Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/127684-5afe-4f18-b95d-3072503d8607/1/n_M9TzrAqIeECihM3Bq-t91kLwE.mft
File: n_M9TzrAqIeECihM3Bq-t91kLwE.mft (raw, json)
Hash identifier: 8U4U2iebqF82a60px4rEG0pnfUChdEZ70lYWlBbvFcM=
Subject key identifier: 01:89:3C:87:6A:60:80:34:A7:F8:23:4C:9D:4E:F5:C7:2B:FF:5E:A3
Authority key identifier: 9F:F3:3D:4F:3A:C0:A8:87:84:0A:28:4C:DC:1A:BE:B7:DD:64:2F:01
Certificate issuer: /CN=9ff33d4f3ac0a887840a284cdc1abeb7dd642f01
Certificate serial: 0199FBEAA2474EFEF5DDAC4F87384A3AF47B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/n_M9TzrAqIeECihM3Bq-t91kLwE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/127684-5afe-4f18-b95d-3072503d8607/1/n_M9TzrAqIeECihM3Bq-t91kLwE.mft
Manifest number: 101D
Signing time: Sun 19 Oct 2025 10:01:22 +0000
Manifest this update: Sun 19 Oct 2025 10:01:22 +0000
Manifest next update: Mon 20 Oct 2025 10:01:22 +0000
Files and hashes: 1: FVg-EXFcHktuG7QQnavEaXe-fnM.roa (hash: mi0+1itCdMO3yynnGJ5oIkWt7SrPDpOOMP9BVB9K+Jc=)
2: T3nKkG-dCBEn2EriUuJalbbWuME.roa (hash: NecAgRoxclxz3UKtAie4B0/FU5sK9TM4xXuPGjhm4Kc=)
3: n_M9TzrAqIeECihM3Bq-t91kLwE.crl (hash: JgS36IsooDXjCEDIWYNWxg7M06vKEm0ZO74Yk4TR8Ns=)
4: nl8-f4Y4T6rTsqYQijhuiNifL1Q.roa (hash: D8rqvsrK84p8WeU5jZAqKp61j1ey2NYKXftp+gwX6/8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/127684-5afe-4f18-b95d-3072503d8607/1/n_M9TzrAqIeECihM3Bq-t91kLwE.crl
rsync://rpki.ripe.net/repository/DEFAULT/5a/127684-5afe-4f18-b95d-3072503d8607/1/n_M9TzrAqIeECihM3Bq-t91kLwE.mft
rsync://rpki.ripe.net/repository/DEFAULT/n_M9TzrAqIeECihM3Bq-t91kLwE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:ea:a2:47:4e:fe:f5:dd:ac:4f:87:38:4a:3a:f4:7b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9ff33d4f3ac0a887840a284cdc1abeb7dd642f01
Validity
Not Before: Oct 19 10:01:22 2025 GMT
Not After : Oct 20 10:01:22 2025 GMT
Subject: CN=01893c876a608034a7f8234c9d4ef5c72bff5ea3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:ab:50:8a:e4:b6:74:8c:d2:21:31:0a:81:3c:
0b:bd:51:03:71:95:50:9f:54:ed:85:de:8f:c4:ca:
63:db:b4:37:f2:63:78:44:ce:32:62:cd:02:65:1c:
5c:dd:ac:ba:9a:73:fc:ff:91:1f:16:06:4c:62:4a:
47:bc:93:40:e7:ee:69:68:f4:a5:8c:1b:c6:c6:5e:
75:c1:be:a2:cc:24:e6:8f:06:7f:2e:af:e3:d9:2f:
00:ca:4f:4f:f3:34:cb:b0:71:f7:ac:47:bf:55:43:
a6:21:90:07:66:fb:c3:51:ca:3c:f8:71:62:73:d6:
a4:52:68:b4:eb:34:d4:22:41:00:64:69:b9:99:a8:
a7:7b:c6:8b:5f:12:2f:70:99:d2:2b:94:55:86:de:
e3:dd:41:47:b7:05:1e:9b:96:5b:f0:be:42:e9:77:
c7:2e:d8:d8:e8:de:e0:3d:f0:b8:bc:38:cb:b9:df:
15:30:e0:c7:2d:f4:53:10:23:9d:b7:78:e2:29:3a:
7d:84:69:6e:b5:19:7e:e6:db:77:31:8d:fa:d2:01:
fa:4a:fa:88:7e:17:8e:c7:9d:dc:b7:95:58:b7:95:
9d:51:66:ae:6c:84:a4:40:b6:24:62:32:93:2f:ea:
9b:d2:e9:4a:06:ec:de:55:26:57:98:ad:51:33:9f:
26:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:89:3C:87:6A:60:80:34:A7:F8:23:4C:9D:4E:F5:C7:2B:FF:5E:A3
X509v3 Authority Key Identifier:
keyid:9F:F3:3D:4F:3A:C0:A8:87:84:0A:28:4C:DC:1A:BE:B7:DD:64:2F:01
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/n_M9TzrAqIeECihM3Bq-t91kLwE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/127684-5afe-4f18-b95d-3072503d8607/1/n_M9TzrAqIeECihM3Bq-t91kLwE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/127684-5afe-4f18-b95d-3072503d8607/1/n_M9TzrAqIeECihM3Bq-t91kLwE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
55:98:02:98:fe:bf:1c:a1:0a:70:30:fe:3c:2b:35:9e:cb:2c:
74:57:37:98:f2:ae:2a:f1:43:d3:b0:b9:b0:4f:38:87:c6:f6:
34:fa:ea:80:62:5a:6f:4b:90:57:60:ec:6e:90:d5:46:07:c8:
8c:13:7d:3b:14:6b:23:01:86:19:cd:51:e6:da:a5:50:5f:e6:
5a:da:98:4c:54:89:eb:93:53:7b:80:a3:b9:49:04:cb:55:30:
f1:67:9f:d6:bb:1d:1d:49:d7:3d:86:21:2a:1d:79:73:d9:1e:
a3:49:f2:da:a1:49:14:af:80:c4:b4:b4:dc:d7:8c:15:68:bf:
ea:5c:fb:81:4b:c9:f5:fe:64:cd:b9:b9:24:49:6e:84:fc:31:
b4:ba:55:01:76:82:c7:41:bc:fc:26:c1:3c:1c:9d:08:71:98:
20:cd:fd:33:40:37:78:c9:a2:c4:b8:10:93:b3:39:9b:82:c5:
09:91:26:c0:12:a5:7a:d2:fc:5a:74:02:96:98:42:e2:6b:8c:
7d:1a:47:7b:30:2a:89:d6:b4:14:01:dc:df:9f:a5:4f:5e:4f:
72:89:5b:22:25:f9:d2:31:ac:fb:b7:7e:f8:0c:38:5b:00:2a:
1e:56:6b:dc:10:e3:1a:1d:d3:df:17:3d:ed:b2:4c:6b:16:a2:
cc:4e:fb:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:42:51 2025 by rpki-client