Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a4/a33b29-bef3-461d-8878-2155126b1643/1/nPxi7NyR0Rl5zB0hpHxuw3jfpDY.mft
File: nPxi7NyR0Rl5zB0hpHxuw3jfpDY.mft (raw, json)
Hash identifier: YKcl+gA0JEY2CebvBuouFWDWPJFoTF0+aj0WDOaBEYo=
Subject key identifier: A1:54:98:2D:F6:84:F8:FB:EC:FA:1F:E8:F3:17:61:0A:2F:2C:96:46
Authority key identifier: 9C:FC:62:EC:DC:91:D1:19:79:CC:1D:21:A4:7C:6E:C3:78:DF:A4:36
Certificate issuer: /CN=9cfc62ecdc91d11979cc1d21a47c6ec378dfa436
Certificate serial: 019921E7A1036F99AA74D749225F2560F55F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nPxi7NyR0Rl5zB0hpHxuw3jfpDY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a4/a33b29-bef3-461d-8878-2155126b1643/1/nPxi7NyR0Rl5zB0hpHxuw3jfpDY.mft
Manifest number: 106B
Signing time: Sun 07 Sep 2025 02:00:52 +0000
Manifest this update: Sun 07 Sep 2025 02:00:52 +0000
Manifest next update: Mon 08 Sep 2025 02:00:52 +0000
Files and hashes: 1: BuFdaMS1qY4jt-i_y_cN4QOcG_g.roa (hash: ltXbKfkdHFu9ibmOqMdLpCxXbbDufLPF6M4KyVnL37o=)
2: nPxi7NyR0Rl5zB0hpHxuw3jfpDY.crl (hash: ifwqsEEOO9QY1M5UVw8TmW6o2EBQsKSNLYRI+5JPnlA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a4/a33b29-bef3-461d-8878-2155126b1643/1/nPxi7NyR0Rl5zB0hpHxuw3jfpDY.crl
rsync://rpki.ripe.net/repository/DEFAULT/a4/a33b29-bef3-461d-8878-2155126b1643/1/nPxi7NyR0Rl5zB0hpHxuw3jfpDY.mft
rsync://rpki.ripe.net/repository/DEFAULT/nPxi7NyR0Rl5zB0hpHxuw3jfpDY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 02:00:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:21:e7:a1:03:6f:99:aa:74:d7:49:22:5f:25:60:f5:5f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9cfc62ecdc91d11979cc1d21a47c6ec378dfa436
Validity
Not Before: Sep 7 02:00:52 2025 GMT
Not After : Sep 8 02:00:52 2025 GMT
Subject: CN=a154982df684f8fbecfa1fe8f317610a2f2c9646
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:c6:ea:99:77:12:c7:54:d7:c9:3e:4c:e1:ab:
bc:e1:ec:47:38:05:90:c3:a5:f4:8a:ff:76:a8:2f:
96:87:0d:73:d1:f5:ce:31:cc:fa:f5:74:8a:ea:ad:
7f:6a:f8:f4:7e:73:ab:c3:3f:aa:f1:ce:2f:2b:4f:
3f:63:20:77:fa:86:d6:2a:41:c0:4e:7d:ac:79:58:
6f:ae:69:53:bc:2b:42:14:b4:97:f6:e0:46:05:f3:
81:74:e1:30:38:ba:71:4f:c3:6f:ae:26:ad:6e:f4:
35:fb:14:84:77:c3:b8:7b:5c:68:5d:3a:33:25:85:
49:01:7d:ed:b2:a2:de:1c:6c:42:70:ea:37:93:74:
9f:80:c9:68:66:f0:b4:f1:d5:b2:79:c7:4d:d6:3f:
07:40:eb:bf:2b:c0:70:38:34:fc:d3:7f:56:3a:79:
5d:a6:3e:a4:b1:cd:e5:a4:24:e4:12:2d:12:5f:1d:
d2:19:4b:54:3e:a2:ad:97:78:f1:37:70:dd:7d:a0:
b6:44:49:48:50:08:42:3d:aa:01:76:f5:eb:da:43:
3c:55:83:a4:cf:34:81:58:19:34:83:3e:e7:d8:f1:
39:ad:d7:bb:3e:92:21:c8:1c:01:15:81:88:47:23:
d8:fd:a5:78:9b:2a:01:08:a2:c6:cd:c7:b8:fa:7a:
7c:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:54:98:2D:F6:84:F8:FB:EC:FA:1F:E8:F3:17:61:0A:2F:2C:96:46
X509v3 Authority Key Identifier:
keyid:9C:FC:62:EC:DC:91:D1:19:79:CC:1D:21:A4:7C:6E:C3:78:DF:A4:36
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nPxi7NyR0Rl5zB0hpHxuw3jfpDY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/a33b29-bef3-461d-8878-2155126b1643/1/nPxi7NyR0Rl5zB0hpHxuw3jfpDY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/a33b29-bef3-461d-8878-2155126b1643/1/nPxi7NyR0Rl5zB0hpHxuw3jfpDY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5e:2d:cb:ef:4c:54:bb:eb:75:de:0e:d0:7e:f9:9f:99:18:e7:
01:a0:cb:32:93:71:6e:75:5f:18:96:0b:2f:21:d0:5e:61:dd:
0a:be:bb:a2:6b:0a:ca:cc:eb:02:f1:d1:07:20:0f:79:17:ea:
1f:b6:08:2d:82:69:c9:da:78:78:03:9f:9b:94:4f:20:12:3f:
65:c4:0b:b8:e6:9f:62:47:c6:d5:55:8a:4e:d7:61:59:85:cf:
46:2e:98:bb:8f:42:51:52:c3:35:ab:31:0e:4c:ed:46:61:a5:
44:24:79:b2:bd:e0:2c:87:53:23:04:44:81:59:9d:c4:8b:96:
cb:e9:40:8f:4b:38:69:05:49:ff:0d:f3:9e:3e:55:90:3d:91:
76:ce:30:1f:24:de:4d:31:55:e5:8f:0e:50:62:33:5d:87:c9:
a5:dc:6b:72:49:51:fd:6a:b0:47:f0:5e:5d:b9:d2:4d:f0:3b:
aa:69:41:0b:1f:10:73:b3:18:94:8f:1c:53:18:7c:cf:39:00:
6b:d9:32:51:39:e1:0c:c2:8d:17:79:c5:d2:dd:8e:cc:0a:d8:
6c:b6:d5:3b:84:e9:e0:1c:55:f4:da:4a:38:5b:62:0f:ec:88:
de:82:0b:3f:82:62:66:e7:b5:61:55:0f:f5:14:5e:20:3a:8b:
22:bc:c7:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 11:18:42 2025 by rpki-client