Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6a/579479-7d4d-49c4-83c3-207e9b70c385/1/nBYm1f1UoXollC9v2VyDwOCIF7s.mft
File: nBYm1f1UoXollC9v2VyDwOCIF7s.mft (raw, json)
Hash identifier: cypArTXxvvgH9tDS3knxvv8PJsIWjqB/O6Nd25Rh370=
Subject key identifier: DE:59:50:CB:CF:3D:0E:FC:6F:B7:DC:DF:AE:E3:7A:C2:ED:14:7E:85
Authority key identifier: 9C:16:26:D5:FD:54:A1:7A:25:94:2F:6F:D9:5C:83:C0:E0:88:17:BB
Certificate issuer: /CN=9c1626d5fd54a17a25942f6fd95c83c0e08817bb
Certificate serial: 0199239F81C9C776A98F41DE891B91C139E1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nBYm1f1UoXollC9v2VyDwOCIF7s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6a/579479-7d4d-49c4-83c3-207e9b70c385/1/nBYm1f1UoXollC9v2VyDwOCIF7s.mft
Manifest number: 0D04
Signing time: Sun 07 Sep 2025 10:01:19 +0000
Manifest this update: Sun 07 Sep 2025 10:01:19 +0000
Manifest next update: Mon 08 Sep 2025 10:01:19 +0000
Files and hashes: 1: idcg-tJ_CtGkzqKZfUKrfRvVQ_E.roa (hash: Nye8o2xtEJeY8siYmI8/lYTnzfEn8Ihz4z9R7JBQAZI=)
2: nBYm1f1UoXollC9v2VyDwOCIF7s.crl (hash: MT1ntpf2gwRooTxtTBkLTqzJJ4WzrWyc1uLvkjnYexo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6a/579479-7d4d-49c4-83c3-207e9b70c385/1/nBYm1f1UoXollC9v2VyDwOCIF7s.crl
rsync://rpki.ripe.net/repository/DEFAULT/6a/579479-7d4d-49c4-83c3-207e9b70c385/1/nBYm1f1UoXollC9v2VyDwOCIF7s.mft
rsync://rpki.ripe.net/repository/DEFAULT/nBYm1f1UoXollC9v2VyDwOCIF7s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 05:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:23:9f:81:c9:c7:76:a9:8f:41:de:89:1b:91:c1:39:e1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9c1626d5fd54a17a25942f6fd95c83c0e08817bb
Validity
Not Before: Sep 7 10:01:19 2025 GMT
Not After : Sep 8 10:01:19 2025 GMT
Subject: CN=de5950cbcf3d0efc6fb7dcdfaee37ac2ed147e85
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:e3:36:02:19:67:e5:7d:fa:4e:61:61:38:5c:
a5:87:47:26:9f:66:f2:5e:a8:00:94:f5:ee:65:1d:
8f:7a:81:97:22:35:c4:64:cd:86:99:65:8f:01:73:
9b:0c:a7:b2:21:64:33:e7:70:8a:32:42:6c:b1:1e:
b5:ff:4c:5d:4f:70:4a:f6:78:fc:f8:aa:7d:20:97:
aa:2b:b0:2a:ee:81:7b:3e:12:4e:3f:57:cc:54:59:
b3:c9:a7:49:0f:b1:75:f5:d5:64:36:7f:ce:45:0b:
0e:66:72:eb:5e:46:ec:ce:9a:50:99:40:96:ad:db:
b9:c3:93:d9:d2:1b:0c:95:6d:57:ce:9e:44:27:80:
f7:1b:e3:0d:82:92:5d:c7:ac:6c:bd:b3:3d:04:ec:
23:32:d1:37:cf:00:06:73:b9:d6:d4:34:e5:8a:da:
b5:f6:d4:b9:b0:b0:77:4e:05:d8:fc:a7:3f:9c:98:
e2:20:27:86:a5:d9:fb:70:a9:7a:e3:ca:71:f7:b0:
46:17:e2:9e:8b:3f:2e:f2:6b:28:ce:74:a3:6d:fe:
ab:e4:72:5b:bf:b3:fe:5c:e2:4b:45:0e:60:b6:a5:
c7:6e:32:e6:be:5c:4a:3d:7b:c8:d9:bd:52:04:de:
ff:e7:a9:12:1e:fa:f5:cf:aa:80:3a:ff:7e:58:cf:
74:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:59:50:CB:CF:3D:0E:FC:6F:B7:DC:DF:AE:E3:7A:C2:ED:14:7E:85
X509v3 Authority Key Identifier:
keyid:9C:16:26:D5:FD:54:A1:7A:25:94:2F:6F:D9:5C:83:C0:E0:88:17:BB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nBYm1f1UoXollC9v2VyDwOCIF7s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/579479-7d4d-49c4-83c3-207e9b70c385/1/nBYm1f1UoXollC9v2VyDwOCIF7s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/579479-7d4d-49c4-83c3-207e9b70c385/1/nBYm1f1UoXollC9v2VyDwOCIF7s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8c:9e:93:32:b0:a7:5e:6c:ef:07:21:67:ca:a8:ba:a1:75:ff:
65:60:36:46:bc:d0:4a:8c:5f:b7:7c:0b:22:df:96:da:a9:13:
a4:bc:0d:75:ff:f6:9f:65:5e:d9:54:73:ef:c9:ec:b0:8c:62:
13:6e:bf:ab:dd:d1:6f:77:cc:97:f0:d0:e2:68:a5:09:7d:21:
fe:70:15:6b:bf:3a:63:18:d7:dc:77:c2:76:7f:b1:90:23:cc:
db:0c:8d:ac:6b:ac:29:67:60:83:6d:e2:d6:ef:7b:d0:09:7e:
47:0a:16:6d:88:ea:24:fa:85:ac:85:0e:cd:86:ec:78:af:d0:
b9:46:18:8b:a8:da:d9:79:fb:f3:3f:35:ec:69:25:35:55:37:
9a:31:c2:7a:66:38:f7:d0:a9:4f:24:20:d6:66:a2:06:3b:b3:
f1:30:4a:32:81:25:00:de:4a:67:19:0e:a8:21:03:0f:e9:3e:
a7:8a:57:2f:29:bb:a9:34:ee:fe:9e:55:47:c5:a9:66:ef:8e:
da:e5:8a:0d:6b:cb:17:b0:0f:dd:a4:e9:08:b5:3c:18:16:18:
fa:a3:20:21:68:d6:bd:3b:d6:9f:ff:dd:89:74:d1:5c:19:ed:
0a:df:41:82:fc:e1:40:a0:41:4c:bd:ac:61:97:c4:7a:85:4b:
04:52:0b:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 12:21:37 2025 by rpki-client