Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bf/eda15a-0423-46bd-b32a-52147aae0eb4/1/nIMTOn4Fk7s5jq25J1jLySydZaU.mft
File: nIMTOn4Fk7s5jq25J1jLySydZaU.mft (raw, json)
Hash identifier: WpVcRNL3tJVw/kPjowIr5HofNQpfIusREHBYssiQrbw=
Subject key identifier: 09:CB:D1:B6:38:E4:7B:3C:59:9B:4A:3C:D8:21:78:58:DC:F9:EC:4A
Authority key identifier: 9C:83:13:3A:7E:05:93:BB:39:8E:AD:B9:27:58:CB:C9:2C:9D:65:A5
Certificate issuer: /CN=9c83133a7e0593bb398eadb92758cbc92c9d65a5
Certificate serial: 019A21ADEC7A04FBF2E14E043A6A568FDC5E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nIMTOn4Fk7s5jq25J1jLySydZaU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bf/eda15a-0423-46bd-b32a-52147aae0eb4/1/nIMTOn4Fk7s5jq25J1jLySydZaU.mft
Manifest number: 122A
Signing time: Sun 26 Oct 2025 18:00:37 +0000
Manifest this update: Sun 26 Oct 2025 18:00:37 +0000
Manifest next update: Mon 27 Oct 2025 18:00:37 +0000
Files and hashes: 1: ekhJmeQnAobhvtQLQDb4UB8M1mE.roa (hash: 6CiHXbuoqrzSCFBPUfq3RLFxMNDauAW0jWPQmmN8RFM=)
2: nIMTOn4Fk7s5jq25J1jLySydZaU.crl (hash: 7wKJlRPY8LajoBXbeDum0WxLymfYcwRIuLRvQ5k6H4A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bf/eda15a-0423-46bd-b32a-52147aae0eb4/1/nIMTOn4Fk7s5jq25J1jLySydZaU.crl
rsync://rpki.ripe.net/repository/DEFAULT/bf/eda15a-0423-46bd-b32a-52147aae0eb4/1/nIMTOn4Fk7s5jq25J1jLySydZaU.mft
rsync://rpki.ripe.net/repository/DEFAULT/nIMTOn4Fk7s5jq25J1jLySydZaU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 27 Oct 2025 12:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:21:ad:ec:7a:04:fb:f2:e1:4e:04:3a:6a:56:8f:dc:5e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9c83133a7e0593bb398eadb92758cbc92c9d65a5
Validity
Not Before: Oct 26 18:00:37 2025 GMT
Not After : Oct 27 18:00:37 2025 GMT
Subject: CN=09cbd1b638e47b3c599b4a3cd8217858dcf9ec4a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:ff:79:07:5f:08:00:99:d2:3a:75:f4:60:c3:
35:0b:7f:78:e5:c2:0f:f0:2f:2e:b4:8e:2a:c3:4f:
47:ee:10:9c:ca:51:8b:73:16:c1:4f:30:fb:85:c7:
65:35:cf:54:9a:23:fd:09:f9:76:9a:ba:69:56:7d:
43:b4:26:3c:88:bd:0e:02:dd:e1:6d:b3:37:2e:0e:
0a:eb:11:2e:fd:99:48:c9:f0:48:8e:67:f9:10:6e:
e1:a5:7d:76:d1:a0:86:8f:50:83:e4:1e:1c:16:de:
4a:5c:b1:1f:c2:3c:18:ef:12:c5:af:6f:4e:99:52:
07:af:f0:f7:ef:54:f1:06:64:23:53:8d:4c:52:0c:
6b:4c:1a:2b:32:4b:c4:52:79:a9:55:4d:31:b6:63:
b2:27:30:40:0b:ac:9b:cf:29:1a:f9:0e:86:cc:9a:
fa:12:30:4f:99:aa:cb:4a:95:b8:79:16:dd:a8:c4:
3e:75:5a:04:03:df:a8:56:f0:ba:33:99:e1:07:6e:
89:45:d7:3a:72:df:ed:2c:b7:5a:50:36:49:8f:45:
b8:5c:03:b5:61:99:cd:2d:b3:9a:ed:5b:dc:c3:cf:
5a:1a:a2:76:84:fb:48:1a:9a:4c:01:52:cb:3c:a0:
49:f7:c0:55:4a:36:36:5b:7f:99:bb:27:fa:7f:9a:
6f:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:CB:D1:B6:38:E4:7B:3C:59:9B:4A:3C:D8:21:78:58:DC:F9:EC:4A
X509v3 Authority Key Identifier:
keyid:9C:83:13:3A:7E:05:93:BB:39:8E:AD:B9:27:58:CB:C9:2C:9D:65:A5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nIMTOn4Fk7s5jq25J1jLySydZaU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/eda15a-0423-46bd-b32a-52147aae0eb4/1/nIMTOn4Fk7s5jq25J1jLySydZaU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/eda15a-0423-46bd-b32a-52147aae0eb4/1/nIMTOn4Fk7s5jq25J1jLySydZaU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
47:b0:fb:05:39:7a:23:f3:e1:91:9c:60:0c:d3:7f:c4:4e:29:
33:a1:05:5a:2b:4f:7b:87:41:e1:24:75:c5:4b:49:c7:1f:de:
d4:48:9f:f1:07:97:99:a3:2c:6e:df:23:cd:7e:5f:4c:a9:b6:
79:56:b6:94:00:26:bb:7e:6b:c8:29:21:3f:10:0e:f2:59:24:
31:4c:0b:94:ea:7a:79:94:7f:70:79:27:23:0b:09:90:4b:b3:
dc:b7:4e:cb:72:ad:6d:1a:fe:ec:ab:b1:3c:95:34:39:18:da:
c4:70:19:1b:84:db:6c:c8:50:43:16:19:53:76:aa:3d:55:a8:
c9:d6:c6:ce:1c:bf:31:4d:4d:46:7e:2a:61:46:68:e6:c9:74:
22:31:b6:21:84:af:91:33:67:b6:cf:d3:1c:fd:ad:b0:2f:95:
f9:be:79:9e:80:ba:7b:01:19:37:d0:10:bc:f6:e6:2b:1e:67:
e9:54:b6:93:a5:fd:b3:8b:65:78:d2:0b:73:93:4f:6a:22:5a:
b7:9c:ed:ba:f2:43:30:7a:57:81:ce:b9:0b:bc:4c:78:dd:1b:
a9:0e:d7:e7:dd:da:0d:a1:5e:83:59:cb:ce:6b:e9:42:4f:dd:
3e:8f:a6:67:b8:8d:b2:88:8d:bf:09:f7:bd:94:6f:55:ab:b0:
20:87:dd:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 26 20:39:02 2025 by rpki-client