Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/660e54-5c85-4d25-8e61-7ca11dc3ae82/1/n-lNLu3NgkrB3nSt42wfnWnUlso.mft
File: n-lNLu3NgkrB3nSt42wfnWnUlso.mft (raw, json)
Hash identifier: d2R6cwyorX30r5Qjxl+A97zhPUXuj6ziwH7xGPEhBbs=
Subject key identifier: 9E:D8:0A:FE:27:DB:9C:74:62:7F:20:45:AF:EE:EB:CD:7C:C7:1E:54
Authority key identifier: 9F:E9:4D:2E:ED:CD:82:4A:C1:DE:74:AD:E3:6C:1F:9D:69:D4:96:CA
Certificate issuer: /CN=9fe94d2eedcd824ac1de74ade36c1f9d69d496ca
Certificate serial: 0199FCFD222653236AD768FE9CCE468AF466
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/n-lNLu3NgkrB3nSt42wfnWnUlso.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cd/660e54-5c85-4d25-8e61-7ca11dc3ae82/1/n-lNLu3NgkrB3nSt42wfnWnUlso.mft
Manifest number: 05CD
Signing time: Sun 19 Oct 2025 15:01:11 +0000
Manifest this update: Sun 19 Oct 2025 15:01:11 +0000
Manifest next update: Mon 20 Oct 2025 15:01:11 +0000
Files and hashes: 1: 6Zp9qhuJ7dxdBCAgd5__iELlPCk.roa (hash: cToJ6urjtRkBvRK35UPrzOd0uWCJVgb7/Yiw0ySoKxo=)
2: n-lNLu3NgkrB3nSt42wfnWnUlso.crl (hash: M5yLE390N+4p6PtXPl89CqEev6gpoISYtCIvUlhs5Tk=)
3: yV6fiEspLXOEx7U1Asa7uW-HDiw.roa (hash: RlXdlJwRE38rpzhsxwT5lygoPGRsWFRdfhjDcsqFbQE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cd/660e54-5c85-4d25-8e61-7ca11dc3ae82/1/n-lNLu3NgkrB3nSt42wfnWnUlso.crl
rsync://rpki.ripe.net/repository/DEFAULT/cd/660e54-5c85-4d25-8e61-7ca11dc3ae82/1/n-lNLu3NgkrB3nSt42wfnWnUlso.mft
rsync://rpki.ripe.net/repository/DEFAULT/n-lNLu3NgkrB3nSt42wfnWnUlso.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:fd:22:26:53:23:6a:d7:68:fe:9c:ce:46:8a:f4:66
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9fe94d2eedcd824ac1de74ade36c1f9d69d496ca
Validity
Not Before: Oct 19 15:01:11 2025 GMT
Not After : Oct 20 15:01:11 2025 GMT
Subject: CN=9ed80afe27db9c74627f2045afeeebcd7cc71e54
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:5e:43:81:d1:f8:03:74:8a:35:79:80:0a:41:
e8:5d:2a:d3:bc:9e:9c:d0:02:43:17:8d:3f:58:fa:
33:bd:b2:c5:da:4e:51:dc:0d:83:0b:93:cb:b6:ce:
6b:8d:e4:7e:0b:16:71:9d:28:d8:cd:60:47:d7:eb:
6b:62:2f:61:5c:e7:05:1c:c7:f8:75:63:e0:48:f0:
71:8b:53:4c:9c:16:b8:a9:b3:ae:b7:fb:f6:66:d5:
a1:ba:50:7c:2f:2d:ae:df:f2:c5:e4:af:74:f1:86:
f4:cc:06:21:3c:0d:84:b5:20:62:91:b9:12:3c:8c:
73:49:7e:21:ad:c7:3c:80:98:a2:bb:6e:86:0c:ac:
d2:20:6a:10:61:1b:d0:d1:6a:25:05:2a:71:f3:a3:
ca:8d:1a:31:75:93:d0:43:3d:5c:a7:a5:5e:64:10:
58:5e:d7:57:6b:f5:00:17:dc:f5:da:41:50:74:65:
40:fa:da:2f:f7:de:15:6b:af:8b:3d:71:bc:f0:43:
34:1f:62:70:13:6c:dd:b7:6c:b0:03:a4:1e:21:1d:
c7:fd:c7:15:d6:a1:cd:44:2c:aa:a8:70:c7:ae:a5:
6f:8c:4f:d6:b6:ee:d3:9b:c6:08:4b:c4:a8:b5:f0:
fe:e6:93:01:21:82:1f:1b:35:31:cb:4d:69:bd:81:
8c:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:D8:0A:FE:27:DB:9C:74:62:7F:20:45:AF:EE:EB:CD:7C:C7:1E:54
X509v3 Authority Key Identifier:
keyid:9F:E9:4D:2E:ED:CD:82:4A:C1:DE:74:AD:E3:6C:1F:9D:69:D4:96:CA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/n-lNLu3NgkrB3nSt42wfnWnUlso.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/660e54-5c85-4d25-8e61-7ca11dc3ae82/1/n-lNLu3NgkrB3nSt42wfnWnUlso.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/660e54-5c85-4d25-8e61-7ca11dc3ae82/1/n-lNLu3NgkrB3nSt42wfnWnUlso.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
45:38:2a:d5:ef:a4:38:f9:79:45:2d:97:9f:d6:ca:a5:e5:3b:
63:1d:e0:46:11:cf:4a:7c:2a:d4:b8:62:7b:28:fa:e5:09:3b:
80:2a:ab:20:e1:5d:f2:de:15:8d:a7:c8:6f:46:53:ff:c6:89:
9d:c2:76:98:51:58:b0:40:2e:de:0d:b6:c3:a3:9a:52:db:a0:
89:b1:e7:71:6c:63:4d:c3:c5:5d:b3:40:80:d5:41:4a:c1:6e:
f8:c8:e0:52:85:c2:68:a1:77:2c:fc:01:43:38:46:83:d0:3b:
0d:54:be:2e:3a:1b:fc:4d:51:39:dd:3e:7b:1f:6c:c3:70:fe:
55:32:f7:12:6c:2a:b9:94:3c:24:ab:78:9f:91:18:6a:49:fc:
8c:c3:0f:70:54:76:4a:24:b8:1f:57:7a:c6:19:43:ff:e0:87:
02:e5:e4:52:6d:62:de:8a:4a:b7:bc:fa:82:4c:a6:e3:37:53:
76:f3:c4:3d:8c:c3:be:fe:77:37:fc:89:b5:d7:28:c2:61:89:
30:80:b9:77:44:cb:62:56:99:84:3d:82:9d:b4:9f:2f:54:1e:
bf:c6:3f:bf:ab:bf:f8:bd:82:1a:94:be:41:f7:8f:fb:d7:8e:
9a:80:0c:c1:ec:f7:0c:1e:73:af:03:a5:cd:31:28:21:ac:ff:
13:15:f3:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 18:24:34 2025 by rpki-client