Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/83/d04f1b-074c-495e-a431-76b1ae62f072/1/nXXPbGAZ8FnkZeTesgTNJCvUtGU.mft
File: nXXPbGAZ8FnkZeTesgTNJCvUtGU.mft (raw, json)
Hash identifier: xkni1RCXBzu09eAITNSaMrWo+8vezZR57Sw3ZOpidDY=
Subject key identifier: 0E:9D:65:39:6D:CD:50:5E:EA:60:47:F5:77:D4:85:14:33:1F:B6:07
Authority key identifier: 9D:75:CF:6C:60:19:F0:59:E4:65:E4:DE:B2:04:CD:24:2B:D4:B4:65
Certificate issuer: /CN=9d75cf6c6019f059e465e4deb204cd242bd4b465
Certificate serial: 019A2140115C00B1EE708F50A00E4379E7DE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nXXPbGAZ8FnkZeTesgTNJCvUtGU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/83/d04f1b-074c-495e-a431-76b1ae62f072/1/nXXPbGAZ8FnkZeTesgTNJCvUtGU.mft
Manifest number: 1317
Signing time: Sun 26 Oct 2025 16:00:38 +0000
Manifest this update: Sun 26 Oct 2025 16:00:38 +0000
Manifest next update: Mon 27 Oct 2025 16:00:38 +0000
Files and hashes: 1: k3gz5duj9CFhYELeViKRfCBvdLQ.roa (hash: sqXEDoIPEFamPJfQ+MXgutDdyy3EAS9+6SZZLlnP/eE=)
2: nXXPbGAZ8FnkZeTesgTNJCvUtGU.crl (hash: TST8w7Kin3yBSrWJe2qPl/Gu8hslslqhNRIYogPBZNU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/83/d04f1b-074c-495e-a431-76b1ae62f072/1/nXXPbGAZ8FnkZeTesgTNJCvUtGU.crl
rsync://rpki.ripe.net/repository/DEFAULT/83/d04f1b-074c-495e-a431-76b1ae62f072/1/nXXPbGAZ8FnkZeTesgTNJCvUtGU.mft
rsync://rpki.ripe.net/repository/DEFAULT/nXXPbGAZ8FnkZeTesgTNJCvUtGU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 27 Oct 2025 12:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:21:40:11:5c:00:b1:ee:70:8f:50:a0:0e:43:79:e7:de
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9d75cf6c6019f059e465e4deb204cd242bd4b465
Validity
Not Before: Oct 26 16:00:38 2025 GMT
Not After : Oct 27 16:00:38 2025 GMT
Subject: CN=0e9d65396dcd505eea6047f577d48514331fb607
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:20:43:61:8e:6c:ef:3b:42:3e:28:c5:c9:bc:
6a:3b:c0:5d:a7:e0:10:01:9e:b3:61:2a:ad:b4:38:
f3:cf:d7:67:17:f0:4d:70:57:36:ef:82:ad:39:9d:
f1:f7:89:d5:5b:f5:75:a4:c7:12:df:18:bc:9f:9a:
5f:7f:2f:e9:1b:fe:61:35:50:42:b3:4c:2e:ca:b9:
47:6f:a0:8a:7b:9b:ad:d3:e7:02:30:ed:08:8a:11:
80:10:70:77:ff:85:88:ec:ce:f8:31:80:82:a8:6b:
bb:81:d5:a2:9b:60:24:14:19:9b:0a:59:48:b1:bf:
d7:93:0a:3a:32:f9:d3:f2:06:1c:76:90:60:c4:25:
76:3a:b1:f7:d9:42:87:a2:56:3a:5b:43:5c:4b:25:
b1:ad:83:f5:6c:c6:e2:34:d8:20:6b:29:04:8e:fb:
d4:da:a7:f9:13:f2:f1:9b:16:4b:be:a6:f8:73:bd:
92:f9:df:0a:65:0d:d8:a1:8c:38:e7:2c:6c:0f:fd:
9e:46:b7:80:e1:5e:35:fa:38:92:a4:f7:52:19:78:
88:86:9b:cc:0f:11:5d:a4:16:31:c9:69:96:50:b8:
89:68:f3:f9:a3:41:15:3e:d2:a8:4c:3e:4d:29:dd:
ec:61:06:93:98:6b:64:90:00:85:2a:7c:00:b2:51:
d2:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:9D:65:39:6D:CD:50:5E:EA:60:47:F5:77:D4:85:14:33:1F:B6:07
X509v3 Authority Key Identifier:
keyid:9D:75:CF:6C:60:19:F0:59:E4:65:E4:DE:B2:04:CD:24:2B:D4:B4:65
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nXXPbGAZ8FnkZeTesgTNJCvUtGU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/83/d04f1b-074c-495e-a431-76b1ae62f072/1/nXXPbGAZ8FnkZeTesgTNJCvUtGU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/83/d04f1b-074c-495e-a431-76b1ae62f072/1/nXXPbGAZ8FnkZeTesgTNJCvUtGU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
47:ae:34:82:85:08:a3:4b:ff:8a:c7:bb:71:da:6e:48:98:1a:
99:e1:bd:88:4e:58:e9:2f:42:a5:65:bf:0a:21:de:45:57:21:
9e:29:a8:1e:70:2c:11:0d:67:6f:32:06:d5:33:6a:54:fc:fb:
d6:88:7c:1a:e0:fd:5d:ec:c0:7c:36:08:33:5a:61:0c:20:d1:
ec:00:76:c9:5a:31:b7:cc:c8:52:b8:42:d5:4a:de:90:a7:a2:
b2:ba:a4:64:76:55:77:75:68:d9:e5:a1:39:fd:b5:76:49:3d:
ec:f4:75:fd:0e:0b:bf:44:21:d7:3f:e9:33:2d:0e:23:87:4c:
98:4f:ff:b8:2f:8c:87:89:a8:ba:1b:db:aa:a9:c8:8b:e3:a8:
c7:ff:f4:4e:ca:6a:05:6a:6d:8d:b5:8b:8c:18:2e:a3:4d:bb:
a2:ad:f4:83:0a:8c:a6:2d:ee:dd:68:eb:c5:f4:26:00:aa:bd:
6f:8d:0c:54:37:c2:7d:9e:46:71:aa:20:fe:a1:df:14:bd:5f:
52:f8:cf:1b:d2:33:01:1b:84:86:73:32:0d:3e:e2:ba:4a:59:
6b:c4:dc:0c:a1:b7:6c:93:06:80:06:64:94:f3:2f:3c:f2:d0:
fe:d4:46:8b:1e:df:0d:db:7a:ec:7f:43:be:6e:40:ea:07:39:
44:72:14:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 26 20:20:25 2025 by rpki-client