Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/81/0a4564-a525-4615-9a3a-8930ebb83e31/1/niX4djqjUWiba6M2JpqyHE4BILM.mft
File: niX4djqjUWiba6M2JpqyHE4BILM.mft (raw, json)
Hash identifier: lgRSYUuNmlSg3tp1IUKdEIcUKMv77CkUiR1ftsVKLAI=
Subject key identifier: 5C:75:F3:27:F0:4A:06:C0:9B:CC:6A:D2:3B:0E:BF:5E:00:53:3A:9B
Authority key identifier: 9E:25:F8:76:3A:A3:51:68:9B:6B:A3:36:26:9A:B2:1C:4E:01:20:B3
Certificate issuer: /CN=9e25f8763aa351689b6ba336269ab21c4e0120b3
Certificate serial: 0199FC586A90A9CC3AE61771BEC4FEB24D4F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/niX4djqjUWiba6M2JpqyHE4BILM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/81/0a4564-a525-4615-9a3a-8930ebb83e31/1/niX4djqjUWiba6M2JpqyHE4BILM.mft
Manifest number: 0506
Signing time: Sun 19 Oct 2025 12:01:16 +0000
Manifest this update: Sun 19 Oct 2025 12:01:16 +0000
Manifest next update: Mon 20 Oct 2025 12:01:16 +0000
Files and hashes: 1: 3lv0MS0KMvs2NqTlqtd3HvxtHfA.roa (hash: Jn8Yd6x4goPshXFFHZFFSl5WpHb8SXFgvxZ7Lsgfvu4=)
2: niX4djqjUWiba6M2JpqyHE4BILM.crl (hash: QKvkqs+6ZAV7yNLkPPTcPS78T6aikzOQNlAJujVeht4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/81/0a4564-a525-4615-9a3a-8930ebb83e31/1/niX4djqjUWiba6M2JpqyHE4BILM.crl
rsync://rpki.ripe.net/repository/DEFAULT/81/0a4564-a525-4615-9a3a-8930ebb83e31/1/niX4djqjUWiba6M2JpqyHE4BILM.mft
rsync://rpki.ripe.net/repository/DEFAULT/niX4djqjUWiba6M2JpqyHE4BILM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:58:6a:90:a9:cc:3a:e6:17:71:be:c4:fe:b2:4d:4f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9e25f8763aa351689b6ba336269ab21c4e0120b3
Validity
Not Before: Oct 19 12:01:16 2025 GMT
Not After : Oct 20 12:01:16 2025 GMT
Subject: CN=5c75f327f04a06c09bcc6ad23b0ebf5e00533a9b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:b9:a7:17:10:79:5f:03:11:68:ac:de:b5:91:
80:07:2a:11:20:e9:5f:dd:1b:ca:44:47:4d:23:d0:
24:f0:dc:03:c1:66:aa:d0:fe:d4:d8:12:da:01:e6:
3e:ae:ef:53:3b:47:05:c2:54:3f:f3:f8:f5:85:82:
61:88:7d:d2:05:db:24:1d:d9:f3:be:80:cf:75:71:
a5:28:ef:41:1a:30:04:00:84:79:51:ce:85:cc:c6:
80:b6:60:73:4a:98:ab:fc:01:2f:7c:07:a7:f7:ae:
42:84:e7:fd:3a:b8:62:86:0a:73:0f:a0:61:b6:8f:
b8:cd:15:55:ec:18:d8:8e:17:11:b3:c4:92:55:68:
ac:dc:49:b9:e6:13:32:d6:69:c0:a9:18:00:8f:2b:
f3:b3:bb:b8:65:8b:48:57:bf:30:7f:a7:d8:8f:4f:
cc:21:71:2a:b0:17:a8:fa:bf:d6:46:a9:ca:53:69:
e1:4f:44:7b:d3:3e:bb:2e:6a:e7:3f:26:bc:a9:81:
e9:9d:19:a2:fe:1e:f6:5b:69:42:50:c3:22:43:09:
7e:1b:67:0e:09:ac:7a:cc:1e:ff:77:6c:39:84:39:
90:17:38:50:96:e7:1f:93:59:09:da:f4:79:2d:d3:
47:d2:c0:d8:81:7b:8d:78:ca:34:aa:9b:0d:6d:dd:
93:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:75:F3:27:F0:4A:06:C0:9B:CC:6A:D2:3B:0E:BF:5E:00:53:3A:9B
X509v3 Authority Key Identifier:
keyid:9E:25:F8:76:3A:A3:51:68:9B:6B:A3:36:26:9A:B2:1C:4E:01:20:B3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/niX4djqjUWiba6M2JpqyHE4BILM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/0a4564-a525-4615-9a3a-8930ebb83e31/1/niX4djqjUWiba6M2JpqyHE4BILM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/81/0a4564-a525-4615-9a3a-8930ebb83e31/1/niX4djqjUWiba6M2JpqyHE4BILM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9c:a1:4f:9c:c7:71:91:d1:7e:00:80:04:89:ca:af:d5:d0:3b:
fc:45:b5:7f:fe:09:35:cc:6f:52:9a:72:9b:70:96:6a:12:79:
4f:2d:3e:d4:49:ec:fb:ca:ac:29:03:3f:4a:41:51:20:e7:0e:
32:fd:90:12:69:e7:92:65:52:66:8a:c3:f0:13:fe:f1:12:64:
37:78:18:e2:91:b3:f2:90:f8:bd:6b:de:69:d7:bb:59:6b:f2:
dc:6c:0d:dc:a7:84:47:18:df:b4:ed:25:28:4f:76:54:88:79:
2e:73:c2:cc:98:50:dc:23:ee:56:7f:f9:61:e2:6f:1e:d0:a7:
c6:aa:2a:21:23:4a:e5:b9:f0:b0:8d:71:0f:23:6b:0f:27:f1:
cc:4c:5c:79:28:8b:0a:d8:80:8a:ea:2a:ba:ea:94:22:6a:68:
05:aa:a4:fa:ac:e3:5b:b9:36:1e:2d:cb:74:b4:fa:e5:09:99:
a7:dd:ab:c5:4d:07:d8:80:90:be:8f:c4:84:50:0e:2c:fd:a4:
db:50:16:d9:40:76:c9:c7:a6:d2:63:49:fa:bc:e3:9d:e9:d4:
95:df:ee:8c:d5:02:3d:ea:f7:97:57:df:ce:9a:24:bf:94:38:
3e:18:a9:ed:09:7c:32:59:bd:5a:13:23:a1:46:8d:0e:74:68:
5a:5e:c0:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 17:59:00 2025 by rpki-client