Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d2/4cae10-37a5-40ef-89d5-5701d01c1e87/1/n1_z3hCjG79XAcC9smxlCAF9oso.mft
File: n1_z3hCjG79XAcC9smxlCAF9oso.mft (raw, json)
Hash identifier: DwkZSpbYjFDUTaAJQvzLrheMvz1CiHIxf5GwQVkgTJc=
Subject key identifier: 52:2A:CD:AA:B0:94:B5:8F:59:B1:96:30:A1:6F:AC:20:A2:78:39:EA
Authority key identifier: 9F:5F:F3:DE:10:A3:1B:BF:57:01:C0:BD:B2:6C:65:08:01:7D:A2:CA
Certificate issuer: /CN=9f5ff3de10a31bbf5701c0bdb26c6508017da2ca
Certificate serial: 0199FC8F8F8193489B01A6761E5FC923A55A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/n1_z3hCjG79XAcC9smxlCAF9oso.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d2/4cae10-37a5-40ef-89d5-5701d01c1e87/1/n1_z3hCjG79XAcC9smxlCAF9oso.mft
Manifest number: 0CE9
Signing time: Sun 19 Oct 2025 13:01:30 +0000
Manifest this update: Sun 19 Oct 2025 13:01:30 +0000
Manifest next update: Mon 20 Oct 2025 13:01:30 +0000
Files and hashes: 1: bY74pa2C3Js_pk8zrLxwAIuld50.roa (hash: hw+4FaOxGozuL2NvwyX/np4qCkqg+xjCV1sHwedmazg=)
2: n1_z3hCjG79XAcC9smxlCAF9oso.crl (hash: zLO3G6fdH8l+M+q1vBIzdOptsQYDqg0IXMMO/3uTJXI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d2/4cae10-37a5-40ef-89d5-5701d01c1e87/1/n1_z3hCjG79XAcC9smxlCAF9oso.crl
rsync://rpki.ripe.net/repository/DEFAULT/d2/4cae10-37a5-40ef-89d5-5701d01c1e87/1/n1_z3hCjG79XAcC9smxlCAF9oso.mft
rsync://rpki.ripe.net/repository/DEFAULT/n1_z3hCjG79XAcC9smxlCAF9oso.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:8f:8f:81:93:48:9b:01:a6:76:1e:5f:c9:23:a5:5a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9f5ff3de10a31bbf5701c0bdb26c6508017da2ca
Validity
Not Before: Oct 19 13:01:30 2025 GMT
Not After : Oct 20 13:01:30 2025 GMT
Subject: CN=522acdaab094b58f59b19630a16fac20a27839ea
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:6d:fd:7c:1c:c0:f2:bd:33:0d:64:c6:ef:f6:
f9:30:b1:58:8a:c4:49:78:cc:4c:54:58:c5:0b:54:
e4:49:00:b4:3c:85:ec:27:67:34:7a:af:d7:99:b7:
b4:cd:a2:d8:49:34:ac:a0:bb:e6:cf:44:1d:f4:d8:
33:67:cd:3a:84:6c:f5:44:89:eb:72:71:1e:07:ce:
4b:86:c7:22:00:fd:63:c0:b3:98:ac:4c:97:d4:70:
82:0e:44:09:38:9c:e5:8b:32:bb:a8:b5:b6:0a:ae:
be:bc:11:26:45:fc:05:c6:ab:14:15:cb:9d:f0:b7:
b4:a4:67:31:43:03:1a:1c:0a:0c:b3:79:f0:d1:02:
91:0e:66:b8:ce:c7:ed:fc:fc:ef:0b:27:fb:42:e0:
54:0d:32:64:f8:bf:cf:7f:02:ec:3a:d0:f5:e6:5f:
99:a5:df:4a:58:11:59:c5:57:22:a8:0a:d0:db:48:
6b:1f:22:17:f1:c4:b4:9a:37:5e:f9:c0:eb:35:d5:
c4:a9:ab:11:af:53:d7:55:66:05:4c:f3:96:4d:74:
51:93:b4:e2:c6:c4:fc:d2:a3:05:17:4e:e2:37:69:
c1:1a:fa:dc:47:2a:08:c3:8a:e6:cc:8b:ed:c5:26:
d1:67:f5:6b:c3:c8:9e:21:1f:9b:0e:57:65:d3:1a:
05:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:2A:CD:AA:B0:94:B5:8F:59:B1:96:30:A1:6F:AC:20:A2:78:39:EA
X509v3 Authority Key Identifier:
keyid:9F:5F:F3:DE:10:A3:1B:BF:57:01:C0:BD:B2:6C:65:08:01:7D:A2:CA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/n1_z3hCjG79XAcC9smxlCAF9oso.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/4cae10-37a5-40ef-89d5-5701d01c1e87/1/n1_z3hCjG79XAcC9smxlCAF9oso.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/4cae10-37a5-40ef-89d5-5701d01c1e87/1/n1_z3hCjG79XAcC9smxlCAF9oso.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b7:82:9e:ec:1f:96:bf:c9:86:db:b6:51:f3:e9:b8:bf:ec:ca:
ac:33:21:0a:f7:13:28:b4:99:98:f3:e4:49:65:f7:17:70:5a:
39:43:94:e1:40:01:44:44:85:17:52:1c:b4:51:65:a6:91:20:
f9:ad:b1:74:b1:a6:2b:2a:d1:47:3c:b5:97:54:56:f6:a9:22:
31:31:f7:0a:36:b1:d3:90:f2:5b:ad:ae:c4:8d:70:9f:73:6c:
ac:1e:e2:49:a0:b2:6e:b6:62:53:90:a6:da:75:a2:2a:27:fb:
54:92:4e:5b:03:da:97:0d:a9:87:66:d5:6a:0d:fc:6a:7d:f3:
a7:06:19:8e:4f:1d:7d:05:db:c3:1d:00:0d:99:30:c3:ab:97:
fa:52:0d:11:52:ac:61:e6:9d:45:3f:99:c2:e8:67:65:14:7f:
81:7e:33:79:23:87:cd:85:d8:84:d3:1b:4b:f6:ba:0f:6f:6c:
be:f2:9a:90:f4:5e:e7:81:2b:37:f0:15:f8:a3:dc:af:49:97:
26:87:02:7f:f9:10:28:e0:7c:00:01:27:a7:44:2f:41:dc:69:
35:58:49:c3:fa:c0:39:2b:ed:46:72:e8:b5:c2:77:66:51:96:
e3:92:f8:de:fe:d8:78:90:f3:1c:ac:9f:db:68:d1:19:0e:39:
dc:20:3c:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 17:58:47 2025 by rpki-client