Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dc/339d29-712a-4c86-9510-e4d6bcf336b7/1/nYHLUEMmdDsX02SiBIdcOcbtvAk.mft
File: nYHLUEMmdDsX02SiBIdcOcbtvAk.mft (raw, json)
Hash identifier: PYkPUPgG3v9ShX82wctLWNrKpR9p0pMIkRMeJwKoXlI=
Subject key identifier: 68:7C:5F:A0:54:A8:E4:51:5F:0F:9C:EB:CB:49:26:5C:E1:1A:67:30
Authority key identifier: 9D:81:CB:50:43:26:74:3B:17:D3:64:A2:04:87:5C:39:C6:ED:BC:09
Certificate issuer: /CN=9d81cb504326743b17d364a204875c39c6edbc09
Certificate serial: 019A22F7401DDBCA0718638E832012A847F6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nYHLUEMmdDsX02SiBIdcOcbtvAk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dc/339d29-712a-4c86-9510-e4d6bcf336b7/1/nYHLUEMmdDsX02SiBIdcOcbtvAk.mft
Manifest number: 108D
Signing time: Mon 27 Oct 2025 00:00:20 +0000
Manifest this update: Mon 27 Oct 2025 00:00:20 +0000
Manifest next update: Tue 28 Oct 2025 00:00:20 +0000
Files and hashes: 1: JP_mk9oH8p5bvlYYSWGek7KXox0.roa (hash: QozdhhJZu+Cfz+XSJNvXYpnVEpaUzqrN6lM64Dbcl70=)
2: nYHLUEMmdDsX02SiBIdcOcbtvAk.crl (hash: 4Z3y9KxCwrzxo9Aa64iXrX9cLDOWRcO5iBrkCjoz1j4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dc/339d29-712a-4c86-9510-e4d6bcf336b7/1/nYHLUEMmdDsX02SiBIdcOcbtvAk.crl
rsync://rpki.ripe.net/repository/DEFAULT/dc/339d29-712a-4c86-9510-e4d6bcf336b7/1/nYHLUEMmdDsX02SiBIdcOcbtvAk.mft
rsync://rpki.ripe.net/repository/DEFAULT/nYHLUEMmdDsX02SiBIdcOcbtvAk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 27 Oct 2025 19:48:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:22:f7:40:1d:db:ca:07:18:63:8e:83:20:12:a8:47:f6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9d81cb504326743b17d364a204875c39c6edbc09
Validity
Not Before: Oct 27 00:00:20 2025 GMT
Not After : Oct 28 00:00:20 2025 GMT
Subject: CN=687c5fa054a8e4515f0f9cebcb49265ce11a6730
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:b1:28:ee:cd:1d:6f:c4:d7:6c:8d:8a:25:14:
a1:bf:df:4b:c2:69:c2:3c:79:db:08:bc:5e:d5:b2:
56:9f:f9:9d:64:be:a4:9b:c1:24:d9:b3:4b:52:5a:
7f:b5:a2:e4:cd:69:74:50:7e:a4:da:6b:4a:7d:b3:
ee:a7:10:5f:c1:10:44:0a:63:c4:0c:97:75:54:42:
e3:99:29:64:d6:c1:bd:fe:05:5f:be:6e:a7:31:4a:
44:98:3a:6f:70:45:b1:a8:40:a9:7e:47:7f:71:c3:
51:8d:50:2d:1f:41:00:07:0d:63:5a:bf:f7:65:40:
7a:2f:7e:04:ae:82:75:38:da:6d:e6:8f:4f:89:eb:
cd:ec:ac:28:e3:cf:1b:45:66:a6:10:1a:6c:28:c5:
ef:b0:6b:bf:8e:9a:2b:1e:2f:93:21:2e:0e:a0:d6:
dc:18:4d:3e:81:d7:ac:79:a2:34:ea:9f:bb:30:30:
4f:d9:39:bf:07:f5:96:a2:8e:25:c9:9a:cc:a6:89:
b5:ab:1c:b8:e6:45:60:04:32:32:34:1a:d7:b5:cb:
58:eb:51:b4:e0:28:c1:ae:25:9d:58:73:65:3f:5c:
e9:4d:84:51:cb:c6:0e:36:eb:33:84:8f:f8:cf:12:
3a:0f:d2:d5:32:27:26:a6:ae:ad:05:bd:81:7a:70:
44:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:7C:5F:A0:54:A8:E4:51:5F:0F:9C:EB:CB:49:26:5C:E1:1A:67:30
X509v3 Authority Key Identifier:
keyid:9D:81:CB:50:43:26:74:3B:17:D3:64:A2:04:87:5C:39:C6:ED:BC:09
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nYHLUEMmdDsX02SiBIdcOcbtvAk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/339d29-712a-4c86-9510-e4d6bcf336b7/1/nYHLUEMmdDsX02SiBIdcOcbtvAk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/339d29-712a-4c86-9510-e4d6bcf336b7/1/nYHLUEMmdDsX02SiBIdcOcbtvAk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
96:b3:08:56:45:c0:c1:b6:b7:52:92:ad:34:2d:19:d7:42:26:
01:02:83:d7:42:47:68:bf:39:8b:04:23:4a:92:28:66:f8:0e:
41:22:76:9b:34:0f:36:4e:2d:ef:4d:29:98:ff:df:8e:75:6c:
91:1d:d8:4c:58:50:cf:73:25:90:33:5f:14:08:4b:e6:f7:52:
da:46:06:aa:2a:a0:5d:c0:21:6a:46:54:23:27:0a:3f:24:16:
3d:53:be:90:52:9f:85:f1:b0:16:4b:cd:f7:d1:48:05:32:8a:
21:54:31:60:fd:d8:e9:a0:2f:d8:4d:52:cb:bc:f8:55:f2:72:
3d:14:0e:68:a7:8a:1a:f6:52:5b:ac:2d:ec:99:70:80:26:dc:
fa:62:a3:26:d9:df:77:0b:ba:5f:39:14:2f:bb:e3:2e:4d:86:
3f:ce:33:8e:44:9c:ae:5a:71:13:b5:16:52:9c:49:ca:8b:79:
61:e2:c8:49:11:7d:c8:4f:e6:92:91:90:93:d4:27:4c:77:c0:
12:bf:a1:9d:9b:38:a3:e7:4e:34:85:19:22:43:e2:92:fb:77:
0a:ad:4d:04:84:9f:a7:d7:ff:aa:85:87:4d:40:7f:63:a0:39:
31:8b:90:4a:0c:f9:db:f5:65:af:1f:09:d8:8d:74:2a:76:81:
95:c1:b6:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 27 04:01:18 2025 by rpki-client