Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/b417f8-0732-48af-b00c-bb797ce7e108/1/nRFf6cnpz97xfpJBZVksAj77KxY.mft
File: nRFf6cnpz97xfpJBZVksAj77KxY.mft (raw, json)
Hash identifier: mti/QnOwf6tMX7zU3aqnO2q6G9yqyoLK66r7PGT/3Bk=
Subject key identifier: 87:0D:12:A0:21:14:E4:29:56:2C:AA:3F:8C:3A:3F:BC:FA:B5:96:D9
Authority key identifier: 9D:11:5F:E9:C9:E9:CF:DE:F1:7E:92:41:65:59:2C:02:3E:FB:2B:16
Certificate issuer: /CN=9d115fe9c9e9cfdef17e924165592c023efb2b16
Certificate serial: 019923A0ABF87E9DF5ACFCB4B427F16C1608
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nRFf6cnpz97xfpJBZVksAj77KxY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/b417f8-0732-48af-b00c-bb797ce7e108/1/nRFf6cnpz97xfpJBZVksAj77KxY.mft
Manifest number: 0A87
Signing time: Sun 07 Sep 2025 10:02:36 +0000
Manifest this update: Sun 07 Sep 2025 10:02:36 +0000
Manifest next update: Mon 08 Sep 2025 10:02:36 +0000
Files and hashes: 1: _bVk5KEYMfzUMgiBziaNKeODYT8.roa (hash: vIMcu46lRDXHK5Ht9fIkqPEvFTQHMwND+OPzypT6tAc=)
2: nRFf6cnpz97xfpJBZVksAj77KxY.crl (hash: a/rdH92z9sUjX/3UZSVhf3bmF752rsOtmeEkUjQZ51M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/45/b417f8-0732-48af-b00c-bb797ce7e108/1/nRFf6cnpz97xfpJBZVksAj77KxY.crl
rsync://rpki.ripe.net/repository/DEFAULT/45/b417f8-0732-48af-b00c-bb797ce7e108/1/nRFf6cnpz97xfpJBZVksAj77KxY.mft
rsync://rpki.ripe.net/repository/DEFAULT/nRFf6cnpz97xfpJBZVksAj77KxY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 05:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:23:a0:ab:f8:7e:9d:f5:ac:fc:b4:b4:27:f1:6c:16:08
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9d115fe9c9e9cfdef17e924165592c023efb2b16
Validity
Not Before: Sep 7 10:02:36 2025 GMT
Not After : Sep 8 10:02:36 2025 GMT
Subject: CN=870d12a02114e429562caa3f8c3a3fbcfab596d9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:d2:16:6f:73:3f:1b:eb:66:05:99:38:ba:94:
6e:e0:c1:2d:50:38:ff:e2:ab:17:cb:e1:9f:be:0e:
13:94:4b:ad:a5:44:0a:86:c0:c1:58:d3:a8:7f:25:
ae:fc:e7:dd:e6:0e:76:15:9c:c4:a2:de:f2:1a:d5:
e9:67:bc:c0:62:eb:88:00:f2:b1:95:c9:da:fd:3d:
90:69:d7:a7:7a:62:7f:e3:ab:b6:2d:cc:85:e0:fa:
b2:f7:f8:27:16:09:76:05:a6:69:67:35:fb:38:3e:
ef:3a:1d:d7:95:87:79:b9:95:26:65:a6:3a:fc:fe:
b4:63:ad:29:ad:96:b0:81:cd:1b:6c:54:06:43:45:
60:a5:eb:f4:6a:cc:be:15:db:db:e1:f6:1a:18:98:
b5:bb:b0:3f:2d:10:d1:9a:6f:22:42:c0:43:7c:76:
a4:93:e3:dc:08:f6:15:23:1e:12:c3:df:ea:ad:24:
ab:29:26:74:fd:9e:63:48:3f:9b:33:c1:09:43:f1:
c3:6e:31:5f:49:c2:89:4e:05:b4:1e:6f:83:74:03:
88:67:10:01:02:77:bc:05:78:d0:ba:a1:a1:78:a3:
6f:28:3f:08:26:0c:d4:63:c5:65:c4:93:1d:87:a9:
20:ea:3d:41:8d:fc:13:3b:18:4a:b0:31:e7:92:08:
fb:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:0D:12:A0:21:14:E4:29:56:2C:AA:3F:8C:3A:3F:BC:FA:B5:96:D9
X509v3 Authority Key Identifier:
keyid:9D:11:5F:E9:C9:E9:CF:DE:F1:7E:92:41:65:59:2C:02:3E:FB:2B:16
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nRFf6cnpz97xfpJBZVksAj77KxY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/b417f8-0732-48af-b00c-bb797ce7e108/1/nRFf6cnpz97xfpJBZVksAj77KxY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/45/b417f8-0732-48af-b00c-bb797ce7e108/1/nRFf6cnpz97xfpJBZVksAj77KxY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
31:c0:90:59:e9:7b:27:e7:59:f2:0f:d1:0f:b9:08:94:7b:cf:
ca:9e:3f:88:96:11:15:92:f8:98:a2:c3:7d:de:40:04:f0:5d:
19:b7:47:40:f3:2b:35:99:be:02:b5:1e:29:1d:4d:3e:97:60:
13:12:b2:3b:c2:bf:06:a6:17:f2:60:1f:f5:fd:f8:82:dd:bb:
49:fc:d4:bc:c2:17:b3:62:f3:c7:fd:de:79:06:c6:a9:3b:36:
94:65:7e:17:d3:9b:cc:ba:1e:ce:df:0b:32:01:85:50:43:3a:
89:d6:7b:95:e4:04:a0:57:9d:08:58:67:ef:99:7c:76:1c:25:
59:ab:b9:ef:05:fb:a5:76:31:60:d6:3a:86:e7:8d:d9:b7:7f:
cd:fb:ae:2f:f8:9d:1e:d0:9b:e0:01:05:98:0e:98:58:dc:c0:
7e:0a:ff:8d:b6:91:d6:1d:14:16:ea:ed:98:18:fb:99:17:ba:
f3:cb:aa:22:13:38:c8:62:db:ad:4c:3a:2f:fd:3b:7a:01:43:
51:0f:8f:96:3a:d0:c6:be:cc:3f:c9:d8:c8:0a:7f:e9:af:33:
aa:c7:96:05:b2:b8:7c:46:ca:90:da:a1:51:d4:95:33:9e:62:
f5:c5:7f:09:f7:07:05:7c:78:fc:f5:86:0e:d7:ee:d7:e3:28:
87:75:fb:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 12:24:59 2025 by rpki-client