Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/83/4f17fa-d5e8-439d-87a2-df32a25c5f2f/1/nM4WAPUHNZYPhtYhzU9fWfh5oOg.mft
File: nM4WAPUHNZYPhtYhzU9fWfh5oOg.mft (raw, json)
Hash identifier: gkiAtmvSWd1OTlsSReyBKIII6iwjUZ3F06Dil6h/EWI=
Subject key identifier: 59:00:52:62:37:46:59:77:F7:5F:59:AD:F8:63:6A:FA:99:34:AE:05
Authority key identifier: 9C:CE:16:00:F5:07:35:96:0F:86:D6:21:CD:4F:5F:59:F8:79:A0:E8
Certificate issuer: /CN=9cce1600f50735960f86d621cd4f5f59f879a0e8
Certificate serial: 0199635AAEE6FD9A4F477BABC91986E54F16
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nM4WAPUHNZYPhtYhzU9fWfh5oOg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/83/4f17fa-d5e8-439d-87a2-df32a25c5f2f/1/nM4WAPUHNZYPhtYhzU9fWfh5oOg.mft
Manifest number: 0296
Signing time: Fri 19 Sep 2025 19:01:51 +0000
Manifest this update: Fri 19 Sep 2025 19:01:51 +0000
Manifest next update: Sat 20 Sep 2025 19:01:51 +0000
Files and hashes: 1: TC7wZtb8eH22VqPATxdM0AYHsBI.roa (hash: WSEkQ29EN6gMplRxrm+JsVbPQFVHYc/Oyz8wGNQAkUY=)
2: nM4WAPUHNZYPhtYhzU9fWfh5oOg.crl (hash: 1dClzNJXFOeE0h+AknAkjmEsN6ebDxxap8HNK8GGb84=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/83/4f17fa-d5e8-439d-87a2-df32a25c5f2f/1/nM4WAPUHNZYPhtYhzU9fWfh5oOg.crl
rsync://rpki.ripe.net/repository/DEFAULT/83/4f17fa-d5e8-439d-87a2-df32a25c5f2f/1/nM4WAPUHNZYPhtYhzU9fWfh5oOg.mft
rsync://rpki.ripe.net/repository/DEFAULT/nM4WAPUHNZYPhtYhzU9fWfh5oOg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 20 Sep 2025 19:01:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:63:5a:ae:e6:fd:9a:4f:47:7b:ab:c9:19:86:e5:4f:16
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9cce1600f50735960f86d621cd4f5f59f879a0e8
Validity
Not Before: Sep 19 19:01:51 2025 GMT
Not After : Sep 20 19:01:51 2025 GMT
Subject: CN=5900526237465977f75f59adf8636afa9934ae05
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:16:8c:f4:bb:12:b4:70:8a:7f:9b:46:70:56:
5c:cc:d8:9d:59:d3:3b:38:01:c3:0d:19:fc:31:bb:
ae:1d:ff:fa:06:92:6d:05:e1:46:7f:1b:84:c8:9f:
f4:26:4a:df:c2:9c:51:76:d5:97:5e:f7:63:45:d5:
f6:4f:db:ba:12:86:ce:b7:df:b7:46:fa:ad:bb:7b:
d0:43:15:98:ff:e0:d2:52:84:74:7d:c8:34:fb:7f:
a6:ae:06:40:07:81:2d:2a:ac:49:4d:87:dd:46:d5:
9b:ff:b2:7c:7c:ca:3c:71:2c:ca:9d:75:a3:ca:69:
af:06:0e:97:b9:37:c1:6e:b1:9d:20:77:44:62:61:
99:86:f6:e2:98:a5:d6:1d:64:27:62:1c:58:3b:7b:
72:ca:d3:a0:7c:c2:60:c8:a9:0a:09:65:f8:fc:bb:
15:16:91:a8:ee:99:86:c1:b9:28:ce:bb:1c:44:71:
b8:28:9b:6c:73:a0:bf:fb:e8:1d:9e:79:8a:b1:48:
f5:27:57:5f:36:44:8e:11:e9:2c:37:db:08:d2:c3:
bd:cd:ef:cd:9b:a7:32:3c:0f:c4:9a:89:23:dd:f6:
0b:ce:64:7d:70:72:b2:6a:91:43:d4:c0:ec:e0:8d:
c4:63:82:57:32:8b:e6:76:4a:25:31:f1:28:de:34:
5a:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:00:52:62:37:46:59:77:F7:5F:59:AD:F8:63:6A:FA:99:34:AE:05
X509v3 Authority Key Identifier:
keyid:9C:CE:16:00:F5:07:35:96:0F:86:D6:21:CD:4F:5F:59:F8:79:A0:E8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nM4WAPUHNZYPhtYhzU9fWfh5oOg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/83/4f17fa-d5e8-439d-87a2-df32a25c5f2f/1/nM4WAPUHNZYPhtYhzU9fWfh5oOg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/83/4f17fa-d5e8-439d-87a2-df32a25c5f2f/1/nM4WAPUHNZYPhtYhzU9fWfh5oOg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
94:5f:eb:f4:30:12:4e:bf:3e:ac:d1:f7:1c:d9:07:32:3c:b3:
b9:1b:8a:7a:c2:1a:54:87:bc:b6:bd:85:15:54:b8:3e:9f:05:
66:a3:6e:66:0b:94:37:71:91:d2:6d:63:da:ad:95:a0:fa:4e:
07:ac:72:3d:7b:b8:8f:d9:6f:9d:c0:8a:63:64:29:f9:de:a6:
72:30:83:4e:5f:ae:14:03:15:71:e4:e3:23:77:d7:7b:53:75:
b6:33:b3:5a:b5:e0:21:20:c1:1d:3e:a9:d3:51:74:c2:1c:ee:
b8:4a:2c:7e:b2:14:fa:6e:07:fe:ea:be:08:c5:33:db:43:2f:
31:4c:6e:80:fc:e1:b6:8e:21:2d:92:e7:a4:bb:17:67:c6:e5:
48:51:9f:f3:cb:e7:ee:bf:3b:bf:f6:f0:87:89:25:a4:f1:01:
b2:bb:7a:51:bb:cb:66:ef:a2:cd:c7:eb:4d:db:74:5f:19:c3:
bb:ba:33:cb:e3:6b:56:fe:e2:4e:96:05:e8:4f:30:e0:94:26:
7d:c0:24:3c:0a:e6:42:ad:7c:91:15:03:ca:62:45:ff:48:85:
97:f2:f4:24:ed:69:86:11:ef:47:a6:22:59:3c:f1:5b:85:af:
e6:64:ae:45:59:8a:f3:1e:98:f8:f6:f5:11:61:3c:dd:a9:7b:
16:e6:6a:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 20 04:09:35 2025 by rpki-client