Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/90/304c76-9960-4979-860c-89a68e5a2110/1/nYnnxT6SR534EXHrqvI2CgN8Mkg.mft
File: nYnnxT6SR534EXHrqvI2CgN8Mkg.mft (raw, json)
Hash identifier: +6fXp6+G6+Plm01gH4THI0Ovc0jMotlvKXFWbPY5LB0=
Subject key identifier: 05:1B:8E:8E:7A:5D:9A:FC:C1:33:53:33:78:A8:ED:4D:6E:AE:A0:40
Authority key identifier: 9D:89:E7:C5:3E:92:47:9D:F8:11:71:EB:AA:F2:36:0A:03:7C:32:48
Certificate issuer: /CN=9d89e7c53e92479df81171ebaaf2360a037c3248
Certificate serial: 019A228AE33754CC8CE6C9E4C3161870AEF3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nYnnxT6SR534EXHrqvI2CgN8Mkg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/90/304c76-9960-4979-860c-89a68e5a2110/1/nYnnxT6SR534EXHrqvI2CgN8Mkg.mft
Manifest number: 0FA4
Signing time: Sun 26 Oct 2025 22:01:58 +0000
Manifest this update: Sun 26 Oct 2025 22:01:58 +0000
Manifest next update: Mon 27 Oct 2025 22:01:58 +0000
Files and hashes: 1: VuAVCD-mhoc5i9vtP0A_gPbk1w8.roa (hash: js4ojfLf5VJc1gb3AG5cMspDXL3JZYEKqGj/N4sAQU8=)
2: nYnnxT6SR534EXHrqvI2CgN8Mkg.crl (hash: KyZUIjnyzy8FHgtbDjvO+sDp4nYbY1nSD5Jt8g/maT0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/90/304c76-9960-4979-860c-89a68e5a2110/1/nYnnxT6SR534EXHrqvI2CgN8Mkg.crl
rsync://rpki.ripe.net/repository/DEFAULT/90/304c76-9960-4979-860c-89a68e5a2110/1/nYnnxT6SR534EXHrqvI2CgN8Mkg.mft
rsync://rpki.ripe.net/repository/DEFAULT/nYnnxT6SR534EXHrqvI2CgN8Mkg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 27 Oct 2025 19:48:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:22:8a:e3:37:54:cc:8c:e6:c9:e4:c3:16:18:70:ae:f3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9d89e7c53e92479df81171ebaaf2360a037c3248
Validity
Not Before: Oct 26 22:01:58 2025 GMT
Not After : Oct 27 22:01:58 2025 GMT
Subject: CN=051b8e8e7a5d9afcc133533378a8ed4d6eaea040
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:93:df:c6:ca:a4:fa:7e:96:cd:78:b4:b7:b7:
a3:2b:69:f2:05:7e:ae:7b:62:be:ef:64:aa:a7:4c:
f2:56:4d:8b:99:4e:14:c9:e3:fa:89:4d:ef:81:e0:
bd:dc:e1:58:b2:6c:e4:1f:11:12:09:cb:4f:34:7b:
23:12:e7:de:55:66:63:c2:fc:aa:6a:40:6e:bb:90:
5c:70:3d:cd:23:30:96:c0:27:4a:ee:28:fb:cf:ab:
a1:e0:a5:70:d9:2c:5f:d1:e7:34:5c:34:83:4b:96:
f3:eb:4b:2c:a3:25:f9:50:11:e6:85:32:1b:29:fd:
9b:28:7c:70:9e:e2:a6:fc:ed:d6:40:91:bf:24:8d:
5d:de:b6:cb:9f:07:ba:49:1d:4a:0e:15:af:fa:8c:
aa:09:df:37:1f:23:fb:f4:48:ae:c2:78:08:ac:61:
0f:d4:d3:db:da:0c:32:fd:c1:8b:98:95:12:89:e5:
96:a7:47:49:56:44:8e:36:44:02:55:6e:13:2e:93:
70:c3:ff:d4:b9:89:90:ab:2f:ab:2c:9f:d2:d0:37:
27:74:3e:64:7b:20:84:00:a8:83:15:40:51:9c:3e:
79:e4:63:d6:3f:19:a4:10:59:6b:0c:61:13:46:58:
ad:b8:f7:65:5e:c0:eb:da:87:2d:06:a4:36:48:68:
1d:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:1B:8E:8E:7A:5D:9A:FC:C1:33:53:33:78:A8:ED:4D:6E:AE:A0:40
X509v3 Authority Key Identifier:
keyid:9D:89:E7:C5:3E:92:47:9D:F8:11:71:EB:AA:F2:36:0A:03:7C:32:48
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nYnnxT6SR534EXHrqvI2CgN8Mkg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/304c76-9960-4979-860c-89a68e5a2110/1/nYnnxT6SR534EXHrqvI2CgN8Mkg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/90/304c76-9960-4979-860c-89a68e5a2110/1/nYnnxT6SR534EXHrqvI2CgN8Mkg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
db:36:66:44:c0:ab:54:22:6a:9e:b5:b2:f6:31:70:f3:be:82:
8b:c2:ef:c1:55:ce:34:38:92:35:23:dc:11:db:a8:37:6c:70:
5e:b0:53:57:86:29:65:eb:35:86:da:6c:2d:e5:35:33:48:8e:
4d:de:0c:83:06:da:0b:48:5e:25:ca:47:59:4c:e5:01:56:cf:
f7:31:9f:44:11:93:bb:9a:1d:b8:fb:db:68:3a:75:45:92:9e:
a2:da:04:63:79:fa:fd:02:5b:3d:24:73:08:4e:7f:f6:78:6e:
52:b5:12:d7:83:63:c5:b1:5f:75:ee:ff:38:05:ce:65:ba:73:
64:26:f6:4f:f0:8b:a4:04:07:eb:b5:f3:9a:31:76:5e:32:b8:
ab:33:3c:46:10:3f:61:48:a3:c8:f4:d1:fd:c7:a0:d6:73:ad:
cd:83:59:78:3e:0c:4d:39:17:00:86:4b:0e:f1:37:a6:84:de:
1c:f2:b8:f9:7e:cf:f4:41:41:14:c3:96:44:c9:78:49:32:55:
1f:57:02:0b:19:bd:ca:2e:d9:da:dd:5f:43:29:b9:2e:82:5c:
d9:4c:f1:94:5a:89:02:a7:7c:95:cc:38:05:65:bb:f4:c0:f2:
2b:1b:e4:b4:94:a3:3a:e6:9c:c4:10:43:ab:64:bc:ed:df:eb:
a1:99:5c:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 27 04:21:03 2025 by rpki-client