Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c1/680589-8472-43eb-b034-21769de4a1a8/1/n4dSHxXgRXKIqfGWqMiGXDaSIVA.mft
File: n4dSHxXgRXKIqfGWqMiGXDaSIVA.mft (raw, json)
Hash identifier: NKASPSegU5ARN60wBHFzNLUErCYWMIf2HmWyFl5Kyz0=
Subject key identifier: 35:2F:8E:C7:BC:DF:2A:98:4D:49:22:5D:F3:40:8F:AC:3F:BF:D5:04
Authority key identifier: 9F:87:52:1F:15:E0:45:72:88:A9:F1:96:A8:C8:86:5C:36:92:21:50
Certificate issuer: /CN=9f87521f15e0457288a9f196a8c8865c36922150
Certificate serial: 0199FD344B4A1BCC62F8020F1724AC4608D1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/n4dSHxXgRXKIqfGWqMiGXDaSIVA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c1/680589-8472-43eb-b034-21769de4a1a8/1/n4dSHxXgRXKIqfGWqMiGXDaSIVA.mft
Manifest number: 16E4
Signing time: Sun 19 Oct 2025 16:01:26 +0000
Manifest this update: Sun 19 Oct 2025 16:01:26 +0000
Manifest next update: Mon 20 Oct 2025 16:01:26 +0000
Files and hashes: 1: ItUfI_e5TZV8Ja35X57TtR81NmA.roa (hash: IR3NcH60QSQHq12hzjVbCSbj+J8hOMovAsbbfhH0qaA=)
2: n4dSHxXgRXKIqfGWqMiGXDaSIVA.crl (hash: q2j43OsEp2SpOhhKXSc66jjYo9cAyr9zSCNe3jVCXqg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c1/680589-8472-43eb-b034-21769de4a1a8/1/n4dSHxXgRXKIqfGWqMiGXDaSIVA.crl
rsync://rpki.ripe.net/repository/DEFAULT/c1/680589-8472-43eb-b034-21769de4a1a8/1/n4dSHxXgRXKIqfGWqMiGXDaSIVA.mft
rsync://rpki.ripe.net/repository/DEFAULT/n4dSHxXgRXKIqfGWqMiGXDaSIVA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fd:34:4b:4a:1b:cc:62:f8:02:0f:17:24:ac:46:08:d1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9f87521f15e0457288a9f196a8c8865c36922150
Validity
Not Before: Oct 19 16:01:26 2025 GMT
Not After : Oct 20 16:01:26 2025 GMT
Subject: CN=352f8ec7bcdf2a984d49225df3408fac3fbfd504
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:ea:30:12:c6:71:87:9b:a4:8b:ee:b3:2d:5e:
5f:42:82:72:83:57:87:e7:15:75:fd:70:c4:70:07:
68:8c:62:88:ef:b2:9f:34:21:db:61:91:5c:9c:7f:
90:b2:87:13:80:e5:68:63:19:79:13:c2:47:39:37:
12:7c:89:10:f5:c7:88:af:2a:9e:fc:68:cb:89:41:
b2:86:ac:7b:16:38:27:c9:31:15:c3:cc:8e:2e:a7:
f3:6e:ce:ac:35:4b:f1:6e:c3:ac:63:ca:6e:ff:2c:
4a:ed:64:59:6e:57:33:c3:fb:3b:50:e0:fb:68:63:
60:56:ae:98:f9:14:35:7e:3c:6c:d8:0f:1f:2c:08:
84:77:4d:64:37:db:15:e6:8e:16:03:69:45:33:b8:
73:85:57:12:50:e8:1d:09:aa:e3:a3:30:ac:e9:59:
b3:bb:74:51:03:36:23:c4:18:c5:0a:bc:fc:35:f9:
4d:23:94:4c:19:02:13:56:e1:d6:b4:ee:90:dc:59:
a1:21:d5:31:f3:e1:b7:58:de:de:c0:75:c4:2c:fe:
41:69:f0:f5:f7:dc:8a:e9:ef:35:6c:b5:e2:71:69:
39:4c:fd:ef:cc:70:59:d8:17:96:b2:ba:11:a9:a2:
96:ca:0c:6b:23:05:7f:3e:72:a8:5c:21:c0:0c:cd:
b6:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:2F:8E:C7:BC:DF:2A:98:4D:49:22:5D:F3:40:8F:AC:3F:BF:D5:04
X509v3 Authority Key Identifier:
keyid:9F:87:52:1F:15:E0:45:72:88:A9:F1:96:A8:C8:86:5C:36:92:21:50
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/n4dSHxXgRXKIqfGWqMiGXDaSIVA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/680589-8472-43eb-b034-21769de4a1a8/1/n4dSHxXgRXKIqfGWqMiGXDaSIVA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/680589-8472-43eb-b034-21769de4a1a8/1/n4dSHxXgRXKIqfGWqMiGXDaSIVA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
71:81:1d:a5:7a:86:6e:37:fd:f3:67:7b:c6:ea:f8:1e:2b:b4:
5a:e7:90:ab:7e:69:dd:d8:76:4b:a0:3a:8e:d7:c2:bc:6a:26:
1a:1b:06:fe:b3:6a:3a:d4:da:5f:b7:60:95:f9:53:83:19:e3:
00:8c:3b:e4:f9:48:20:78:0b:01:6f:3f:7b:56:0c:c1:81:03:
69:f1:c7:1d:22:35:71:8f:56:0c:ee:1d:22:05:4c:b4:7c:57:
b9:df:cc:40:46:65:1a:ee:56:b9:a9:55:ef:ed:74:70:9a:d4:
f4:06:41:f6:4e:0d:dc:bf:4c:89:9f:ee:b8:dd:6c:64:ba:0b:
d1:34:61:10:5c:69:2e:80:98:de:89:6d:90:6c:b1:88:99:8f:
fe:69:ab:c0:8f:93:cd:f1:6a:5e:bb:7b:24:69:f9:68:01:51:
94:ee:fa:da:f6:46:26:e7:0b:dd:e5:f8:5e:9f:c0:82:f0:c5:
d5:93:13:a9:fa:d0:61:1a:a0:6e:b8:1e:e8:12:12:c5:72:22:
37:a1:77:f4:50:0f:68:64:f0:8a:b6:1e:a8:f5:8e:3e:5b:c2:
86:f2:dc:df:2f:9b:47:41:e6:b8:17:a3:ad:ad:7c:76:f1:dd:
69:bc:32:93:40:23:32:be:7f:ff:cc:a9:f6:ef:2b:e3:b7:51:
9a:fd:3f:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 18:03:19 2025 by rpki-client