Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/02400f-7802-44e7-8527-8b291e26d1d9/1/n7bU2YfQBKAPopfmnCaOt189mkA.mft
File: n7bU2YfQBKAPopfmnCaOt189mkA.mft (raw, json)
Hash identifier: Wz6I5vvadg9wId484kM6nce3au2O545DS/2TFcNbwMY=
Subject key identifier: 91:77:09:16:85:B5:BD:DE:B1:DB:12:B1:0F:21:8C:F2:E4:D5:A4:DA
Authority key identifier: 9F:B6:D4:D9:87:D0:04:A0:0F:A2:97:E6:9C:26:8E:B7:5F:3D:9A:40
Certificate issuer: /CN=9fb6d4d987d004a00fa297e69c268eb75f3d9a40
Certificate serial: 019A73016235CCD9CFA3F83ED867C2160BAA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/n7bU2YfQBKAPopfmnCaOt189mkA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/18/02400f-7802-44e7-8527-8b291e26d1d9/1/n7bU2YfQBKAPopfmnCaOt189mkA.mft
Manifest number: 0EFE
Signing time: Tue 11 Nov 2025 13:01:01 +0000
Manifest this update: Tue 11 Nov 2025 13:01:01 +0000
Manifest next update: Wed 12 Nov 2025 13:01:01 +0000
Files and hashes: 1: 5ZNOGBQ9w8dTp0XQhpuUk8zzApg.roa (hash: 1/+Fm1r/KA+hNLAy+y/H8/1fP0WyouANNJuTvhP3iNk=)
2: n7bU2YfQBKAPopfmnCaOt189mkA.crl (hash: XabxuPd+YjaDE4JLgd9rxSm8a26NUH9GPQn33TF3OHk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/18/02400f-7802-44e7-8527-8b291e26d1d9/1/n7bU2YfQBKAPopfmnCaOt189mkA.crl
rsync://rpki.ripe.net/repository/DEFAULT/18/02400f-7802-44e7-8527-8b291e26d1d9/1/n7bU2YfQBKAPopfmnCaOt189mkA.mft
rsync://rpki.ripe.net/repository/DEFAULT/n7bU2YfQBKAPopfmnCaOt189mkA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:73:01:62:35:cc:d9:cf:a3:f8:3e:d8:67:c2:16:0b:aa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9fb6d4d987d004a00fa297e69c268eb75f3d9a40
Validity
Not Before: Nov 11 13:01:01 2025 GMT
Not After : Nov 12 13:01:01 2025 GMT
Subject: CN=9177091685b5bddeb1db12b10f218cf2e4d5a4da
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:62:83:ff:07:ab:e2:e0:c4:a2:4c:92:e3:76:
ae:bf:68:97:50:0d:94:a4:5a:fe:02:8c:df:d9:e2:
4a:32:c2:24:7e:56:d6:8f:7f:8c:4f:3f:c8:5f:53:
72:3c:da:4c:15:1b:0c:3a:7a:99:44:7d:9c:f5:9b:
6e:3d:73:ff:2c:75:7a:4e:88:76:36:82:23:30:c9:
e2:5f:b5:be:82:98:01:28:f3:85:c1:53:1c:fb:95:
6e:0f:a6:66:05:1a:fb:68:3f:49:b1:ae:51:6a:6f:
68:67:d7:59:cd:93:37:61:3f:bb:ab:e8:54:e2:45:
79:65:f5:d6:68:f1:d7:95:f2:5a:3a:1a:30:ec:20:
9e:f6:96:85:6d:f3:c2:9a:50:d7:bb:6f:fc:37:e2:
44:bd:35:28:95:57:58:46:8f:31:08:6c:bd:ee:e4:
db:e9:46:ca:6d:80:f7:4d:90:12:be:0c:67:78:90:
29:79:48:83:9c:80:d9:01:89:ef:f6:5d:c7:c3:52:
79:ce:ba:55:85:db:f9:b9:91:5a:4b:21:21:fc:f0:
9f:fa:68:8c:2a:9a:8d:16:06:bb:11:99:45:3b:40:
06:0a:98:26:fb:19:2c:d5:1b:ae:a9:f6:80:cb:68:
89:85:af:bf:0b:e2:2c:b0:81:26:0a:11:bb:bc:3d:
51:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:77:09:16:85:B5:BD:DE:B1:DB:12:B1:0F:21:8C:F2:E4:D5:A4:DA
X509v3 Authority Key Identifier:
keyid:9F:B6:D4:D9:87:D0:04:A0:0F:A2:97:E6:9C:26:8E:B7:5F:3D:9A:40
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/n7bU2YfQBKAPopfmnCaOt189mkA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/02400f-7802-44e7-8527-8b291e26d1d9/1/n7bU2YfQBKAPopfmnCaOt189mkA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/18/02400f-7802-44e7-8527-8b291e26d1d9/1/n7bU2YfQBKAPopfmnCaOt189mkA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0a:9d:f9:a7:4c:77:aa:13:35:f4:b1:54:78:60:09:50:9f:c7:
71:64:f8:75:17:87:b7:0d:ba:f1:a2:88:d5:a7:29:0a:2a:ba:
23:64:b9:65:34:73:d9:cc:2a:8a:a4:a7:a3:61:ec:d5:7b:34:
6e:dd:06:d1:10:98:d2:da:ea:09:d8:d1:39:9e:31:f6:07:cc:
1a:96:a3:e7:5f:61:f2:ed:03:95:f9:80:2b:40:63:d0:33:80:
6c:ea:1c:a5:fa:ac:71:24:fa:3c:63:04:f8:e9:7a:8d:6b:38:
5a:97:6c:fc:37:bc:cd:d4:03:16:a4:24:99:b3:f4:40:ad:a9:
e6:c4:27:86:10:e0:f1:ac:e4:06:db:ce:8f:e9:c4:4f:84:a2:
40:ee:05:50:73:9e:dc:e3:20:3c:bf:f2:aa:63:e1:b2:2c:77:
b0:04:07:ff:e4:95:81:2a:bd:e6:40:51:83:c8:d6:5b:0b:1c:
43:ee:69:6a:0c:a8:7b:9e:c2:3f:68:86:d6:be:a3:f9:bf:c7:
b8:cd:09:77:d8:7b:7f:da:88:25:e6:32:6b:4d:45:74:24:b9:
57:13:fe:02:24:10:d5:22:6d:e3:ee:42:41:3e:88:e9:4d:bb:
8d:c7:db:8a:cd:e0:db:91:19:bd:a9:1e:b6:2e:be:44:c7:7e:
7f:de:8a:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 15:46:49 2025 by rpki-client