Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ad/b4f29a-a709-42ba-9632-58e4f24fabea/1/nssiK4Emoh3zLQFeTEhTlX0dl0Q.mft
File: nssiK4Emoh3zLQFeTEhTlX0dl0Q.mft (raw, json)
Hash identifier: RZZjpTpNXCG3MQZRrZYYUXtyEkVRcpDl4AW1kanZi2o=
Subject key identifier: 80:DE:6F:5D:DE:02:25:1B:DB:AA:3F:A2:F1:43:EB:A0:A4:DB:5E:21
Authority key identifier: 9E:CB:22:2B:81:26:A2:1D:F3:2D:01:5E:4C:48:53:95:7D:1D:97:44
Certificate issuer: /CN=9ecb222b8126a21df32d015e4c4853957d1d9744
Certificate serial: 019922C30BE98A0DD512DED919ECA80B9783
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nssiK4Emoh3zLQFeTEhTlX0dl0Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ad/b4f29a-a709-42ba-9632-58e4f24fabea/1/nssiK4Emoh3zLQFeTEhTlX0dl0Q.mft
Manifest number: 099D
Signing time: Sun 07 Sep 2025 06:00:31 +0000
Manifest this update: Sun 07 Sep 2025 06:00:31 +0000
Manifest next update: Mon 08 Sep 2025 06:00:31 +0000
Files and hashes: 1: nssiK4Emoh3zLQFeTEhTlX0dl0Q.crl (hash: 3Z72Ri6ZBg76yEiK2pp1TMjrubNrPk6jRYixJKgkun8=)
2: tONpcnjfR_-MsVEafiNaGJ4uDm4.roa (hash: SGzJp4OEszdVKR+f54x18hkn789cto3mWJ/E8xABEU0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ad/b4f29a-a709-42ba-9632-58e4f24fabea/1/nssiK4Emoh3zLQFeTEhTlX0dl0Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/ad/b4f29a-a709-42ba-9632-58e4f24fabea/1/nssiK4Emoh3zLQFeTEhTlX0dl0Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/nssiK4Emoh3zLQFeTEhTlX0dl0Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 05:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:22:c3:0b:e9:8a:0d:d5:12:de:d9:19:ec:a8:0b:97:83
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9ecb222b8126a21df32d015e4c4853957d1d9744
Validity
Not Before: Sep 7 06:00:31 2025 GMT
Not After : Sep 8 06:00:31 2025 GMT
Subject: CN=80de6f5dde02251bdbaa3fa2f143eba0a4db5e21
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:7e:42:a0:78:61:01:7a:0d:9a:13:50:5f:ef:
2b:70:85:3c:08:91:4e:ec:a2:6d:99:c6:19:54:7e:
59:3f:26:6c:c3:65:b0:dc:36:58:cc:ff:ca:f0:78:
db:4d:5d:ac:56:04:48:da:d7:ba:7d:8a:af:e5:82:
42:33:bb:79:61:9f:7d:0f:8c:b9:ce:95:2f:85:10:
ed:7f:a5:cc:ac:e6:dc:b7:29:d5:1a:51:76:c5:f9:
d8:63:65:f8:64:59:b3:79:c3:5b:ca:47:5d:de:a9:
95:1b:27:17:ad:22:e6:9c:bb:ca:48:a0:ca:58:75:
ba:2a:b9:bc:6b:20:42:f3:1f:20:eb:6e:94:26:0b:
40:1c:27:55:b1:40:45:f5:08:03:8c:a4:a4:fd:78:
78:77:fe:33:15:7f:4b:f8:a2:dd:14:cf:d9:fb:ea:
06:68:a1:9f:31:1c:4a:d7:9a:9c:fb:32:b6:66:fc:
c1:81:05:79:00:3f:a7:52:04:86:9a:ac:fc:fe:ea:
58:e5:00:ad:7a:8f:29:94:40:69:df:45:c5:ea:d3:
cf:9c:94:80:51:38:d8:78:f2:12:10:44:d9:b9:fb:
87:b3:19:52:b9:e8:66:bf:1e:4a:bd:d9:a9:04:fb:
ab:9d:c6:67:01:70:3a:f9:6f:56:b6:f3:91:9f:bd:
3f:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:DE:6F:5D:DE:02:25:1B:DB:AA:3F:A2:F1:43:EB:A0:A4:DB:5E:21
X509v3 Authority Key Identifier:
keyid:9E:CB:22:2B:81:26:A2:1D:F3:2D:01:5E:4C:48:53:95:7D:1D:97:44
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nssiK4Emoh3zLQFeTEhTlX0dl0Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/b4f29a-a709-42ba-9632-58e4f24fabea/1/nssiK4Emoh3zLQFeTEhTlX0dl0Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/b4f29a-a709-42ba-9632-58e4f24fabea/1/nssiK4Emoh3zLQFeTEhTlX0dl0Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7a:8d:e4:ec:c9:d1:73:4f:f9:5b:91:70:b3:60:c3:7d:c1:73:
f4:68:02:5e:1f:a1:fc:99:37:44:97:ac:3e:85:14:cc:47:fc:
98:17:17:b4:d4:3e:02:48:ce:d1:e3:18:e6:23:42:a3:cd:99:
5f:89:dc:32:9f:33:42:3b:13:f4:a9:c7:52:c1:d5:39:67:49:
9e:a9:51:19:29:09:e3:73:ea:86:4c:0c:84:ad:c9:f0:90:12:
e5:2f:e3:23:76:02:b9:17:24:0d:7d:5c:5e:48:cb:ff:4e:32:
60:20:85:bb:13:23:ee:92:c2:ac:ff:2d:42:7f:87:d5:50:66:
25:bf:ad:b9:04:d0:42:04:7d:21:51:47:00:cc:a5:f0:58:5d:
b6:1b:95:c8:0c:27:5d:48:59:e2:97:6a:fb:10:3c:c1:d7:d2:
1b:70:a0:6c:12:b1:b0:6a:f6:70:86:c4:e2:9f:0c:69:2f:e4:
a4:b0:0c:42:4d:fa:64:6b:b5:a7:b3:54:d4:09:f8:f5:db:02:
f4:d6:c7:8d:b9:c6:8a:5e:f3:87:9b:c2:9a:ff:0d:02:b3:95:
16:eb:83:b8:04:92:a5:e9:7f:2c:bb:b4:06:fa:9d:1c:89:44:
d5:ff:94:a2:9a:52:6a:00:ef:3d:6b:54:17:2c:63:ca:aa:53:
5e:2a:60:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 10:06:27 2025 by rpki-client