Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/d74e10-3494-446f-a005-96b2242193f9/1/n5cRCdLqVpsz6Qo44DAs_xZ70DU.mft
File: n5cRCdLqVpsz6Qo44DAs_xZ70DU.mft (raw, json)
Hash identifier: lhxyOip7bO6H+PhuZFCNkfElN2z1rG5YP+3fJM44y9w=
Subject key identifier: D2:06:B7:06:4B:42:86:3D:D9:AF:76:B3:D5:26:E8:4E:2F:62:C7:92
Authority key identifier: 9F:97:11:09:D2:EA:56:9B:33:E9:0A:38:E0:30:2C:FF:16:7B:D0:35
Certificate issuer: /CN=9f971109d2ea569b33e90a38e0302cff167bd035
Certificate serial: 0199FDD9761C63FD9D8458290CAFD6225A0E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/n5cRCdLqVpsz6Qo44DAs_xZ70DU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/15/d74e10-3494-446f-a005-96b2242193f9/1/n5cRCdLqVpsz6Qo44DAs_xZ70DU.mft
Manifest number: 0BE3
Signing time: Sun 19 Oct 2025 19:01:51 +0000
Manifest this update: Sun 19 Oct 2025 19:01:51 +0000
Manifest next update: Mon 20 Oct 2025 19:01:51 +0000
Files and hashes: 1: n5cRCdLqVpsz6Qo44DAs_xZ70DU.crl (hash: ZOBSnQGUAMe+WJ1AkI71k7K9wqYe4pdQO2vvDMHFz1Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/15/d74e10-3494-446f-a005-96b2242193f9/1/n5cRCdLqVpsz6Qo44DAs_xZ70DU.crl
rsync://rpki.ripe.net/repository/DEFAULT/15/d74e10-3494-446f-a005-96b2242193f9/1/n5cRCdLqVpsz6Qo44DAs_xZ70DU.mft
rsync://rpki.ripe.net/repository/DEFAULT/n5cRCdLqVpsz6Qo44DAs_xZ70DU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 19:01:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fd:d9:76:1c:63:fd:9d:84:58:29:0c:af:d6:22:5a:0e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9f971109d2ea569b33e90a38e0302cff167bd035
Validity
Not Before: Oct 19 19:01:51 2025 GMT
Not After : Oct 20 19:01:51 2025 GMT
Subject: CN=d206b7064b42863dd9af76b3d526e84e2f62c792
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:15:3c:74:71:f3:c8:9c:33:ed:f7:6e:f5:f6:
c1:07:2f:e8:ac:fe:48:ef:47:6f:b3:cc:6d:85:e9:
85:f7:ec:d1:db:a5:64:d3:99:03:53:51:d2:4f:e6:
cd:5b:7b:80:80:d2:2c:a9:d7:55:70:f3:f3:ae:f5:
39:4a:2c:4c:b1:dd:7d:1c:91:84:40:2b:5c:32:96:
86:fa:57:a1:6d:30:3b:b2:62:3f:72:e8:00:32:4f:
d1:de:02:f9:47:b7:dc:11:c5:88:1c:6e:37:b4:5e:
c9:47:95:f7:1d:5e:e9:7d:01:0a:df:18:43:bf:4b:
25:1c:7a:3b:78:49:54:17:e7:3d:ea:7e:3f:1a:21:
89:76:9b:07:94:7d:b6:1c:94:fa:c5:dd:8f:c1:46:
fd:c6:43:cb:69:d7:92:62:09:d2:67:eb:45:5f:42:
aa:36:6a:44:d6:47:ee:0b:c3:73:ff:74:7e:ba:60:
1a:7c:32:e2:9b:73:16:f2:fe:9f:ea:82:60:5b:1b:
d4:ee:30:a5:01:13:f9:c6:9d:9c:95:34:11:7f:ca:
25:8e:51:52:31:96:09:f1:7d:2c:d9:26:b1:6a:90:
b5:84:dd:b4:03:01:32:8d:16:8a:7a:ad:26:6b:bd:
65:ff:17:b2:7a:42:04:00:a5:37:9f:f8:61:e6:63:
8a:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:06:B7:06:4B:42:86:3D:D9:AF:76:B3:D5:26:E8:4E:2F:62:C7:92
X509v3 Authority Key Identifier:
keyid:9F:97:11:09:D2:EA:56:9B:33:E9:0A:38:E0:30:2C:FF:16:7B:D0:35
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/n5cRCdLqVpsz6Qo44DAs_xZ70DU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/d74e10-3494-446f-a005-96b2242193f9/1/n5cRCdLqVpsz6Qo44DAs_xZ70DU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/15/d74e10-3494-446f-a005-96b2242193f9/1/n5cRCdLqVpsz6Qo44DAs_xZ70DU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a9:2a:44:59:4e:af:8b:af:b8:d5:a2:bc:2b:56:e7:7e:79:73:
f7:52:db:1a:3a:0e:e0:4d:78:0b:f3:36:95:b1:ae:b2:b5:c6:
c8:22:32:e3:f5:4f:2d:b9:d1:6d:a9:1e:bc:8b:5e:e2:f5:cf:
db:45:00:73:38:14:8a:f4:d5:ef:b1:01:6b:2c:ce:48:cd:b1:
cb:d6:09:b4:62:24:54:89:bb:7c:ad:a4:da:fc:57:cf:b5:db:
e8:fb:07:ab:82:18:f5:42:67:5f:23:2b:8f:e6:fe:f5:94:35:
f2:a2:23:f9:fa:e1:28:03:f3:7c:05:06:03:bc:ea:bc:a7:b1:
f0:5b:53:fb:c0:28:f9:18:a1:cd:ab:4d:d9:9f:57:73:78:4b:
cd:5e:de:4f:53:f9:db:24:51:b5:26:33:d2:03:81:e9:1d:51:
45:af:21:1b:8b:a0:5b:19:15:f2:6e:26:3a:53:6b:99:d8:f3:
77:b6:9c:9f:04:86:c6:81:8e:5f:41:1f:0d:c3:f8:a0:b5:42:
cb:3c:d8:55:d8:1e:3c:66:4a:dd:dd:f4:8d:03:a3:3f:ba:2f:
53:6f:7a:04:66:45:44:26:26:0c:2f:60:df:d2:0a:c7:71:ec:
26:01:d9:c8:e2:10:d2:c2:59:da:1f:38:90:3f:6c:d4:3d:43:
0a:e6:e7:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 03:56:46 2025 by rpki-client