Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/ad0f8d-a5e7-40b3-b8a8-7362b19de73e/1/n7jb0z1dO8T6Nknt9_kU6uejiF0.mft
File: n7jb0z1dO8T6Nknt9_kU6uejiF0.mft (raw, json)
Hash identifier: VclhOFBv+RiWWh9ndS3c+LTYDczj+ORVl/tVpTdlUdc=
Subject key identifier: 71:0F:6F:83:85:62:76:AC:F6:27:8D:80:5B:70:F1:3D:17:E0:15:BB
Authority key identifier: 9F:B8:DB:D3:3D:5D:3B:C4:FA:36:49:ED:F7:F9:14:EA:E7:A3:88:5D
Certificate issuer: /CN=9fb8dbd33d5d3bc4fa3649edf7f914eae7a3885d
Certificate serial: 0199FFC85CE77215EF956A6D8D9AB69315B3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/n7jb0z1dO8T6Nknt9_kU6uejiF0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4e/ad0f8d-a5e7-40b3-b8a8-7362b19de73e/1/n7jb0z1dO8T6Nknt9_kU6uejiF0.mft
Manifest number: 0458
Signing time: Mon 20 Oct 2025 04:02:24 +0000
Manifest this update: Mon 20 Oct 2025 04:02:24 +0000
Manifest next update: Tue 21 Oct 2025 04:02:24 +0000
Files and hashes: 1: n7jb0z1dO8T6Nknt9_kU6uejiF0.crl (hash: nwGFjskxXJ4unQIpk0f/fnqbOBY/hDhWPaeIcNUhIQc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4e/ad0f8d-a5e7-40b3-b8a8-7362b19de73e/1/n7jb0z1dO8T6Nknt9_kU6uejiF0.crl
rsync://rpki.ripe.net/repository/DEFAULT/4e/ad0f8d-a5e7-40b3-b8a8-7362b19de73e/1/n7jb0z1dO8T6Nknt9_kU6uejiF0.mft
rsync://rpki.ripe.net/repository/DEFAULT/n7jb0z1dO8T6Nknt9_kU6uejiF0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 04:02:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:ff:c8:5c:e7:72:15:ef:95:6a:6d:8d:9a:b6:93:15:b3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9fb8dbd33d5d3bc4fa3649edf7f914eae7a3885d
Validity
Not Before: Oct 20 04:02:24 2025 GMT
Not After : Oct 21 04:02:24 2025 GMT
Subject: CN=710f6f83856276acf6278d805b70f13d17e015bb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:ba:6b:aa:31:0a:6c:1b:02:d0:50:6b:1b:44:
73:d2:2e:31:75:f4:cd:d2:aa:84:5c:a2:2e:53:53:
f8:f5:b0:2b:57:16:cc:c9:bf:94:6c:b8:b8:58:61:
cf:e8:9c:b2:75:37:87:9b:13:97:7d:a5:48:fa:84:
bc:c3:0d:f8:c2:ef:8c:d0:71:3c:0e:d3:02:bc:4d:
bc:37:4d:89:a6:9f:19:3b:d6:e5:3f:76:69:71:b8:
41:45:42:e5:4f:20:46:0e:09:26:5c:1a:42:7a:01:
ab:a4:9d:98:66:ae:8b:f8:4f:fd:6a:52:da:91:15:
b9:86:e5:1d:06:a6:89:b3:30:60:27:c3:0d:b5:77:
bd:2e:17:6e:3d:0d:8b:10:7e:11:29:8f:49:a5:07:
0b:b7:f8:45:47:49:18:40:94:c3:cb:4f:1a:b0:3e:
21:7b:7d:65:69:fb:67:c5:8b:60:a4:7b:d6:77:23:
58:1f:e5:6e:1a:9f:a1:40:6d:24:71:69:76:cc:36:
df:1a:f2:23:40:8e:ed:30:c2:86:0e:16:10:d0:10:
18:d7:b5:2f:94:bc:f0:08:a1:19:7a:56:d6:39:bc:
45:31:48:cc:0b:37:30:5e:a1:40:a0:cf:47:90:4f:
3d:59:1d:80:d7:b3:9f:50:5a:19:35:fc:66:f0:49:
63:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:0F:6F:83:85:62:76:AC:F6:27:8D:80:5B:70:F1:3D:17:E0:15:BB
X509v3 Authority Key Identifier:
keyid:9F:B8:DB:D3:3D:5D:3B:C4:FA:36:49:ED:F7:F9:14:EA:E7:A3:88:5D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/n7jb0z1dO8T6Nknt9_kU6uejiF0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/ad0f8d-a5e7-40b3-b8a8-7362b19de73e/1/n7jb0z1dO8T6Nknt9_kU6uejiF0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/ad0f8d-a5e7-40b3-b8a8-7362b19de73e/1/n7jb0z1dO8T6Nknt9_kU6uejiF0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b3:b8:8a:e7:65:b4:ef:ff:9f:b4:e3:5c:e8:9d:36:98:bc:e6:
c8:36:75:71:7b:9e:5b:71:a8:0a:97:bc:f1:0b:e6:f1:13:0d:
3f:45:9e:eb:1b:36:3a:ee:85:a9:10:4a:b3:0f:27:7a:63:7e:
e4:0d:f5:db:51:13:eb:e1:ff:3a:5d:82:f5:6c:f8:b1:0f:58:
bb:61:65:05:62:a9:6c:c7:8b:bf:a4:fb:99:c6:e9:cc:ea:ce:
40:f3:26:5c:f0:7b:16:af:49:70:fa:8c:1b:4c:eb:18:7f:6e:
9f:bd:82:4e:51:0c:59:b5:45:a1:d2:fa:c6:41:bd:80:a0:bf:
e6:87:5b:cb:04:84:09:61:ad:ee:df:bd:fe:be:d9:2a:6d:88:
62:af:42:f0:25:77:58:56:5f:d2:58:88:1d:2f:fd:de:f6:4f:
ac:02:67:9f:12:77:74:26:c0:7a:82:59:05:d7:a4:9e:f8:f9:
49:1c:01:0f:62:29:2c:25:85:98:df:6b:f7:88:89:db:bb:40:
46:ff:7e:27:11:8e:ed:e5:42:a4:e4:6b:2e:46:41:b0:ec:6d:
d5:47:d6:84:cd:93:f7:34:4f:8d:28:54:dd:41:d2:a2:a5:9c:
b6:da:24:65:a2:4b:e9:ef:42:a1:55:d6:ce:a3:fd:d2:81:48:
31:f7:53:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 13:12:00 2025 by rpki-client