Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7e/40cb9c-c426-48ab-9968-a56bdfadb81e/1/nWuXdMlIdsmDId4yAbEbdaE1jRk.mft
File: nWuXdMlIdsmDId4yAbEbdaE1jRk.mft (raw, json)
Hash identifier: cO+MR9ZFPEeY6KuLniNHrNksxnb5/RYLHzWPfm3bRRc=
Subject key identifier: C1:7E:31:86:D5:E2:A8:55:21:9B:0B:5C:83:19:4B:E3:45:8D:F2:D2
Authority key identifier: 9D:6B:97:74:C9:48:76:C9:83:21:DE:32:01:B1:1B:75:A1:35:8D:19
Certificate issuer: /CN=9d6b9774c94876c98321de3201b11b75a1358d19
Certificate serial: 019A1C198D32BA749A8379CFDCD573CCC344
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nWuXdMlIdsmDId4yAbEbdaE1jRk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7e/40cb9c-c426-48ab-9968-a56bdfadb81e/1/nWuXdMlIdsmDId4yAbEbdaE1jRk.mft
Manifest number: 1222
Signing time: Sat 25 Oct 2025 16:00:27 +0000
Manifest this update: Sat 25 Oct 2025 16:00:27 +0000
Manifest next update: Sun 26 Oct 2025 16:00:27 +0000
Files and hashes: 1: 5yK2af_g5CTlXz9q-R5Ey4S2raY.roa (hash: LxU9aJpGxPnyOcQ82YucJ2+C9wvejuknSWDM/RouRtA=)
2: HXLS-XKu3_p7nhpZ2K8scEyS_rc.roa (hash: 8XJ8ceqUC/FtGHEdtNIo+tnT3APlE19braxx2C56keI=)
3: NQOelXfnh9zNy4F5hN9_tYjE3Bs.roa (hash: qXIyT3lUz5bJt0IF4d25cysT8WLakbijoLlu5EAXUys=)
4: _fuT4R68BHlPpUP6HiVZDSmxINI.roa (hash: bvu+tWo4UXme3jTLsLEJ6SMX9XI3uAoVhAKkTxW9r90=)
5: boOUh_OegScUQI0rJ0GXkth8K70.roa (hash: h8bMxthrp6BSgypE0yBkUmIOsuBuRoBa/El8mfbO7Rs=)
6: dencvyi0TxmMkZDQCX9rZJN2RzU.roa (hash: B52p98p3HEzzhef7/oXAaRqNFYHk2h3tC+DtHUn18nc=)
7: nWuXdMlIdsmDId4yAbEbdaE1jRk.crl (hash: hryZBF2fq/fON8XeV6G4w04hgicTa8eIVFpvtK8o9Xs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7e/40cb9c-c426-48ab-9968-a56bdfadb81e/1/nWuXdMlIdsmDId4yAbEbdaE1jRk.crl
rsync://rpki.ripe.net/repository/DEFAULT/7e/40cb9c-c426-48ab-9968-a56bdfadb81e/1/nWuXdMlIdsmDId4yAbEbdaE1jRk.mft
rsync://rpki.ripe.net/repository/DEFAULT/nWuXdMlIdsmDId4yAbEbdaE1jRk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 26 Oct 2025 16:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:1c:19:8d:32:ba:74:9a:83:79:cf:dc:d5:73:cc:c3:44
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9d6b9774c94876c98321de3201b11b75a1358d19
Validity
Not Before: Oct 25 16:00:27 2025 GMT
Not After : Oct 26 16:00:27 2025 GMT
Subject: CN=c17e3186d5e2a855219b0b5c83194be3458df2d2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:53:0e:23:f2:3f:4e:72:1a:81:af:d1:7f:be:
eb:77:c3:cb:3e:08:cd:e6:06:f6:84:2a:4d:72:0d:
07:aa:c0:65:48:45:8a:33:27:77:fa:99:ff:32:62:
42:9b:da:ce:4f:99:f7:46:63:84:5c:87:3a:d4:38:
0f:51:ca:de:4d:71:77:f1:ce:0a:dc:f9:e4:78:5b:
c9:21:6f:87:71:61:bd:e9:69:a8:63:0e:70:5a:2d:
38:44:eb:de:2e:87:98:9f:e1:b9:03:2d:5b:4b:98:
77:b1:fa:62:d5:fa:cb:ea:a0:66:14:76:45:9c:d4:
00:d7:61:cc:21:3e:52:81:db:e2:bc:c5:c0:29:12:
06:a0:28:61:16:7d:b1:c5:5f:a7:e9:40:32:fe:9c:
0c:c1:f7:00:a2:2d:14:8e:ec:27:34:cf:ce:a8:f2:
48:10:21:87:f9:0d:03:73:bb:79:b3:2d:00:ec:6e:
34:af:dc:75:d0:a4:e4:0a:8d:db:26:3c:af:4f:79:
fa:63:73:1e:a5:03:72:6d:cf:8f:18:00:da:5d:c5:
73:2e:d0:e2:2a:7b:06:3c:92:ff:d5:a1:29:2f:c4:
0d:e1:fa:79:e7:89:52:6a:bb:0f:2d:8c:17:b4:32:
c9:83:65:ff:d8:68:89:73:c6:48:f8:5f:f8:f7:fd:
27:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:7E:31:86:D5:E2:A8:55:21:9B:0B:5C:83:19:4B:E3:45:8D:F2:D2
X509v3 Authority Key Identifier:
keyid:9D:6B:97:74:C9:48:76:C9:83:21:DE:32:01:B1:1B:75:A1:35:8D:19
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nWuXdMlIdsmDId4yAbEbdaE1jRk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/40cb9c-c426-48ab-9968-a56bdfadb81e/1/nWuXdMlIdsmDId4yAbEbdaE1jRk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/40cb9c-c426-48ab-9968-a56bdfadb81e/1/nWuXdMlIdsmDId4yAbEbdaE1jRk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1d:22:7d:f4:b5:c7:dd:ac:fa:91:36:aa:6c:12:1a:7a:f2:ee:
35:5b:1c:ad:21:c1:5e:68:ff:12:20:75:4e:4f:38:fe:d0:f9:
5e:61:6b:88:fc:ed:b7:eb:9d:aa:e7:cd:d4:1d:48:a1:54:d4:
cc:06:45:75:dd:e0:c4:66:0a:0a:9b:04:37:fd:70:af:0b:db:
47:18:29:e6:9f:3b:e5:5c:d9:ec:e6:ca:8d:1e:5f:e2:3a:b0:
fc:65:dd:6a:3f:2b:80:b5:f0:77:30:da:d0:ba:69:06:a7:45:
e0:ab:d0:6c:08:b8:51:40:17:29:c6:0e:33:f9:32:22:5a:78:
11:1b:1d:68:b2:d0:5c:c7:ff:03:d9:72:47:e1:75:4d:87:68:
df:6d:9e:a0:21:9c:78:ea:5d:0f:61:a8:75:a9:dc:fa:6e:d9:
e8:4b:52:dd:cb:3a:3b:30:92:c3:1e:6f:ba:d2:42:6f:51:ff:
7d:66:c1:4c:d6:97:b7:74:97:32:69:88:d0:c7:16:b6:78:c6:
81:5e:ec:d4:0f:ac:c4:29:4f:aa:ce:4f:17:5a:98:85:a7:54:
cd:67:af:c0:f2:16:a3:be:30:02:32:a8:96:8e:d4:5f:b1:50:
63:46:94:3b:c9:a4:0d:7a:62:15:48:3f:db:91:cd:bf:68:98:
c2:be:61:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 25 22:10:11 2025 by rpki-client