Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/27/3e069a-3421-40ab-9e0c-45cc2dd6e491/1/n73cYxPvxLZyp-KzKuPESE_l9jA.mft
File: n73cYxPvxLZyp-KzKuPESE_l9jA.mft (raw, json)
Hash identifier: NPg7ypm2WHC1HJ5n6voXSDQrBqoG+jRL6F1qCdGZEcc=
Subject key identifier: A0:D7:E0:73:25:D8:9A:22:48:76:85:AC:7B:7F:3F:4C:3A:BD:B7:89
Authority key identifier: 9F:BD:DC:63:13:EF:C4:B6:72:A7:E2:B3:2A:E3:C4:48:4F:E5:F6:30
Certificate issuer: /CN=9fbddc6313efc4b672a7e2b32ae3c4484fe5f630
Certificate serial: 0198D6603730DAFFBB8F0FF7F81818C87961
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/n73cYxPvxLZyp-KzKuPESE_l9jA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/27/3e069a-3421-40ab-9e0c-45cc2dd6e491/1/n73cYxPvxLZyp-KzKuPESE_l9jA.mft
Manifest number: 11B4
Signing time: Sat 23 Aug 2025 10:01:26 +0000
Manifest this update: Sat 23 Aug 2025 10:01:26 +0000
Manifest next update: Sun 24 Aug 2025 10:01:26 +0000
Files and hashes: 1: boDA4PQiCnDxp3aC4mFfCKLLJrE.roa (hash: qzJMKZb9GADDw4cKKxLUhJ/VrvT205N7vn0KRws/PGE=)
2: n73cYxPvxLZyp-KzKuPESE_l9jA.crl (hash: Zt/0LUMluTDXI8NRGAKaxbkyzm+vLogNxdSgXkUrFAU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/27/3e069a-3421-40ab-9e0c-45cc2dd6e491/1/n73cYxPvxLZyp-KzKuPESE_l9jA.crl
rsync://rpki.ripe.net/repository/DEFAULT/27/3e069a-3421-40ab-9e0c-45cc2dd6e491/1/n73cYxPvxLZyp-KzKuPESE_l9jA.mft
rsync://rpki.ripe.net/repository/DEFAULT/n73cYxPvxLZyp-KzKuPESE_l9jA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:60:37:30:da:ff:bb:8f:0f:f7:f8:18:18:c8:79:61
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9fbddc6313efc4b672a7e2b32ae3c4484fe5f630
Validity
Not Before: Aug 23 10:01:26 2025 GMT
Not After : Aug 24 10:01:26 2025 GMT
Subject: CN=a0d7e07325d89a22487685ac7b7f3f4c3abdb789
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:6b:73:de:69:e1:59:b3:41:d1:9e:f0:87:63:
f6:0f:66:d1:35:62:65:02:93:ae:0f:d6:14:48:2e:
ae:7a:2e:e8:7b:c0:c7:aa:5f:f5:03:2f:23:46:0f:
04:64:cb:fc:19:b1:df:18:a5:30:75:3d:a9:60:d5:
3a:6a:17:5a:67:d8:49:f4:7b:aa:44:82:0f:21:fa:
8c:14:5f:7e:10:58:62:20:25:1f:40:44:c7:cb:2a:
92:02:9c:45:28:aa:c6:3d:13:d4:c9:f9:f4:da:15:
62:db:f8:88:3a:31:eb:91:48:0b:0b:f1:30:a8:68:
d1:ca:05:f1:53:e1:7c:ec:dc:7d:6f:64:18:ff:a5:
39:f1:13:ee:1f:99:bb:23:1d:30:6a:13:f6:1e:15:
bc:b2:88:1b:e4:87:97:75:da:6f:7d:d1:69:7e:d1:
5d:ca:39:c4:25:d9:26:2a:3c:b5:de:95:15:15:e5:
be:29:00:6b:81:a6:9a:06:27:f4:50:90:c5:ad:f1:
69:bc:7e:e1:fa:23:29:60:d3:24:50:8c:ba:fc:22:
92:fb:e7:84:08:70:59:5a:4a:70:4d:92:b7:62:2b:
a5:43:33:e3:da:ae:dd:45:cb:43:05:ef:db:ea:5a:
3f:49:46:1a:c6:a0:f2:67:fe:79:7d:57:32:74:dd:
76:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:D7:E0:73:25:D8:9A:22:48:76:85:AC:7B:7F:3F:4C:3A:BD:B7:89
X509v3 Authority Key Identifier:
keyid:9F:BD:DC:63:13:EF:C4:B6:72:A7:E2:B3:2A:E3:C4:48:4F:E5:F6:30
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/n73cYxPvxLZyp-KzKuPESE_l9jA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/3e069a-3421-40ab-9e0c-45cc2dd6e491/1/n73cYxPvxLZyp-KzKuPESE_l9jA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/27/3e069a-3421-40ab-9e0c-45cc2dd6e491/1/n73cYxPvxLZyp-KzKuPESE_l9jA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8d:ae:6d:10:7b:c8:57:eb:9e:87:98:78:81:64:bb:32:99:35:
4d:73:01:09:85:4a:db:e9:26:9b:ff:f8:9a:25:d8:b7:67:d3:
de:b8:94:33:78:03:82:04:5b:fa:f1:96:26:45:f3:24:31:77:
1a:e5:2c:4a:f2:7d:3a:8f:5a:8b:2b:6a:05:ba:1e:9f:58:1d:
b0:67:5c:50:a5:e9:81:3d:ad:56:9c:04:97:f9:82:8c:23:da:
78:30:dc:37:20:fc:c9:4d:14:e8:d3:3d:6b:a8:bf:52:b0:25:
40:e5:09:96:be:7c:4d:49:2e:68:07:6d:49:fd:0b:52:89:de:
bf:b6:5f:f2:1b:19:af:e1:0b:62:1a:b0:16:08:41:f7:6a:d4:
76:ca:b9:ed:01:32:0d:83:7e:04:74:07:da:1d:47:14:62:5f:
06:98:b6:24:5a:e9:a9:05:b2:f1:6e:8e:4e:59:e5:ec:4f:ef:
39:12:ae:1e:19:e1:ee:53:a2:53:b2:a9:24:3b:38:dc:d9:9b:
d2:d9:20:c2:99:11:71:14:93:65:6f:30:e8:d5:f5:58:67:5a:
de:b6:3b:46:b3:37:02:00:f2:b1:1e:07:c6:59:8c:24:4e:01:
e0:af:3b:c5:ed:cd:01:04:ae:94:c2:ca:6b:63:c1:ab:5e:3c:
84:b6:8e:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 12:32:21 2025 by rpki-client