Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/916917-88c5-4e7b-811e-7d32ca065b66/1/n1ZG99ivwKkz-zMzPzcBPYOgTQA.mft
File: n1ZG99ivwKkz-zMzPzcBPYOgTQA.mft (raw, json)
Hash identifier: nz7xEyf4GuMOlpq366byDm9UbY2xS2QqrPbgcT2DYnw=
Subject key identifier: 5E:B7:50:50:C4:D3:3B:9B:D5:5E:3F:6E:08:9F:6A:86:B7:06:D2:A1
Authority key identifier: 9F:56:46:F7:D8:AF:C0:A9:33:FB:33:33:3F:37:01:3D:83:A0:4D:00
Certificate issuer: /CN=9f5646f7d8afc0a933fb33333f37013d83a04d00
Certificate serial: 019A28556B9A2E10FDE916C034C024B7EAF7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/n1ZG99ivwKkz-zMzPzcBPYOgTQA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/02/916917-88c5-4e7b-811e-7d32ca065b66/1/n1ZG99ivwKkz-zMzPzcBPYOgTQA.mft
Manifest number: 16FC
Signing time: Tue 28 Oct 2025 01:01:18 +0000
Manifest this update: Tue 28 Oct 2025 01:01:18 +0000
Manifest next update: Wed 29 Oct 2025 01:01:18 +0000
Files and hashes: 1: 4OydZQEJVaj8JF-uoTmGENGb7Is.roa (hash: a1svWgU+LYKwh9ujA37IlIq254s7oEhH/xm68kQfTL0=)
2: WbLB1D5MYx_PgfcFWuvA_-UUgKg.roa (hash: 1LjofbnkllkaD2D3HBXrE3UcL9Erxo+FTPhwZWfcOlk=)
3: Xdap8lWOk_OPrPnAHjZrax0V0YY.roa (hash: 36jUlYBcRqreAxC1qFacFfo9gII7DpsC+iKcaU5I/sQ=)
4: n1ZG99ivwKkz-zMzPzcBPYOgTQA.crl (hash: UPS3Niy9hON1NpQBdxYPRhxR4dqeCfUfSIirlvxJSuo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/02/916917-88c5-4e7b-811e-7d32ca065b66/1/n1ZG99ivwKkz-zMzPzcBPYOgTQA.crl
rsync://rpki.ripe.net/repository/DEFAULT/02/916917-88c5-4e7b-811e-7d32ca065b66/1/n1ZG99ivwKkz-zMzPzcBPYOgTQA.mft
rsync://rpki.ripe.net/repository/DEFAULT/n1ZG99ivwKkz-zMzPzcBPYOgTQA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Oct 2025 00:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:28:55:6b:9a:2e:10:fd:e9:16:c0:34:c0:24:b7:ea:f7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9f5646f7d8afc0a933fb33333f37013d83a04d00
Validity
Not Before: Oct 28 01:01:18 2025 GMT
Not After : Oct 29 01:01:18 2025 GMT
Subject: CN=5eb75050c4d33b9bd55e3f6e089f6a86b706d2a1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:36:4a:5e:d0:57:75:bd:05:99:e2:f5:21:52:
fb:5c:dd:a3:f3:33:ef:85:e5:80:46:c2:9c:28:8f:
91:8f:f0:d2:37:7f:6a:bd:45:00:90:ad:31:34:dd:
21:8d:7f:35:53:98:31:f4:36:a9:03:5e:18:21:dd:
53:7c:a3:11:b4:86:1c:38:47:04:ea:1a:37:04:a4:
26:a5:15:39:69:0a:34:3f:a5:b1:12:7e:f3:3d:07:
c4:8e:a8:06:78:7d:3a:26:36:59:d7:8c:1b:80:aa:
3c:25:91:c0:bf:20:cc:33:15:b4:b7:17:dd:76:2e:
d8:2b:06:07:f9:14:92:ef:a4:08:81:f2:12:d1:64:
86:cb:d1:75:5a:22:a7:8c:c9:27:ec:c2:d8:fe:c1:
56:d4:3e:69:9d:42:58:fc:39:4e:ad:05:e1:aa:3e:
63:2e:b6:27:17:ea:1a:39:f2:eb:6b:40:1a:75:91:
0b:d5:57:69:2b:a6:8c:ca:97:49:bd:22:65:58:f0:
c4:50:e4:cf:82:45:b3:16:9f:ec:2e:6c:15:e0:61:
d7:21:62:1c:94:c6:8f:79:7a:1a:6c:2a:45:74:53:
a2:bb:92:a7:0b:d3:21:7b:16:c7:42:3c:cc:aa:ac:
7c:10:e7:0b:fd:c7:e2:ac:9d:21:71:9e:d0:d4:46:
de:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:B7:50:50:C4:D3:3B:9B:D5:5E:3F:6E:08:9F:6A:86:B7:06:D2:A1
X509v3 Authority Key Identifier:
keyid:9F:56:46:F7:D8:AF:C0:A9:33:FB:33:33:3F:37:01:3D:83:A0:4D:00
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/n1ZG99ivwKkz-zMzPzcBPYOgTQA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/916917-88c5-4e7b-811e-7d32ca065b66/1/n1ZG99ivwKkz-zMzPzcBPYOgTQA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/02/916917-88c5-4e7b-811e-7d32ca065b66/1/n1ZG99ivwKkz-zMzPzcBPYOgTQA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
46:25:19:a1:c1:a2:fe:e8:dc:e2:4e:e7:9e:73:a8:4e:cd:a7:
cf:24:4a:84:a8:a2:c6:8c:e1:ea:a7:bd:a8:cc:56:7f:2c:29:
39:47:2d:35:a4:26:88:37:68:0b:4e:43:6f:ee:da:01:ff:37:
fc:eb:0f:e0:06:f5:3d:09:20:33:0e:37:ff:22:bf:55:13:e0:
1c:4b:63:01:c6:1f:21:c2:03:a7:94:e7:6a:81:d9:61:3f:42:
cc:8b:29:08:d2:ec:22:60:3a:80:66:2a:ae:3d:95:bb:60:b2:
c2:86:48:d4:d7:18:6a:cc:25:18:ef:9d:80:64:e9:56:bd:a9:
1d:33:15:ad:16:35:56:92:d2:34:ee:e5:0d:9d:4a:d6:c4:4e:
05:a3:84:f8:96:78:27:6c:d8:50:05:48:24:a9:4a:cd:e9:de:
28:53:07:eb:6f:fd:2e:23:ea:73:11:b6:23:98:f0:46:89:ee:
d0:b2:bb:3f:65:bc:1e:0e:a2:af:69:04:af:44:b0:4c:d7:06:
31:c8:08:d5:e8:cb:3a:b6:03:7d:a5:1e:41:0d:4e:5f:29:ce:
2f:91:84:7c:9a:9e:2b:09:0e:02:89:cb:9a:22:bd:e3:ba:95:
2f:46:e7:84:2c:f1:81:5d:b7:34:40:eb:50:66:28:e0:51:b5:
a8:88:73:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 28 07:09:25 2025 by rpki-client