Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/0cf187-ecb3-4b42-91e4-6addfcb18f99/1/n3Qy9pnL0kmy48nFW976-DmGtEI.mft
File: n3Qy9pnL0kmy48nFW976-DmGtEI.mft (raw, json)
Hash identifier: pC9nHgsHBsjDc1yS1Z5waxlIBfSTS2HgonnoWLyes5Q=
Subject key identifier: B5:5C:9E:D5:E3:1E:78:5B:23:E0:3D:80:BF:A8:73:71:5A:72:8D:E5
Authority key identifier: 9F:74:32:F6:99:CB:D2:49:B2:E3:C9:C5:5B:DE:FA:F8:39:86:B4:42
Certificate issuer: /CN=9f7432f699cbd249b2e3c9c55bdefaf83986b442
Certificate serial: 0199FCFD364FC2F0CDFAE184416A5B520F78
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/n3Qy9pnL0kmy48nFW976-DmGtEI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ab/0cf187-ecb3-4b42-91e4-6addfcb18f99/1/n3Qy9pnL0kmy48nFW976-DmGtEI.mft
Manifest number: 11A9
Signing time: Sun 19 Oct 2025 15:01:16 +0000
Manifest this update: Sun 19 Oct 2025 15:01:16 +0000
Manifest next update: Mon 20 Oct 2025 15:01:16 +0000
Files and hashes: 1: n3Qy9pnL0kmy48nFW976-DmGtEI.crl (hash: ypEec1HeYD/cC5leDwoUbuQ8GZ2kvvAp9uDidKYps3o=)
2: yY1iNFVSPGpVBCv6e5Q4VD19NB8.roa (hash: Xz+3ntm5iVPl2B9YcE2P65g+xG5FxMjLX4w1n0LEPnc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ab/0cf187-ecb3-4b42-91e4-6addfcb18f99/1/n3Qy9pnL0kmy48nFW976-DmGtEI.crl
rsync://rpki.ripe.net/repository/DEFAULT/ab/0cf187-ecb3-4b42-91e4-6addfcb18f99/1/n3Qy9pnL0kmy48nFW976-DmGtEI.mft
rsync://rpki.ripe.net/repository/DEFAULT/n3Qy9pnL0kmy48nFW976-DmGtEI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 15:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:fd:36:4f:c2:f0:cd:fa:e1:84:41:6a:5b:52:0f:78
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9f7432f699cbd249b2e3c9c55bdefaf83986b442
Validity
Not Before: Oct 19 15:01:16 2025 GMT
Not After : Oct 20 15:01:16 2025 GMT
Subject: CN=b55c9ed5e31e785b23e03d80bfa873715a728de5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:2c:b0:b2:62:fa:01:86:82:b1:56:12:dc:ec:
0e:b6:a2:21:d0:6a:a5:77:e3:18:bc:87:69:9b:26:
08:23:da:d1:46:87:a7:3a:ab:72:3e:fb:ee:91:4f:
0c:25:ff:6e:1e:14:b1:4b:a6:f4:b1:2b:70:16:18:
41:3c:28:f9:64:c6:23:9d:4c:a3:21:88:30:1e:02:
9b:d2:ed:6f:71:b1:d5:31:61:39:d8:a7:5b:f7:3f:
11:f7:fa:20:57:f1:0a:9a:30:4f:e8:84:8d:6a:a2:
b2:c4:42:ef:4a:df:06:69:6f:35:ed:98:a9:0a:af:
35:e7:42:87:18:6f:c5:0d:62:31:bd:d7:b1:8f:ec:
17:7e:a1:c5:44:0a:e7:bc:dd:04:74:5d:03:90:38:
61:56:60:09:c0:e0:20:f2:db:8c:5a:17:fe:94:33:
11:99:66:f7:52:71:13:d4:d4:04:1d:a3:d9:82:59:
1b:5d:64:71:23:98:e7:84:3f:78:1f:5d:20:fb:3d:
2a:4c:7f:0b:d1:37:23:a4:c2:9f:9b:07:3c:68:37:
a1:1f:18:9c:9c:1f:bc:ab:d6:ad:3c:ff:e5:37:35:
d1:34:4f:db:d8:85:96:c0:56:22:6d:7c:a6:e1:7d:
66:81:49:69:bb:cc:89:98:cd:f3:df:67:36:56:ad:
86:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:5C:9E:D5:E3:1E:78:5B:23:E0:3D:80:BF:A8:73:71:5A:72:8D:E5
X509v3 Authority Key Identifier:
keyid:9F:74:32:F6:99:CB:D2:49:B2:E3:C9:C5:5B:DE:FA:F8:39:86:B4:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/n3Qy9pnL0kmy48nFW976-DmGtEI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/0cf187-ecb3-4b42-91e4-6addfcb18f99/1/n3Qy9pnL0kmy48nFW976-DmGtEI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/0cf187-ecb3-4b42-91e4-6addfcb18f99/1/n3Qy9pnL0kmy48nFW976-DmGtEI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
63:80:88:c4:12:2f:d6:91:40:55:b8:bf:ed:37:65:93:56:da:
22:60:72:62:50:5f:44:f5:e6:84:35:35:63:36:a9:1a:60:9a:
ad:12:81:12:dc:56:aa:dc:67:00:c2:8e:0e:ce:d2:d2:4e:4d:
44:62:0d:47:0e:aa:f9:e2:32:90:3e:49:92:62:3d:cb:18:99:
08:4d:b4:9f:ff:99:72:1a:5a:5c:79:dc:84:88:86:35:ad:1c:
c2:66:32:f5:c4:ba:12:a9:1b:36:27:bf:57:18:53:be:1f:4f:
3b:a4:09:15:9e:51:cc:17:85:5f:97:df:fd:fd:a1:d3:d4:ec:
92:17:52:b1:ee:09:19:33:b5:bf:e6:49:84:ea:39:19:01:d9:
bd:53:49:25:86:75:6f:0f:3d:64:cb:70:45:14:49:76:05:17:
0e:58:3a:43:86:08:4b:e8:d4:f0:fc:03:37:80:fa:2a:26:7a:
22:40:7e:5f:12:b1:68:a2:1d:4a:4a:55:76:55:d9:62:67:2b:
25:23:65:3f:8a:4a:2f:e6:1c:9b:6f:5d:60:8a:b2:e1:86:8c:
ee:27:87:cd:9d:e9:d6:7f:80:e5:bd:1c:0d:84:65:7a:df:d3:
4c:39:c2:5a:ce:d4:8e:45:ab:ef:78:d6:40:a5:4d:69:43:09:
1a:d8:95:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 01:17:31 2025 by rpki-client