Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b2/cbd332-a8db-4606-ac9b-14ec41d4c0a6/1/n4IkN_Se1TiGaJAir93aWfefinE.mft
File: n4IkN_Se1TiGaJAir93aWfefinE.mft (raw, json)
Hash identifier: OudwZxAdSGG8d4vcPsmqbhwpJfayIL5LNkLTDSAF2zw=
Subject key identifier: E1:10:0C:81:01:EA:17:1E:23:19:B5:F7:25:36:E0:ED:87:49:AD:F3
Authority key identifier: 9F:82:24:37:F4:9E:D5:38:86:68:90:22:AF:DD:DA:59:F7:9F:8A:71
Certificate issuer: /CN=9f822437f49ed53886689022afddda59f79f8a71
Certificate serial: 019A00DA1F0A62C6DE0EF661990770789C95
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/n4IkN_Se1TiGaJAir93aWfefinE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b2/cbd332-a8db-4606-ac9b-14ec41d4c0a6/1/n4IkN_Se1TiGaJAir93aWfefinE.mft
Manifest number: 09DB
Signing time: Mon 20 Oct 2025 09:01:26 +0000
Manifest this update: Mon 20 Oct 2025 09:01:26 +0000
Manifest next update: Tue 21 Oct 2025 09:01:26 +0000
Files and hashes: 1: IdEYIsWCps3Gl-CPOJNmXVY_KDA.roa (hash: V5/YEnbALkGDiezb6/4H3zOCBx4UZLrATG4CYdBNlRA=)
2: n4IkN_Se1TiGaJAir93aWfefinE.crl (hash: 1OaOY1j03pBhVhIeXe1GDBmeGCHVPTjTi5ApcJcQBbA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b2/cbd332-a8db-4606-ac9b-14ec41d4c0a6/1/n4IkN_Se1TiGaJAir93aWfefinE.crl
rsync://rpki.ripe.net/repository/DEFAULT/b2/cbd332-a8db-4606-ac9b-14ec41d4c0a6/1/n4IkN_Se1TiGaJAir93aWfefinE.mft
rsync://rpki.ripe.net/repository/DEFAULT/n4IkN_Se1TiGaJAir93aWfefinE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 09:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:00:da:1f:0a:62:c6:de:0e:f6:61:99:07:70:78:9c:95
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9f822437f49ed53886689022afddda59f79f8a71
Validity
Not Before: Oct 20 09:01:26 2025 GMT
Not After : Oct 21 09:01:26 2025 GMT
Subject: CN=e1100c8101ea171e2319b5f72536e0ed8749adf3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:37:f1:1d:ac:7e:9f:b5:af:27:00:de:13:54:
e0:d9:ac:5f:48:00:b2:42:46:0e:d7:9d:a3:2f:53:
77:e7:84:9c:e0:1e:d7:ac:44:58:66:ef:7a:8b:ae:
60:09:9b:d1:f2:fd:fc:d9:12:7c:ed:75:98:d8:26:
6f:3a:17:4a:6a:a7:32:6f:3d:55:53:05:70:01:61:
41:4d:a0:01:a5:dc:69:43:e7:28:15:82:0a:1f:ab:
a4:7e:98:16:7e:8d:1d:2c:2d:c5:d4:70:9d:bd:2d:
07:30:0d:e3:0c:ca:f5:a9:5b:a4:85:18:e5:b5:0e:
20:72:8f:70:da:a3:dd:85:50:51:96:36:43:ea:72:
68:31:85:6f:ff:37:c3:70:e7:af:76:4e:dc:d1:f3:
3f:d3:bf:95:8f:06:2d:b7:6b:dd:ec:18:7c:5e:67:
a8:7f:d7:6d:a4:f5:df:46:b9:3e:d4:92:20:0f:40:
6b:61:c0:d4:01:7e:c0:1e:2b:9e:0c:a3:a5:49:98:
eb:4f:52:2f:3a:75:49:c6:a0:9d:e1:dd:a8:61:99:
42:5a:56:e9:80:56:53:61:2f:8e:93:4a:9b:9d:86:
3f:f2:e8:f7:98:d0:50:d3:7f:c0:03:b0:e3:a6:53:
b8:84:23:a3:e7:95:da:e3:46:64:e5:5b:a2:3e:8e:
31:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:10:0C:81:01:EA:17:1E:23:19:B5:F7:25:36:E0:ED:87:49:AD:F3
X509v3 Authority Key Identifier:
keyid:9F:82:24:37:F4:9E:D5:38:86:68:90:22:AF:DD:DA:59:F7:9F:8A:71
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/n4IkN_Se1TiGaJAir93aWfefinE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/cbd332-a8db-4606-ac9b-14ec41d4c0a6/1/n4IkN_Se1TiGaJAir93aWfefinE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/cbd332-a8db-4606-ac9b-14ec41d4c0a6/1/n4IkN_Se1TiGaJAir93aWfefinE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
01:cd:98:8b:12:c5:29:97:d1:b1:c0:d9:25:81:64:72:e2:a1:
7d:4b:8b:c2:91:21:cb:43:de:33:1f:e3:37:04:e2:07:c3:84:
84:28:5f:53:5c:99:cc:c5:e7:6c:eb:66:65:85:3d:38:d8:d9:
7e:f5:3d:59:14:0b:56:a6:58:c0:7b:75:14:21:50:99:4f:fd:
cc:bc:af:72:af:99:b5:1d:31:e2:81:e7:bd:a6:51:f0:7b:ee:
d7:83:61:9c:d5:20:2b:9c:14:ee:be:4d:46:e2:9c:7f:a4:d6:
96:73:e9:bc:18:e5:94:11:3e:1a:f9:57:2e:ee:eb:0a:fd:83:
58:3e:e8:d3:34:6b:ea:45:21:29:f7:f1:80:c1:7a:bb:35:3f:
71:4a:2c:50:af:68:4f:a1:fa:a3:48:48:59:55:bc:a8:5f:90:
7f:a0:17:1b:c7:f3:c7:59:e5:7e:ac:4b:20:5e:b6:ee:d6:89:
9b:ed:93:d5:e9:1d:35:2f:dd:2b:cc:e8:e7:c5:88:d8:5a:e8:
55:98:13:30:c2:46:05:13:e3:a9:85:e0:bc:7d:cf:8a:12:23:
13:74:ed:a0:45:22:06:98:51:c3:2c:5f:d8:df:0b:91:fc:9b:
af:e4:98:0a:38:58:69:44:dd:8b:47:4e:5d:ce:dc:28:5a:99:
c4:d6:31:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 13:16:14 2025 by rpki-client