Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/069008-2e4f-4323-b6a2-e8d6c2f071df/1/n6eFncOdRzYULPHiKcisS-YjuQM.mft
File: n6eFncOdRzYULPHiKcisS-YjuQM.mft (raw, json)
Hash identifier: p0BUlHvWfe4Bw20DM8wrHgUnlQnnCjhNBG9I0FPCEsk=
Subject key identifier: 42:43:70:99:FD:C2:69:F8:06:FD:87:F6:2A:67:47:5A:24:D3:9E:7F
Authority key identifier: 9F:A7:85:9D:C3:9D:47:36:14:2C:F1:E2:29:C8:AC:4B:E6:23:B9:03
Certificate issuer: /CN=9fa7859dc39d4736142cf1e229c8ac4be623b903
Certificate serial: 0199FDD980DF004B445DBB23720FF1958C01
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/n6eFncOdRzYULPHiKcisS-YjuQM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/069008-2e4f-4323-b6a2-e8d6c2f071df/1/n6eFncOdRzYULPHiKcisS-YjuQM.mft
Manifest number: 137F
Signing time: Sun 19 Oct 2025 19:01:53 +0000
Manifest this update: Sun 19 Oct 2025 19:01:53 +0000
Manifest next update: Mon 20 Oct 2025 19:01:53 +0000
Files and hashes: 1: n6eFncOdRzYULPHiKcisS-YjuQM.crl (hash: AjuwWhsqHRYVwLQMQayYe1jMHik8OXv4V6c6D3HkzvQ=)
2: ntwiuM95uFBi26vUIqSDj4sApAM.roa (hash: O4PdrlvcDhug5zKVlwkRZGJ/JkjzqqLTd2w+uWOsXH4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/34/069008-2e4f-4323-b6a2-e8d6c2f071df/1/n6eFncOdRzYULPHiKcisS-YjuQM.crl
rsync://rpki.ripe.net/repository/DEFAULT/34/069008-2e4f-4323-b6a2-e8d6c2f071df/1/n6eFncOdRzYULPHiKcisS-YjuQM.mft
rsync://rpki.ripe.net/repository/DEFAULT/n6eFncOdRzYULPHiKcisS-YjuQM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 15:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fd:d9:80:df:00:4b:44:5d:bb:23:72:0f:f1:95:8c:01
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9fa7859dc39d4736142cf1e229c8ac4be623b903
Validity
Not Before: Oct 19 19:01:53 2025 GMT
Not After : Oct 20 19:01:53 2025 GMT
Subject: CN=42437099fdc269f806fd87f62a67475a24d39e7f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:fc:10:2f:71:87:56:66:98:2f:07:b9:fb:f9:
ca:3e:a1:d5:63:c4:9b:ae:69:18:98:db:5a:cc:f1:
b6:09:42:95:93:d5:77:c4:30:20:7b:70:95:f2:38:
f3:d2:b2:34:91:36:fd:6b:f3:5b:b0:73:2c:c4:5d:
65:68:73:ff:09:e5:0d:fa:8d:ed:0b:88:a2:3c:39:
97:9a:44:b2:67:4c:55:38:57:87:ca:95:11:01:e9:
a2:ad:41:b3:ef:87:a4:8a:77:99:91:fb:4f:4b:62:
81:77:7a:ca:01:f3:21:b4:ca:0a:99:a1:39:28:49:
67:6f:aa:d4:55:2f:23:0a:35:0e:9f:5e:99:4c:a0:
93:9f:bf:a9:81:18:6b:cc:73:31:29:ca:f5:c7:a1:
e6:78:7e:b9:bc:5f:57:f4:1a:49:05:c8:4f:3d:4c:
25:71:f6:d1:37:c9:b7:be:cc:d3:50:7d:58:f1:b7:
42:a3:e9:eb:21:d5:6d:75:28:ef:de:76:6a:42:56:
65:54:8c:da:29:10:a7:90:d1:90:30:50:dc:2e:e2:
f9:b0:76:09:fd:4c:9f:8c:76:9e:f3:2e:bd:22:35:
45:56:c1:f1:25:2a:fb:a7:f2:25:89:66:bd:36:41:
f6:39:bd:0b:06:86:67:f3:d3:2b:70:91:3a:81:8d:
1e:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:43:70:99:FD:C2:69:F8:06:FD:87:F6:2A:67:47:5A:24:D3:9E:7F
X509v3 Authority Key Identifier:
keyid:9F:A7:85:9D:C3:9D:47:36:14:2C:F1:E2:29:C8:AC:4B:E6:23:B9:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/n6eFncOdRzYULPHiKcisS-YjuQM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/069008-2e4f-4323-b6a2-e8d6c2f071df/1/n6eFncOdRzYULPHiKcisS-YjuQM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/34/069008-2e4f-4323-b6a2-e8d6c2f071df/1/n6eFncOdRzYULPHiKcisS-YjuQM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5e:e0:dd:c1:df:19:ca:c3:a3:0d:c9:9a:19:a8:15:75:89:9f:
6d:73:bc:be:40:b0:8d:d4:ac:b7:65:60:89:6d:bc:25:26:c5:
8b:35:78:d7:91:09:74:56:d7:4e:97:99:a3:f1:82:3a:c6:2e:
ec:b2:d8:54:57:56:f1:3d:36:e5:a2:64:15:84:7a:93:21:de:
f6:ce:1d:2f:07:0d:63:6d:be:50:50:f5:aa:17:aa:20:b7:55:
b2:b0:ab:01:a8:11:6e:f0:15:53:6d:6c:12:ea:89:f3:eb:64:
8f:18:8f:cb:31:a5:9e:cd:3b:0e:9f:38:e1:3c:24:f9:bb:26:
f6:84:37:12:d2:e8:12:53:ee:f2:0a:f1:bc:b8:e8:4f:7c:2b:
d0:3f:60:be:9f:60:11:b3:4d:b7:68:ad:6c:e5:03:9f:9f:27:
6b:80:2d:6d:dd:12:d2:39:0a:9d:7c:76:6f:08:39:53:1b:7f:
bb:e3:41:7a:04:8a:d8:a3:70:64:d6:b2:ac:fc:99:d9:4a:da:
13:53:d9:c1:28:bc:5a:b7:7f:d1:21:80:42:88:d0:23:e9:1c:
3d:5f:8e:04:01:dc:8a:9d:23:84:63:23:2c:d8:78:ba:df:38:
c6:1c:45:52:dc:3b:e0:8b:78:b5:07:03:96:9c:b3:ba:21:95:
f8:f4:b7:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 00:25:59 2025 by rpki-client