Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/4a7901-85d8-43ea-adb2-799910c1545f/1/n11bf3kmRP9wcqQ6zJyGUZS-Stw.mft
File: n11bf3kmRP9wcqQ6zJyGUZS-Stw.mft (raw, json)
Hash identifier: FcHHrJevSdMYpMnG/Blk0tsDGx3cQe30/iQTUNui8r8=
Subject key identifier: E4:C9:DA:3A:69:F6:28:E8:63:05:39:8C:64:DD:56:60:76:6B:16:01
Authority key identifier: 9F:5D:5B:7F:79:26:44:FF:70:72:A4:3A:CC:9C:86:51:94:BE:4A:DC
Certificate issuer: /CN=9f5d5b7f792644ff7072a43acc9c865194be4adc
Certificate serial: 0198D5834CBE571B1C574F72A113C5F81014
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/n11bf3kmRP9wcqQ6zJyGUZS-Stw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fa/4a7901-85d8-43ea-adb2-799910c1545f/1/n11bf3kmRP9wcqQ6zJyGUZS-Stw.mft
Manifest number: 164B
Signing time: Sat 23 Aug 2025 06:00:08 +0000
Manifest this update: Sat 23 Aug 2025 06:00:08 +0000
Manifest next update: Sun 24 Aug 2025 06:00:08 +0000
Files and hashes: 1: 1J8y1mQKbllZPdpNvAX7bscmWlI.roa (hash: jhx/+OmQQVqiCuyQX4gR49r4SoPl20ExxxakSlp8D6M=)
2: WBEZkdOtzqubY4jYGPTdt89fcs0.roa (hash: YzzD8M9BLKgLshmZ4kyXFcT1vvqCniPNKBqVVUae9sY=)
3: n11bf3kmRP9wcqQ6zJyGUZS-Stw.crl (hash: YXpbcuV1LfmZZX1ptqKGV0egvqe/e+7Fy1h0nuvubrE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fa/4a7901-85d8-43ea-adb2-799910c1545f/1/n11bf3kmRP9wcqQ6zJyGUZS-Stw.crl
rsync://rpki.ripe.net/repository/DEFAULT/fa/4a7901-85d8-43ea-adb2-799910c1545f/1/n11bf3kmRP9wcqQ6zJyGUZS-Stw.mft
rsync://rpki.ripe.net/repository/DEFAULT/n11bf3kmRP9wcqQ6zJyGUZS-Stw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:83:4c:be:57:1b:1c:57:4f:72:a1:13:c5:f8:10:14
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9f5d5b7f792644ff7072a43acc9c865194be4adc
Validity
Not Before: Aug 23 06:00:08 2025 GMT
Not After : Aug 24 06:00:08 2025 GMT
Subject: CN=e4c9da3a69f628e86305398c64dd5660766b1601
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:51:98:84:08:14:61:62:ac:f0:70:d3:9a:2f:
79:7a:15:e3:db:2b:a0:45:33:00:80:99:ab:57:e2:
3a:6c:9d:ad:8d:32:5b:a3:75:08:e1:ae:c6:26:ee:
37:e4:e0:0e:b8:a8:a2:2d:62:dc:50:26:7d:e5:a8:
81:e5:20:0a:24:cf:87:b0:9f:84:5e:60:af:a3:16:
6e:f5:21:33:cb:10:6d:0d:07:69:c3:84:3e:ea:e3:
c3:e0:f9:6d:0f:3d:10:0c:c7:c9:78:54:06:6a:1f:
90:4f:9c:8f:b6:c5:17:bd:e3:fb:82:59:c7:2a:f9:
89:53:3c:9c:67:d4:03:11:8a:46:1a:08:1d:b9:57:
15:e7:e8:c4:3b:e4:2a:08:96:35:d3:a5:41:42:b4:
4b:87:95:5e:53:ba:86:43:fa:1a:ee:8b:2c:5c:d8:
e7:18:ac:2f:ca:78:00:d7:b9:03:16:ff:7b:c6:f0:
35:68:ef:45:24:ba:10:7f:db:30:76:a5:71:bf:91:
9c:15:69:14:44:b3:4b:1e:5c:14:74:28:13:47:61:
96:1a:2c:0d:54:7a:9a:cd:5b:6d:0a:cf:1f:9f:ce:
a7:a5:ec:bb:3f:b7:65:b9:3e:4a:29:ca:88:4a:e7:
70:ba:03:72:a1:54:bf:7a:18:2e:95:60:8c:60:aa:
3e:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:C9:DA:3A:69:F6:28:E8:63:05:39:8C:64:DD:56:60:76:6B:16:01
X509v3 Authority Key Identifier:
keyid:9F:5D:5B:7F:79:26:44:FF:70:72:A4:3A:CC:9C:86:51:94:BE:4A:DC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/n11bf3kmRP9wcqQ6zJyGUZS-Stw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/4a7901-85d8-43ea-adb2-799910c1545f/1/n11bf3kmRP9wcqQ6zJyGUZS-Stw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/4a7901-85d8-43ea-adb2-799910c1545f/1/n11bf3kmRP9wcqQ6zJyGUZS-Stw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
33:c1:e4:fd:e0:db:f2:e7:43:37:82:8c:4b:46:7a:b6:1a:79:
54:8a:5c:2b:fb:04:85:db:da:2f:30:9d:7b:df:b7:66:e2:c6:
02:28:3f:62:6c:12:67:b2:e0:ec:b7:d2:dc:b3:4d:46:df:8e:
53:29:f6:a4:48:ca:56:a4:83:a3:0c:84:6f:98:95:f7:bf:8f:
f6:c3:3f:e9:41:0f:55:a2:fe:0d:35:cf:0b:29:47:59:c9:a4:
24:a7:38:e0:53:a7:28:d4:19:5b:f4:de:a3:b1:f3:7a:e7:d5:
f6:df:bb:74:92:0e:ac:70:80:55:ed:46:88:8a:2e:10:6d:45:
44:b6:b8:22:58:48:26:9b:7f:23:eb:c4:1e:3a:69:a7:0a:52:
19:11:7c:bf:d1:30:b3:98:c7:d2:25:b6:93:5d:c3:74:e6:35:
68:c8:9b:5b:a2:de:35:e2:d8:37:74:2a:05:19:36:bf:0e:b0:
12:de:b5:4c:41:4d:c5:91:df:74:a7:83:cc:12:de:b7:d2:8a:
58:40:de:85:83:04:73:6b:5a:4f:01:d9:af:73:10:60:2b:12:
71:98:a9:59:74:66:9a:eb:89:4c:6c:91:d2:96:38:14:86:bf:
79:66:36:fe:9f:dd:c3:08:5a:6d:37:98:c3:b1:a8:e9:f9:1d:
4f:d3:53:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 11:39:03 2025 by rpki-client