Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f3/4c7379-3649-41de-89f7-d56374e1157a/1/nAqMF3kR9kwwVXNogVueZ9j8PA8.mft
File: nAqMF3kR9kwwVXNogVueZ9j8PA8.mft (raw, json)
Hash identifier: jr8f3QW1to/m+F7CBuM0z0qXSe52EUKRVYU9BRfuRyI=
Subject key identifier: DF:10:31:CE:C6:66:CE:FA:8B:59:90:A2:E4:7C:CE:2A:18:53:5E:05
Authority key identifier: 9C:0A:8C:17:79:11:F6:4C:30:55:73:68:81:5B:9E:67:D8:FC:3C:0F
Certificate issuer: /CN=9c0a8c177911f64c30557368815b9e67d8fc3c0f
Certificate serial: 019A70DC4AC3E48EC36FA4FCDBB346B7B699
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nAqMF3kR9kwwVXNogVueZ9j8PA8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f3/4c7379-3649-41de-89f7-d56374e1157a/1/nAqMF3kR9kwwVXNogVueZ9j8PA8.mft
Manifest number: 0D30
Signing time: Tue 11 Nov 2025 03:01:16 +0000
Manifest this update: Tue 11 Nov 2025 03:01:16 +0000
Manifest next update: Wed 12 Nov 2025 03:01:16 +0000
Files and hashes: 1: d6blSjaqO2EcEPuhj7EsQzjBTt0.roa (hash: 4jd/vZVphNUOF+ezj/NTHKtL7kzqYpJOJYm6eI+27Hw=)
2: nAqMF3kR9kwwVXNogVueZ9j8PA8.crl (hash: fwe3RbS8dRJ4iXaDM3ysl4vqzC9Q9DEToJUT6yyQsjA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f3/4c7379-3649-41de-89f7-d56374e1157a/1/nAqMF3kR9kwwVXNogVueZ9j8PA8.crl
rsync://rpki.ripe.net/repository/DEFAULT/f3/4c7379-3649-41de-89f7-d56374e1157a/1/nAqMF3kR9kwwVXNogVueZ9j8PA8.mft
rsync://rpki.ripe.net/repository/DEFAULT/nAqMF3kR9kwwVXNogVueZ9j8PA8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 03:01:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:70:dc:4a:c3:e4:8e:c3:6f:a4:fc:db:b3:46:b7:b6:99
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9c0a8c177911f64c30557368815b9e67d8fc3c0f
Validity
Not Before: Nov 11 03:01:16 2025 GMT
Not After : Nov 12 03:01:16 2025 GMT
Subject: CN=df1031cec666cefa8b5990a2e47cce2a18535e05
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:0e:be:2a:74:c9:a5:1b:2a:8a:cb:d0:3a:76:
21:74:d1:d1:af:4a:54:7d:d3:26:eb:8b:79:24:15:
d3:d2:05:5c:ab:65:30:57:6b:7a:2a:4d:46:69:ca:
bb:8b:6a:ef:69:1a:c4:6d:85:9b:99:e6:dc:fe:bc:
6f:d8:c1:31:93:21:2e:eb:9d:c7:93:1f:c5:4c:96:
57:6c:0b:0b:64:85:8b:fd:1c:80:9d:46:f1:7f:04:
a2:f2:d4:70:f0:5c:5e:5c:01:49:59:76:e9:ca:a3:
0c:a6:d2:66:53:0b:b7:e4:24:23:a9:04:cd:fa:c2:
3f:1f:a7:b7:b9:a6:08:b6:9d:18:f9:cd:68:6e:b9:
3d:b6:6a:09:86:e0:ef:fc:83:1f:6c:51:25:49:b2:
e6:59:b3:a2:c9:c9:1a:54:4a:bc:0d:61:9f:e0:2a:
2f:4f:ca:4a:fc:fa:71:31:c4:83:1c:35:63:02:b9:
6d:26:aa:02:85:03:28:15:fe:4c:7d:67:4c:a3:aa:
50:ce:2c:bf:43:64:3d:9f:48:a0:d5:d3:3b:9c:02:
ac:1a:05:db:ec:64:95:7e:b0:64:37:ae:65:59:19:
8d:d1:83:91:99:91:8a:67:38:8b:35:c9:b7:35:63:
5d:0c:0a:55:d1:e2:12:78:dc:6e:4b:84:a1:b1:a6:
71:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:10:31:CE:C6:66:CE:FA:8B:59:90:A2:E4:7C:CE:2A:18:53:5E:05
X509v3 Authority Key Identifier:
keyid:9C:0A:8C:17:79:11:F6:4C:30:55:73:68:81:5B:9E:67:D8:FC:3C:0F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nAqMF3kR9kwwVXNogVueZ9j8PA8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/4c7379-3649-41de-89f7-d56374e1157a/1/nAqMF3kR9kwwVXNogVueZ9j8PA8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/4c7379-3649-41de-89f7-d56374e1157a/1/nAqMF3kR9kwwVXNogVueZ9j8PA8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
61:a5:70:02:b9:e3:37:86:7f:45:1e:b6:e6:d5:31:ac:dd:1d:
b7:f4:8e:85:15:86:04:27:f0:fb:82:ce:10:94:9c:0b:b1:25:
03:eb:fe:c3:0f:73:85:09:95:58:a6:04:2d:7e:f3:4a:23:f7:
b1:80:8c:ff:a0:75:0f:d3:46:0d:91:e1:93:2f:80:76:0b:89:
49:a0:29:1d:a5:93:6f:11:22:d9:32:fa:6c:3d:b2:8b:75:08:
ae:91:c9:ad:6e:1f:df:d0:2b:da:a9:bc:9c:7f:57:44:25:80:
da:c2:5c:93:21:14:fa:ba:0c:df:29:a7:74:d1:77:ac:fb:39:
8a:03:7e:08:07:84:8c:04:7e:eb:92:80:ea:4f:01:9b:c5:d1:
ed:a6:e7:d9:1c:cd:1c:66:d3:0b:18:cd:09:fc:04:a8:98:c0:
6a:9f:18:3b:5c:25:13:0b:df:a1:78:b1:a2:a0:e5:b2:4c:04:
9b:2b:b3:75:3d:75:e5:eb:ee:8c:f1:49:a4:8f:0d:f6:61:19:
99:21:74:42:23:8e:70:7c:92:e9:64:8c:d5:02:51:ce:d9:e5:
69:f4:b4:2e:2f:fc:6f:93:74:47:2e:89:66:de:bb:3d:0f:84:
04:6e:38:97:fe:3f:59:c4:1c:37:0f:5e:0a:db:d3:53:8d:c6:
7e:23:3d:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 11:33:43 2025 by rpki-client