Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/02400f-7802-44e7-8527-8b291e26d1d9/1/n7bU2YfQBKAPopfmnCaOt189mkA.mft
File: n7bU2YfQBKAPopfmnCaOt189mkA.mft (raw, json)
Hash identifier: SUuCPcB8UhqUQ5U2XXW/slvCJBSvKO+nXGn7dqDU2DI=
Subject key identifier: B1:81:24:D6:A7:26:8E:76:3F:79:E6:7C:DC:D7:A9:8C:D6:69:25:54
Authority key identifier: 9F:B6:D4:D9:87:D0:04:A0:0F:A2:97:E6:9C:26:8E:B7:5F:3D:9A:40
Certificate issuer: /CN=9fb6d4d987d004a00fa297e69c268eb75f3d9a40
Certificate serial: 019A503E4BFDB271A1AD2183CDB071838CB8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/n7bU2YfQBKAPopfmnCaOt189mkA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/18/02400f-7802-44e7-8527-8b291e26d1d9/1/n7bU2YfQBKAPopfmnCaOt189mkA.mft
Manifest number: 0EEC
Signing time: Tue 04 Nov 2025 19:00:51 +0000
Manifest this update: Tue 04 Nov 2025 19:00:51 +0000
Manifest next update: Wed 05 Nov 2025 19:00:51 +0000
Files and hashes: 1: 5ZNOGBQ9w8dTp0XQhpuUk8zzApg.roa (hash: 1/+Fm1r/KA+hNLAy+y/H8/1fP0WyouANNJuTvhP3iNk=)
2: n7bU2YfQBKAPopfmnCaOt189mkA.crl (hash: 3dSGguwmA7YhaicpL9hCmUQY+eAoeA4vbxX/RiFM8pc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/18/02400f-7802-44e7-8527-8b291e26d1d9/1/n7bU2YfQBKAPopfmnCaOt189mkA.crl
rsync://rpki.ripe.net/repository/DEFAULT/18/02400f-7802-44e7-8527-8b291e26d1d9/1/n7bU2YfQBKAPopfmnCaOt189mkA.mft
rsync://rpki.ripe.net/repository/DEFAULT/n7bU2YfQBKAPopfmnCaOt189mkA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 18:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:50:3e:4b:fd:b2:71:a1:ad:21:83:cd:b0:71:83:8c:b8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9fb6d4d987d004a00fa297e69c268eb75f3d9a40
Validity
Not Before: Nov 4 19:00:51 2025 GMT
Not After : Nov 5 19:00:51 2025 GMT
Subject: CN=b18124d6a7268e763f79e67cdcd7a98cd6692554
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:e2:9d:69:b7:6a:d5:b5:06:e6:b8:21:91:6c:
5b:81:67:57:6a:ed:1a:48:3e:07:3a:26:d5:09:0d:
50:54:c3:7c:12:ff:43:f0:5a:6b:f7:7f:a8:cb:a4:
a5:19:e0:ee:71:5e:95:9c:e5:18:9e:8a:9e:c6:37:
b6:c8:39:1c:9e:22:73:1d:ca:d9:5e:0b:90:f3:b2:
6e:fb:54:85:bb:9a:cc:f2:04:f6:31:48:14:06:29:
a6:48:87:f0:31:95:69:f7:3a:00:1f:5c:b4:28:8e:
0b:fb:65:66:ae:b1:16:d4:18:c2:da:c6:c1:4d:3d:
16:de:16:2b:00:ad:fd:e4:6d:4b:37:c4:8e:99:d2:
f9:49:fd:ba:b3:69:08:71:76:a5:b1:e0:40:ee:22:
3c:c1:ab:9e:0e:e7:40:e5:40:40:73:c5:4a:44:3f:
6d:f5:a0:51:ce:4b:ab:b6:c2:6f:23:3e:d0:9c:15:
b8:fd:73:9d:e8:cf:2a:bf:48:a2:e7:0d:f2:57:02:
8e:56:5e:e1:7a:4e:94:fb:08:45:30:e4:e1:b5:86:
23:fc:32:b7:93:25:63:9e:52:62:31:c0:10:06:6f:
99:1c:7a:f7:52:a8:21:48:a5:d8:22:4c:a8:cf:07:
35:1b:04:31:25:b7:da:67:0d:9d:4b:2c:49:6b:e6:
58:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:81:24:D6:A7:26:8E:76:3F:79:E6:7C:DC:D7:A9:8C:D6:69:25:54
X509v3 Authority Key Identifier:
keyid:9F:B6:D4:D9:87:D0:04:A0:0F:A2:97:E6:9C:26:8E:B7:5F:3D:9A:40
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/n7bU2YfQBKAPopfmnCaOt189mkA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/02400f-7802-44e7-8527-8b291e26d1d9/1/n7bU2YfQBKAPopfmnCaOt189mkA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/18/02400f-7802-44e7-8527-8b291e26d1d9/1/n7bU2YfQBKAPopfmnCaOt189mkA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
15:71:21:b7:4d:94:5e:7a:a5:c2:49:c7:b7:4a:5a:b3:41:b6:
54:1d:cc:73:0f:47:8b:03:c8:96:ac:f7:12:af:fd:82:2e:49:
8c:50:9c:19:5d:c7:67:0d:71:79:4f:eb:70:b1:66:c9:a9:96:
78:07:34:53:b3:39:d3:1a:de:4f:71:13:3a:3b:05:97:85:56:
0c:9d:91:ec:d2:bf:62:04:56:5d:c0:b9:3f:06:5e:43:9d:86:
1b:4b:2b:16:58:51:be:9e:46:7d:6f:01:8a:38:bc:6d:b1:8e:
32:c1:28:4a:2f:1f:1d:4f:01:8e:16:0a:cb:31:a3:8a:85:d9:
47:72:75:9a:d9:60:9d:ee:7d:cd:66:c5:02:c6:39:3c:7f:5e:
18:7b:77:e5:ac:ea:05:df:d9:2e:fe:b1:18:76:25:2a:7d:3b:
46:87:b7:67:a3:d5:ac:61:b0:38:af:ed:2e:e3:2c:34:f7:40:
62:5d:82:f7:08:37:0d:bf:ed:a6:e0:36:07:f8:94:23:7c:2b:
0d:13:41:c8:bd:06:72:45:e5:43:47:f1:8a:fd:0a:f9:ef:bb:
07:a9:1e:36:80:60:29:b4:d7:29:7e:1a:e8:f4:d2:21:9b:24:
32:fe:7d:10:96:c0:57:fb:7e:26:d0:da:fd:20:74:51:0a:ed:
19:81:7d:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 03:12:18 2025 by rpki-client