Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4f/35faed-c2d7-4cb9-97f5-df6f20dcb94b/1/N69IEx7Nnco97yst54jxUGBid1U.mft
File: N69IEx7Nnco97yst54jxUGBid1U.mft (raw, json)
Hash identifier: Btx8aXiDzRowaYlvKO2X+AgzPUQLzoBAb8nTYKrUY/M=
Subject key identifier: 09:AB:11:95:86:F5:8E:30:18:CD:B6:C6:56:15:DC:3F:56:36:0B:A1
Authority key identifier: 37:AF:48:13:1E:CD:9D:CA:3D:EF:2B:2D:E7:88:F1:50:60:62:77:55
Certificate issuer: /CN=37af48131ecd9dca3def2b2de788f15060627755
Certificate serial: 0199FB7CC2EF86B8831D2FE2E75257ECAD0E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/N69IEx7Nnco97yst54jxUGBid1U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4f/35faed-c2d7-4cb9-97f5-df6f20dcb94b/1/N69IEx7Nnco97yst54jxUGBid1U.mft
Manifest number: 16E9
Signing time: Sun 19 Oct 2025 08:01:21 +0000
Manifest this update: Sun 19 Oct 2025 08:01:21 +0000
Manifest next update: Mon 20 Oct 2025 08:01:21 +0000
Files and hashes: 1: Lv93kZr3FrSvC5fAGNeod6j_6yM.roa (hash: 37H9uvEBQ9sb3AaWMyi05t5K1mxRb/qz/+D6tmcVRbg=)
2: N69IEx7Nnco97yst54jxUGBid1U.crl (hash: K11BU0yF+tYy/RRgP1lEHDpj79dkkyjymUN0aDWy6Ss=)
3: nCYRFHxESiPTOP0DiwWAA3vf6pc.roa (hash: n1iHEUmqWKjUYGzT2fByz8YLuqOJY83LkJFmv6uksFE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4f/35faed-c2d7-4cb9-97f5-df6f20dcb94b/1/N69IEx7Nnco97yst54jxUGBid1U.crl
rsync://rpki.ripe.net/repository/DEFAULT/4f/35faed-c2d7-4cb9-97f5-df6f20dcb94b/1/N69IEx7Nnco97yst54jxUGBid1U.mft
rsync://rpki.ripe.net/repository/DEFAULT/N69IEx7Nnco97yst54jxUGBid1U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 08:01:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:7c:c2:ef:86:b8:83:1d:2f:e2:e7:52:57:ec:ad:0e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=37af48131ecd9dca3def2b2de788f15060627755
Validity
Not Before: Oct 19 08:01:21 2025 GMT
Not After : Oct 20 08:01:21 2025 GMT
Subject: CN=09ab119586f58e3018cdb6c65615dc3f56360ba1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:39:ed:cc:26:47:78:19:10:93:43:35:c7:0b:
80:70:38:8c:72:0a:23:86:90:ed:fb:05:d8:ef:5f:
8a:d3:32:56:46:c3:a0:b0:f3:9c:93:2b:62:b0:b9:
c8:f8:4b:dc:39:59:d6:fe:4e:ed:28:bd:62:23:d9:
c5:50:e6:a8:94:e6:83:50:7d:75:7b:26:08:05:fc:
9f:ab:ea:c9:50:9f:57:82:dd:07:dd:5a:9b:a4:91:
e5:7d:57:c3:27:f8:c5:d1:bc:fb:ab:dd:72:c4:09:
a8:87:30:cd:a9:79:0f:44:20:eb:1d:64:b2:3d:1d:
38:1b:47:83:30:3a:4d:af:c1:52:e2:25:7a:e5:8c:
24:d4:b5:6d:08:58:19:e3:91:ed:28:c8:cc:57:69:
69:80:8c:53:3a:0c:76:a0:16:4c:d3:38:64:c9:6a:
c5:24:ea:ab:83:94:78:cc:ff:9d:4b:07:03:2c:8f:
e1:32:ba:e0:f4:de:e2:0e:ef:02:67:cd:52:6d:59:
23:bf:39:60:62:95:ff:8d:e8:69:54:e0:46:6a:b7:
08:09:40:cd:91:7f:c6:fa:8b:96:30:60:2c:02:48:
82:30:d9:ac:ce:38:a7:a9:e5:94:27:31:93:55:83:
08:a6:50:a1:37:de:4d:0b:80:e5:57:42:f3:cd:b7:
a5:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:AB:11:95:86:F5:8E:30:18:CD:B6:C6:56:15:DC:3F:56:36:0B:A1
X509v3 Authority Key Identifier:
keyid:37:AF:48:13:1E:CD:9D:CA:3D:EF:2B:2D:E7:88:F1:50:60:62:77:55
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/N69IEx7Nnco97yst54jxUGBid1U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/35faed-c2d7-4cb9-97f5-df6f20dcb94b/1/N69IEx7Nnco97yst54jxUGBid1U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/35faed-c2d7-4cb9-97f5-df6f20dcb94b/1/N69IEx7Nnco97yst54jxUGBid1U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0a:e3:c3:8d:ce:14:6b:50:e9:dd:1a:51:96:90:90:80:54:ee:
e5:c6:70:7d:00:eb:de:75:3c:4e:6e:41:bf:cc:56:a5:af:f5:
71:cb:0a:48:ed:6b:df:89:02:a5:09:22:40:66:52:df:88:8a:
5e:83:72:d5:40:6a:d6:e2:4f:2a:a1:a2:31:61:0f:16:6b:c4:
08:49:ea:dd:ed:46:4d:91:cd:f6:94:70:6d:07:65:2f:b5:8e:
a1:11:40:4a:39:e9:a0:eb:dc:79:90:11:67:0e:52:45:4e:86:
46:70:0e:66:47:e6:ee:a8:df:e5:9e:5c:67:a5:44:91:78:d6:
70:13:c0:bf:67:a4:43:54:be:83:ef:a4:36:6e:56:cc:e0:73:
3f:4a:71:ca:53:89:51:65:4a:95:c1:f5:8e:1e:ab:ca:e9:c0:
11:50:e9:52:11:52:19:25:66:a5:a5:d1:3d:c7:a6:cd:48:81:
a9:5e:07:a1:1c:13:59:2d:55:fb:07:bb:7a:7d:05:49:d7:0e:
49:1d:a7:86:fb:97:c6:18:80:63:5e:52:bf:6e:33:1c:d4:81:
0e:4e:af:cb:9d:66:74:35:6f:76:1b:c8:3e:ac:23:4e:67:2a:
32:a6:40:79:0e:c3:3a:a2:aa:1b:f3:4a:a3:11:fb:f5:fb:0f:
97:d3:c4:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 17:53:48 2025 by rpki-client