Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/127684-5afe-4f18-b95d-3072503d8607/1/n_M9TzrAqIeECihM3Bq-t91kLwE.mft
File: n_M9TzrAqIeECihM3Bq-t91kLwE.mft (raw, json)
Hash identifier: 5X1KK1GrUU3efnnk6/qPmQzR01p+gyaaD+Ey57yyyfQ=
Subject key identifier: 28:A9:43:C7:BB:28:BF:30:AA:06:44:48:A2:98:98:B3:46:23:44:98
Authority key identifier: 9F:F3:3D:4F:3A:C0:A8:87:84:0A:28:4C:DC:1A:BE:B7:DD:64:2F:01
Certificate issuer: /CN=9ff33d4f3ac0a887840a284cdc1abeb7dd642f01
Certificate serial: 019A52D245D78FF3441C649BE7F92F58904A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/n_M9TzrAqIeECihM3Bq-t91kLwE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/127684-5afe-4f18-b95d-3072503d8607/1/n_M9TzrAqIeECihM3Bq-t91kLwE.mft
Manifest number: 104A
Signing time: Wed 05 Nov 2025 07:01:43 +0000
Manifest this update: Wed 05 Nov 2025 07:01:43 +0000
Manifest next update: Thu 06 Nov 2025 07:01:43 +0000
Files and hashes: 1: FVg-EXFcHktuG7QQnavEaXe-fnM.roa (hash: mi0+1itCdMO3yynnGJ5oIkWt7SrPDpOOMP9BVB9K+Jc=)
2: T3nKkG-dCBEn2EriUuJalbbWuME.roa (hash: NecAgRoxclxz3UKtAie4B0/FU5sK9TM4xXuPGjhm4Kc=)
3: n_M9TzrAqIeECihM3Bq-t91kLwE.crl (hash: h0RXm73d1T4lomDjGwmHHB4BeberVnuIwkd7tWuUL3Q=)
4: nl8-f4Y4T6rTsqYQijhuiNifL1Q.roa (hash: D8rqvsrK84p8WeU5jZAqKp61j1ey2NYKXftp+gwX6/8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/127684-5afe-4f18-b95d-3072503d8607/1/n_M9TzrAqIeECihM3Bq-t91kLwE.crl
rsync://rpki.ripe.net/repository/DEFAULT/5a/127684-5afe-4f18-b95d-3072503d8607/1/n_M9TzrAqIeECihM3Bq-t91kLwE.mft
rsync://rpki.ripe.net/repository/DEFAULT/n_M9TzrAqIeECihM3Bq-t91kLwE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Nov 2025 03:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:52:d2:45:d7:8f:f3:44:1c:64:9b:e7:f9:2f:58:90:4a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9ff33d4f3ac0a887840a284cdc1abeb7dd642f01
Validity
Not Before: Nov 5 07:01:43 2025 GMT
Not After : Nov 6 07:01:43 2025 GMT
Subject: CN=28a943c7bb28bf30aa064448a29898b346234498
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:47:e5:06:98:cd:b4:13:4c:7b:02:df:01:dc:
26:35:7e:aa:46:af:61:0b:d6:fb:7a:cf:4e:6d:e9:
7b:1a:3c:5f:70:96:28:37:c2:15:72:c6:c6:fa:93:
04:9a:d7:0e:cd:66:b2:eb:e2:8e:cb:d9:06:d4:a2:
44:03:e6:4e:bf:0c:bd:1e:3d:33:59:41:55:ec:25:
01:84:74:91:d3:9a:97:63:5a:f6:0d:1d:76:08:fd:
97:db:75:08:d0:e8:ce:f1:b5:53:b4:f2:88:c9:b1:
89:f9:28:aa:93:f3:b4:c7:81:2e:9a:bf:fd:56:19:
66:df:e4:62:d7:d9:b1:cf:d4:91:fb:83:e6:91:db:
91:49:b4:43:dc:a5:83:48:df:a7:7b:a1:00:d6:2a:
d3:70:79:64:0d:7b:4b:8e:39:7d:14:91:63:19:b7:
6b:1a:40:4a:d5:05:b6:dc:7a:20:b3:ec:60:ec:05:
f0:a2:01:c7:50:19:7c:02:70:8c:65:c2:24:5b:90:
99:3c:71:da:44:1b:3e:78:29:f2:c4:4b:19:a5:a1:
6c:28:56:0b:f9:52:69:4a:86:17:5b:22:23:8e:79:
4f:2b:0e:55:28:c2:a1:08:f7:bd:e2:03:12:0e:dc:
f8:60:e3:98:82:3f:bb:6d:d7:dc:cd:99:eb:43:7b:
0a:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:A9:43:C7:BB:28:BF:30:AA:06:44:48:A2:98:98:B3:46:23:44:98
X509v3 Authority Key Identifier:
keyid:9F:F3:3D:4F:3A:C0:A8:87:84:0A:28:4C:DC:1A:BE:B7:DD:64:2F:01
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/n_M9TzrAqIeECihM3Bq-t91kLwE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/127684-5afe-4f18-b95d-3072503d8607/1/n_M9TzrAqIeECihM3Bq-t91kLwE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/127684-5afe-4f18-b95d-3072503d8607/1/n_M9TzrAqIeECihM3Bq-t91kLwE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
49:32:c4:42:7a:30:16:8f:c8:09:ca:95:9a:21:e9:bf:ee:e1:
06:3a:69:0d:3e:96:f0:07:d1:f1:41:56:a6:4e:47:84:d8:77:
99:b7:57:99:a6:df:53:32:dc:db:ae:e5:f6:55:db:bc:00:df:
db:13:21:e5:43:2f:1b:ae:38:8e:4b:f1:76:ff:e1:9f:21:d7:
30:ba:07:7f:26:f2:79:6f:03:ea:40:c1:99:88:d0:3d:9a:bc:
9a:02:75:a0:8e:d1:c5:e2:6d:c2:95:b5:d1:8d:68:a3:b4:96:
ae:cf:93:76:7b:72:3f:0e:d2:7f:ff:8c:8f:18:b9:9b:a7:1c:
71:71:b4:57:8b:f6:07:c3:e4:8a:39:95:43:d2:33:28:53:6f:
66:d1:cb:0c:d3:46:5f:9e:41:3d:da:6e:2e:6d:db:3b:b8:bb:
c6:4c:af:e9:3e:d4:f7:d1:00:20:43:3d:01:af:2f:50:69:89:
1c:98:a4:9b:f6:6b:a6:a1:5a:c9:66:09:d9:4d:24:53:90:34:
ad:19:2f:69:0a:16:b2:99:29:a0:df:f1:f8:f1:c5:47:be:5c:
67:66:03:28:55:eb:b1:17:5c:66:89:f2:d1:87:e3:a5:cf:ff:
9b:13:70:eb:20:75:b8:47:77:c0:2e:c2:38:01:c5:f9:39:22:
67:ba:02:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 13:31:25 2025 by rpki-client