Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/cd2d1f-501e-4383-901f-ce008b150ffe/1/n9e3i11VWv7XZxyRbCbrf_x-LJo.mft
File: n9e3i11VWv7XZxyRbCbrf_x-LJo.mft (raw, json)
Hash identifier: CTawZGwHkhzhz0iVwHaAlAQ47z9EynlwyiCFg+mkN/o=
Subject key identifier: 5E:55:BB:A0:27:59:8E:49:A8:53:D1:F7:2F:F3:F4:7B:14:0D:6F:C0
Authority key identifier: 9F:D7:B7:8B:5D:55:5A:FE:D7:67:1C:91:6C:26:EB:7F:FC:7E:2C:9A
Certificate issuer: /CN=9fd7b78b5d555afed7671c916c26eb7ffc7e2c9a
Certificate serial: 0199FCC697BBCF9469EBA4F02AA8B9511B31
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/n9e3i11VWv7XZxyRbCbrf_x-LJo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/cd2d1f-501e-4383-901f-ce008b150ffe/1/n9e3i11VWv7XZxyRbCbrf_x-LJo.mft
Manifest number: 05DE
Signing time: Sun 19 Oct 2025 14:01:37 +0000
Manifest this update: Sun 19 Oct 2025 14:01:37 +0000
Manifest next update: Mon 20 Oct 2025 14:01:37 +0000
Files and hashes: 1: n9e3i11VWv7XZxyRbCbrf_x-LJo.crl (hash: N1BIGuuq/aLMyBwSWIa7cB8E6jfGcnzTIX837udmPSk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4c/cd2d1f-501e-4383-901f-ce008b150ffe/1/n9e3i11VWv7XZxyRbCbrf_x-LJo.crl
rsync://rpki.ripe.net/repository/DEFAULT/4c/cd2d1f-501e-4383-901f-ce008b150ffe/1/n9e3i11VWv7XZxyRbCbrf_x-LJo.mft
rsync://rpki.ripe.net/repository/DEFAULT/n9e3i11VWv7XZxyRbCbrf_x-LJo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:c6:97:bb:cf:94:69:eb:a4:f0:2a:a8:b9:51:1b:31
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9fd7b78b5d555afed7671c916c26eb7ffc7e2c9a
Validity
Not Before: Oct 19 14:01:37 2025 GMT
Not After : Oct 20 14:01:37 2025 GMT
Subject: CN=5e55bba027598e49a853d1f72ff3f47b140d6fc0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:8a:56:04:de:1e:a4:71:72:5c:5f:e3:3a:26:
ea:79:eb:74:f4:09:c5:fc:35:61:3f:14:cd:5b:43:
76:74:fd:74:8a:0d:7a:de:f4:9b:80:c7:a8:55:6b:
ee:94:91:24:a3:db:7a:e5:cf:be:2f:3e:9f:bb:c2:
06:3a:51:06:0b:09:16:0b:6b:58:e4:df:4c:62:50:
04:bd:40:2d:1f:df:d6:13:d1:e1:ab:39:c6:23:77:
9d:79:ca:24:1d:fb:13:83:98:4a:23:b2:36:3d:12:
6d:db:ac:d6:1f:06:7a:5f:89:8c:ba:c7:54:9d:f6:
c9:85:bf:57:13:f4:5f:85:87:e7:05:36:31:37:3a:
9f:45:ff:5d:a0:a2:5f:cb:38:83:13:6c:6e:c0:44:
36:10:00:cc:de:5f:df:21:39:8d:08:77:2b:4c:7b:
ad:50:73:dd:3a:49:37:26:3a:9b:da:21:f5:6f:10:
9b:cf:15:75:0d:30:b9:7c:c1:db:85:c1:5e:84:bb:
c2:8b:8a:22:d8:31:9d:99:f8:4e:ae:b8:83:91:e2:
ec:de:19:a2:e7:5f:94:f1:5a:1c:05:bb:e5:5e:61:
9b:68:b2:03:e0:f5:69:67:5c:16:59:d1:4f:0f:4a:
53:d3:6d:9a:d8:7f:eb:d9:73:62:9e:73:ad:36:55:
7c:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:55:BB:A0:27:59:8E:49:A8:53:D1:F7:2F:F3:F4:7B:14:0D:6F:C0
X509v3 Authority Key Identifier:
keyid:9F:D7:B7:8B:5D:55:5A:FE:D7:67:1C:91:6C:26:EB:7F:FC:7E:2C:9A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/n9e3i11VWv7XZxyRbCbrf_x-LJo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/cd2d1f-501e-4383-901f-ce008b150ffe/1/n9e3i11VWv7XZxyRbCbrf_x-LJo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/cd2d1f-501e-4383-901f-ce008b150ffe/1/n9e3i11VWv7XZxyRbCbrf_x-LJo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
78:b7:51:74:ee:bd:ca:e8:43:c4:59:8f:b1:e8:3f:eb:f7:80:
aa:d8:50:9f:a2:5c:9d:03:a4:2c:26:2c:62:46:46:a7:df:2a:
59:fe:c3:92:f8:2c:5d:15:88:ce:49:c9:d5:fa:8e:d5:03:fe:
74:dc:4d:4f:0c:a3:80:0e:13:96:39:2a:de:ad:94:25:ae:b8:
30:5c:fe:ac:98:e3:73:ed:0b:c2:cf:31:23:ab:af:65:da:11:
6f:df:02:1e:e1:96:b7:46:10:7d:c1:d1:53:d9:eb:88:d0:1a:
0c:f7:ce:44:31:7f:0c:41:2b:39:2c:2f:a3:c9:2b:be:d7:0c:
d8:ac:b4:45:4b:3c:ad:57:e6:6c:c5:e2:ce:85:24:56:84:50:
f3:65:4d:56:07:97:a6:9f:be:a7:d4:5d:2c:46:a7:1a:3f:de:
3d:62:fc:df:48:1a:34:81:4e:d6:75:d8:4b:13:4f:7e:83:eb:
d1:9d:90:a6:d7:2d:12:2c:96:d7:da:01:00:fa:bc:33:3f:ab:
2c:89:fa:51:9f:70:e4:57:f9:22:e5:e2:97:0e:7c:fc:e6:bc:
da:db:31:55:f2:7e:d1:52:fa:4b:47:47:dc:16:8f:38:6d:69:
8d:db:62:cb:e4:bf:89:66:4f:eb:34:90:31:98:b6:ec:cd:06:
a0:56:ca:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:42:54 2025 by rpki-client