Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/a17b93-cc89-4d08-a5b2-636d6fc0048f/1/n4o8mp7fZEc1qU6wnwHKs5hV0ng.mft
File: n4o8mp7fZEc1qU6wnwHKs5hV0ng.mft (raw, json)
Hash identifier: fXI1pcIJ9TBhS4r8XLMadw84OMP/6Cq5fqW1UzQ1eUU=
Subject key identifier: E9:C0:33:1D:FA:9B:68:77:AE:A6:5D:F0:DE:73:D8:CB:8E:E8:46:4A
Authority key identifier: 9F:8A:3C:9A:9E:DF:64:47:35:A9:4E:B0:9F:01:CA:B3:98:55:D2:78
Certificate issuer: /CN=9f8a3c9a9edf644735a94eb09f01cab39855d278
Certificate serial: 019A5187C886688A234E6A23CECBB338A446
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/n4o8mp7fZEc1qU6wnwHKs5hV0ng.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/a17b93-cc89-4d08-a5b2-636d6fc0048f/1/n4o8mp7fZEc1qU6wnwHKs5hV0ng.mft
Manifest number: 0B7B
Signing time: Wed 05 Nov 2025 01:00:44 +0000
Manifest this update: Wed 05 Nov 2025 01:00:44 +0000
Manifest next update: Thu 06 Nov 2025 01:00:44 +0000
Files and hashes: 1: 9nrkqBfEEEVb2ilynt5HJRxEGWw.roa (hash: 9p3+VvNvFq4rrBtC/Z9UeyBNK7rF8lIsM8oxPtubKQs=)
2: n4o8mp7fZEc1qU6wnwHKs5hV0ng.crl (hash: D/bDX6Uvz/GnXnNlEBcLzMdbTSTMtaQ3V52w5z0RXy4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/45/a17b93-cc89-4d08-a5b2-636d6fc0048f/1/n4o8mp7fZEc1qU6wnwHKs5hV0ng.crl
rsync://rpki.ripe.net/repository/DEFAULT/45/a17b93-cc89-4d08-a5b2-636d6fc0048f/1/n4o8mp7fZEc1qU6wnwHKs5hV0ng.mft
rsync://rpki.ripe.net/repository/DEFAULT/n4o8mp7fZEc1qU6wnwHKs5hV0ng.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Nov 2025 01:00:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:51:87:c8:86:68:8a:23:4e:6a:23:ce:cb:b3:38:a4:46
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9f8a3c9a9edf644735a94eb09f01cab39855d278
Validity
Not Before: Nov 5 01:00:44 2025 GMT
Not After : Nov 6 01:00:44 2025 GMT
Subject: CN=e9c0331dfa9b6877aea65df0de73d8cb8ee8464a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:50:ce:54:fb:65:0b:02:6d:11:19:39:ba:a8:
47:91:9b:0d:cd:3f:35:4f:0d:65:92:c0:67:c7:74:
02:fa:65:07:9d:c0:25:72:1a:07:aa:47:1d:fb:f5:
d8:29:85:30:d6:d4:b6:c4:20:e3:1f:70:e5:a6:f4:
ad:e9:ad:d7:ea:6c:7e:0b:52:39:ff:f0:85:35:44:
7b:15:c2:4e:ff:34:cc:8a:1d:c8:be:73:f3:c1:bf:
26:e7:d5:0d:de:92:7c:fe:3f:5b:44:a7:dc:1c:59:
18:5d:da:ba:2b:15:96:8c:1f:65:10:71:06:bd:05:
26:24:71:fb:8b:36:69:05:e8:8f:1a:df:ff:2b:39:
6e:3e:8d:a6:b4:0f:4e:43:d7:11:43:10:be:43:af:
a5:6c:cf:2b:8d:8e:06:6c:71:5a:5c:c8:bc:a6:c6:
7f:ef:1b:20:5a:b0:f1:c3:31:03:f0:b0:e9:85:bc:
b3:62:4a:5b:81:9b:a9:77:1d:7f:e9:af:e2:39:c1:
ff:f9:32:fc:ff:00:78:99:5c:df:3d:81:d8:cb:50:
c8:6a:e8:29:9c:c4:2d:30:de:20:ab:ac:07:60:1a:
d8:c4:19:e4:c0:1b:41:19:37:51:52:db:6b:b5:db:
32:f9:d8:56:6f:83:ad:3f:17:41:ad:24:3f:36:3a:
18:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:C0:33:1D:FA:9B:68:77:AE:A6:5D:F0:DE:73:D8:CB:8E:E8:46:4A
X509v3 Authority Key Identifier:
keyid:9F:8A:3C:9A:9E:DF:64:47:35:A9:4E:B0:9F:01:CA:B3:98:55:D2:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/n4o8mp7fZEc1qU6wnwHKs5hV0ng.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/a17b93-cc89-4d08-a5b2-636d6fc0048f/1/n4o8mp7fZEc1qU6wnwHKs5hV0ng.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/45/a17b93-cc89-4d08-a5b2-636d6fc0048f/1/n4o8mp7fZEc1qU6wnwHKs5hV0ng.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8c:ae:55:a9:ed:b3:f5:00:75:52:a5:f6:85:a1:7f:6b:d5:9a:
10:b6:71:b1:2f:8b:7c:46:fa:05:95:b0:e3:02:b0:ad:fe:10:
12:53:08:78:4d:69:80:11:f9:4f:d9:6b:67:ca:38:30:ab:f5:
ef:ba:5b:ad:bd:ba:ea:83:25:f5:50:b9:3e:47:a8:56:36:b5:
d1:32:bb:59:d2:71:8b:dd:43:4f:ec:02:13:8d:a8:1b:89:96:
eb:05:e0:80:c6:62:de:cc:01:22:09:aa:36:87:1b:1d:6a:c3:
fa:7d:a6:11:88:40:49:59:7c:69:78:9a:bb:13:18:66:ff:28:
af:db:0d:30:7f:29:91:25:56:a1:17:96:f8:ed:79:b9:6e:0f:
e3:4c:d7:12:61:34:3a:04:8b:31:df:39:a4:88:98:78:7f:9b:
84:9f:61:28:08:e8:c9:26:57:55:4f:f5:cc:50:6c:88:41:0e:
7c:11:bb:cf:7f:7f:7f:ff:7c:95:58:ff:b7:4d:45:70:c0:85:
a9:c3:b5:b3:9b:d6:70:4a:29:8c:9a:35:fa:60:99:b0:1d:ea:
d7:63:48:37:94:a2:10:45:70:e7:13:50:8f:46:9e:3c:29:4f:
ac:b2:4c:56:ab:21:23:25:93:86:4d:35:a7:25:91:51:d8:34:
ec:45:f8:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 08:58:26 2025 by rpki-client