Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ea/c77833-31ae-4412-b049-70a4a8d7c43f/1/n4kf80d-1_2qz64uPw36ZP2SrAw.mft
File: n4kf80d-1_2qz64uPw36ZP2SrAw.mft (raw, json)
Hash identifier: 78GV760yyJ7VChEeAxo3w3dnEHWznsC+lP6t6t+OY+Q=
Subject key identifier: BB:94:AD:B8:FE:54:AF:FB:3D:D5:39:E0:9D:E1:98:88:96:8E:36:23
Authority key identifier: 9F:89:1F:F3:47:7E:D7:FD:AA:CF:AE:2E:3F:0D:FA:64:FD:92:AC:0C
Certificate issuer: /CN=9f891ff3477ed7fdaacfae2e3f0dfa64fd92ac0c
Certificate serial: 0199FBEBEC4565C02CCD5457BFF7DD0FEEDF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/n4kf80d-1_2qz64uPw36ZP2SrAw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ea/c77833-31ae-4412-b049-70a4a8d7c43f/1/n4kf80d-1_2qz64uPw36ZP2SrAw.mft
Manifest number: 0B20
Signing time: Sun 19 Oct 2025 10:02:46 +0000
Manifest this update: Sun 19 Oct 2025 10:02:46 +0000
Manifest next update: Mon 20 Oct 2025 10:02:46 +0000
Files and hashes: 1: D3yjJU5h_FTDERrGNrsGZ8LgMxc.roa (hash: zDBANuUPdW/jRqqSGkjw8mcyfQtAQBZkgjZavcu4Hqg=)
2: n4kf80d-1_2qz64uPw36ZP2SrAw.crl (hash: fsDKdYQqpGZgziYPGwMJRo2t1q5MnK7QttMyZ2NzWlk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ea/c77833-31ae-4412-b049-70a4a8d7c43f/1/n4kf80d-1_2qz64uPw36ZP2SrAw.crl
rsync://rpki.ripe.net/repository/DEFAULT/ea/c77833-31ae-4412-b049-70a4a8d7c43f/1/n4kf80d-1_2qz64uPw36ZP2SrAw.mft
rsync://rpki.ripe.net/repository/DEFAULT/n4kf80d-1_2qz64uPw36ZP2SrAw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:eb:ec:45:65:c0:2c:cd:54:57:bf:f7:dd:0f:ee:df
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9f891ff3477ed7fdaacfae2e3f0dfa64fd92ac0c
Validity
Not Before: Oct 19 10:02:46 2025 GMT
Not After : Oct 20 10:02:46 2025 GMT
Subject: CN=bb94adb8fe54affb3dd539e09de19888968e3623
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:d0:16:cf:03:5f:5d:22:3f:06:41:1b:7c:d2:
74:0a:ca:06:2e:82:26:ee:02:84:c0:d6:bb:55:1d:
db:72:de:49:04:ec:76:1f:63:f7:ad:73:46:6a:97:
61:f9:f2:a1:21:84:7a:eb:45:15:a6:c4:ce:9c:00:
17:ad:56:e4:93:cf:b4:21:08:8c:4e:76:60:be:3f:
6a:80:2b:dc:d1:c4:24:f6:ac:94:02:94:42:d4:95:
6c:2e:43:58:01:d8:62:46:c9:00:c7:0f:ff:fe:62:
dc:7a:cb:19:e9:4c:39:60:37:3b:7d:c1:fc:6a:79:
97:9b:39:97:59:86:6a:e8:14:04:3c:bc:5f:bb:b3:
0a:d9:fa:e1:88:44:dc:a4:4a:34:57:a4:ab:ab:53:
01:a9:41:a3:f2:a5:ac:be:5a:16:f1:3a:6c:52:02:
c4:e0:3d:04:6d:5a:b7:bb:ce:c6:7c:7d:52:e6:2a:
c4:4c:4a:6f:b8:88:44:fe:5f:f1:d9:d2:f7:9b:4f:
33:69:6f:85:ba:42:d7:77:c2:5c:42:bb:83:1c:ca:
f8:2c:44:6c:ee:c2:3c:09:98:bd:7d:d4:3d:ad:c7:
9d:16:1c:f6:eb:2a:2c:04:26:8b:ab:e2:1e:7a:e0:
dd:c9:e2:1b:47:13:97:d8:08:c7:4d:a9:f7:04:35:
6d:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:94:AD:B8:FE:54:AF:FB:3D:D5:39:E0:9D:E1:98:88:96:8E:36:23
X509v3 Authority Key Identifier:
keyid:9F:89:1F:F3:47:7E:D7:FD:AA:CF:AE:2E:3F:0D:FA:64:FD:92:AC:0C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/n4kf80d-1_2qz64uPw36ZP2SrAw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/c77833-31ae-4412-b049-70a4a8d7c43f/1/n4kf80d-1_2qz64uPw36ZP2SrAw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/c77833-31ae-4412-b049-70a4a8d7c43f/1/n4kf80d-1_2qz64uPw36ZP2SrAw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
14:3b:18:3f:53:c6:e9:10:87:33:7c:db:86:cb:37:0a:ff:b7:
11:58:20:92:87:51:7f:4c:4f:be:24:6a:84:e6:ca:2b:18:f0:
25:7b:e4:9d:55:71:b7:b2:d6:9d:1a:26:32:af:eb:be:54:10:
d9:3a:84:6d:8e:d8:8d:b6:6f:55:68:8c:47:fc:37:4e:38:61:
ed:e1:ee:40:43:1b:cc:f2:56:94:5b:52:65:7e:06:73:01:9b:
22:49:5b:89:44:9f:03:aa:f0:94:c1:d5:29:b3:0a:67:ab:29:
af:eb:18:98:c8:1c:3e:6e:c9:a7:d6:76:85:dd:9b:7c:a1:80:
6f:a6:73:17:53:5f:10:f0:0f:b2:d9:4c:1f:40:11:f2:19:37:
f3:a8:6a:2d:0b:a8:69:46:38:16:64:6e:c0:48:07:99:b3:8c:
c2:70:6c:a3:b5:f9:93:cc:0a:c1:21:a8:aa:7f:39:0f:e1:fb:
e4:1f:91:68:99:81:0d:72:4f:90:36:f7:a9:4d:da:15:5f:08:
59:66:bd:84:ff:52:23:bb:15:2d:dd:7a:bc:d2:37:5f:7b:87:
64:c1:36:39:c6:97:64:99:af:7b:5b:03:35:0a:50:af:3d:08:
8f:7e:80:32:60:f9:a5:6a:26:d8:07:8f:36:1d:a5:2f:c1:8b:
39:92:f8:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:36:59 2025 by rpki-client