Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3d/316020-9fc5-4b7c-ae41-e9554483ffa7/1/n_M5Y3TL9ddnEl8C3PD5cpYyMJI.mft
File: n_M5Y3TL9ddnEl8C3PD5cpYyMJI.mft (raw, json)
Hash identifier: qQrbYh7ELhNx4ZlIvybXatVKZGg5WI9ykx/YqhJ4Qr8=
Subject key identifier: E8:AB:B5:47:6D:C9:CA:06:21:82:11:7C:1D:79:FC:88:A2:9D:E4:12
Authority key identifier: 9F:F3:39:63:74:CB:F5:D7:67:12:5F:02:DC:F0:F9:72:96:32:30:92
Certificate issuer: /CN=9ff3396374cbf5d767125f02dcf0f97296323092
Certificate serial: 019A4DE1D5BC17F4C450A00F090F38DFCD5C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/n_M5Y3TL9ddnEl8C3PD5cpYyMJI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3d/316020-9fc5-4b7c-ae41-e9554483ffa7/1/n_M5Y3TL9ddnEl8C3PD5cpYyMJI.mft
Manifest number: 1711
Signing time: Tue 04 Nov 2025 08:00:37 +0000
Manifest this update: Tue 04 Nov 2025 08:00:37 +0000
Manifest next update: Wed 05 Nov 2025 08:00:37 +0000
Files and hashes: 1: g5PI0OIlX5tTjsen3s8hXQzEWx4.roa (hash: uE1lBW16SA+r7c4/Tg2mSsWjcv7alroQQDQoG/Ta6JA=)
2: n_M5Y3TL9ddnEl8C3PD5cpYyMJI.crl (hash: 4dJpp2ZyM+83VnzUT40+Cv9tQGxHbyY7UTHdmFUNhPo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3d/316020-9fc5-4b7c-ae41-e9554483ffa7/1/n_M5Y3TL9ddnEl8C3PD5cpYyMJI.crl
rsync://rpki.ripe.net/repository/DEFAULT/3d/316020-9fc5-4b7c-ae41-e9554483ffa7/1/n_M5Y3TL9ddnEl8C3PD5cpYyMJI.mft
rsync://rpki.ripe.net/repository/DEFAULT/n_M5Y3TL9ddnEl8C3PD5cpYyMJI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 08:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4d:e1:d5:bc:17:f4:c4:50:a0:0f:09:0f:38:df:cd:5c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9ff3396374cbf5d767125f02dcf0f97296323092
Validity
Not Before: Nov 4 08:00:37 2025 GMT
Not After : Nov 5 08:00:37 2025 GMT
Subject: CN=e8abb5476dc9ca062182117c1d79fc88a29de412
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:d6:21:7d:fe:cb:53:5a:fa:50:36:74:8f:07:
cf:5d:6d:0e:b0:97:46:27:9c:0e:0e:46:4c:a6:03:
d1:e5:21:3d:50:f2:17:09:4a:9a:23:c7:9b:b7:dd:
78:56:cf:62:ce:fe:81:84:0b:1d:b4:8d:4b:ba:54:
72:67:6e:e6:74:8d:77:fb:cf:44:0a:a7:d4:b4:43:
8c:2b:03:bf:89:e7:7b:a0:8a:ca:68:4a:d1:95:ca:
44:9d:ee:17:93:f3:25:19:f9:30:a8:2e:7d:68:ec:
05:7a:0d:11:a1:46:d3:50:fa:ad:d7:3a:e6:56:e7:
53:7d:ce:08:b1:2b:87:9f:b6:12:1f:53:e5:81:f3:
05:a4:db:64:cd:8d:40:a7:bd:61:10:e2:6d:23:e8:
e4:29:c8:02:7d:62:99:ea:1e:b3:87:24:86:1e:6d:
43:d8:84:95:33:29:a4:de:b8:f3:55:1f:ff:b0:cb:
98:94:f4:f0:2d:e4:72:9f:d0:8a:48:fd:35:a1:e7:
86:7d:48:04:94:73:92:ce:ea:b6:e0:84:a3:1b:e5:
4c:75:af:30:66:17:d1:fd:36:3f:f4:eb:92:c4:58:
a3:a4:ec:48:30:22:13:5d:3b:fd:da:ea:8a:c0:c8:
4e:dd:0f:63:bc:6b:4e:3f:73:df:49:69:a9:53:d5:
b6:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:AB:B5:47:6D:C9:CA:06:21:82:11:7C:1D:79:FC:88:A2:9D:E4:12
X509v3 Authority Key Identifier:
keyid:9F:F3:39:63:74:CB:F5:D7:67:12:5F:02:DC:F0:F9:72:96:32:30:92
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/n_M5Y3TL9ddnEl8C3PD5cpYyMJI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/316020-9fc5-4b7c-ae41-e9554483ffa7/1/n_M5Y3TL9ddnEl8C3PD5cpYyMJI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/316020-9fc5-4b7c-ae41-e9554483ffa7/1/n_M5Y3TL9ddnEl8C3PD5cpYyMJI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b9:bd:67:6a:5e:51:b1:a8:9f:9a:4a:06:a0:e7:6f:1e:28:72:
5c:79:05:db:07:d0:c8:69:bb:21:35:b5:d7:dc:f6:ab:ed:ce:
98:fe:c9:4c:b6:35:de:3b:5a:cb:c0:39:1e:7e:1c:e7:8d:1f:
de:cd:4f:e2:97:fd:67:47:06:ff:67:9c:49:24:5c:19:15:9f:
bd:6b:c9:d2:9d:52:22:f1:ae:84:05:f1:f5:73:20:4a:f1:24:
14:1d:89:72:b6:d8:96:4d:bb:1d:a8:26:73:55:65:4c:46:f5:
e3:42:db:83:48:3f:ca:c7:d0:85:a7:da:07:6e:ed:71:b0:c3:
dc:bd:68:4a:e7:6a:33:8b:ed:ac:98:ff:a9:80:d4:75:44:1e:
f7:f4:80:13:08:01:4e:1a:95:a4:15:12:30:e0:65:bf:6e:44:
e6:92:d6:13:7c:27:5f:e4:b9:6a:2f:f5:20:a4:08:73:58:c9:
d9:d0:eb:74:22:bc:cd:80:23:03:15:8b:60:45:72:4c:50:95:
41:50:7c:ed:a1:72:e2:3d:ff:02:32:48:f5:c8:d4:86:2c:c8:
4d:8f:49:3c:fc:47:60:df:5d:67:61:be:92:33:c8:ce:25:25:
9c:bd:ad:db:07:3d:4b:a4:5b:82:1e:4b:d3:85:00:23:1a:6b:
27:b4:dd:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 14:26:11 2025 by rpki-client