Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/83/79a605-6072-4142-856e-d8e1835693cd/1/nrKJ89nhO-Z6JEtyvSSUWywyCmM.mft
File: nrKJ89nhO-Z6JEtyvSSUWywyCmM.mft (raw, json)
Hash identifier: CT3kxdzKJB6c2RcFIrmzigXqb4yzopxEaiGvMlA2q4c=
Subject key identifier: B9:6A:4C:77:B9:06:4C:28:CA:0F:CE:86:35:0A:60:A8:40:63:F7:80
Authority key identifier: 9E:B2:89:F3:D9:E1:3B:E6:7A:24:4B:72:BD:24:94:5B:2C:32:0A:63
Certificate issuer: /CN=9eb289f3d9e13be67a244b72bd24945b2c320a63
Certificate serial: 019923315C6EB3A8C69DD5B5FFB363EDD18A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nrKJ89nhO-Z6JEtyvSSUWywyCmM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/83/79a605-6072-4142-856e-d8e1835693cd/1/nrKJ89nhO-Z6JEtyvSSUWywyCmM.mft
Manifest number: 104E
Signing time: Sun 07 Sep 2025 08:01:01 +0000
Manifest this update: Sun 07 Sep 2025 08:01:01 +0000
Manifest next update: Mon 08 Sep 2025 08:01:01 +0000
Files and hashes: 1: ftSo4Eg6cJOGHafsmdK7G5PlnAg.roa (hash: 6neyZwVBnZqx4smqdcitrT/v+77yfwQ7GJ0kV3y5qqs=)
2: nrKJ89nhO-Z6JEtyvSSUWywyCmM.crl (hash: MBMvWF+4QaTePGQSjroYOCPkJJ4xBKErQUI5dZZduFo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/83/79a605-6072-4142-856e-d8e1835693cd/1/nrKJ89nhO-Z6JEtyvSSUWywyCmM.crl
rsync://rpki.ripe.net/repository/DEFAULT/83/79a605-6072-4142-856e-d8e1835693cd/1/nrKJ89nhO-Z6JEtyvSSUWywyCmM.mft
rsync://rpki.ripe.net/repository/DEFAULT/nrKJ89nhO-Z6JEtyvSSUWywyCmM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 05:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:23:31:5c:6e:b3:a8:c6:9d:d5:b5:ff:b3:63:ed:d1:8a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9eb289f3d9e13be67a244b72bd24945b2c320a63
Validity
Not Before: Sep 7 08:01:01 2025 GMT
Not After : Sep 8 08:01:01 2025 GMT
Subject: CN=b96a4c77b9064c28ca0fce86350a60a84063f780
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:b8:3f:65:ec:4a:d3:80:d4:d4:10:c6:b5:8b:
19:d7:a5:8b:5a:db:fd:ab:d7:51:12:35:b5:b1:eb:
dc:59:4b:d3:76:6a:46:f3:31:b3:b3:dd:11:28:39:
5c:94:6c:5c:14:83:d7:39:d3:48:d9:b6:7d:81:5d:
b1:65:a5:c7:9c:df:98:29:92:4e:ca:76:b4:87:6e:
d3:06:0d:ca:01:67:af:02:90:b7:75:98:45:71:01:
f1:2a:13:84:0d:a8:33:96:ba:1f:a9:a4:72:b8:c2:
f3:97:b3:23:34:61:d9:7d:65:6e:5b:01:ca:90:74:
6e:39:6f:34:b6:ae:cd:10:09:f7:b0:c6:d5:41:59:
43:26:80:44:2b:ca:34:1c:49:2a:93:f0:dc:81:6b:
8e:40:ed:82:e0:11:88:7e:1c:06:6b:7a:f6:7d:f9:
02:e2:6c:28:05:7f:0b:fa:37:05:2f:4e:0e:2c:61:
e1:f6:52:ac:ab:32:70:72:aa:4c:84:36:8c:39:01:
fd:f8:fa:66:26:da:39:6e:0a:3a:0e:cd:ef:ab:a8:
6f:bb:3f:86:aa:28:54:e3:bf:15:1d:67:f3:b3:93:
af:7c:0a:60:43:43:72:04:f7:d6:93:d8:b1:a5:1f:
e7:eb:d9:7f:9c:85:b7:64:57:6e:ce:e5:fe:c3:4f:
c9:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:6A:4C:77:B9:06:4C:28:CA:0F:CE:86:35:0A:60:A8:40:63:F7:80
X509v3 Authority Key Identifier:
keyid:9E:B2:89:F3:D9:E1:3B:E6:7A:24:4B:72:BD:24:94:5B:2C:32:0A:63
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nrKJ89nhO-Z6JEtyvSSUWywyCmM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/83/79a605-6072-4142-856e-d8e1835693cd/1/nrKJ89nhO-Z6JEtyvSSUWywyCmM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/83/79a605-6072-4142-856e-d8e1835693cd/1/nrKJ89nhO-Z6JEtyvSSUWywyCmM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3b:51:bd:22:e5:89:7b:94:37:82:09:22:73:3d:ef:40:9e:82:
f8:c5:ba:8c:83:26:10:11:b5:c3:b8:5a:27:fc:62:d0:0a:5b:
06:8f:26:71:0c:50:04:26:d0:b6:cd:1d:41:d5:60:80:79:d2:
e1:02:6f:98:34:2d:33:1a:d8:40:de:ce:e3:59:04:a1:fb:cb:
51:bb:93:66:52:fc:9c:d0:70:6b:48:5b:e8:58:f6:e8:91:58:
80:78:92:50:e7:22:2d:2b:31:de:ac:8a:4d:b2:a3:bb:7f:29:
4b:c2:c7:52:d7:d6:64:63:87:b5:26:b0:1e:9c:51:3f:52:13:
c7:7e:f4:90:d4:ba:0b:68:9c:3d:5b:b2:00:ce:67:7d:bc:4d:
49:7e:6d:26:27:9b:fd:56:53:25:9d:58:db:d1:27:5c:f7:99:
ff:8b:68:46:f0:58:4f:c4:b8:d4:02:96:ec:c0:da:d0:7a:22:
f3:42:4c:37:c3:1b:86:bf:67:89:d8:51:5a:57:72:42:f8:8f:
36:1c:50:66:75:e8:27:95:32:93:f9:20:71:7e:68:69:4d:a9:
b9:78:65:ac:6f:8c:71:32:c9:08:d0:4b:5b:5c:26:d8:18:d2:
9d:13:40:a7:38:50:e1:ed:1a:50:e0:bb:13:cb:13:b7:f1:cb:
97:72:0d:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 12:31:05 2025 by rpki-client