Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fb/dcb613-93eb-4e86-895b-b1e698708f59/1/nJB6oEaogfuAUFGVIBYwYCYNfzE.mft
File: nJB6oEaogfuAUFGVIBYwYCYNfzE.mft (raw, json)
Hash identifier: 7tpD8+tqZZqV6rDfrAUSUGjYqj4F4XHQ6X+8i92OzNk=
Subject key identifier: 30:CA:14:F3:D4:12:40:87:AD:E7:1D:28:68:8E:DA:DE:61:6F:F2:9A
Authority key identifier: 9C:90:7A:A0:46:A8:81:FB:80:50:51:95:20:16:30:60:26:0D:7F:31
Certificate issuer: /CN=9c907aa046a881fb8050519520163060260d7f31
Certificate serial: 019935A5A7A6DCD35B235997078C4612024E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nJB6oEaogfuAUFGVIBYwYCYNfzE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fb/dcb613-93eb-4e86-895b-b1e698708f59/1/nJB6oEaogfuAUFGVIBYwYCYNfzE.mft
Manifest number: 0256
Signing time: Wed 10 Sep 2025 22:01:12 +0000
Manifest this update: Wed 10 Sep 2025 22:01:12 +0000
Manifest next update: Thu 11 Sep 2025 22:01:12 +0000
Files and hashes: 1: F86xC6xwpLDuhs7A8wZygejUMX8.roa (hash: hqY5dyyDkeBwJW2ZEKNHXzfFF8UT2R+EbGGyWHizujw=)
2: nJB6oEaogfuAUFGVIBYwYCYNfzE.crl (hash: 1qXlWm/j7wlnVPc+mJyYrxyE8ZPiwo4O5gEzkjAvVLc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fb/dcb613-93eb-4e86-895b-b1e698708f59/1/nJB6oEaogfuAUFGVIBYwYCYNfzE.crl
rsync://rpki.ripe.net/repository/DEFAULT/fb/dcb613-93eb-4e86-895b-b1e698708f59/1/nJB6oEaogfuAUFGVIBYwYCYNfzE.mft
rsync://rpki.ripe.net/repository/DEFAULT/nJB6oEaogfuAUFGVIBYwYCYNfzE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 11 Sep 2025 20:00:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:35:a5:a7:a6:dc:d3:5b:23:59:97:07:8c:46:12:02:4e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9c907aa046a881fb8050519520163060260d7f31
Validity
Not Before: Sep 10 22:01:12 2025 GMT
Not After : Sep 11 22:01:12 2025 GMT
Subject: CN=30ca14f3d4124087ade71d28688edade616ff29a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:b4:03:da:db:8d:48:56:36:50:a4:a5:c3:b1:
36:8e:c0:ac:eb:34:82:f6:1f:6d:41:22:16:a7:d6:
36:fb:10:94:98:06:fe:8a:8c:d9:15:87:74:92:45:
63:ae:17:73:9e:9e:f4:29:39:d3:0e:28:26:b4:6f:
e5:8c:21:91:f5:b6:d7:f2:7e:99:f4:d1:52:a4:c9:
d2:1f:79:6c:6e:24:6d:a5:92:a7:e9:42:7c:a5:b7:
b5:b8:0e:37:92:75:c2:71:63:0f:fe:88:12:2e:58:
96:2a:9f:57:64:e4:32:a6:8f:f7:1f:02:42:0c:4c:
fc:d7:c6:4a:03:fb:b8:68:18:c5:b7:6d:77:2a:0e:
fb:31:e3:83:eb:de:dd:bc:a9:c8:93:2e:4c:f0:90:
52:c7:39:57:c9:64:12:ed:95:b7:d5:1d:34:37:20:
d6:d3:f9:7e:be:70:50:60:be:d9:ce:c1:fe:09:25:
18:40:70:69:ea:1b:66:21:c0:33:63:6e:89:d8:ba:
a8:8b:49:12:7a:25:67:a2:cf:53:e1:22:b1:22:7c:
af:1c:ba:20:0e:ae:5a:bd:6f:ae:b1:a5:ac:31:ff:
4f:99:f7:17:ca:d4:39:c5:43:ab:d4:fb:11:60:b8:
25:46:a6:2f:3e:ec:f2:b1:6f:98:8e:60:86:c8:e8:
b3:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:CA:14:F3:D4:12:40:87:AD:E7:1D:28:68:8E:DA:DE:61:6F:F2:9A
X509v3 Authority Key Identifier:
keyid:9C:90:7A:A0:46:A8:81:FB:80:50:51:95:20:16:30:60:26:0D:7F:31
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nJB6oEaogfuAUFGVIBYwYCYNfzE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/dcb613-93eb-4e86-895b-b1e698708f59/1/nJB6oEaogfuAUFGVIBYwYCYNfzE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/dcb613-93eb-4e86-895b-b1e698708f59/1/nJB6oEaogfuAUFGVIBYwYCYNfzE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
49:c4:e3:6d:be:7a:33:6b:9c:0d:01:9d:45:22:d8:a9:a3:c8:
d3:82:7f:97:e5:5a:c0:87:e1:da:de:2c:a5:3c:64:24:e2:2a:
ab:0f:de:f0:60:fe:81:49:1e:3c:ca:5d:a8:0d:c1:c8:35:02:
10:5c:9a:97:d5:6e:da:15:45:69:67:13:38:8c:6b:60:f1:c4:
62:7a:c2:ef:7f:21:65:2e:4e:05:91:66:71:e4:d4:d7:70:8e:
88:a2:2a:be:7c:95:fb:23:60:bb:b3:e2:9f:a4:94:99:a7:6f:
10:cf:64:3e:52:b5:de:73:1e:1d:aa:cb:96:9e:f0:30:5d:0d:
d3:42:a7:a4:8f:6d:79:bf:0f:f3:6b:19:b2:c1:76:98:15:27:
76:be:0d:61:04:87:eb:fc:d8:d5:4c:66:c7:86:d3:a3:27:73:
00:03:f0:96:ec:49:93:d3:0f:04:5a:3d:bc:78:92:ef:45:b3:
de:8e:3c:4c:e6:1a:38:a5:de:04:75:5b:14:ea:2a:e5:62:eb:
fa:76:40:22:a6:70:d9:43:20:6c:75:82:3b:94:46:7e:7a:72:
8d:d4:1b:63:80:82:58:eb:8f:10:d1:06:90:54:08:57:1f:4a:
e3:89:c0:10:2e:e2:14:dd:f1:2a:bb:93:6b:31:a1:5c:3b:e8:
ec:ad:e2:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 11 06:13:01 2025 by rpki-client