000
Manifest this update: Tue 11 Nov 2025 05:00:47 +0000
Manifest next update: Wed 12 Nov 2025 05:00:47 +0000
Files and hashes: 1: EpEEDO6av2BjZqXM7PJuDNRRddc.roa (hash: goR8NYgMvQvI2XaHVSHQ54m82iix34JIgDUIXRKLU78=)
2: nJ_uAycbFcIzokWJ8jZacQ1DUtc.crl (hash: NYIyenYgE/WLojlc511UzfPu0Jx4Vbq9KJ6bidrXXhw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/27/dbc83e-4e42-4038-8157-8f99f9afd7a1/1/nJ_uAycbFcIzokWJ8jZacQ1DUtc.crl
rsync://rpki.ripe.net/repository/DEFAULT/27/dbc83e-4e42-4038-8157-8f99f9afd7a1/1/nJ_uAycbFcIzokWJ8jZacQ1DUtc.mft
rsync://rpki.ripe.net/repository/DEFAULT/nJ_uAycbFcIzokWJ8jZacQ1DUtc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 05:00:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:49:b7:e6:20:14:91:82:cd:7d:9f:62:4d:21:3f:5a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9c9fee03271b15c233a24589f2365a710d4352d7
Validity
Not Before: Nov 11 05:00:47 2025 GMT
Not After : Nov 12 05:00:47 2025 GMT
Subject: CN=d4badd6429fb0d574677b249b3e06eb6306d6fe3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:e9:19:7d:18:86:49:81:cb:ee:23:cc:c6:e0:
f4:41:83:99:07:f6:cf:24:7b:0e:bb:33:84:b5:dc:
a8:19:54:cb:bd:55:c5:bb:4d:80:fe:19:3a:1d:86:
6b:fe:ff:f4:16:53:0f:b9:c2:0b:3f:38:11:b2:f7:
76:87:d2:61:a3:02:f3:62:09:5b:69:c7:19:30:7d:
3d:c4:82:ac:52:68:0d:26:8b:9e:c3:73:0f:0d:ef:
e1:52:a5:fd:a0:cb:5e:84:31:78:ff:d8:ab:6f:f4:
8d:8d:3e:f5:c5:a1:f0:0d:ec:c5:f5:14:b4:cb:9d:
19:37:f4:77:5c:db:1d:4e:75:c9:ee:87:f8:e4:95:
d1:6f:f9:39:72:d7:3b:ed:49:39:bd:b2:06:1e:c2:
48:a2:6f:3a:fb:bd:f8:08:07:38:66:5a:dc:b4:43:
c1:fb:3a:27:7d:64:8e:8d:e6:61:6a:7c:ea:ab:86:
cb:f5:31:46:44:e8:02:11:15:47:05:e0:26:23:b2:
08:a7:01:08:00:39:e0:89:26:80:a6:09:3b:31:a3:
fe:5c:6e:35:ca:4b:c7:b5:09:7d:9b:7f:e6:93:78:
ec:12:78:b5:c5:39:10:89:56:56:62:1f:44:38:e3:
b4:39:3e:4d:62:a1:1b:97:0b:2f:d2:80:82:8d:5f:
5e:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:BA:DD:64:29:FB:0D:57:46:77:B2:49:B3:E0:6E:B6:30:6D:6F:E3
X509v3 Authority Key Identifier:
keyid:9C:9F:EE:03:27:1B:15:C2:33:A2:45:89:F2:36:5A:71:0D:43:52:D7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nJ_uAycbFcIzokWJ8jZacQ1DUtc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/dbc83e-4e42-4038-8157-8f99f9afd7a1/1/nJ_uAycbFcIzokWJ8jZacQ1DUtc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/27/dbc83e-4e42-4038-8157-8f99f9afd7a1/1/nJ_uAycbFcIzokWJ8jZacQ1DUtc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4a:48:8b:92:a5:f8:00:c1:d0:77:c1:a0:f2:c3:3b:69:6a:5c:
f5:d1:b3:71:c9:c0:d7:00:54:4f:82:17:61:ad:fe:10:00:ff:
36:cb:92:f2:8a:f9:32:f9:b2:ee:e2:2e:cc:3a:a4:1e:49:aa:
d7:63:b9:8e:61:4b:ed:25:e6:47:99:1c:09:e5:d9:1a:29:bb:
61:55:60:74:83:eb:f8:6e:a9:61:83:be:89:3e:ac:a7:fc:ea:
d7:cb:92:1f:4a:e2:77:b0:15:85:a5:78:a5:27:01:4c:79:2d:
15:9e:36:a1:8f:ac:f6:1e:fa:96:55:14:df:ee:8d:99:25:0c:
c8:2b:94:1e:77:f6:e7:00:24:94:78:32:64:5b:2e:34:03:7a:
9a:6e:65:00:b2:9e:7c:99:7f:7f:39:c9:da:b1:fa:d7:f5:e6:
47:77:bf:88:14:63:71:e2:9d:8c:7c:10:4f:a1:4f:54:5d:34:
7a:71:21:e6:7b:4a:8d:da:a3:77:9f:5e:bf:84:64:a5:25:45:
ee:1f:2d:d4:fd:af:00:a7:e4:bc:98:8b:da:39:34:ac:e2:43:
8b:47:58:27:f1:16:4b:5a:62:0e:6c:0f:c5:6c:27:3e:32:f1:
9c:31:02:e7:2b:66:49:c6:bb:e5:47:11:f6:c5:cb:73:89:99:
8a:d9:ed:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 12:39:03 2025 by rpki-client