Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/27/3e069a-3421-40ab-9e0c-45cc2dd6e491/1/n73cYxPvxLZyp-KzKuPESE_l9jA.mft
File: n73cYxPvxLZyp-KzKuPESE_l9jA.mft (raw, json)
Hash identifier: F7rCkC5aV/YzRLblm3nzmME1p2ZUylmdwFAEDjT2OWU=
Subject key identifier: 2F:0E:83:FA:D2:5B:24:66:6F:F9:86:AD:A5:70:E4:61:B3:56:78:69
Authority key identifier: 9F:BD:DC:63:13:EF:C4:B6:72:A7:E2:B3:2A:E3:C4:48:4F:E5:F6:30
Certificate issuer: /CN=9fbddc6313efc4b672a7e2b32ae3c4484fe5f630
Certificate serial: 019923A0D7B5ED43F52D0C33C5DEEC6476FE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/n73cYxPvxLZyp-KzKuPESE_l9jA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/27/3e069a-3421-40ab-9e0c-45cc2dd6e491/1/n73cYxPvxLZyp-KzKuPESE_l9jA.mft
Manifest number: 11DC
Signing time: Sun 07 Sep 2025 10:02:47 +0000
Manifest this update: Sun 07 Sep 2025 10:02:47 +0000
Manifest next update: Mon 08 Sep 2025 10:02:47 +0000
Files and hashes: 1: boDA4PQiCnDxp3aC4mFfCKLLJrE.roa (hash: qzJMKZb9GADDw4cKKxLUhJ/VrvT205N7vn0KRws/PGE=)
2: n73cYxPvxLZyp-KzKuPESE_l9jA.crl (hash: t7EfRwM6bazI7Ztu5TTcLLo4hSzl/4bTQrHtIaJA7Uc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/27/3e069a-3421-40ab-9e0c-45cc2dd6e491/1/n73cYxPvxLZyp-KzKuPESE_l9jA.crl
rsync://rpki.ripe.net/repository/DEFAULT/27/3e069a-3421-40ab-9e0c-45cc2dd6e491/1/n73cYxPvxLZyp-KzKuPESE_l9jA.mft
rsync://rpki.ripe.net/repository/DEFAULT/n73cYxPvxLZyp-KzKuPESE_l9jA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 07:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:23:a0:d7:b5:ed:43:f5:2d:0c:33:c5:de:ec:64:76:fe
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9fbddc6313efc4b672a7e2b32ae3c4484fe5f630
Validity
Not Before: Sep 7 10:02:47 2025 GMT
Not After : Sep 8 10:02:47 2025 GMT
Subject: CN=2f0e83fad25b24666ff986ada570e461b3567869
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:5c:ed:55:24:11:f6:0c:6c:84:8d:9f:be:26:
f8:03:2d:f0:8b:f0:36:a0:47:bd:6e:22:78:f5:e2:
ec:c1:5c:ff:d6:b5:ab:7e:f5:2a:9d:8f:2b:74:23:
c3:22:ae:6c:70:49:3f:4d:c6:87:95:c6:ba:ac:97:
bc:ee:ee:1d:39:ae:0f:da:d2:b6:1e:e7:55:4f:73:
dc:5a:18:d8:10:73:0c:b5:46:f6:27:de:96:7c:7f:
70:de:9a:3b:e3:89:f4:6b:a2:b2:38:8c:42:d5:94:
85:b6:dc:b1:c4:c5:98:b4:53:19:e9:8e:d2:de:3d:
a6:7c:96:fb:0d:4c:16:5b:6a:74:cb:dd:dd:9c:6e:
10:35:c2:27:52:19:2b:21:e0:51:a6:9b:61:6f:9c:
9c:a4:b7:8f:34:02:2d:a0:96:20:97:41:e8:83:c4:
5e:07:3b:fb:34:74:34:cd:22:e6:4e:ff:55:60:7e:
4c:a6:05:c4:d9:53:29:a8:0f:86:fe:d6:9f:ac:c8:
6c:35:31:c8:47:74:87:23:e4:41:ec:31:33:0c:d0:
25:de:9a:10:6d:0b:79:5b:7b:fe:df:f7:fe:49:70:
c7:9d:6a:74:5e:a3:e5:61:af:0d:26:1b:33:10:d8:
4c:33:c8:7d:5f:c4:cd:07:c9:fc:95:36:e6:ca:fa:
54:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:0E:83:FA:D2:5B:24:66:6F:F9:86:AD:A5:70:E4:61:B3:56:78:69
X509v3 Authority Key Identifier:
keyid:9F:BD:DC:63:13:EF:C4:B6:72:A7:E2:B3:2A:E3:C4:48:4F:E5:F6:30
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/n73cYxPvxLZyp-KzKuPESE_l9jA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/3e069a-3421-40ab-9e0c-45cc2dd6e491/1/n73cYxPvxLZyp-KzKuPESE_l9jA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/27/3e069a-3421-40ab-9e0c-45cc2dd6e491/1/n73cYxPvxLZyp-KzKuPESE_l9jA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ad:79:2d:b7:09:ff:7f:75:36:05:f0:72:7e:11:cb:eb:b3:c7:
92:43:bf:25:f3:a5:de:f9:dd:b9:98:8f:ee:90:cb:64:74:c4:
54:d1:e5:c4:94:8c:fc:00:07:1c:f9:21:14:1e:a0:2f:41:92:
0f:70:04:f6:ab:d2:35:0a:fd:69:d4:ba:dd:5e:f8:88:90:31:
88:3e:4b:b5:9f:28:30:4e:17:5c:5d:45:d7:b8:eb:ec:76:41:
35:61:96:56:5b:ec:18:d4:65:f3:e5:bd:ef:75:b0:3f:bd:c7:
88:a0:2b:73:e7:51:c3:8f:cc:55:34:72:99:0a:c8:d7:17:0e:
62:32:ae:2a:ea:af:c5:89:0e:9e:3e:86:42:28:f5:56:52:fd:
bd:b2:8a:78:f3:78:9e:47:24:07:74:e1:de:e6:a7:e2:a3:e9:
ab:7b:04:28:9a:03:ff:f2:72:27:a5:12:d0:3e:80:a1:4e:9a:
ad:d7:fd:6e:41:65:3b:06:d2:92:c4:65:58:9a:75:36:3d:eb:
2f:0e:b1:16:08:a9:69:3d:61:58:76:56:0d:7b:0c:3c:b3:d6:
8f:1e:36:bd:d0:7f:84:f6:54:52:5e:77:ac:ea:9c:e9:a3:ae:
73:45:d8:27:2a:9d:b1:63:ec:4f:b7:31:55:23:22:4d:5e:71:
40:c2:7b:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 14:51:48 2025 by rpki-client