Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/069008-2e4f-4323-b6a2-e8d6c2f071df/1/n6eFncOdRzYULPHiKcisS-YjuQM.mft
File: n6eFncOdRzYULPHiKcisS-YjuQM.mft (raw, json)
Hash identifier: vUpxJHvwT1XvqE7yKEH/Gd9Fh3uvi1wU4dDvect2eMc=
Subject key identifier: 12:5D:16:B8:A5:CB:52:1A:18:F1:30:71:F6:1A:65:03:58:91:B2:B7
Authority key identifier: 9F:A7:85:9D:C3:9D:47:36:14:2C:F1:E2:29:C8:AC:4B:E6:23:B9:03
Certificate issuer: /CN=9fa7859dc39d4736142cf1e229c8ac4be623b903
Certificate serial: 019A50E375D40935CB475100EBD7CE3A7A3E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/n6eFncOdRzYULPHiKcisS-YjuQM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/069008-2e4f-4323-b6a2-e8d6c2f071df/1/n6eFncOdRzYULPHiKcisS-YjuQM.mft
Manifest number: 13AA
Signing time: Tue 04 Nov 2025 22:01:15 +0000
Manifest this update: Tue 04 Nov 2025 22:01:15 +0000
Manifest next update: Wed 05 Nov 2025 22:01:15 +0000
Files and hashes: 1: n6eFncOdRzYULPHiKcisS-YjuQM.crl (hash: UbcZM00pGglq7HyomFsKJEsNei4yxYijdPMJF+knW9c=)
2: ntwiuM95uFBi26vUIqSDj4sApAM.roa (hash: O4PdrlvcDhug5zKVlwkRZGJ/JkjzqqLTd2w+uWOsXH4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/34/069008-2e4f-4323-b6a2-e8d6c2f071df/1/n6eFncOdRzYULPHiKcisS-YjuQM.crl
rsync://rpki.ripe.net/repository/DEFAULT/34/069008-2e4f-4323-b6a2-e8d6c2f071df/1/n6eFncOdRzYULPHiKcisS-YjuQM.mft
rsync://rpki.ripe.net/repository/DEFAULT/n6eFncOdRzYULPHiKcisS-YjuQM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 18:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:50:e3:75:d4:09:35:cb:47:51:00:eb:d7:ce:3a:7a:3e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9fa7859dc39d4736142cf1e229c8ac4be623b903
Validity
Not Before: Nov 4 22:01:15 2025 GMT
Not After : Nov 5 22:01:15 2025 GMT
Subject: CN=125d16b8a5cb521a18f13071f61a65035891b2b7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:3a:b1:0d:18:59:c7:8e:fa:42:99:84:c5:be:
fb:c2:01:e6:e5:e7:29:a1:b8:d3:ed:dc:9c:aa:08:
e2:4e:97:e3:3b:23:38:b3:43:70:f2:0f:a5:2e:b1:
59:18:6a:ab:40:0f:36:61:76:22:4d:6a:9f:a2:bc:
bd:5b:d4:f0:9c:8c:0b:a1:07:a9:42:0a:a4:d1:3d:
ba:53:d7:0b:1c:d1:1e:69:09:23:61:b3:26:14:47:
b2:ec:0e:ed:db:c7:32:56:71:d9:27:5a:d9:eb:24:
64:6b:2d:d8:f4:9b:12:fa:47:f6:ee:7c:9c:57:04:
cf:91:0e:42:21:c4:67:55:af:fd:52:7a:fa:92:56:
cf:8e:f0:32:70:2d:ce:b7:2f:ee:45:7e:74:0b:7e:
18:7a:80:e8:32:bf:13:eb:42:4b:8b:f3:31:e9:17:
b0:56:d9:70:f6:b0:32:3b:82:ad:7a:f4:bc:c4:3b:
a8:5c:6a:e3:4a:6a:15:b8:b5:38:d6:a0:48:9f:fc:
3b:05:36:b5:a0:09:c6:88:f1:c3:9b:ed:cd:f6:39:
69:06:3d:84:fd:f2:47:24:c1:09:c9:f5:3f:58:dd:
84:bd:ff:aa:c2:8a:da:94:66:65:af:c7:27:8e:58:
6f:94:fb:49:53:0f:ac:20:6d:63:f0:26:dc:c4:fb:
bc:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:5D:16:B8:A5:CB:52:1A:18:F1:30:71:F6:1A:65:03:58:91:B2:B7
X509v3 Authority Key Identifier:
keyid:9F:A7:85:9D:C3:9D:47:36:14:2C:F1:E2:29:C8:AC:4B:E6:23:B9:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/n6eFncOdRzYULPHiKcisS-YjuQM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/069008-2e4f-4323-b6a2-e8d6c2f071df/1/n6eFncOdRzYULPHiKcisS-YjuQM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/34/069008-2e4f-4323-b6a2-e8d6c2f071df/1/n6eFncOdRzYULPHiKcisS-YjuQM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
43:01:83:1d:c0:df:9a:47:12:fd:eb:e1:a5:8b:79:5d:79:36:
1b:ac:80:e3:9a:1a:a0:9d:80:bc:79:f1:fd:d3:2f:79:ff:87:
87:9d:f3:99:90:e8:7d:97:7c:6c:66:6c:c2:89:66:36:26:d6:
a2:1b:37:76:91:63:fb:5e:2f:00:5a:e9:f7:71:f4:e6:67:c2:
de:1e:3e:b7:ec:a3:53:57:cc:8f:f1:d2:fe:93:05:b9:fb:cf:
b6:01:46:5b:d2:6a:8f:59:92:51:15:47:19:ff:32:2c:74:cb:
ae:47:37:a0:14:73:7c:18:7b:34:be:2d:e9:1e:95:4e:8a:8d:
25:c9:f7:27:f9:e4:5f:77:be:75:3f:7a:ba:ac:e7:ca:c7:26:
78:d7:dd:52:80:31:32:35:c2:58:26:ba:6d:4a:61:c5:3e:65:
6f:76:b9:22:54:6c:bb:6d:80:2c:c3:34:41:1b:c7:6d:c9:f8:
f2:dd:3a:77:29:bc:0f:49:c9:c0:d5:c2:39:7f:69:a1:d5:91:
37:09:a5:18:ad:eb:85:71:bc:19:dd:fa:0c:16:27:85:d4:c8:
ef:f7:8d:a0:11:81:ee:ce:0b:8f:20:39:2e:22:51:26:bd:b6:
63:50:c5:62:7b:48:dc:30:94:0d:07:25:d7:8b:f1:be:6c:5b:
40:c6:9d:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 04:13:56 2025 by rpki-client