Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ff/d8c58d-8d24-4280-91fd-48b1664d40d5/1/N9J_wkRD_N1LG2XPyAeMShQon54.mft
File: N9J_wkRD_N1LG2XPyAeMShQon54.mft (raw, json)
Hash identifier: V6h5DS8wr0j24nseT0oSMKT4rqvP1ek2xM5PSBBa7xs=
Subject key identifier: 97:9E:12:05:E4:C7:DA:B4:05:89:7C:B4:43:73:79:9D:E8:F8:73:44
Authority key identifier: 37:D2:7F:C2:44:43:FC:DD:4B:1B:65:CF:C8:07:8C:4A:14:28:9F:9E
Certificate issuer: /CN=37d27fc24443fcdd4b1b65cfc8078c4a14289f9e
Certificate serial: 019A4E864FC21C1CA0E04D9427F939065DAE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/N9J_wkRD_N1LG2XPyAeMShQon54.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ff/d8c58d-8d24-4280-91fd-48b1664d40d5/1/N9J_wkRD_N1LG2XPyAeMShQon54.mft
Manifest number: 170E
Signing time: Tue 04 Nov 2025 11:00:16 +0000
Manifest this update: Tue 04 Nov 2025 11:00:16 +0000
Manifest next update: Wed 05 Nov 2025 11:00:16 +0000
Files and hashes: 1: N9J_wkRD_N1LG2XPyAeMShQon54.crl (hash: Yvw6LqbTjElup7L59aLN5Z1ClkyE6p6h71IOuVGnrJs=)
2: TLZrPYGbv3OSz3l-n9m1uFTtYyY.roa (hash: BAfT0SDdeatk44A0MoM3KqLiELOkYEeVNpqrfHgFPvo=)
3: fTuGHUDbLXIf1K1JGZkDmgp4h30.roa (hash: CE5/seUejdLKBZqDs568ZVcYXPKEXW1OP4zxVz04Gmo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ff/d8c58d-8d24-4280-91fd-48b1664d40d5/1/N9J_wkRD_N1LG2XPyAeMShQon54.crl
rsync://rpki.ripe.net/repository/DEFAULT/ff/d8c58d-8d24-4280-91fd-48b1664d40d5/1/N9J_wkRD_N1LG2XPyAeMShQon54.mft
rsync://rpki.ripe.net/repository/DEFAULT/N9J_wkRD_N1LG2XPyAeMShQon54.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:86:4f:c2:1c:1c:a0:e0:4d:94:27:f9:39:06:5d:ae
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=37d27fc24443fcdd4b1b65cfc8078c4a14289f9e
Validity
Not Before: Nov 4 11:00:16 2025 GMT
Not After : Nov 5 11:00:16 2025 GMT
Subject: CN=979e1205e4c7dab405897cb44373799de8f87344
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:2b:b8:13:84:a1:1f:7a:82:ac:a4:77:0b:8b:
1c:4d:07:bc:66:1c:91:44:d6:e4:4e:57:31:dd:fe:
64:ea:7b:c7:e3:26:ab:53:07:d2:17:24:fd:a4:80:
d5:df:39:23:19:36:13:06:af:47:12:2f:e4:bf:89:
5a:c9:d6:09:85:43:9b:96:fc:ad:04:d1:59:df:28:
fe:a1:9f:bf:60:9b:90:5c:8b:6c:80:ce:c7:70:ca:
28:91:9f:9f:cc:c1:5e:a8:2e:7a:35:92:53:10:6d:
92:f2:ed:0e:bf:ee:28:81:b1:bb:00:dd:97:fc:f7:
fe:ef:3d:4d:74:cf:07:da:65:4c:99:de:9a:32:44:
a3:e1:08:26:1d:79:24:17:91:f8:96:b9:29:9e:b7:
47:69:18:c0:f5:70:f7:a7:0b:f0:22:e7:51:c2:15:
0e:4e:b4:f6:d9:73:7b:ec:d2:f0:b7:f5:99:99:0f:
8b:cc:36:01:3b:8d:97:fa:d9:bd:c1:99:21:11:c0:
f1:17:e8:10:06:c8:15:1e:70:68:0b:e7:30:07:42:
d4:e6:b1:a5:b6:26:75:58:f7:7b:22:18:e6:d9:aa:
2b:f3:35:6b:1f:8f:10:38:eb:27:85:1f:11:f6:07:
a4:08:14:41:4f:2a:e5:8a:14:1f:75:df:9e:d5:b5:
05:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:9E:12:05:E4:C7:DA:B4:05:89:7C:B4:43:73:79:9D:E8:F8:73:44
X509v3 Authority Key Identifier:
keyid:37:D2:7F:C2:44:43:FC:DD:4B:1B:65:CF:C8:07:8C:4A:14:28:9F:9E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/N9J_wkRD_N1LG2XPyAeMShQon54.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/d8c58d-8d24-4280-91fd-48b1664d40d5/1/N9J_wkRD_N1LG2XPyAeMShQon54.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/d8c58d-8d24-4280-91fd-48b1664d40d5/1/N9J_wkRD_N1LG2XPyAeMShQon54.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
01:69:b1:5f:ad:1c:b1:60:d2:1a:9c:e1:8a:f1:d6:bc:d3:14:
c5:cb:48:4a:96:1b:20:7b:45:da:7f:66:94:d5:e0:48:44:95:
8c:07:19:e8:ad:45:95:5b:11:8d:eb:a4:0c:1b:8f:82:75:c5:
cf:d0:ef:fe:37:97:14:3f:76:df:1e:84:43:61:9d:f8:9e:d5:
db:07:a1:b0:7b:00:34:ee:bf:28:34:47:82:20:2e:be:b5:bb:
02:75:32:e3:8a:be:a1:f0:5e:3d:c7:d5:18:8c:44:0f:ff:3a:
f1:04:7b:ae:5f:dd:ba:9a:19:a7:5d:18:06:a2:dd:43:82:74:
13:de:e2:9d:38:ce:fe:54:13:83:ee:c1:61:81:64:98:1d:42:
bb:8d:4b:ee:1f:05:3b:8e:ed:18:77:60:65:57:4c:3f:48:e4:
af:63:55:53:2c:b6:f3:1f:82:17:d7:ef:13:bc:f1:3e:9f:40:
03:7b:49:ea:fb:83:c1:b4:b5:9b:f3:a4:44:df:b6:e6:04:69:
b5:4d:1e:d4:72:77:e7:02:ba:e5:66:0d:81:74:da:c4:76:2e:
f0:1b:98:42:2b:76:29:b4:e7:3e:b9:c0:7e:33:93:93:99:b4:
c4:f1:29:cd:59:cc:01:9d:cf:74:1d:08:47:ba:0b:a1:d5:6c:
1a:e7:d2:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 18:17:48 2025 by rpki-client