Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b9/633af2-5b4e-4a4c-b139-39607821a09a/1/nWm2sqCnKBjR-ppG7yrXgSuVvMA.mft
File: nWm2sqCnKBjR-ppG7yrXgSuVvMA.mft (raw, json)
Hash identifier: EuVPWui+i8DESQaJrjvnnJ+oi8gtMhVmUkxapFfBW38=
Subject key identifier: E7:87:97:86:17:FB:A7:D8:78:A7:DE:33:3D:38:97:D6:07:D9:A5:12
Authority key identifier: 9D:69:B6:B2:A0:A7:28:18:D1:FA:9A:46:EF:2A:D7:81:2B:95:BC:C0
Certificate issuer: /CN=9d69b6b2a0a72818d1fa9a46ef2ad7812b95bcc0
Certificate serial: 019A2CD605B5E19DB3A19D0D832925BE37FC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nWm2sqCnKBjR-ppG7yrXgSuVvMA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b9/633af2-5b4e-4a4c-b139-39607821a09a/1/nWm2sqCnKBjR-ppG7yrXgSuVvMA.mft
Manifest number: 0FBB
Signing time: Tue 28 Oct 2025 22:00:14 +0000
Manifest this update: Tue 28 Oct 2025 22:00:14 +0000
Manifest next update: Wed 29 Oct 2025 22:00:14 +0000
Files and hashes: 1: nWm2sqCnKBjR-ppG7yrXgSuVvMA.crl (hash: 30GApQOvPBNFdLajASNgv590ms362KB4aYvyiwh9c+s=)
2: wTe6nqB8fZi5LCCWrszMuZB2Wbc.roa (hash: J68IWCsFvDV9cShA3lK5AicjeJ9rPLGBf/VEjmcr5l0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b9/633af2-5b4e-4a4c-b139-39607821a09a/1/nWm2sqCnKBjR-ppG7yrXgSuVvMA.crl
rsync://rpki.ripe.net/repository/DEFAULT/b9/633af2-5b4e-4a4c-b139-39607821a09a/1/nWm2sqCnKBjR-ppG7yrXgSuVvMA.mft
rsync://rpki.ripe.net/repository/DEFAULT/nWm2sqCnKBjR-ppG7yrXgSuVvMA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Oct 2025 22:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:2c:d6:05:b5:e1:9d:b3:a1:9d:0d:83:29:25:be:37:fc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9d69b6b2a0a72818d1fa9a46ef2ad7812b95bcc0
Validity
Not Before: Oct 28 22:00:14 2025 GMT
Not After : Oct 29 22:00:14 2025 GMT
Subject: CN=e787978617fba7d878a7de333d3897d607d9a512
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:96:35:09:39:4a:fb:f8:f6:23:01:3d:21:a9:
a4:db:84:61:c8:58:17:3b:06:a7:8a:d7:f2:1d:53:
4b:2a:77:e0:d5:da:66:2b:7b:36:6d:e4:bd:1e:c2:
5c:eb:3d:6b:7a:7c:16:40:3c:d0:fd:fe:83:e4:78:
7d:89:c8:15:b7:45:27:3f:7a:75:e1:64:e6:31:0a:
9a:28:72:52:67:7c:d4:4b:e8:29:3e:f5:83:a4:fe:
33:75:fa:18:70:59:b9:c7:bf:7d:6b:4f:44:3b:26:
da:36:e1:60:38:25:5f:f3:d0:63:2e:75:f2:a4:14:
b4:1a:77:07:ed:d2:d3:20:13:b9:8b:a0:0f:24:d5:
ef:12:c6:76:f9:1b:1b:43:7d:5d:26:b9:ed:5d:70:
94:fe:c3:ce:58:01:6f:48:42:5d:48:8a:16:1b:a5:
27:ed:b3:0c:6d:ec:bf:ff:ce:ad:08:48:f5:79:a3:
ec:c2:88:e0:e5:b4:cd:ac:5b:b6:50:67:ed:24:6c:
80:ff:3d:0a:5d:b8:b9:94:bd:74:91:c7:90:b5:8b:
d4:9d:05:a7:71:6c:37:ce:cd:59:fc:df:c7:3c:87:
2a:bf:0b:7e:be:e2:05:a4:d2:91:70:56:3c:e4:c6:
f7:6c:c5:d1:33:8a:ca:08:7e:44:99:69:5f:8f:91:
31:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:87:97:86:17:FB:A7:D8:78:A7:DE:33:3D:38:97:D6:07:D9:A5:12
X509v3 Authority Key Identifier:
keyid:9D:69:B6:B2:A0:A7:28:18:D1:FA:9A:46:EF:2A:D7:81:2B:95:BC:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nWm2sqCnKBjR-ppG7yrXgSuVvMA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/633af2-5b4e-4a4c-b139-39607821a09a/1/nWm2sqCnKBjR-ppG7yrXgSuVvMA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/633af2-5b4e-4a4c-b139-39607821a09a/1/nWm2sqCnKBjR-ppG7yrXgSuVvMA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2e:c0:5b:22:30:7e:38:dc:e2:c1:87:09:3e:b0:30:be:83:79:
a2:ea:db:eb:0f:2b:fb:20:b4:40:07:5d:fe:69:2a:b5:d1:86:
ff:32:93:e2:56:c6:6b:c2:71:10:a8:64:55:9a:04:9b:b2:19:
e5:98:c4:0f:22:9b:17:a5:f4:e6:0e:34:27:4c:f0:f4:a4:fd:
8b:03:f3:87:22:fb:18:dd:72:78:83:b6:ba:dc:7a:8d:36:0f:
41:90:e3:eb:e2:19:e2:28:51:c7:3c:39:ad:89:87:90:72:72:
18:8d:17:17:d8:40:d4:78:5a:18:ce:81:5c:f6:44:b6:b8:66:
33:56:6a:6c:13:4b:77:14:32:bf:9c:12:4b:bb:21:4a:6a:ec:
d0:20:06:ef:0d:87:84:00:b3:40:12:3c:47:2f:98:bd:ab:ee:
0e:7d:c2:4f:17:2e:5b:0e:21:06:da:f8:e7:19:99:42:58:67:
b7:3e:bd:43:ff:67:99:20:11:41:c0:31:2b:0e:19:71:60:24:
9f:54:ec:0c:f1:0c:4b:30:4b:5b:1c:02:ca:97:a0:1a:ff:51:
f5:ab:95:8f:8f:04:ff:1c:cb:09:25:97:00:aa:03:54:a5:7f:
54:ae:f5:77:6a:c6:20:8e:d3:b7:2b:d7:62:6d:7f:4f:82:c6:
a3:85:de:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 29 08:00:29 2025 by rpki-client