Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b2/cbd332-a8db-4606-ac9b-14ec41d4c0a6/1/n4IkN_Se1TiGaJAir93aWfefinE.mft
File: n4IkN_Se1TiGaJAir93aWfefinE.mft (raw, json)
Hash identifier: 6ajge/4T9sGbNIn2fTZflGHjA/01oc6QB+F+AHPiyCA=
Subject key identifier: D7:74:6B:AA:82:53:31:B2:25:5B:17:BC:27:E0:6D:78:A4:6D:95:4E
Authority key identifier: 9F:82:24:37:F4:9E:D5:38:86:68:90:22:AF:DD:DA:59:F7:9F:8A:71
Certificate issuer: /CN=9f822437f49ed53886689022afddda59f79f8a71
Certificate serial: 019A4E18A4EC640294D7DD3CF7BBAF9B3526
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/n4IkN_Se1TiGaJAir93aWfefinE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b2/cbd332-a8db-4606-ac9b-14ec41d4c0a6/1/n4IkN_Se1TiGaJAir93aWfefinE.mft
Manifest number: 0A03
Signing time: Tue 04 Nov 2025 09:00:29 +0000
Manifest this update: Tue 04 Nov 2025 09:00:29 +0000
Manifest next update: Wed 05 Nov 2025 09:00:29 +0000
Files and hashes: 1: IdEYIsWCps3Gl-CPOJNmXVY_KDA.roa (hash: V5/YEnbALkGDiezb6/4H3zOCBx4UZLrATG4CYdBNlRA=)
2: n4IkN_Se1TiGaJAir93aWfefinE.crl (hash: AKngS2gXy0PwrEaD7LCE6SPpzKPOTq3y+A97deAVDE0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b2/cbd332-a8db-4606-ac9b-14ec41d4c0a6/1/n4IkN_Se1TiGaJAir93aWfefinE.crl
rsync://rpki.ripe.net/repository/DEFAULT/b2/cbd332-a8db-4606-ac9b-14ec41d4c0a6/1/n4IkN_Se1TiGaJAir93aWfefinE.mft
rsync://rpki.ripe.net/repository/DEFAULT/n4IkN_Se1TiGaJAir93aWfefinE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:18:a4:ec:64:02:94:d7:dd:3c:f7:bb:af:9b:35:26
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9f822437f49ed53886689022afddda59f79f8a71
Validity
Not Before: Nov 4 09:00:29 2025 GMT
Not After : Nov 5 09:00:29 2025 GMT
Subject: CN=d7746baa825331b2255b17bc27e06d78a46d954e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:dc:eb:f0:3c:72:32:13:51:77:2f:06:37:2f:
a4:7d:27:75:10:5e:e7:3c:45:33:74:79:ad:62:93:
b7:7e:da:6b:a4:57:c7:8c:c9:e6:f2:b5:4a:83:c8:
d0:0a:78:c7:ac:01:ef:b5:32:9d:0a:27:3a:f7:45:
42:9d:96:dd:2b:16:c2:16:00:e6:dc:f3:a8:42:a3:
74:e4:9c:2a:e1:25:7b:a2:bf:13:3f:30:80:11:15:
cd:9a:3c:18:61:7e:d3:3a:bf:9a:14:26:b1:5a:f1:
2c:f4:f8:f8:b7:20:74:ef:f8:2f:62:6c:11:24:97:
99:25:aa:74:69:57:10:52:a7:0b:f8:4b:94:e8:50:
30:88:06:f8:65:f3:e1:c2:f3:7d:b3:6a:8d:87:53:
17:26:f8:47:69:45:8a:d8:62:9c:19:70:c1:91:7e:
63:21:97:08:fb:b1:83:b7:b6:5e:a7:28:4a:26:89:
e6:80:31:d5:19:6d:fb:bc:46:fd:a6:19:fd:26:f4:
45:18:45:59:45:34:16:07:3a:96:f0:fa:46:3b:26:
c2:4d:7f:62:5c:ba:f9:cf:c5:5a:c8:21:e4:53:8e:
ab:ee:f5:71:28:ab:f4:a9:77:b4:6e:2c:77:67:4f:
b8:9d:09:b2:d9:ff:95:2f:d6:96:f0:c9:de:75:fd:
74:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:74:6B:AA:82:53:31:B2:25:5B:17:BC:27:E0:6D:78:A4:6D:95:4E
X509v3 Authority Key Identifier:
keyid:9F:82:24:37:F4:9E:D5:38:86:68:90:22:AF:DD:DA:59:F7:9F:8A:71
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/n4IkN_Se1TiGaJAir93aWfefinE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/cbd332-a8db-4606-ac9b-14ec41d4c0a6/1/n4IkN_Se1TiGaJAir93aWfefinE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/cbd332-a8db-4606-ac9b-14ec41d4c0a6/1/n4IkN_Se1TiGaJAir93aWfefinE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8e:ae:e5:53:de:0d:6d:97:ac:7d:94:8b:ed:cc:1f:6a:65:2e:
cd:4f:21:e2:00:72:3c:f9:46:0e:11:e3:b6:8f:a0:ca:a4:eb:
1b:b3:82:b9:83:70:28:9a:b3:6a:bd:99:26:96:ac:db:9e:a1:
74:d6:fd:a2:b5:bd:8c:09:8d:75:e5:23:28:3c:eb:48:fb:70:
53:60:85:16:44:8e:6f:4b:c7:a8:ce:c1:fa:06:00:83:32:af:
78:78:bf:9b:4c:e9:2b:b6:fd:4e:ba:22:6f:40:d5:e6:aa:cb:
99:06:c9:1b:1c:d8:72:15:73:54:79:8e:64:7b:11:d3:a0:f0:
b4:aa:88:9f:48:3a:d4:e3:30:a7:fd:17:e9:3d:f8:bd:5f:f5:
62:86:54:1a:04:f2:f3:af:99:a7:f9:08:79:25:85:f5:66:98:
6b:ac:e6:73:ab:64:f6:48:96:b7:1c:27:94:64:5d:4b:a7:d1:
f5:1d:6a:76:35:93:92:27:23:fd:50:98:f8:f9:44:27:85:44:
ad:a8:11:f7:7e:51:f7:d1:31:64:71:e6:88:f5:f3:ba:c2:2a:
04:3a:1d:3c:f3:96:32:19:60:0d:5e:ec:47:5b:8e:e4:81:3e:
20:15:e8:57:33:04:9e:35:1d:78:b1:ad:39:00:c3:33:10:0a:
0f:4d:2e:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 10:55:36 2025 by rpki-client