Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/644501-9d42-4816-89c9-10aca3313387/1/n3LjoM10kAU1tqb4_8ZX2ToJB6Y.mft
File: n3LjoM10kAU1tqb4_8ZX2ToJB6Y.mft (raw, json)
Hash identifier: 7WWD0SUbOq9pwegkqVrUh1wf7LCUHFBkE68vTDQEs08=
Subject key identifier: 85:8C:E0:53:CE:81:72:67:59:48:CA:8D:3D:78:A9:0B:2F:37:C4:1E
Authority key identifier: 9F:72:E3:A0:CD:74:90:05:35:B6:A6:F8:FF:C6:57:D9:3A:09:07:A6
Certificate issuer: /CN=9f72e3a0cd74900535b6a6f8ffc657d93a0907a6
Certificate serial: 019A00A2D4F70DB3AE7C289FEB1D26CF1F0D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/n3LjoM10kAU1tqb4_8ZX2ToJB6Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/644501-9d42-4816-89c9-10aca3313387/1/n3LjoM10kAU1tqb4_8ZX2ToJB6Y.mft
Manifest number: 0AF2
Signing time: Mon 20 Oct 2025 08:01:02 +0000
Manifest this update: Mon 20 Oct 2025 08:01:02 +0000
Manifest next update: Tue 21 Oct 2025 08:01:02 +0000
Files and hashes: 1: n3LjoM10kAU1tqb4_8ZX2ToJB6Y.crl (hash: uOFMkmU83jX17ceri9/+rZoago9MPbdd6DhOUencIzY=)
2: xCIH9wp6RKlehql4M5SLCZPHQEs.roa (hash: 80w1j7Z/qMuNCNOWS8szAQAtDk98iD2/lDFP83CUU3U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bc/644501-9d42-4816-89c9-10aca3313387/1/n3LjoM10kAU1tqb4_8ZX2ToJB6Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/bc/644501-9d42-4816-89c9-10aca3313387/1/n3LjoM10kAU1tqb4_8ZX2ToJB6Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/n3LjoM10kAU1tqb4_8ZX2ToJB6Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 08:01:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:00:a2:d4:f7:0d:b3:ae:7c:28:9f:eb:1d:26:cf:1f:0d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9f72e3a0cd74900535b6a6f8ffc657d93a0907a6
Validity
Not Before: Oct 20 08:01:02 2025 GMT
Not After : Oct 21 08:01:02 2025 GMT
Subject: CN=858ce053ce8172675948ca8d3d78a90b2f37c41e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:94:4e:7e:1e:9b:97:e1:14:4d:5b:ec:70:d7:
f1:0c:96:f8:c5:74:08:c2:a9:a3:2e:22:35:87:d0:
bc:56:47:27:66:89:ff:61:d9:77:91:82:c6:77:e8:
1b:c7:57:8e:a3:86:45:52:2c:94:a2:fa:b6:5b:d4:
30:70:ea:7c:db:da:ef:b3:f5:3d:70:52:19:0c:da:
48:69:0f:a3:59:45:14:90:cc:76:84:44:d2:df:2a:
75:b4:21:a2:c7:dc:56:6a:d0:bb:46:12:55:9b:03:
fd:e9:2c:f3:73:49:dd:53:78:e6:c6:fd:96:f8:f5:
13:84:72:05:ae:c5:da:53:7d:1b:d9:cd:50:f1:8f:
2c:15:46:82:4f:de:da:b9:50:86:eb:05:19:10:6c:
e3:4d:0c:12:29:a2:c2:3e:06:23:8f:40:3b:c4:da:
6e:37:42:9e:ca:be:a9:a6:12:22:95:8f:c0:66:12:
15:4e:69:83:fc:46:d8:e1:34:07:cb:79:da:f6:07:
59:e2:68:13:22:7d:a8:91:a3:42:c4:4e:38:da:d3:
54:c9:09:ee:f2:4f:a0:9c:55:be:1e:c6:05:e6:c7:
44:3f:d7:e7:cb:ed:a8:1f:eb:43:e7:86:ef:c3:f7:
59:14:1c:d3:ca:1c:6b:be:28:4e:65:37:a9:b4:e2:
82:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:8C:E0:53:CE:81:72:67:59:48:CA:8D:3D:78:A9:0B:2F:37:C4:1E
X509v3 Authority Key Identifier:
keyid:9F:72:E3:A0:CD:74:90:05:35:B6:A6:F8:FF:C6:57:D9:3A:09:07:A6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/n3LjoM10kAU1tqb4_8ZX2ToJB6Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/644501-9d42-4816-89c9-10aca3313387/1/n3LjoM10kAU1tqb4_8ZX2ToJB6Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/644501-9d42-4816-89c9-10aca3313387/1/n3LjoM10kAU1tqb4_8ZX2ToJB6Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
34:91:38:a2:4f:6a:4d:f0:0c:04:1e:b9:45:5a:1c:32:04:33:
55:96:d1:f1:4b:96:36:57:1f:7b:7f:cd:04:df:a7:68:90:ed:
84:f8:29:a5:49:a8:22:83:39:34:60:5e:07:6d:98:09:41:b8:
5d:aa:45:5a:c8:3a:47:c3:14:8a:a6:65:c0:0d:07:88:e2:17:
3f:7d:d0:61:c0:f1:53:40:21:09:8b:c7:37:e3:88:45:01:9f:
81:87:74:72:93:e5:d3:a3:e0:6f:f1:a5:29:02:a8:62:33:e2:
74:7d:2f:d3:47:33:0b:2d:a6:f7:ac:8f:d4:e0:7d:05:a0:1a:
d2:9a:65:0c:ea:6c:9f:65:b2:2b:37:8a:5c:4e:48:b6:34:b1:
0e:b4:53:af:e2:c7:0f:00:69:c7:a7:2b:88:03:b2:0d:67:9a:
b6:c2:5c:54:18:26:a9:0f:55:59:3c:e8:f8:f5:11:9b:eb:4b:
dd:66:63:54:63:8b:15:0a:05:39:d4:61:80:05:99:bd:93:4f:
36:e3:54:1d:aa:20:9f:24:07:9e:af:ef:82:b0:2a:1e:1f:2a:
33:c6:98:b0:31:22:ff:6a:01:ec:70:85:9d:c9:bf:d4:d1:7a:
a0:de:3a:18:90:a0:07:a5:8c:df:2f:5f:10:c5:ed:46:33:42:
f9:84:c5:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 14:40:20 2025 by rpki-client