Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/eaa4d0-8d1d-4cc1-8b22-450395fb88fa/1/nJKqU9MpCqgDeZNTNdufzD_9Kao.mft
File: nJKqU9MpCqgDeZNTNdufzD_9Kao.mft (raw, json)
Hash identifier: Zt92sK/PMQVBwNvUf45mEmIpBA+R/DC++I7yScW6ZVg=
Subject key identifier: E3:82:0F:DB:C5:70:AD:DD:81:15:75:4A:B6:C5:36:23:00:E0:B9:F3
Authority key identifier: 9C:92:AA:53:D3:29:0A:A8:03:79:93:53:35:DB:9F:CC:3F:FD:29:AA
Certificate issuer: /CN=9c92aa53d3290aa80379935335db9fcc3ffd29aa
Certificate serial: 019A71B83FF55E910CE4711CEE657108455B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nJKqU9MpCqgDeZNTNdufzD_9Kao.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/eaa4d0-8d1d-4cc1-8b22-450395fb88fa/1/nJKqU9MpCqgDeZNTNdufzD_9Kao.mft
Manifest number: 0407
Signing time: Tue 11 Nov 2025 07:01:31 +0000
Manifest this update: Tue 11 Nov 2025 07:01:31 +0000
Manifest next update: Wed 12 Nov 2025 07:01:31 +0000
Files and hashes: 1: If4EKlwd9K1sFMswbVmwiqIL9EU.roa (hash: Xi+2lm3juwWtv3l4CgI611xVpcAT1z+T6D2yne87CLU=)
2: nJKqU9MpCqgDeZNTNdufzD_9Kao.crl (hash: 57J/sThaX44dSp+YkEkqbESZbhEhTgjYuXmkBEcN8gQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4c/eaa4d0-8d1d-4cc1-8b22-450395fb88fa/1/nJKqU9MpCqgDeZNTNdufzD_9Kao.crl
rsync://rpki.ripe.net/repository/DEFAULT/4c/eaa4d0-8d1d-4cc1-8b22-450395fb88fa/1/nJKqU9MpCqgDeZNTNdufzD_9Kao.mft
rsync://rpki.ripe.net/repository/DEFAULT/nJKqU9MpCqgDeZNTNdufzD_9Kao.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 07:01:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:b8:3f:f5:5e:91:0c:e4:71:1c:ee:65:71:08:45:5b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9c92aa53d3290aa80379935335db9fcc3ffd29aa
Validity
Not Before: Nov 11 07:01:31 2025 GMT
Not After : Nov 12 07:01:31 2025 GMT
Subject: CN=e3820fdbc570addd8115754ab6c5362300e0b9f3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:3b:f0:00:dd:40:ae:e2:02:d7:a1:27:00:69:
52:6d:38:5d:68:76:1c:bd:d4:51:77:17:de:3e:16:
f0:ac:29:30:a3:71:5f:99:15:7c:2e:21:5b:16:d6:
8b:54:db:27:70:be:7f:77:32:c9:6a:9b:2d:b9:20:
aa:a1:8e:31:75:5c:64:1f:1f:c2:4c:aa:c5:3a:e8:
46:0f:d8:ae:b8:37:4e:a8:75:1e:a5:de:35:97:b8:
07:c4:1e:3d:11:05:9f:a2:ab:72:ee:70:43:1b:ca:
f7:8c:ad:42:88:b5:d5:34:97:09:4e:ea:be:cd:fa:
38:fe:04:8c:e7:7c:e3:51:c1:25:59:41:84:48:4d:
9c:ba:b1:7c:5e:b8:f1:0d:63:9f:4b:73:c6:a3:cf:
95:3d:81:47:e8:20:b0:35:2e:0b:09:45:87:2a:b4:
9d:fd:02:c5:e1:58:ad:15:8e:12:76:61:58:d2:b7:
3d:21:83:e9:29:64:8a:bf:1e:97:93:a2:bf:1f:17:
4c:6f:2a:a0:a4:fe:a4:24:88:40:0e:67:31:e2:4a:
eb:54:87:83:21:b0:0a:ce:e5:b7:a9:b2:ee:5b:7a:
b2:43:50:12:22:0c:cf:2d:14:03:77:e8:72:20:85:
b4:49:17:63:4e:34:2c:f8:37:5e:26:c7:b2:96:69:
67:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:82:0F:DB:C5:70:AD:DD:81:15:75:4A:B6:C5:36:23:00:E0:B9:F3
X509v3 Authority Key Identifier:
keyid:9C:92:AA:53:D3:29:0A:A8:03:79:93:53:35:DB:9F:CC:3F:FD:29:AA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nJKqU9MpCqgDeZNTNdufzD_9Kao.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/eaa4d0-8d1d-4cc1-8b22-450395fb88fa/1/nJKqU9MpCqgDeZNTNdufzD_9Kao.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/eaa4d0-8d1d-4cc1-8b22-450395fb88fa/1/nJKqU9MpCqgDeZNTNdufzD_9Kao.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
37:e5:ff:43:8c:05:bf:87:8d:04:52:63:19:a7:61:02:f9:72:
ec:ee:8b:3d:3c:fa:2a:1a:49:55:8f:66:81:25:e5:13:16:73:
20:11:84:f4:5b:d1:af:d4:3e:7d:1e:ef:9c:94:91:15:eb:a6:
21:a1:b4:c1:fd:fd:ec:ea:1e:15:dc:2b:68:0a:d7:3b:02:73:
8a:17:f0:98:a9:7a:48:f8:b1:ca:db:3e:0a:a0:09:28:b8:d7:
17:58:91:85:81:fb:81:15:3e:22:b9:78:a4:3f:69:29:1d:69:
18:41:fb:3a:20:c9:b9:61:9d:d1:f8:f3:64:e8:37:fc:18:f4:
07:f1:5e:9e:ef:6e:19:82:99:b4:91:b2:a0:55:46:ce:61:eb:
a3:cf:3c:4c:f4:6e:fa:f0:f4:e5:4e:6a:d5:4f:c7:fe:e4:58:
66:c2:a0:b9:ec:9b:a5:a8:db:a6:70:ea:bd:ed:0e:53:69:70:
05:81:ae:3b:20:db:d3:51:2a:56:fa:85:cf:12:00:5e:79:2e:
3b:97:37:e6:72:79:62:dc:70:3e:be:ff:97:a5:45:dd:a8:7e:
0c:41:5e:e3:f7:dc:0a:ec:cd:2c:58:73:97:7a:3a:29:53:fd:
8a:a5:a7:0b:a5:86:c2:64:16:e5:08:8f:bd:e8:58:0c:17:46:
76:76:3c:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 14:18:30 2025 by rpki-client