Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3d/316020-9fc5-4b7c-ae41-e9554483ffa7/1/n_M5Y3TL9ddnEl8C3PD5cpYyMJI.mft
File: n_M5Y3TL9ddnEl8C3PD5cpYyMJI.mft (raw, json)
Hash identifier: D+U0cDMVyh6LoMTVjceJC32DCFvsgcFnRjYLcoHUNGw=
Subject key identifier: FF:34:F1:A1:4D:97:E2:BD:54:80:A0:BE:6F:C0:A5:3E:78:D4:5B:3C
Authority key identifier: 9F:F3:39:63:74:CB:F5:D7:67:12:5F:02:DC:F0:F9:72:96:32:30:92
Certificate issuer: /CN=9ff3396374cbf5d767125f02dcf0f97296323092
Certificate serial: 0199624709F814CAF5DB3A71B1368C9E3CC3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/n_M5Y3TL9ddnEl8C3PD5cpYyMJI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3d/316020-9fc5-4b7c-ae41-e9554483ffa7/1/n_M5Y3TL9ddnEl8C3PD5cpYyMJI.mft
Manifest number: 1697
Signing time: Fri 19 Sep 2025 14:00:46 +0000
Manifest this update: Fri 19 Sep 2025 14:00:46 +0000
Manifest next update: Sat 20 Sep 2025 14:00:46 +0000
Files and hashes: 1: g5PI0OIlX5tTjsen3s8hXQzEWx4.roa (hash: uE1lBW16SA+r7c4/Tg2mSsWjcv7alroQQDQoG/Ta6JA=)
2: n_M5Y3TL9ddnEl8C3PD5cpYyMJI.crl (hash: Q+kCiSPr36RcfTJVL/3EGCvW6qBZwjKu0CZ5Ob2zLCM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3d/316020-9fc5-4b7c-ae41-e9554483ffa7/1/n_M5Y3TL9ddnEl8C3PD5cpYyMJI.crl
rsync://rpki.ripe.net/repository/DEFAULT/3d/316020-9fc5-4b7c-ae41-e9554483ffa7/1/n_M5Y3TL9ddnEl8C3PD5cpYyMJI.mft
rsync://rpki.ripe.net/repository/DEFAULT/n_M5Y3TL9ddnEl8C3PD5cpYyMJI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 20 Sep 2025 14:00:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:62:47:09:f8:14:ca:f5:db:3a:71:b1:36:8c:9e:3c:c3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9ff3396374cbf5d767125f02dcf0f97296323092
Validity
Not Before: Sep 19 14:00:46 2025 GMT
Not After : Sep 20 14:00:46 2025 GMT
Subject: CN=ff34f1a14d97e2bd5480a0be6fc0a53e78d45b3c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:20:38:72:eb:98:4b:90:88:d5:8b:69:63:8f:
d1:5f:65:dd:2c:c3:57:62:e8:23:d7:90:6c:1e:66:
f5:ba:ee:61:d7:7d:ee:c2:d7:47:77:21:e9:5a:03:
33:a1:8c:0a:f6:6e:74:e9:5f:b4:4f:75:0a:94:68:
10:2f:e6:48:f8:e6:e6:5e:73:47:d1:0e:ce:b9:07:
00:18:9d:60:07:fd:44:b2:80:4f:39:bf:a9:61:60:
3c:6d:66:89:d2:76:d6:f7:87:0e:a8:9f:7b:e0:f7:
90:10:36:5a:85:f8:97:52:82:c3:ea:1f:99:34:10:
4d:b8:df:42:66:54:bd:47:6b:a6:ec:ad:8e:ab:02:
74:1d:e0:07:0e:bd:c5:15:81:c3:3c:6b:5c:e2:86:
a1:c3:d7:1b:60:4f:92:63:36:1f:2c:46:cf:7a:74:
ea:58:4e:c4:b6:eb:e6:65:55:7f:ac:4d:38:4e:37:
38:c6:ff:c9:a6:f7:6f:74:c0:5d:dc:a2:03:2a:81:
1c:da:14:d7:03:8c:88:ee:b2:0c:08:a3:bd:70:db:
ad:9b:13:a5:48:95:d1:41:25:6a:9f:fd:8a:21:00:
54:c7:ac:4e:59:59:c1:12:dd:60:26:31:41:85:9c:
26:68:0e:d7:4e:92:63:8b:d4:70:d8:dc:03:db:f9:
b2:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:34:F1:A1:4D:97:E2:BD:54:80:A0:BE:6F:C0:A5:3E:78:D4:5B:3C
X509v3 Authority Key Identifier:
keyid:9F:F3:39:63:74:CB:F5:D7:67:12:5F:02:DC:F0:F9:72:96:32:30:92
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/n_M5Y3TL9ddnEl8C3PD5cpYyMJI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/316020-9fc5-4b7c-ae41-e9554483ffa7/1/n_M5Y3TL9ddnEl8C3PD5cpYyMJI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/316020-9fc5-4b7c-ae41-e9554483ffa7/1/n_M5Y3TL9ddnEl8C3PD5cpYyMJI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9e:15:b3:8c:6f:c4:35:84:47:b0:32:29:ca:eb:33:69:42:20:
07:47:49:10:d4:a0:87:4c:87:bc:dd:58:f3:68:05:15:b8:eb:
43:e2:d2:6b:08:97:34:a8:b3:46:ea:f3:13:71:c3:50:3b:20:
a1:e8:98:d1:2a:26:a1:52:14:2f:04:82:65:27:9c:0a:12:48:
f6:bb:b1:fe:1b:35:5b:3c:35:d9:27:a6:95:34:11:4b:3a:ff:
35:55:9b:88:f3:02:d6:7b:a1:73:9e:02:de:e4:2e:21:9b:75:
1b:ed:53:40:3e:8f:e6:ba:8c:41:fd:9c:41:4b:51:0c:f9:12:
e7:e0:b3:02:f4:5a:14:8d:af:18:a0:99:cf:ad:67:ac:9e:5a:
cf:4f:80:ad:c6:3f:e3:bf:f3:df:e1:60:40:8e:05:11:33:d0:
4b:e1:1f:ef:3b:f2:b0:04:8b:08:37:b2:db:d3:9f:4f:d9:9e:
fb:f2:7e:b6:1b:65:ee:57:98:59:7c:25:dc:33:43:00:c0:bb:
83:80:b3:7a:c3:7a:30:d3:33:5d:2a:bd:4f:6e:63:99:c7:88:
2b:e6:26:93:79:9c:38:27:cf:66:49:34:bc:2f:b4:4f:90:bf:
de:cc:b8:3d:d3:a3:87:e9:9e:bf:9d:fb:ed:11:11:5d:e7:d9:
d7:2d:82:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 19 19:37:21 2025 by rpki-client