Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d6/caf466-6e6c-4009-a55a-5fa9da03f570/1/n78C8E7EMIy1tgeL0GoXywDYM2k.mft
File: n78C8E7EMIy1tgeL0GoXywDYM2k.mft (raw, json)
Hash identifier: hEwYGXgAyj4nhNLC5k9WcFCC6E6kRwuSuAjZOFAy3js=
Subject key identifier: 12:96:4E:E1:E1:E6:EA:79:19:FB:10:5E:34:9F:17:B3:44:13:9D:52
Authority key identifier: 9F:BF:02:F0:4E:C4:30:8C:B5:B6:07:8B:D0:6A:17:CB:00:D8:33:69
Certificate issuer: /CN=9fbf02f04ec4308cb5b6078bd06a17cb00d83369
Certificate serial: 0199FFFE5684903FE0221552C62833A76676
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/n78C8E7EMIy1tgeL0GoXywDYM2k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d6/caf466-6e6c-4009-a55a-5fa9da03f570/1/n78C8E7EMIy1tgeL0GoXywDYM2k.mft
Manifest number: 0173
Signing time: Mon 20 Oct 2025 05:01:22 +0000
Manifest this update: Mon 20 Oct 2025 05:01:22 +0000
Manifest next update: Tue 21 Oct 2025 05:01:22 +0000
Files and hashes: 1: lB6tM26XvybAjC_i9gyukbY90Gs.roa (hash: QCUB0nbnI7vfbQcfu12QO8f17dboTNQ2oQD6KvaVOOo=)
2: n78C8E7EMIy1tgeL0GoXywDYM2k.crl (hash: ZvKChJSrLw6biY0jJizXUjHF24K2wfNb7bNkPtlxyHQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d6/caf466-6e6c-4009-a55a-5fa9da03f570/1/n78C8E7EMIy1tgeL0GoXywDYM2k.crl
rsync://rpki.ripe.net/repository/DEFAULT/d6/caf466-6e6c-4009-a55a-5fa9da03f570/1/n78C8E7EMIy1tgeL0GoXywDYM2k.mft
rsync://rpki.ripe.net/repository/DEFAULT/n78C8E7EMIy1tgeL0GoXywDYM2k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 00:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:ff:fe:56:84:90:3f:e0:22:15:52:c6:28:33:a7:66:76
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9fbf02f04ec4308cb5b6078bd06a17cb00d83369
Validity
Not Before: Oct 20 05:01:22 2025 GMT
Not After : Oct 21 05:01:22 2025 GMT
Subject: CN=12964ee1e1e6ea7919fb105e349f17b344139d52
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:71:05:ff:d9:9d:c4:b8:d3:60:dd:96:41:bd:
01:9d:07:1f:13:f1:85:9f:32:64:2c:5f:5b:32:c5:
a9:e1:c1:59:02:29:5e:57:c4:7c:ae:16:7e:1c:53:
f6:36:18:63:f3:d2:4e:86:99:18:a8:dd:9b:fc:56:
f6:05:ba:9d:8b:61:f7:a0:0c:b9:76:00:6c:7f:d6:
9f:6f:de:67:c8:9a:3e:17:29:76:84:10:65:04:79:
1c:02:aa:b9:dc:46:27:73:fb:15:24:e6:f1:44:39:
8d:35:b7:cc:85:8e:1b:71:96:88:ff:6e:9c:8b:af:
02:24:99:cf:fe:1c:7b:6c:8b:d7:18:7b:11:17:ec:
11:c1:bb:3d:1b:21:04:f4:1f:dc:09:f0:d9:3b:ce:
bf:93:16:20:99:e7:ac:60:0a:d0:32:a2:f0:0c:ba:
f8:d1:5f:d6:df:a6:e4:c6:a1:5c:2e:56:6c:9d:67:
37:2a:0c:c9:e0:a6:67:be:48:af:c9:4b:a2:b7:b3:
b3:b6:0b:15:97:df:5a:b5:20:83:ee:4b:93:d1:55:
f0:2e:46:19:0c:dc:d1:c7:da:08:4b:90:6b:bf:f3:
00:c8:6f:28:79:0a:14:24:65:20:55:fa:b0:65:9b:
fd:7f:8a:80:1c:5c:d0:99:d3:43:42:e7:75:c6:c2:
44:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:96:4E:E1:E1:E6:EA:79:19:FB:10:5E:34:9F:17:B3:44:13:9D:52
X509v3 Authority Key Identifier:
keyid:9F:BF:02:F0:4E:C4:30:8C:B5:B6:07:8B:D0:6A:17:CB:00:D8:33:69
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/n78C8E7EMIy1tgeL0GoXywDYM2k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/caf466-6e6c-4009-a55a-5fa9da03f570/1/n78C8E7EMIy1tgeL0GoXywDYM2k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/caf466-6e6c-4009-a55a-5fa9da03f570/1/n78C8E7EMIy1tgeL0GoXywDYM2k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a1:91:31:9c:de:78:ab:38:b9:b3:3a:cb:56:96:0a:91:c4:39:
b2:b1:33:b2:56:3e:ed:fa:4c:77:37:a2:f5:91:2b:01:38:5b:
71:d1:4e:4d:ba:62:c6:68:dc:66:26:10:1e:4d:d8:f8:25:8e:
c8:1d:33:63:da:88:1b:14:a5:af:cd:fa:4f:fa:48:28:e3:7e:
fc:52:d2:1a:37:89:89:17:04:e3:9f:06:35:4a:26:c4:ad:dd:
bc:06:55:05:db:ee:18:22:93:6d:b6:2e:f2:38:0f:3a:48:a6:
1d:e9:1e:1b:35:c2:89:fb:18:5e:5b:65:e0:c4:20:87:87:98:
a4:a5:90:a9:70:1d:82:da:33:4a:bd:bb:dd:f7:14:e1:5e:19:
52:fc:cf:74:d5:a2:c5:8c:4f:0d:14:34:df:67:5f:eb:39:5f:
d2:2b:82:38:71:e2:e9:fc:a0:53:5b:11:7f:1b:44:07:b9:c8:
65:1d:1c:8e:91:a5:28:a6:d5:8b:0a:4f:69:6f:ad:c9:8f:99:
c5:11:3d:31:18:c8:37:26:60:29:03:be:1b:61:77:1e:53:5f:
3a:4d:f8:77:a6:56:82:35:18:31:3c:77:84:95:9d:81:8c:2f:
26:5c:5e:ab:c0:4d:42:14:a6:7c:bf:42:d8:00:cd:f8:cb:d2:
c7:58:1f:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 10:06:34 2025 by rpki-client