Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/aa/0e651e-90c7-4acd-97b9-a54f8e4813e7/1/nNB1iCXdic_uX97MfctlHwpdEBg.mft
File: nNB1iCXdic_uX97MfctlHwpdEBg.mft (raw, json)
Hash identifier: dBizqlEfb3eX6O+d1bsao/C90pFFhGrvB04jqtivcRs=
Subject key identifier: D4:5B:EC:04:93:0A:7D:49:BC:72:97:B9:88:FD:F4:9A:E6:3D:1A:BE
Authority key identifier: 9C:D0:75:88:25:DD:89:CF:EE:5F:DE:CC:7D:CB:65:1F:0A:5D:10:18
Certificate issuer: /CN=9cd0758825dd89cfee5fdecc7dcb651f0a5d1018
Certificate serial: 019A04119143F795B2BBEB2527CABF668892
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nNB1iCXdic_uX97MfctlHwpdEBg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/aa/0e651e-90c7-4acd-97b9-a54f8e4813e7/1/nNB1iCXdic_uX97MfctlHwpdEBg.mft
Manifest number: 1634
Signing time: Tue 21 Oct 2025 00:00:51 +0000
Manifest this update: Tue 21 Oct 2025 00:00:51 +0000
Manifest next update: Wed 22 Oct 2025 00:00:51 +0000
Files and hashes: 1: 501ahkD4gjr9itS0rHitDULQOJI.roa (hash: 7QvKhQGjRnbky85nLC/mxy/1QVWGc8n8REeP6RBHa2w=)
2: mnnYxns7ruXxPgM_VNIHL5kcJa8.roa (hash: Wb/XaO0LWIZbn326Mfd8GlVkRuIOjXOck5hC67Z7SYg=)
3: nNB1iCXdic_uX97MfctlHwpdEBg.crl (hash: p81LpAmsI8BM0AGN7RK4EVOCfrMVlooAphi8OdHuVCA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/aa/0e651e-90c7-4acd-97b9-a54f8e4813e7/1/nNB1iCXdic_uX97MfctlHwpdEBg.crl
rsync://rpki.ripe.net/repository/DEFAULT/aa/0e651e-90c7-4acd-97b9-a54f8e4813e7/1/nNB1iCXdic_uX97MfctlHwpdEBg.mft
rsync://rpki.ripe.net/repository/DEFAULT/nNB1iCXdic_uX97MfctlHwpdEBg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 22:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:04:11:91:43:f7:95:b2:bb:eb:25:27:ca:bf:66:88:92
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9cd0758825dd89cfee5fdecc7dcb651f0a5d1018
Validity
Not Before: Oct 21 00:00:51 2025 GMT
Not After : Oct 22 00:00:51 2025 GMT
Subject: CN=d45bec04930a7d49bc7297b988fdf49ae63d1abe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:90:75:95:b5:43:db:22:7d:04:2f:47:41:c4:
36:a0:6f:d3:75:c3:38:04:ab:f2:31:1e:d7:02:a9:
ec:b5:01:f6:73:8d:c0:3b:83:f2:16:29:61:ff:88:
4b:22:d1:ed:a8:b2:3f:44:88:e7:7f:21:fa:8e:f7:
45:5c:71:bd:df:37:33:be:73:d0:c5:28:49:6e:ac:
43:38:5f:39:94:cd:68:1e:44:c0:35:8c:23:00:05:
1f:a8:27:a4:9f:28:91:88:1b:86:f2:31:de:f7:99:
ca:bc:a1:e6:3f:6f:e6:15:d6:aa:f6:ec:cf:d1:0a:
c7:d8:91:e9:07:ae:3b:cb:08:a4:01:19:8d:9e:b2:
25:d6:b1:ed:f4:b5:9c:c4:19:15:8d:86:62:8a:21:
1a:86:b8:8d:8b:fe:9c:0a:ca:31:b0:72:f0:b5:d7:
c1:50:ec:27:bf:1c:c2:f3:c7:07:88:b3:9f:67:b4:
6b:0a:2d:03:f4:7e:6a:2b:f1:01:6f:ff:75:19:34:
a1:59:29:8e:42:9d:ad:11:e2:da:13:bb:fd:2e:b2:
78:01:fb:1e:2e:ed:dc:0f:91:37:25:7c:53:d6:4f:
01:3a:ed:7a:81:39:6c:d3:aa:93:3c:be:da:52:32:
e8:3f:80:c3:9c:ea:a9:ec:b7:b3:3c:38:6c:b9:8d:
28:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:5B:EC:04:93:0A:7D:49:BC:72:97:B9:88:FD:F4:9A:E6:3D:1A:BE
X509v3 Authority Key Identifier:
keyid:9C:D0:75:88:25:DD:89:CF:EE:5F:DE:CC:7D:CB:65:1F:0A:5D:10:18
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nNB1iCXdic_uX97MfctlHwpdEBg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/0e651e-90c7-4acd-97b9-a54f8e4813e7/1/nNB1iCXdic_uX97MfctlHwpdEBg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/0e651e-90c7-4acd-97b9-a54f8e4813e7/1/nNB1iCXdic_uX97MfctlHwpdEBg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2d:2c:e0:10:65:bd:3d:e5:2d:a9:a7:3e:b4:80:c6:e2:a7:63:
cc:68:cd:35:07:ce:86:60:db:e3:00:8c:ab:de:d6:98:18:f2:
d7:9c:c4:e6:7b:c6:22:ca:bf:ac:e6:4f:65:1b:ed:0c:8b:2f:
5c:cc:35:2a:a7:16:9c:95:24:6f:09:84:32:63:83:38:ad:a8:
3b:88:c4:90:fa:93:66:d4:67:d0:5c:6f:39:a5:f9:82:d8:7f:
e5:0c:4e:5c:e5:de:20:7b:1f:44:03:d2:11:54:a9:3d:e4:cb:
42:1a:41:eb:f6:3e:47:37:95:45:9f:db:33:14:ac:34:2b:86:
86:2b:52:15:f7:3c:9f:0a:e9:ac:61:5b:15:fc:4e:1f:45:44:
a8:aa:ef:28:a4:0f:fc:a4:f0:40:2c:99:ac:04:e1:99:37:1e:
7e:d4:cf:64:95:cb:5e:fe:01:1b:99:79:d1:5d:13:8b:61:09:
36:5a:cb:df:c5:f8:fa:c8:55:43:30:83:34:bf:4f:88:f4:aa:
33:f5:36:76:89:28:d0:76:9e:dd:ef:5f:2d:b5:6a:3e:9e:49:
1a:04:49:e4:53:e0:b6:77:e0:8b:9d:4d:99:77:e7:04:92:fd:
e6:a7:fc:aa:80:3b:d8:fc:66:69:cd:cb:1f:05:3c:8c:1a:6b:
d5:ef:03:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 21 02:28:16 2025 by rpki-client