Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/916917-88c5-4e7b-811e-7d32ca065b66/1/n1ZG99ivwKkz-zMzPzcBPYOgTQA.mft
File: n1ZG99ivwKkz-zMzPzcBPYOgTQA.mft (raw, json)
Hash identifier: Tos1cdSK3m21BXr563ucJ+YL/quKjpNRDYBlnU1Yf44=
Subject key identifier: 30:03:BF:C2:CD:BE:C3:3A:27:85:81:18:EC:3C:F4:EC:06:84:71:EB
Authority key identifier: 9F:56:46:F7:D8:AF:C0:A9:33:FB:33:33:3F:37:01:3D:83:A0:4D:00
Certificate issuer: /CN=9f5646f7d8afc0a933fb33333f37013d83a04d00
Certificate serial: 019A52D29E1B4CECCE83A7C475842D1888F5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/n1ZG99ivwKkz-zMzPzcBPYOgTQA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/02/916917-88c5-4e7b-811e-7d32ca065b66/1/n1ZG99ivwKkz-zMzPzcBPYOgTQA.mft
Manifest number: 1712
Signing time: Wed 05 Nov 2025 07:02:05 +0000
Manifest this update: Wed 05 Nov 2025 07:02:05 +0000
Manifest next update: Thu 06 Nov 2025 07:02:05 +0000
Files and hashes: 1: 4OydZQEJVaj8JF-uoTmGENGb7Is.roa (hash: a1svWgU+LYKwh9ujA37IlIq254s7oEhH/xm68kQfTL0=)
2: WbLB1D5MYx_PgfcFWuvA_-UUgKg.roa (hash: 1LjofbnkllkaD2D3HBXrE3UcL9Erxo+FTPhwZWfcOlk=)
3: Xdap8lWOk_OPrPnAHjZrax0V0YY.roa (hash: 36jUlYBcRqreAxC1qFacFfo9gII7DpsC+iKcaU5I/sQ=)
4: n1ZG99ivwKkz-zMzPzcBPYOgTQA.crl (hash: 7YPuvmeswp4uahWcmOapuvZ70rkHbR9Jmx29iGFhAm4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/02/916917-88c5-4e7b-811e-7d32ca065b66/1/n1ZG99ivwKkz-zMzPzcBPYOgTQA.crl
rsync://rpki.ripe.net/repository/DEFAULT/02/916917-88c5-4e7b-811e-7d32ca065b66/1/n1ZG99ivwKkz-zMzPzcBPYOgTQA.mft
rsync://rpki.ripe.net/repository/DEFAULT/n1ZG99ivwKkz-zMzPzcBPYOgTQA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Nov 2025 03:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:52:d2:9e:1b:4c:ec:ce:83:a7:c4:75:84:2d:18:88:f5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9f5646f7d8afc0a933fb33333f37013d83a04d00
Validity
Not Before: Nov 5 07:02:05 2025 GMT
Not After : Nov 6 07:02:05 2025 GMT
Subject: CN=3003bfc2cdbec33a27858118ec3cf4ec068471eb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ed:d0:8d:cb:e4:b1:8a:03:b0:a1:9b:e1:17:c3:
96:6b:73:89:06:b8:f6:e6:ca:ad:09:03:4e:03:02:
2a:7e:37:45:b9:2e:98:d9:60:6f:11:ef:80:b0:b9:
43:1d:0b:d9:d4:ff:dc:3e:36:a7:10:80:c6:05:38:
59:7c:11:68:ef:e2:fc:c0:1a:9f:16:2c:77:44:57:
7c:bd:19:8c:fb:a4:9c:d6:18:67:89:e7:f8:a8:5d:
43:39:6c:a8:2f:e7:b8:2a:69:40:c0:f3:5a:e5:d3:
18:42:6c:5f:c7:ad:cf:eb:53:2d:4c:86:58:ea:1f:
90:e1:86:c6:47:66:f6:93:6a:c8:69:75:ce:24:a1:
f3:c8:2f:52:a8:c7:d3:82:33:71:63:10:9d:29:17:
fe:ee:8e:d7:0c:44:9a:03:85:da:00:40:47:1b:05:
d6:1d:5a:07:49:6d:1c:c2:6f:5a:d8:0f:cb:13:75:
a6:0d:77:62:d7:d9:9f:82:06:7e:8b:40:8c:b1:17:
ab:eb:71:85:c7:63:a2:95:fd:4d:6b:20:45:40:62:
44:cf:eb:72:ec:dd:94:64:d3:92:fd:be:5d:b1:40:
65:03:ec:c9:43:12:71:5d:42:d9:e2:48:6b:02:06:
d8:dc:b4:00:37:1b:c9:52:96:a9:13:c1:42:d8:d8:
40:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:03:BF:C2:CD:BE:C3:3A:27:85:81:18:EC:3C:F4:EC:06:84:71:EB
X509v3 Authority Key Identifier:
keyid:9F:56:46:F7:D8:AF:C0:A9:33:FB:33:33:3F:37:01:3D:83:A0:4D:00
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/n1ZG99ivwKkz-zMzPzcBPYOgTQA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/916917-88c5-4e7b-811e-7d32ca065b66/1/n1ZG99ivwKkz-zMzPzcBPYOgTQA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/02/916917-88c5-4e7b-811e-7d32ca065b66/1/n1ZG99ivwKkz-zMzPzcBPYOgTQA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
24:ad:a4:3e:d4:dc:a0:d0:61:c5:5a:dd:1b:63:9f:fc:f2:fc:
6b:58:be:52:d5:6d:d1:91:8a:00:c8:97:db:6a:d0:e7:79:4f:
e5:73:e1:2f:5f:c3:23:4d:b7:24:ad:0e:04:96:23:49:2c:1c:
1e:9e:03:a9:41:ad:3d:e6:9c:37:78:ab:3f:50:58:fe:81:92:
65:bc:4f:59:42:16:2b:bb:8a:4b:43:5d:2d:5b:dd:ec:6a:cd:
9a:2a:14:7e:c2:01:84:1d:08:cf:6f:93:9f:ef:7d:92:9a:4d:
89:aa:dd:39:2b:b7:65:e7:95:3c:5f:af:55:15:f7:8d:5b:45:
62:93:aa:92:47:a7:fe:cd:d4:ac:75:01:5e:c6:70:3d:ee:0f:
3e:99:57:2d:4a:dc:37:73:51:83:70:33:d7:27:f0:26:ad:1f:
52:41:b6:70:0f:00:7d:1d:74:8a:f7:69:4e:0c:2e:14:27:6d:
11:a4:ed:3e:1b:f5:3c:ae:88:a9:c3:03:d6:5a:bb:9f:67:82:
b5:c5:2f:2b:74:33:bc:91:50:b8:7b:dd:11:b5:7a:c4:9f:bd:
a7:d9:1b:4a:47:4c:8b:bc:40:9e:79:16:43:a7:fe:ea:5a:16:
1c:08:4c:c1:3e:73:e3:1c:64:2c:64:bb:67:91:f1:08:73:86:
69:a7:d8:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 09:04:07 2025 by rpki-client