Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3f/205c19-b73a-48fe-a086-356c09380887/1/n4535zgxPmVwaE3RUsLihDMrLFs.mft
File: n4535zgxPmVwaE3RUsLihDMrLFs.mft (raw, json)
Hash identifier: knnD6boNUQcpQOjfj4pME2GLsAqQvRx9IxT2AJq8Akk=
Subject key identifier: B0:17:CA:E6:C4:ED:E3:DE:B5:6C:96:37:31:CC:D4:6A:03:48:13:78
Authority key identifier: 9F:8E:77:E7:38:31:3E:65:70:68:4D:D1:52:C2:E2:84:33:2B:2C:5B
Certificate issuer: /CN=9f8e77e738313e6570684dd152c2e284332b2c5b
Certificate serial: 019931FF51D2D26AE606C8588334E9BC1098
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/n4535zgxPmVwaE3RUsLihDMrLFs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3f/205c19-b73a-48fe-a086-356c09380887/1/n4535zgxPmVwaE3RUsLihDMrLFs.mft
Manifest number: 0F26
Signing time: Wed 10 Sep 2025 05:00:40 +0000
Manifest this update: Wed 10 Sep 2025 05:00:40 +0000
Manifest next update: Thu 11 Sep 2025 05:00:40 +0000
Files and hashes: 1: C5MhC96HxaJKMKNS_jY_WLtyOQI.roa (hash: ESPNEcm8ABrBz0nfnXDJUwVTxpctLOm0CbjyoAr2waU=)
2: n4535zgxPmVwaE3RUsLihDMrLFs.crl (hash: saVC59fio7/irtmXiMPXuowPFUoQauIvO9vRNxKLqe4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3f/205c19-b73a-48fe-a086-356c09380887/1/n4535zgxPmVwaE3RUsLihDMrLFs.crl
rsync://rpki.ripe.net/repository/DEFAULT/3f/205c19-b73a-48fe-a086-356c09380887/1/n4535zgxPmVwaE3RUsLihDMrLFs.mft
rsync://rpki.ripe.net/repository/DEFAULT/n4535zgxPmVwaE3RUsLihDMrLFs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 11 Sep 2025 05:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:31:ff:51:d2:d2:6a:e6:06:c8:58:83:34:e9:bc:10:98
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9f8e77e738313e6570684dd152c2e284332b2c5b
Validity
Not Before: Sep 10 05:00:40 2025 GMT
Not After : Sep 11 05:00:40 2025 GMT
Subject: CN=b017cae6c4ede3deb56c963731ccd46a03481378
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:ec:0f:b5:dd:8d:b3:69:f4:43:cd:44:10:16:
72:0a:61:d8:6c:ef:54:3d:f6:73:ce:ef:61:23:36:
b0:0b:13:6f:e4:e2:ef:e1:20:3c:7f:1a:b8:eb:04:
82:66:18:74:82:68:2d:80:61:ad:56:bf:c8:7d:07:
a6:df:76:26:05:42:f9:9f:3f:cf:c9:88:a0:f0:52:
3e:3d:1c:a4:c1:54:fe:b4:c5:56:23:e8:19:16:6d:
fc:04:10:18:52:53:dc:6b:db:48:e1:98:b4:96:6d:
82:72:23:b3:1f:d8:2a:af:62:6c:4a:27:d9:e4:d6:
43:7b:2d:e7:ef:e3:ab:30:72:3d:ca:63:ab:e8:45:
b7:24:ba:32:71:75:b9:ad:97:92:f5:5f:22:80:83:
ff:c7:51:b1:37:b6:49:39:a2:a6:b5:c4:60:e8:4c:
3b:85:d7:a9:2d:4b:23:f8:5f:b8:8f:1e:ab:e1:c9:
2a:63:cf:42:1a:e8:62:a9:89:fc:93:88:a8:9d:4d:
b4:c3:0f:8e:a0:f8:f4:b6:00:46:c0:aa:5c:50:62:
79:05:bd:16:28:79:e6:98:76:8f:5d:6a:aa:3e:83:
67:80:aa:fd:1e:b2:b2:32:0c:b4:e6:a6:40:1c:88:
7f:f2:cb:80:df:81:18:a0:b9:23:20:ec:b5:7a:bc:
03:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:17:CA:E6:C4:ED:E3:DE:B5:6C:96:37:31:CC:D4:6A:03:48:13:78
X509v3 Authority Key Identifier:
keyid:9F:8E:77:E7:38:31:3E:65:70:68:4D:D1:52:C2:E2:84:33:2B:2C:5B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/n4535zgxPmVwaE3RUsLihDMrLFs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/205c19-b73a-48fe-a086-356c09380887/1/n4535zgxPmVwaE3RUsLihDMrLFs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/205c19-b73a-48fe-a086-356c09380887/1/n4535zgxPmVwaE3RUsLihDMrLFs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
83:5f:62:d0:fb:7b:5a:86:9e:5f:81:7a:a1:40:5b:82:e0:1d:
af:ad:98:58:71:96:12:b9:a4:0f:13:68:3a:45:dc:be:eb:cc:
2a:c1:31:2f:af:bd:86:78:71:bb:94:f6:f6:96:2a:04:f6:b0:
2f:f0:8a:6c:e4:43:a5:c4:57:e6:18:ed:0c:7e:94:c5:30:87:
9e:58:0a:06:b5:25:03:cb:ac:de:ff:f9:76:ac:8e:cd:36:86:
9b:db:51:92:ea:a8:01:88:c5:80:dc:af:07:d9:64:db:bb:78:
a5:3b:2a:f2:5c:a9:31:88:fc:94:d9:c7:a3:9f:96:91:db:ef:
2f:2d:15:cf:2d:60:de:fa:84:3f:d6:14:78:54:86:4f:02:e6:
a9:5b:67:49:5a:13:5d:00:20:cf:f0:e6:56:83:34:b0:b5:28:
f6:07:6b:c2:bb:36:b1:be:c0:cc:08:53:8e:90:77:a4:8f:e8:
1c:87:f2:0f:c1:44:41:3c:21:50:5a:0f:55:a9:f2:67:37:9e:
a6:0a:a9:42:ae:fd:af:e4:ba:c6:c0:10:56:48:82:db:dc:62:
6b:29:ad:c0:9d:c2:88:9b:70:1c:a6:79:31:f9:26:ef:38:33:
d1:af:cd:bc:d6:26:6d:93:b7:91:80:6f:2a:23:18:29:ec:cd:
c1:e5:ae:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 10 14:07:28 2025 by rpki-client