Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4f/8d1167-0c4d-488f-9a83-c0177dfda847/1/N09vPjy5c7rIpD9sC4BrPRHJrcM.mft
File: N09vPjy5c7rIpD9sC4BrPRHJrcM.mft (raw, json)
Hash identifier: kClDwM85Env8P9kCA4N1nZ7lY5gIZZfI4K2Fgw8cqcw=
Subject key identifier: 70:B9:D8:A3:3B:71:F9:54:15:E9:A7:5F:37:91:B1:42:36:E1:D8:72
Authority key identifier: 37:4F:6F:3E:3C:B9:73:BA:C8:A4:3F:6C:0B:80:6B:3D:11:C9:AD:C3
Certificate issuer: /CN=374f6f3e3cb973bac8a43f6c0b806b3d11c9adc3
Certificate serial: 0199FC586514D61CEB2EC29E937FC0EBFC1B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/N09vPjy5c7rIpD9sC4BrPRHJrcM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4f/8d1167-0c4d-488f-9a83-c0177dfda847/1/N09vPjy5c7rIpD9sC4BrPRHJrcM.mft
Manifest number: 0699
Signing time: Sun 19 Oct 2025 12:01:15 +0000
Manifest this update: Sun 19 Oct 2025 12:01:15 +0000
Manifest next update: Mon 20 Oct 2025 12:01:15 +0000
Files and hashes: 1: 0Kp_vvvf6gB9qqLzUTydjsFEHvg.roa (hash: oleso0bnDn/Cva++ppJhacS1E2sFVBntDJn2BA8AVW0=)
2: G4jepCncoOzlCnpnZ7cxE_Dx-eo.roa (hash: LGsZV/1AkhKvUqqsgs+A2xdwU0JvTeOBXFcZUHaT2bc=)
3: N09vPjy5c7rIpD9sC4BrPRHJrcM.crl (hash: 1RPmM7QsWsfLkFL7HV1Bh56vbJNSwLIbg7QBGfFyFdI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4f/8d1167-0c4d-488f-9a83-c0177dfda847/1/N09vPjy5c7rIpD9sC4BrPRHJrcM.crl
rsync://rpki.ripe.net/repository/DEFAULT/4f/8d1167-0c4d-488f-9a83-c0177dfda847/1/N09vPjy5c7rIpD9sC4BrPRHJrcM.mft
rsync://rpki.ripe.net/repository/DEFAULT/N09vPjy5c7rIpD9sC4BrPRHJrcM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:58:65:14:d6:1c:eb:2e:c2:9e:93:7f:c0:eb:fc:1b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=374f6f3e3cb973bac8a43f6c0b806b3d11c9adc3
Validity
Not Before: Oct 19 12:01:15 2025 GMT
Not After : Oct 20 12:01:15 2025 GMT
Subject: CN=70b9d8a33b71f95415e9a75f3791b14236e1d872
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:d8:32:b2:5c:0b:b4:06:14:ef:8b:a6:d7:3c:
5b:7d:79:3e:26:06:48:8d:10:8f:61:26:55:19:bf:
5a:40:e4:8c:12:1e:6c:06:98:e6:72:2f:06:ba:57:
6b:47:b8:56:4a:5f:c4:a8:61:af:4f:ac:1a:6a:ad:
74:39:24:58:d9:7a:d4:3b:20:02:41:7d:39:d5:d9:
6c:7b:00:2d:f2:42:77:02:4a:80:4d:70:9b:00:78:
83:56:bf:b2:d5:23:c0:a4:79:74:59:e0:41:6c:52:
d8:4f:14:85:c2:9d:de:fe:3b:22:4e:a9:a9:43:d1:
e3:2d:fb:ff:1d:ee:4f:e5:3e:ef:ff:1a:f4:f8:db:
35:20:a3:61:63:a2:d5:dc:48:2a:27:c7:ef:40:ae:
71:e6:b9:6b:d2:ec:18:8f:21:46:9f:22:9c:d9:58:
3f:88:00:22:b8:16:5a:8f:8d:d0:79:21:a0:0d:09:
6f:a9:45:12:5a:e2:e3:64:f6:b0:85:86:bc:e1:93:
68:3b:d5:94:2a:0d:cc:15:a5:53:7e:b0:90:18:af:
7f:73:07:66:12:8f:2b:d4:3d:59:f1:7e:43:48:fe:
0a:67:63:28:27:c2:78:c4:73:c4:2a:07:8c:5b:65:
e6:69:99:9b:72:a8:b0:5f:fe:e3:5c:6e:e1:8f:87:
56:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:B9:D8:A3:3B:71:F9:54:15:E9:A7:5F:37:91:B1:42:36:E1:D8:72
X509v3 Authority Key Identifier:
keyid:37:4F:6F:3E:3C:B9:73:BA:C8:A4:3F:6C:0B:80:6B:3D:11:C9:AD:C3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/N09vPjy5c7rIpD9sC4BrPRHJrcM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/8d1167-0c4d-488f-9a83-c0177dfda847/1/N09vPjy5c7rIpD9sC4BrPRHJrcM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/8d1167-0c4d-488f-9a83-c0177dfda847/1/N09vPjy5c7rIpD9sC4BrPRHJrcM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6d:8a:50:f8:e7:c5:81:0f:9b:31:1a:74:fb:b5:80:5f:4f:de:
fa:d6:c0:2a:18:88:39:de:5a:12:22:c5:81:ac:f4:d3:a3:e6:
a5:09:6b:b6:ba:0a:05:a4:67:3b:eb:3e:4d:41:77:74:2c:6c:
82:c7:19:fc:b3:07:ba:47:f9:8b:25:ad:ce:fc:01:ea:f7:94:
93:b5:59:47:65:7b:c3:bc:e9:01:98:a0:b9:4b:1d:1b:3c:40:
34:43:8f:7a:58:66:77:61:bc:cc:b0:94:d5:ca:28:04:e9:68:
16:e9:19:d3:44:c3:ba:9f:67:15:93:84:70:60:0c:df:98:6b:
06:ba:e4:86:d5:ff:eb:b6:db:54:98:93:47:c1:fb:4d:4f:d4:
67:f6:ca:bc:13:69:a2:98:89:75:24:4d:b3:94:ca:c5:fe:a0:
08:08:83:11:7d:bf:d5:7e:9f:64:7e:45:55:56:d0:a4:2a:51:
4e:21:96:0b:27:56:a2:a8:23:20:a6:3b:28:aa:07:ea:cb:07:
8f:b8:96:36:91:0d:df:dc:cd:cc:06:d7:0f:41:24:1d:c5:33:
e5:a7:15:0c:c1:f9:d2:aa:20:03:94:20:0a:e8:9e:65:5c:0f:
e7:4d:9d:90:e9:7e:ef:0e:cf:20:7a:a0:cf:5c:96:97:eb:60:
6c:49:0d:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:31:39 2025 by rpki-client