Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dc/339d29-712a-4c86-9510-e4d6bcf336b7/1/nYHLUEMmdDsX02SiBIdcOcbtvAk.mft
File: nYHLUEMmdDsX02SiBIdcOcbtvAk.mft (raw, json)
Hash identifier: K9t5N30bK2TXlcUo3g7N0qruNYBN3eY1cBVCzsYJQyQ=
Subject key identifier: 6E:92:24:B3:36:C9:F1:DC:1F:33:12:18:FA:E8:6D:C2:4C:A0:C2:4A
Authority key identifier: 9D:81:CB:50:43:26:74:3B:17:D3:64:A2:04:87:5C:39:C6:ED:BC:09
Certificate issuer: /CN=9d81cb504326743b17d364a204875c39c6edbc09
Certificate serial: 01993380A55A57D34138E5CFE8DD5925DE10
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nYHLUEMmdDsX02SiBIdcOcbtvAk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dc/339d29-712a-4c86-9510-e4d6bcf336b7/1/nYHLUEMmdDsX02SiBIdcOcbtvAk.mft
Manifest number: 1011
Signing time: Wed 10 Sep 2025 12:01:32 +0000
Manifest this update: Wed 10 Sep 2025 12:01:32 +0000
Manifest next update: Thu 11 Sep 2025 12:01:32 +0000
Files and hashes: 1: JP_mk9oH8p5bvlYYSWGek7KXox0.roa (hash: QozdhhJZu+Cfz+XSJNvXYpnVEpaUzqrN6lM64Dbcl70=)
2: nYHLUEMmdDsX02SiBIdcOcbtvAk.crl (hash: q9g3VMfn0JRo2vM1Rw7TnklOfqg/0QLJX8PGR8+7ygs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dc/339d29-712a-4c86-9510-e4d6bcf336b7/1/nYHLUEMmdDsX02SiBIdcOcbtvAk.crl
rsync://rpki.ripe.net/repository/DEFAULT/dc/339d29-712a-4c86-9510-e4d6bcf336b7/1/nYHLUEMmdDsX02SiBIdcOcbtvAk.mft
rsync://rpki.ripe.net/repository/DEFAULT/nYHLUEMmdDsX02SiBIdcOcbtvAk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 11 Sep 2025 11:00:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:33:80:a5:5a:57:d3:41:38:e5:cf:e8:dd:59:25:de:10
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9d81cb504326743b17d364a204875c39c6edbc09
Validity
Not Before: Sep 10 12:01:32 2025 GMT
Not After : Sep 11 12:01:32 2025 GMT
Subject: CN=6e9224b336c9f1dc1f331218fae86dc24ca0c24a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:ec:9f:e1:7e:c9:db:c2:51:34:48:e1:7c:9b:
0f:bf:28:3b:7e:e5:11:51:ef:77:b7:40:59:f3:cc:
c1:76:79:61:58:15:77:db:58:0d:ad:bf:5e:b8:11:
12:9c:43:3f:f0:f7:67:4c:ad:3a:09:be:8b:9f:3d:
cf:a9:f4:43:61:17:25:47:18:ad:be:34:0b:37:16:
0f:c0:65:e3:d6:06:7f:12:a8:1b:7a:e6:0b:9b:ad:
18:25:46:81:7e:b7:e4:05:bd:ef:e5:0e:4c:16:dd:
4a:c0:3e:0d:33:11:8c:c3:99:20:51:bb:08:9d:6d:
b6:f5:25:dd:1a:27:f5:cd:8c:df:95:3c:46:11:7b:
af:63:13:84:e1:d7:9a:cb:2a:79:43:c0:b9:b3:64:
fc:10:47:53:77:06:b7:05:56:84:53:63:b0:12:1b:
1c:f2:d3:12:76:8e:6a:81:84:dd:a6:68:ad:1d:dd:
0d:6e:de:d7:36:6a:68:cf:e0:6b:12:e2:8e:63:f3:
52:6c:af:77:10:b6:d0:44:4d:4c:ae:fe:95:ae:28:
41:aa:dd:0c:54:e6:44:3e:d5:59:c0:75:ee:d2:84:
05:9d:8a:8d:e1:a8:db:da:c3:f8:8f:43:63:8d:75:
a2:23:84:54:00:09:b9:0a:df:b8:33:46:1b:b6:db:
b3:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6E:92:24:B3:36:C9:F1:DC:1F:33:12:18:FA:E8:6D:C2:4C:A0:C2:4A
X509v3 Authority Key Identifier:
keyid:9D:81:CB:50:43:26:74:3B:17:D3:64:A2:04:87:5C:39:C6:ED:BC:09
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nYHLUEMmdDsX02SiBIdcOcbtvAk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/339d29-712a-4c86-9510-e4d6bcf336b7/1/nYHLUEMmdDsX02SiBIdcOcbtvAk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/339d29-712a-4c86-9510-e4d6bcf336b7/1/nYHLUEMmdDsX02SiBIdcOcbtvAk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6a:68:15:26:bc:61:ee:ac:89:ae:16:bc:3a:17:27:81:b0:8c:
7c:0e:ae:06:86:4c:58:ff:58:a3:9f:5a:32:42:b0:3e:3b:b1:
73:3c:16:ce:a2:a1:37:77:0b:0d:8c:d3:dd:9a:f4:59:95:32:
0c:9e:c3:b2:d5:d4:4e:16:60:63:77:e4:7c:fe:05:09:b6:b0:
f1:02:23:00:e3:b0:46:e0:16:e9:1d:69:2a:d2:11:46:2a:a6:
13:e0:21:2b:48:12:eb:fe:6b:01:68:66:36:ad:04:3f:83:8c:
64:3b:b3:9c:78:8b:22:44:47:f6:24:8a:4a:e3:73:0c:27:53:
f7:0b:1a:f1:2c:40:75:03:33:97:d5:74:59:f8:25:5b:2a:0d:
08:db:84:05:1d:f5:76:67:d1:2d:d1:6f:8b:4f:c4:b1:f5:09:
05:fe:74:ba:52:ce:5b:93:79:da:e0:a3:5f:2d:41:c5:f6:3e:
d5:ed:21:2b:c5:aa:d9:55:08:32:60:ce:41:a1:53:66:78:e2:
06:35:83:79:e2:92:c8:87:c8:81:4b:80:25:75:6a:fc:34:c1:
df:d3:fa:1b:9a:1a:07:0f:0d:64:86:09:19:94:7d:14:57:f5:
7a:b4:67:bb:90:47:12:ff:2e:a1:48:e2:92:a2:f6:5a:d6:01:
bb:7d:80:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 10 21:10:09 2025 by rpki-client