Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ff/d8c58d-8d24-4280-91fd-48b1664d40d5/1/N9J_wkRD_N1LG2XPyAeMShQon54.mft
File: N9J_wkRD_N1LG2XPyAeMShQon54.mft (raw, json)
Hash identifier: 7XuzVdhNFgts/Dw6hkbeBOoes+t0CySWTMv6gvaq558=
Subject key identifier: 76:C2:4F:04:8D:33:6C:63:7C:50:E3:8E:61:2D:E7:5A:7D:19:30:E1
Authority key identifier: 37:D2:7F:C2:44:43:FC:DD:4B:1B:65:CF:C8:07:8C:4A:14:28:9F:9E
Certificate issuer: /CN=37d27fc24443fcdd4b1b65cfc8078c4a14289f9e
Certificate serial: 0199FB7CA92B647A3BDB1FADC773A026AB53
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/N9J_wkRD_N1LG2XPyAeMShQon54.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ff/d8c58d-8d24-4280-91fd-48b1664d40d5/1/N9J_wkRD_N1LG2XPyAeMShQon54.mft
Manifest number: 16E3
Signing time: Sun 19 Oct 2025 08:01:14 +0000
Manifest this update: Sun 19 Oct 2025 08:01:14 +0000
Manifest next update: Mon 20 Oct 2025 08:01:14 +0000
Files and hashes: 1: N9J_wkRD_N1LG2XPyAeMShQon54.crl (hash: sISVFYbOs1gHRimrDRohyessaOAyj6ZH7eoJjRE5368=)
2: TLZrPYGbv3OSz3l-n9m1uFTtYyY.roa (hash: BAfT0SDdeatk44A0MoM3KqLiELOkYEeVNpqrfHgFPvo=)
3: fTuGHUDbLXIf1K1JGZkDmgp4h30.roa (hash: CE5/seUejdLKBZqDs568ZVcYXPKEXW1OP4zxVz04Gmo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ff/d8c58d-8d24-4280-91fd-48b1664d40d5/1/N9J_wkRD_N1LG2XPyAeMShQon54.crl
rsync://rpki.ripe.net/repository/DEFAULT/ff/d8c58d-8d24-4280-91fd-48b1664d40d5/1/N9J_wkRD_N1LG2XPyAeMShQon54.mft
rsync://rpki.ripe.net/repository/DEFAULT/N9J_wkRD_N1LG2XPyAeMShQon54.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 08:01:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:7c:a9:2b:64:7a:3b:db:1f:ad:c7:73:a0:26:ab:53
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=37d27fc24443fcdd4b1b65cfc8078c4a14289f9e
Validity
Not Before: Oct 19 08:01:14 2025 GMT
Not After : Oct 20 08:01:14 2025 GMT
Subject: CN=76c24f048d336c637c50e38e612de75a7d1930e1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:1a:1d:e6:62:97:b5:66:24:c6:9c:0e:76:a0:
47:0f:c8:5b:07:fa:27:d1:59:ee:f2:3d:3f:e8:6e:
8d:9e:d2:ff:35:be:ae:51:7a:97:c1:d4:eb:34:d8:
ae:32:e2:48:b6:43:38:92:40:76:26:ed:ec:93:55:
81:6d:6c:fd:88:f0:09:27:02:9f:39:49:2a:02:87:
1d:31:28:20:ee:4c:5c:fa:a5:43:87:83:ed:24:ea:
88:96:90:f5:88:39:a1:69:84:a5:80:44:e2:51:b3:
0b:7e:a7:e1:f4:18:7f:de:66:23:35:93:db:c4:fe:
90:c9:58:92:ff:51:8f:98:b7:cb:a7:64:db:ca:55:
3f:e9:92:25:c7:8b:e9:16:cd:ab:b3:f2:75:a2:68:
83:2f:24:86:8b:74:2e:c1:0a:e9:6c:29:98:96:3a:
f6:bf:aa:b1:ef:b5:fb:98:a2:f0:01:61:de:0d:72:
9e:7a:ff:44:53:7f:e6:ee:b8:7e:d9:47:29:58:2b:
82:20:67:71:ee:4f:a4:5f:fb:25:e4:9a:be:c2:e3:
84:4b:35:56:ab:cb:78:18:94:40:54:c6:61:fd:dd:
b9:aa:2b:af:ea:9e:e5:c6:1c:db:a2:18:46:0c:ac:
4a:e4:d0:6d:e0:aa:57:0d:81:47:de:e9:76:29:ea:
5e:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
76:C2:4F:04:8D:33:6C:63:7C:50:E3:8E:61:2D:E7:5A:7D:19:30:E1
X509v3 Authority Key Identifier:
keyid:37:D2:7F:C2:44:43:FC:DD:4B:1B:65:CF:C8:07:8C:4A:14:28:9F:9E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/N9J_wkRD_N1LG2XPyAeMShQon54.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/d8c58d-8d24-4280-91fd-48b1664d40d5/1/N9J_wkRD_N1LG2XPyAeMShQon54.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/d8c58d-8d24-4280-91fd-48b1664d40d5/1/N9J_wkRD_N1LG2XPyAeMShQon54.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b1:4a:fc:f6:a5:c7:9a:e3:0c:13:15:5d:af:a4:5f:3b:86:c6:
19:b5:99:d4:4f:a5:70:ae:04:1c:3c:c4:6b:49:7f:eb:db:a8:
7f:63:a0:b6:6a:dd:5f:d4:65:b8:0d:06:15:53:bb:ec:a6:9e:
5e:09:93:56:b0:b7:f7:5a:23:86:1b:37:55:0d:78:8c:0d:fc:
13:ea:ce:76:f0:4d:29:13:97:77:6e:11:fd:8a:b2:13:30:69:
d0:32:4c:5c:aa:a1:09:36:1c:7f:37:73:b4:44:61:10:b0:a7:
5c:3b:70:1e:4c:1a:c9:c2:a6:45:dc:29:11:bc:5b:02:37:e8:
c7:44:b7:33:c2:02:aa:be:ba:5a:24:09:43:b1:5a:a9:a0:2c:
2a:42:8f:c5:06:26:c6:5d:85:62:1d:64:a8:5c:4a:15:f8:a1:
63:ca:d7:4f:39:d5:15:cd:2b:3c:c0:8d:d0:78:95:d8:04:bd:
32:88:4c:a2:b0:78:af:f2:e2:6d:2d:db:1d:a5:73:79:41:df:
16:b8:78:61:3c:0a:6c:ba:81:5b:5b:95:aa:87:60:17:da:b0:
f8:52:38:fd:54:d6:a6:db:64:67:f3:02:17:04:e5:60:89:4e:
04:d6:97:45:e7:f8:79:24:6e:21:a4:14:e8:b3:2f:2e:73:ab:
c1:f2:15:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 17:56:41 2025 by rpki-client