Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6d/791c39-d838-49e3-89ea-8408166bb761/1/n8UDUANWwjcveVsQ0PfVid9p_Is.mft
File: n8UDUANWwjcveVsQ0PfVid9p_Is.mft (raw, json)
Hash identifier: Ru2BwpsuebuWDiprWoKC5b54UxL7xShUB95McieU6EM=
Subject key identifier: 83:D7:95:9B:59:27:37:A1:CF:74:3A:BA:D4:ED:A8:5B:23:E2:F0:44
Authority key identifier: 9F:C5:03:50:03:56:C2:37:2F:79:5B:10:D0:F7:D5:89:DF:69:FC:8B
Certificate issuer: /CN=9fc503500356c2372f795b10d0f7d589df69fc8b
Certificate serial: 0199FDD9A99F1C52450A259D8EC31F9AF4E3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/n8UDUANWwjcveVsQ0PfVid9p_Is.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6d/791c39-d838-49e3-89ea-8408166bb761/1/n8UDUANWwjcveVsQ0PfVid9p_Is.mft
Manifest number: 16E0
Signing time: Sun 19 Oct 2025 19:02:04 +0000
Manifest this update: Sun 19 Oct 2025 19:02:04 +0000
Manifest next update: Mon 20 Oct 2025 19:02:04 +0000
Files and hashes: 1: n8UDUANWwjcveVsQ0PfVid9p_Is.crl (hash: /eNoYap7DIAhuafJkPnOzVrLTJugm70VM/o0YPdZJAw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6d/791c39-d838-49e3-89ea-8408166bb761/1/n8UDUANWwjcveVsQ0PfVid9p_Is.crl
rsync://rpki.ripe.net/repository/DEFAULT/6d/791c39-d838-49e3-89ea-8408166bb761/1/n8UDUANWwjcveVsQ0PfVid9p_Is.mft
rsync://rpki.ripe.net/repository/DEFAULT/n8UDUANWwjcveVsQ0PfVid9p_Is.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 15:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fd:d9:a9:9f:1c:52:45:0a:25:9d:8e:c3:1f:9a:f4:e3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9fc503500356c2372f795b10d0f7d589df69fc8b
Validity
Not Before: Oct 19 19:02:04 2025 GMT
Not After : Oct 20 19:02:04 2025 GMT
Subject: CN=83d7959b592737a1cf743abad4eda85b23e2f044
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:45:ff:08:75:2f:a9:62:b1:f5:cb:87:42:af:
2c:9e:60:c8:cd:f7:3f:4d:98:a1:ca:94:b2:c9:1b:
d5:c4:f4:54:f1:a6:c1:ae:4a:c9:fb:48:1c:96:b1:
d6:f8:80:97:97:c6:8d:84:b0:b5:d3:4e:d6:99:59:
21:b3:7d:49:02:00:c2:b0:4c:6c:8f:0d:7b:d1:2e:
7f:c9:49:b9:9a:91:0f:1f:3e:26:c3:de:a3:2d:da:
c0:52:39:e2:dc:9f:77:2a:03:ca:fa:63:17:ce:ed:
04:dc:cf:40:1c:0d:85:55:e3:c5:76:84:60:dd:17:
fe:93:26:31:58:7d:99:fb:0f:f5:6f:eb:2b:7a:62:
cb:49:05:7c:ae:93:40:14:84:4c:72:43:bc:fc:f6:
03:c0:b4:ce:ca:de:fe:72:55:6d:a6:eb:a6:6c:26:
c7:27:74:13:e4:81:4b:70:e4:fd:18:bc:b4:a6:ef:
e4:99:9f:8a:4a:b4:b6:d9:f3:04:e2:09:13:e4:92:
21:7f:14:ba:4c:f2:62:c3:4f:2b:6d:80:f9:64:69:
ab:8d:bc:01:a3:0d:49:0a:e6:de:de:c3:e9:96:d8:
99:9e:37:65:34:f5:ab:db:03:75:dd:a1:fe:f2:4b:
a5:99:2b:c0:61:8f:5a:3d:43:e9:ab:9e:58:38:d0:
68:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:D7:95:9B:59:27:37:A1:CF:74:3A:BA:D4:ED:A8:5B:23:E2:F0:44
X509v3 Authority Key Identifier:
keyid:9F:C5:03:50:03:56:C2:37:2F:79:5B:10:D0:F7:D5:89:DF:69:FC:8B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/n8UDUANWwjcveVsQ0PfVid9p_Is.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/791c39-d838-49e3-89ea-8408166bb761/1/n8UDUANWwjcveVsQ0PfVid9p_Is.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/791c39-d838-49e3-89ea-8408166bb761/1/n8UDUANWwjcveVsQ0PfVid9p_Is.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1f:53:77:9c:58:c2:a9:6a:f1:e4:e4:a6:59:9b:02:4c:63:af:
61:34:f2:55:59:70:4f:1e:4e:37:a2:0b:c0:a1:97:82:c4:ba:
0e:80:e3:ce:ef:25:63:a6:9d:2a:ce:ff:de:39:1d:2a:b3:29:
c4:db:bd:4c:71:3b:00:85:9d:91:ed:95:b9:5b:9c:ea:e3:1d:
f0:d7:bf:00:18:c4:41:56:2d:06:ea:20:74:79:05:b8:1e:26:
0f:09:72:ea:2f:d3:af:14:0d:19:5d:b8:98:2c:50:ed:46:c1:
ce:1f:93:18:26:70:6a:21:dc:ac:da:16:56:4b:88:0f:9a:e7:
f5:28:09:e0:85:9a:85:46:85:b7:0d:99:aa:4a:45:04:3c:6a:
13:96:bd:7e:24:10:81:25:9d:74:c3:b9:d9:58:07:2f:2e:52:
91:f2:a7:d0:76:01:27:0b:53:cc:42:1e:cb:56:1d:f3:86:47:
6e:f2:b4:5d:45:ef:b6:04:cb:57:83:68:62:87:c3:95:63:76:
19:5c:96:7a:17:fe:7b:6a:c6:26:18:36:50:7e:4f:d6:40:22:
53:f0:8d:7a:b9:ab:6b:47:cf:a0:47:55:dd:64:64:6f:ce:5c:
c8:e3:3b:80:94:22:6b:e6:4c:bf:2e:e2:17:e7:d8:81:64:f0:
e0:00:f4:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 00:01:01 2025 by rpki-client