Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c1/680589-8472-43eb-b034-21769de4a1a8/1/n4dSHxXgRXKIqfGWqMiGXDaSIVA.mft
File: n4dSHxXgRXKIqfGWqMiGXDaSIVA.mft (raw, json)
Hash identifier: wvGAhrRFgxCi3dBIcgaepJiyeq44nkr5XtKtFTLRjUQ=
Subject key identifier: AE:A8:CF:2A:53:BD:03:B9:09:0A:51:54:65:E9:7C:9C:3F:28:C2:F1
Authority key identifier: 9F:87:52:1F:15:E0:45:72:88:A9:F1:96:A8:C8:86:5C:36:92:21:50
Certificate issuer: /CN=9f87521f15e0457288a9f196a8c8865c36922150
Certificate serial: 019A503E65CDBA5166CC882F0DA7D1888755
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/n4dSHxXgRXKIqfGWqMiGXDaSIVA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c1/680589-8472-43eb-b034-21769de4a1a8/1/n4dSHxXgRXKIqfGWqMiGXDaSIVA.mft
Manifest number: 170F
Signing time: Tue 04 Nov 2025 19:00:57 +0000
Manifest this update: Tue 04 Nov 2025 19:00:57 +0000
Manifest next update: Wed 05 Nov 2025 19:00:57 +0000
Files and hashes: 1: ItUfI_e5TZV8Ja35X57TtR81NmA.roa (hash: IR3NcH60QSQHq12hzjVbCSbj+J8hOMovAsbbfhH0qaA=)
2: n4dSHxXgRXKIqfGWqMiGXDaSIVA.crl (hash: 8ysNwZRe0IVKH0CLk5D077rX1WsSxAS5bbviarlUakQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c1/680589-8472-43eb-b034-21769de4a1a8/1/n4dSHxXgRXKIqfGWqMiGXDaSIVA.crl
rsync://rpki.ripe.net/repository/DEFAULT/c1/680589-8472-43eb-b034-21769de4a1a8/1/n4dSHxXgRXKIqfGWqMiGXDaSIVA.mft
rsync://rpki.ripe.net/repository/DEFAULT/n4dSHxXgRXKIqfGWqMiGXDaSIVA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 18:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:50:3e:65:cd:ba:51:66:cc:88:2f:0d:a7:d1:88:87:55
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9f87521f15e0457288a9f196a8c8865c36922150
Validity
Not Before: Nov 4 19:00:57 2025 GMT
Not After : Nov 5 19:00:57 2025 GMT
Subject: CN=aea8cf2a53bd03b9090a515465e97c9c3f28c2f1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:6e:f4:06:08:89:3e:ee:3e:0c:9b:fc:08:3d:
a1:83:f9:0e:67:b7:0a:5c:27:c9:99:5a:49:51:3a:
60:59:d3:c5:e0:dc:6c:90:c3:fc:37:5a:4b:e6:e4:
b8:73:a8:62:b1:9e:b9:00:29:02:c1:89:1a:60:ff:
92:1e:15:11:79:23:e1:93:6f:28:e0:af:14:39:6f:
7a:fa:60:bf:e0:ca:f2:91:76:e8:bc:a5:f9:cb:50:
a8:25:73:f1:a7:51:1c:89:15:a6:12:a1:47:33:3f:
9f:cb:c2:4a:20:13:dd:da:2a:b5:b8:a9:8b:64:62:
d7:67:d3:bd:5a:e4:27:fa:a6:77:65:d3:af:ca:db:
01:d5:67:b5:c4:55:af:65:0e:23:9f:4e:67:3a:53:
99:eb:d7:c5:87:31:aa:77:55:74:d1:c1:31:83:31:
98:93:3d:e5:81:27:d1:45:4e:3e:50:c9:f5:33:af:
79:aa:96:e9:95:52:08:11:50:ca:f4:e4:60:a2:6a:
e5:1a:01:bb:7f:de:07:57:43:28:5b:34:86:53:b6:
a1:03:57:a8:20:82:39:e2:93:6b:1c:ed:9d:3c:eb:
fe:2c:c0:3c:8b:1f:38:af:2a:07:18:cb:50:b0:3c:
7d:18:50:1a:dc:9c:9e:39:4e:2d:3c:8f:f2:53:19:
6b:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:A8:CF:2A:53:BD:03:B9:09:0A:51:54:65:E9:7C:9C:3F:28:C2:F1
X509v3 Authority Key Identifier:
keyid:9F:87:52:1F:15:E0:45:72:88:A9:F1:96:A8:C8:86:5C:36:92:21:50
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/n4dSHxXgRXKIqfGWqMiGXDaSIVA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/680589-8472-43eb-b034-21769de4a1a8/1/n4dSHxXgRXKIqfGWqMiGXDaSIVA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/680589-8472-43eb-b034-21769de4a1a8/1/n4dSHxXgRXKIqfGWqMiGXDaSIVA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
70:db:7b:1e:4f:95:7c:ac:11:dd:a1:27:17:c8:55:d0:ae:91:
6f:02:09:17:36:99:c5:94:b8:82:70:fc:ec:9c:e5:bf:ed:7c:
43:14:a5:2c:d1:07:e4:db:63:7c:2e:44:0e:77:2a:9d:a9:82:
31:98:df:b3:65:fc:70:fb:e4:9c:98:0d:cc:4e:86:31:6a:f4:
e1:2a:b6:91:8f:e5:77:ae:a2:c5:9a:fa:f7:8c:e4:79:5e:fa:
c6:4b:2a:49:ca:c2:ec:92:3d:b3:fa:d0:f8:ef:af:e2:6d:72:
cc:ae:64:60:73:43:9d:af:9e:a3:5a:e7:a3:bc:a6:7e:b0:53:
0e:f0:d4:e9:c8:95:83:b8:67:5f:44:dd:1b:81:1c:1a:cb:0b:
7b:91:72:90:3b:8c:64:6c:9d:a2:53:09:59:94:13:58:65:ef:
b2:25:f1:3f:26:1b:9e:c6:b0:8d:c6:da:3f:11:0e:e0:55:65:
89:9c:97:a0:68:8d:22:bb:b1:8a:a5:c0:84:ae:15:81:bb:fa:
00:3a:c8:34:8e:57:2e:d5:ff:0f:73:30:11:d8:d2:c7:c3:ac:
08:46:36:1a:05:e8:d5:f5:88:4b:20:ee:b3:f1:7b:ba:08:b4:
7b:f3:4d:77:ff:b4:86:db:14:a2:f6:85:46:c4:bd:48:fa:c3:
9b:d0:0d:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 22:22:12 2025 by rpki-client