Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0a/9f6872-581b-4d47-bc6a-eba0cd57c020/1/n9mIbi2ycJ2yI2TjNNOeLuSI024.mft
File: n9mIbi2ycJ2yI2TjNNOeLuSI024.mft (raw, json)
Hash identifier: W9JsiECcJabkBNnZ7/7Tpj3krZBPM865QVsp3lHQ6Rw=
Subject key identifier: 91:D8:6F:19:94:3A:0C:2C:F8:F8:7C:24:0B:01:31:4C:C1:D2:4A:83
Authority key identifier: 9F:D9:88:6E:2D:B2:70:9D:B2:23:64:E3:34:D3:9E:2E:E4:88:D3:6E
Certificate issuer: /CN=9fd9886e2db2709db22364e334d39e2ee488d36e
Certificate serial: 019A24785E12FF8737EB35E3DA5423B4A81B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/n9mIbi2ycJ2yI2TjNNOeLuSI024.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0a/9f6872-581b-4d47-bc6a-eba0cd57c020/1/n9mIbi2ycJ2yI2TjNNOeLuSI024.mft
Manifest number: 04B5
Signing time: Mon 27 Oct 2025 07:00:59 +0000
Manifest this update: Mon 27 Oct 2025 07:00:59 +0000
Manifest next update: Tue 28 Oct 2025 07:00:59 +0000
Files and hashes: 1: Rjc45YVuDrAMQdY8qgjKUXqz9To.roa (hash: VkM0hIqEPGBmrXo8E00kzKR2aWKMeDBdfCqKvjZR58E=)
2: n9mIbi2ycJ2yI2TjNNOeLuSI024.crl (hash: p0C7yXX4VuxkpVnuowCFfNr807XnXYGaYPmma1laSck=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0a/9f6872-581b-4d47-bc6a-eba0cd57c020/1/n9mIbi2ycJ2yI2TjNNOeLuSI024.crl
rsync://rpki.ripe.net/repository/DEFAULT/0a/9f6872-581b-4d47-bc6a-eba0cd57c020/1/n9mIbi2ycJ2yI2TjNNOeLuSI024.mft
rsync://rpki.ripe.net/repository/DEFAULT/n9mIbi2ycJ2yI2TjNNOeLuSI024.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Oct 2025 07:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:24:78:5e:12:ff:87:37:eb:35:e3:da:54:23:b4:a8:1b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9fd9886e2db2709db22364e334d39e2ee488d36e
Validity
Not Before: Oct 27 07:00:59 2025 GMT
Not After : Oct 28 07:00:59 2025 GMT
Subject: CN=91d86f19943a0c2cf8f87c240b01314cc1d24a83
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:64:d7:4f:d0:b2:23:85:5e:df:83:63:c8:c1:
15:d5:33:56:93:14:9b:11:46:d9:07:63:d7:aa:57:
ac:6a:47:1e:01:55:93:7a:e9:eb:f0:0d:57:b5:61:
07:82:ab:41:0c:1e:63:9d:c5:31:a9:4b:02:ca:57:
82:97:39:c3:f9:5d:0d:db:08:74:a8:d2:c5:35:f0:
a8:7f:c7:15:1a:ef:20:af:6c:c8:7e:78:5c:21:2a:
bc:2b:54:e7:85:60:0e:76:0c:81:81:42:4e:66:d8:
b3:2a:21:ef:45:53:db:95:89:0b:80:5d:ce:f8:18:
5f:41:58:78:dc:a9:10:7c:33:0a:41:9f:6c:6d:f8:
71:3f:76:16:b3:ee:76:b4:b9:fa:c5:fd:a2:24:4e:
3a:fa:24:d5:40:3c:1b:94:73:d6:69:85:28:29:e4:
58:83:5d:4c:95:21:1f:c0:92:49:36:cd:82:9f:f7:
58:51:93:2a:f5:d5:ed:9d:b5:7c:f5:a2:63:64:43:
a0:7b:a3:52:a0:a9:26:6b:1a:1b:17:46:f2:e1:47:
48:d5:f8:61:c0:8e:af:c0:ae:c1:3c:c5:71:ae:ec:
21:e8:22:4a:5f:79:f6:ec:7b:04:d3:ad:87:7e:2d:
8f:f0:de:9d:ba:e2:3c:e0:c5:32:dc:3f:c4:df:56:
cd:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:D8:6F:19:94:3A:0C:2C:F8:F8:7C:24:0B:01:31:4C:C1:D2:4A:83
X509v3 Authority Key Identifier:
keyid:9F:D9:88:6E:2D:B2:70:9D:B2:23:64:E3:34:D3:9E:2E:E4:88:D3:6E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/n9mIbi2ycJ2yI2TjNNOeLuSI024.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/9f6872-581b-4d47-bc6a-eba0cd57c020/1/n9mIbi2ycJ2yI2TjNNOeLuSI024.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/9f6872-581b-4d47-bc6a-eba0cd57c020/1/n9mIbi2ycJ2yI2TjNNOeLuSI024.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
aa:5a:6e:1c:ad:be:d1:44:ae:ca:02:42:62:64:bc:a7:9d:dc:
81:59:c1:07:ce:3c:7b:76:bc:d5:28:21:7a:14:d6:bc:b5:28:
97:c1:b5:5d:b2:a3:a9:1e:51:b4:93:0d:ef:a7:a0:7f:73:01:
90:07:26:e9:ca:c6:33:18:59:63:01:f2:43:7b:b8:ec:19:aa:
75:ea:06:ae:9f:dc:b4:6d:7d:39:72:58:e0:bd:1c:04:98:8b:
f4:7d:0b:ab:1f:f7:4d:fd:94:68:a9:d8:7f:09:03:b5:c0:f8:
42:a2:ea:62:66:f9:15:e4:01:a2:75:ed:e5:93:0e:cb:ee:28:
be:64:d6:4f:22:6a:96:fc:66:d8:60:18:92:67:83:3d:c0:f6:
8f:85:a8:dc:f5:7e:46:2a:01:ed:6f:5e:41:a3:7b:92:46:9a:
b8:34:02:cf:6c:6e:9b:fa:65:05:fc:28:1a:b1:bc:5d:a4:c9:
92:24:18:46:bb:83:91:2d:d6:77:04:09:c7:9b:79:c3:3f:f0:
10:6f:c9:28:12:8d:a9:43:ac:82:24:db:61:fa:0d:67:2e:34:
6a:2b:77:8a:c2:65:ab:a5:3c:be:b0:94:2f:30:91:51:e9:86:
7b:2e:05:1c:47:fe:e1:55:a2:00:d1:f0:d0:f2:85:de:e3:19:
67:ba:85:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 27 17:07:34 2025 by rpki-client