Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bf/e42336-eb77-4540-be41-55fd6dc1a1d8/1/n0XrWiiMaO1g29m4fk6CBsqckz8.mft
File: n0XrWiiMaO1g29m4fk6CBsqckz8.mft (raw, json)
Hash identifier: 5YsymFKo3qjbLWfpBzfQqUbek8w0tbidW9mvKBwJnOE=
Subject key identifier: 3A:0E:E3:2C:98:A0:1E:BD:93:60:40:BC:13:F0:E8:D0:C7:1E:DF:7A
Authority key identifier: 9F:45:EB:5A:28:8C:68:ED:60:DB:D9:B8:7E:4E:82:06:CA:9C:93:3F
Certificate issuer: /CN=9f45eb5a288c68ed60dbd9b87e4e8206ca9c933f
Certificate serial: 0199FBEB3B4DE3ECA83E7FD85F5D0CF7DBA6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/n0XrWiiMaO1g29m4fk6CBsqckz8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bf/e42336-eb77-4540-be41-55fd6dc1a1d8/1/n0XrWiiMaO1g29m4fk6CBsqckz8.mft
Manifest number: 10BC
Signing time: Sun 19 Oct 2025 10:02:01 +0000
Manifest this update: Sun 19 Oct 2025 10:02:01 +0000
Manifest next update: Mon 20 Oct 2025 10:02:01 +0000
Files and hashes: 1: n0XrWiiMaO1g29m4fk6CBsqckz8.crl (hash: xsFuUdN/MegRGfrUEMZk1xb04YdtZ6NlyIrsqJ/Vg9k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bf/e42336-eb77-4540-be41-55fd6dc1a1d8/1/n0XrWiiMaO1g29m4fk6CBsqckz8.crl
rsync://rpki.ripe.net/repository/DEFAULT/bf/e42336-eb77-4540-be41-55fd6dc1a1d8/1/n0XrWiiMaO1g29m4fk6CBsqckz8.mft
rsync://rpki.ripe.net/repository/DEFAULT/n0XrWiiMaO1g29m4fk6CBsqckz8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 10:02:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:eb:3b:4d:e3:ec:a8:3e:7f:d8:5f:5d:0c:f7:db:a6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9f45eb5a288c68ed60dbd9b87e4e8206ca9c933f
Validity
Not Before: Oct 19 10:02:01 2025 GMT
Not After : Oct 20 10:02:01 2025 GMT
Subject: CN=3a0ee32c98a01ebd936040bc13f0e8d0c71edf7a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:14:55:2d:21:ea:c9:21:5c:e7:1c:1c:a1:fc:
d1:00:20:63:8e:36:15:82:c0:b1:4b:4e:27:f7:ab:
9c:8b:65:16:2d:bc:1f:d7:8a:b3:b1:e7:93:34:32:
b3:fb:09:95:94:fc:24:0f:9f:13:ac:b6:e4:ee:0f:
e6:e6:7b:cf:a5:d5:51:7c:77:25:d0:42:5d:09:f7:
5e:55:c9:a7:e3:40:ca:71:7b:11:22:f6:26:5b:1c:
de:13:2d:98:f1:8e:63:6a:0e:a1:11:a0:d3:40:e7:
9f:af:e2:bc:59:d4:50:3e:b6:5d:01:fd:a8:8b:54:
c9:2f:63:b3:87:33:53:6e:c5:bf:ab:35:78:1f:fe:
a4:cc:e8:f6:56:e5:22:9d:ea:86:f6:5d:bd:1f:49:
78:5a:77:3b:8b:e1:d9:a0:ed:14:29:e0:db:7b:3a:
8a:8d:46:ea:16:59:78:78:e7:a7:96:15:4a:e1:48:
a1:a4:cc:12:79:47:3f:fc:3e:2f:dc:28:84:b3:ef:
06:e3:04:3b:e0:bd:b1:88:13:5d:e2:ee:fd:a6:d5:
67:71:33:d5:c3:c3:8e:96:12:6e:a8:3e:5d:b2:f1:
39:6a:fc:c5:fa:8b:dc:1a:4e:8b:f6:94:f3:9c:dc:
68:47:5a:67:cd:ca:d5:9d:e6:ec:2f:ea:02:d2:34:
76:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:0E:E3:2C:98:A0:1E:BD:93:60:40:BC:13:F0:E8:D0:C7:1E:DF:7A
X509v3 Authority Key Identifier:
keyid:9F:45:EB:5A:28:8C:68:ED:60:DB:D9:B8:7E:4E:82:06:CA:9C:93:3F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/n0XrWiiMaO1g29m4fk6CBsqckz8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/e42336-eb77-4540-be41-55fd6dc1a1d8/1/n0XrWiiMaO1g29m4fk6CBsqckz8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/e42336-eb77-4540-be41-55fd6dc1a1d8/1/n0XrWiiMaO1g29m4fk6CBsqckz8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2a:0e:e5:1b:b5:7f:8c:85:3a:a7:9f:6e:9e:8b:01:ff:6f:60:
18:5a:d7:ba:06:63:09:5b:46:ff:b7:03:b2:86:dc:ce:39:65:
e1:a2:29:24:4d:7f:23:a3:6f:ce:54:9d:24:3b:e1:9b:3f:36:
99:da:93:92:fe:0d:7b:b5:5d:8d:fe:37:2e:87:0b:7c:34:d1:
51:f0:bc:ca:18:12:be:8a:b5:ac:35:85:cc:b6:c1:47:33:b6:
c2:06:a7:a2:44:91:19:cc:06:67:5c:87:69:80:7b:1d:be:6a:
e7:b2:d7:a0:7f:c1:d8:69:d9:a0:fd:3b:16:e6:77:68:c1:d2:
a4:72:01:78:19:25:75:6e:aa:58:72:02:80:61:15:f2:45:ad:
84:46:a5:1b:3b:c5:97:85:3f:42:93:b9:3a:66:c5:b3:48:48:
c3:1a:32:76:28:c5:b2:b1:fc:b0:2e:4a:ed:31:94:df:b7:a8:
6f:c6:ce:8d:93:f5:fb:63:a2:ea:4c:b1:2a:a0:5e:5d:a2:17:
07:d4:aa:43:eb:6d:ce:eb:22:f9:60:77:31:64:27:0c:f4:ba:
78:bd:5f:b0:e7:2e:d6:60:68:70:98:2a:44:f8:b7:c4:c9:09:
76:f6:56:8c:e7:ce:cd:cb:41:4b:ee:f5:3c:cf:8e:49:98:ef:
5e:7b:61:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 18:23:41 2025 by rpki-client