Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9c/7f840d-3bd4-4fad-9a15-8bf04af4b2b4/1/n8wvPua1w_9txTRqdTVQb6gkEj4.mft
File: n8wvPua1w_9txTRqdTVQb6gkEj4.mft (raw, json)
Hash identifier: VVyi4RhgVMTQQB4AEPKn5BRS0v2niYM+j2k4Fc83zfM=
Subject key identifier: FF:C4:DD:6A:B5:BF:94:4D:24:24:58:FB:06:9A:D6:57:55:5A:3F:AA
Authority key identifier: 9F:CC:2F:3E:E6:B5:C3:FF:6D:C5:34:6A:75:35:50:6F:A8:24:12:3E
Certificate issuer: /CN=9fcc2f3ee6b5c3ff6dc5346a7535506fa824123e
Certificate serial: 0199FFC764CF28AB89CA32A4B6FF036FFA5D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/n8wvPua1w_9txTRqdTVQb6gkEj4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9c/7f840d-3bd4-4fad-9a15-8bf04af4b2b4/1/n8wvPua1w_9txTRqdTVQb6gkEj4.mft
Manifest number: 0BE5
Signing time: Mon 20 Oct 2025 04:01:21 +0000
Manifest this update: Mon 20 Oct 2025 04:01:21 +0000
Manifest next update: Tue 21 Oct 2025 04:01:21 +0000
Files and hashes: 1: d6576JrBH9SAWrjxOsX8R_x4jzM.roa (hash: tOpLNCmhcfBx5S04WHkAz4ZSeX9flEr3FqNx70rcKF0=)
2: n8wvPua1w_9txTRqdTVQb6gkEj4.crl (hash: MENyfwkM6CeHTBczgeGt7A4cVKSA8t2XS2QaGkcnd6c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9c/7f840d-3bd4-4fad-9a15-8bf04af4b2b4/1/n8wvPua1w_9txTRqdTVQb6gkEj4.crl
rsync://rpki.ripe.net/repository/DEFAULT/9c/7f840d-3bd4-4fad-9a15-8bf04af4b2b4/1/n8wvPua1w_9txTRqdTVQb6gkEj4.mft
rsync://rpki.ripe.net/repository/DEFAULT/n8wvPua1w_9txTRqdTVQb6gkEj4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 00:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:ff:c7:64:cf:28:ab:89:ca:32:a4:b6:ff:03:6f:fa:5d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9fcc2f3ee6b5c3ff6dc5346a7535506fa824123e
Validity
Not Before: Oct 20 04:01:21 2025 GMT
Not After : Oct 21 04:01:21 2025 GMT
Subject: CN=ffc4dd6ab5bf944d242458fb069ad657555a3faa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:d5:bf:81:2a:2a:08:48:d6:a9:51:3c:3a:98:
33:4b:dd:01:43:1a:81:4b:38:0d:91:2b:ad:b4:d0:
91:1e:92:35:53:b6:e1:94:13:f1:49:8d:42:8f:a9:
5c:a3:2a:b9:90:f0:b4:98:dc:d3:0d:2e:9f:f1:88:
e8:5d:ec:fc:8b:67:ef:f6:d0:99:f2:28:08:05:3f:
0b:b8:89:75:df:38:85:c7:37:75:3d:3c:3a:06:71:
25:25:a9:65:ff:ef:06:70:76:4e:3f:09:cd:15:ac:
03:d4:9e:b2:64:27:7f:c6:d4:b4:1a:9d:22:05:f8:
99:d3:56:2a:65:12:13:48:66:72:ae:5a:9e:86:9d:
9f:8c:e2:34:4c:cb:33:0f:89:7d:51:7a:85:3e:2c:
ec:b1:85:e1:1f:54:88:38:4f:6b:67:10:72:d5:d5:
0c:3b:a8:a4:b7:0d:1e:bf:fe:70:b2:9f:3a:82:41:
af:92:a6:44:4d:ce:6b:a5:16:04:34:8a:bb:48:e4:
b6:74:c1:59:63:07:b6:85:5b:1b:f2:8f:ca:a9:b3:
eb:d8:5b:2a:9d:c5:b7:e7:b3:18:ed:67:52:c4:84:
37:15:45:c4:59:9f:d9:f6:5c:61:67:6c:41:74:3b:
68:cc:27:7f:44:ff:e8:84:af:1e:53:18:cf:68:f0:
cb:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:C4:DD:6A:B5:BF:94:4D:24:24:58:FB:06:9A:D6:57:55:5A:3F:AA
X509v3 Authority Key Identifier:
keyid:9F:CC:2F:3E:E6:B5:C3:FF:6D:C5:34:6A:75:35:50:6F:A8:24:12:3E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/n8wvPua1w_9txTRqdTVQb6gkEj4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/7f840d-3bd4-4fad-9a15-8bf04af4b2b4/1/n8wvPua1w_9txTRqdTVQb6gkEj4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/7f840d-3bd4-4fad-9a15-8bf04af4b2b4/1/n8wvPua1w_9txTRqdTVQb6gkEj4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3f:ad:91:46:93:9c:ff:97:16:39:f9:3f:e1:b7:07:64:34:e6:
9e:ad:54:26:d8:b6:55:c4:44:c2:cb:8f:fe:78:e9:0c:06:d0:
85:48:ca:c2:f3:69:da:b9:79:b1:2f:e5:9d:95:e7:b6:34:de:
37:e4:b5:e2:0a:0f:bc:2f:06:84:79:d2:0b:0b:cd:d6:3b:b0:
0f:7d:80:4a:7f:3e:a6:d9:ad:28:41:22:d0:ad:e7:a8:c3:26:
a1:bc:da:0c:05:95:41:6c:72:31:03:21:29:05:19:49:91:b3:
4a:12:05:b0:f8:27:71:57:f6:cb:23:0f:37:41:10:b3:9d:f0:
d2:84:2c:7d:e6:e6:6b:e4:71:c5:f5:90:8a:56:e3:40:06:b0:
80:f5:79:ea:4f:4a:5e:da:d4:ce:4c:dc:c5:13:e7:13:d3:8b:
fc:b1:91:09:53:d6:ca:3f:66:00:be:cd:91:62:e6:73:e5:e9:
73:16:eb:2d:fb:cc:e1:5e:e5:8c:58:09:cf:b5:c0:2d:c0:79:
d3:a5:03:3b:67:17:11:ad:04:66:ca:68:5b:ee:f4:5e:b6:84:
79:e3:84:ff:3a:a4:f3:65:7b:18:1a:e3:e6:0a:9d:5f:58:9b:
8d:7b:66:dd:39:04:a6:c4:4f:46:a1:48:3f:d8:3b:84:ab:4b:
f0:40:10:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 08:55:56 2025 by rpki-client