Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3f/205c19-b73a-48fe-a086-356c09380887/1/n4535zgxPmVwaE3RUsLihDMrLFs.mft
File: n4535zgxPmVwaE3RUsLihDMrLFs.mft (raw, json)
Hash identifier: vrODKRuvkG4OlaImYErArK7h3K4cKVlAocct26+e624=
Subject key identifier: 09:8F:0E:B9:D4:2A:4C:15:01:27:5E:3A:4D:2C:7B:7E:39:0A:9A:57
Authority key identifier: 9F:8E:77:E7:38:31:3E:65:70:68:4D:D1:52:C2:E2:84:33:2B:2C:5B
Certificate issuer: /CN=9f8e77e738313e6570684dd152c2e284332b2c5b
Certificate serial: 019A4DE204C5A47C7696F935E2DCB749D370
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/n4535zgxPmVwaE3RUsLihDMrLFs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3f/205c19-b73a-48fe-a086-356c09380887/1/n4535zgxPmVwaE3RUsLihDMrLFs.mft
Manifest number: 0FB9
Signing time: Tue 04 Nov 2025 08:00:49 +0000
Manifest this update: Tue 04 Nov 2025 08:00:49 +0000
Manifest next update: Wed 05 Nov 2025 08:00:49 +0000
Files and hashes: 1: C5MhC96HxaJKMKNS_jY_WLtyOQI.roa (hash: ESPNEcm8ABrBz0nfnXDJUwVTxpctLOm0CbjyoAr2waU=)
2: n4535zgxPmVwaE3RUsLihDMrLFs.crl (hash: C8nFZVn9zOmCWj2/MQ1we6oEDe8kwlQCvukqpBA9VLE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3f/205c19-b73a-48fe-a086-356c09380887/1/n4535zgxPmVwaE3RUsLihDMrLFs.crl
rsync://rpki.ripe.net/repository/DEFAULT/3f/205c19-b73a-48fe-a086-356c09380887/1/n4535zgxPmVwaE3RUsLihDMrLFs.mft
rsync://rpki.ripe.net/repository/DEFAULT/n4535zgxPmVwaE3RUsLihDMrLFs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 08:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4d:e2:04:c5:a4:7c:76:96:f9:35:e2:dc:b7:49:d3:70
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9f8e77e738313e6570684dd152c2e284332b2c5b
Validity
Not Before: Nov 4 08:00:49 2025 GMT
Not After : Nov 5 08:00:49 2025 GMT
Subject: CN=098f0eb9d42a4c1501275e3a4d2c7b7e390a9a57
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:ec:56:91:eb:03:a6:26:62:fa:e3:8a:b1:6f:
ce:2e:1f:5b:d8:15:88:89:2c:8b:c2:c0:fd:21:15:
d2:74:6a:04:23:2e:f1:cb:ba:15:80:1d:92:49:c9:
0d:24:a1:ac:78:bc:49:5e:ce:cf:1e:0f:98:d0:22:
dd:97:bd:5b:45:62:bd:62:61:00:91:41:4f:56:34:
86:83:27:93:36:1a:2f:01:81:db:e2:5c:0f:2d:89:
8f:1d:c7:28:67:c3:64:70:14:b4:0b:3c:23:e5:c7:
cd:48:24:54:62:ac:1d:0b:c3:90:0a:91:9a:4d:e6:
72:bc:bc:1c:3b:d0:c2:cc:9c:8b:e4:63:e6:1c:e4:
f3:99:6a:56:48:aa:c8:94:63:ae:a6:4f:a6:01:f4:
1b:c8:01:10:83:bd:f0:5c:81:6c:84:0d:02:f8:37:
88:4b:09:b4:57:aa:c7:b4:ea:33:04:ca:0d:70:49:
e3:68:c0:af:1c:6f:5f:ec:67:3c:33:c0:56:1f:0a:
5e:4e:33:81:59:6b:83:96:c1:64:d6:5a:b7:26:18:
fa:a0:96:a8:ec:c6:3c:eb:1a:72:0e:d0:f3:fb:9e:
d9:8f:2e:5d:af:de:70:39:d5:34:66:91:ff:9e:12:
d6:3a:af:d3:fb:4d:0a:b5:d1:f9:d5:a5:f0:c6:46:
b8:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:8F:0E:B9:D4:2A:4C:15:01:27:5E:3A:4D:2C:7B:7E:39:0A:9A:57
X509v3 Authority Key Identifier:
keyid:9F:8E:77:E7:38:31:3E:65:70:68:4D:D1:52:C2:E2:84:33:2B:2C:5B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/n4535zgxPmVwaE3RUsLihDMrLFs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/205c19-b73a-48fe-a086-356c09380887/1/n4535zgxPmVwaE3RUsLihDMrLFs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/205c19-b73a-48fe-a086-356c09380887/1/n4535zgxPmVwaE3RUsLihDMrLFs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1a:f0:fb:24:68:42:78:dc:0e:7b:06:b9:7b:e6:d4:1f:a2:05:
d0:82:ea:6b:95:c3:49:d3:67:98:0c:ea:be:61:fe:90:de:17:
95:8b:0a:46:60:78:15:68:af:58:7c:c4:89:df:d5:00:1e:06:
b0:b3:38:a8:55:72:12:76:82:9a:b0:0c:29:a0:fd:14:e4:13:
06:e0:df:68:7a:a6:76:94:e1:09:3c:cd:db:f6:3a:4e:1f:f7:
ac:48:00:52:24:0e:f6:b3:10:7b:4e:b0:f6:4b:11:92:a9:55:
a8:47:ac:03:56:40:0f:90:79:eb:b8:a6:8c:9c:15:93:be:23:
f2:ec:93:0b:1d:5e:ca:97:b9:86:10:60:f2:6b:20:70:98:f0:
d7:32:81:28:4e:54:8e:20:da:19:c6:aa:af:33:17:ec:13:c3:
94:4b:ed:55:ac:03:b3:7f:de:b2:82:4a:27:08:88:9d:53:13:
bc:e4:23:83:be:53:e5:d7:2f:12:2e:a2:10:06:ca:2e:bd:85:
e1:2e:c8:c8:71:0d:46:a2:8a:62:1c:7e:22:e1:d9:65:4d:b6:
a2:1b:16:c1:45:18:5c:32:92:3d:d9:7f:63:d3:91:bd:b0:82:
05:16:c2:1d:70:4b:6c:e9:5f:3a:d3:a4:a8:85:98:61:68:98:
e4:15:db:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 14:40:50 2025 by rpki-client