Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/52/8d666d-06ab-44d2-a6a5-af635d875575/1/nM9T8eCub18z28-A6ox0H2gkhf4.mft
File: nM9T8eCub18z28-A6ox0H2gkhf4.mft (raw, json)
Hash identifier: Fbg2xzs9Ie23g+hwKBNGT+4JnQf+qnd9gX1flrlOQ2U=
Subject key identifier: C2:7F:3F:07:9C:10:6F:1A:C3:AF:A6:C7:80:00:64:54:BE:C9:A1:39
Authority key identifier: 9C:CF:53:F1:E0:AE:6F:5F:33:DB:CF:80:EA:8C:74:1F:68:24:85:FE
Certificate issuer: /CN=9ccf53f1e0ae6f5f33dbcf80ea8c741f682485fe
Certificate serial: 019A33464D5DC855C2FA8DA04063952A0AD0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nM9T8eCub18z28-A6ox0H2gkhf4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/52/8d666d-06ab-44d2-a6a5-af635d875575/1/nM9T8eCub18z28-A6ox0H2gkhf4.mft
Manifest number: 06BA
Signing time: Thu 30 Oct 2025 04:00:36 +0000
Manifest this update: Thu 30 Oct 2025 04:00:36 +0000
Manifest next update: Fri 31 Oct 2025 04:00:36 +0000
Files and hashes: 1: nM9T8eCub18z28-A6ox0H2gkhf4.crl (hash: 88MuXLd6mIb78GGvqs3lSO81k+9Bw2wIxm/QKTAkB7c=)
2: ypZztjZlxetD-72tfNr-C4vUMMo.roa (hash: KOjPZ5JmKNPLP4XD3KiiaO/OQDRjqwb/lVaqB3ewFWk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/52/8d666d-06ab-44d2-a6a5-af635d875575/1/nM9T8eCub18z28-A6ox0H2gkhf4.crl
rsync://rpki.ripe.net/repository/DEFAULT/52/8d666d-06ab-44d2-a6a5-af635d875575/1/nM9T8eCub18z28-A6ox0H2gkhf4.mft
rsync://rpki.ripe.net/repository/DEFAULT/nM9T8eCub18z28-A6ox0H2gkhf4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 31 Oct 2025 01:21:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:33:46:4d:5d:c8:55:c2:fa:8d:a0:40:63:95:2a:0a:d0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9ccf53f1e0ae6f5f33dbcf80ea8c741f682485fe
Validity
Not Before: Oct 30 04:00:36 2025 GMT
Not After : Oct 31 04:00:36 2025 GMT
Subject: CN=c27f3f079c106f1ac3afa6c780006454bec9a139
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:e1:a0:c6:c7:41:9b:37:7a:ee:93:22:0f:fe:
52:00:a4:13:f3:63:c8:4e:1f:f5:f0:5e:32:d9:2f:
bd:af:5f:7f:01:92:62:57:73:c5:8a:85:9e:f1:01:
c9:69:70:5c:32:da:e1:af:c6:75:b6:2b:cc:b5:34:
16:5e:23:b1:f8:7f:63:48:0a:18:ee:e6:8b:47:59:
d9:5b:a1:76:34:69:75:53:a2:9d:e9:44:7f:68:68:
82:72:ac:ae:ca:2f:71:b2:76:4e:b1:44:9e:1e:24:
00:a3:29:79:3b:e9:9c:7f:84:ce:aa:e7:07:d7:b5:
fa:5d:04:79:56:53:bf:01:e6:58:61:3f:bf:8a:9b:
59:f4:ff:da:02:f5:66:ec:63:d1:ce:f8:de:29:50:
2d:44:54:66:65:10:a8:ad:44:5d:8a:03:43:9a:c8:
ab:f3:3a:15:5d:a4:7c:3c:81:0e:fc:07:ef:79:37:
fa:e0:82:52:1e:de:76:64:45:25:ad:32:c9:83:8d:
89:4f:be:c9:35:66:68:84:2b:18:ff:f8:b8:05:41:
e9:be:55:21:62:b1:19:d8:0e:af:44:96:5f:5d:c9:
0e:53:a7:83:47:7d:f7:f8:80:92:69:91:cd:78:21:
db:30:4b:0f:8a:08:ac:cc:fb:23:d4:03:13:a8:f2:
9f:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:7F:3F:07:9C:10:6F:1A:C3:AF:A6:C7:80:00:64:54:BE:C9:A1:39
X509v3 Authority Key Identifier:
keyid:9C:CF:53:F1:E0:AE:6F:5F:33:DB:CF:80:EA:8C:74:1F:68:24:85:FE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nM9T8eCub18z28-A6ox0H2gkhf4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/8d666d-06ab-44d2-a6a5-af635d875575/1/nM9T8eCub18z28-A6ox0H2gkhf4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/52/8d666d-06ab-44d2-a6a5-af635d875575/1/nM9T8eCub18z28-A6ox0H2gkhf4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
d2:d1:26:5e:77:55:31:dd:f6:36:8f:0f:a3:ff:7b:c9:74:36:
42:20:19:60:3f:e5:96:ca:12:09:6f:0f:61:85:f6:47:4e:e1:
e1:7c:bb:8c:44:8d:3e:c8:af:e1:49:6e:7c:c9:b7:66:d0:a5:
60:73:5c:bf:c0:b5:82:12:26:76:b5:89:57:cb:55:b2:35:6b:
b5:0e:67:5d:c1:70:b0:8d:9d:13:a6:cb:8e:a8:1b:ce:21:d6:
6b:4e:be:e3:e2:0b:19:80:33:20:09:81:e1:93:59:93:34:72:
9a:71:c7:9a:53:f9:72:6e:6a:48:57:84:ea:4e:a3:60:53:61:
e3:b1:6f:df:7b:cc:71:2f:2f:dc:36:06:c1:fc:a6:65:79:ac:
0e:40:1b:9c:35:fc:ee:b6:1e:42:07:ca:64:0c:d4:ac:ac:1c:
ab:b2:90:ee:01:b2:b5:d1:f7:62:10:a8:24:59:62:a2:5a:94:
fc:b6:41:f4:91:ae:de:ef:e3:70:49:5c:b9:78:2a:80:c4:48:
e7:51:41:9c:6b:52:42:4f:ae:c7:05:b3:6b:69:b8:45:3f:19:
6a:7f:9b:8c:99:98:47:01:9f:1e:10:62:3a:34:f0:d7:87:a1:
e3:ed:a9:e6:89:c7:09:05:9e:08:0f:d8:0c:fa:e6:5b:c1:e6:
96:32:5b:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 30 05:52:34 2025 by rpki-client