Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3f/205c19-b73a-48fe-a086-356c09380887/1/n4535zgxPmVwaE3RUsLihDMrLFs.mft
File: n4535zgxPmVwaE3RUsLihDMrLFs.mft (raw, json)
Hash identifier: 8/Js5IEewEGDRIZ3I67ljr77W3bUkI5L6yzhQETQ4qE=
Subject key identifier: 65:9E:F0:FF:9C:19:62:06:40:60:59:E2:A2:4B:A5:3C:12:28:8A:9C
Authority key identifier: 9F:8E:77:E7:38:31:3E:65:70:68:4D:D1:52:C2:E2:84:33:2B:2C:5B
Certificate issuer: /CN=9f8e77e738313e6570684dd152c2e284332b2c5b
Certificate serial: 019A217722460685F9AAC79CA1E97F360A3B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/n4535zgxPmVwaE3RUsLihDMrLFs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3f/205c19-b73a-48fe-a086-356c09380887/1/n4535zgxPmVwaE3RUsLihDMrLFs.mft
Manifest number: 0FA2
Signing time: Sun 26 Oct 2025 17:00:46 +0000
Manifest this update: Sun 26 Oct 2025 17:00:46 +0000
Manifest next update: Mon 27 Oct 2025 17:00:46 +0000
Files and hashes: 1: C5MhC96HxaJKMKNS_jY_WLtyOQI.roa (hash: ESPNEcm8ABrBz0nfnXDJUwVTxpctLOm0CbjyoAr2waU=)
2: n4535zgxPmVwaE3RUsLihDMrLFs.crl (hash: bjcDHc7MCGZG1bVsW++dnSs98VWHlXGQUnjdrLPYqzU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3f/205c19-b73a-48fe-a086-356c09380887/1/n4535zgxPmVwaE3RUsLihDMrLFs.crl
rsync://rpki.ripe.net/repository/DEFAULT/3f/205c19-b73a-48fe-a086-356c09380887/1/n4535zgxPmVwaE3RUsLihDMrLFs.mft
rsync://rpki.ripe.net/repository/DEFAULT/n4535zgxPmVwaE3RUsLihDMrLFs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 27 Oct 2025 12:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:21:77:22:46:06:85:f9:aa:c7:9c:a1:e9:7f:36:0a:3b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9f8e77e738313e6570684dd152c2e284332b2c5b
Validity
Not Before: Oct 26 17:00:46 2025 GMT
Not After : Oct 27 17:00:46 2025 GMT
Subject: CN=659ef0ff9c196206406059e2a24ba53c12288a9c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:84:3c:39:8f:ad:e2:4c:72:fa:19:33:b4:21:
da:07:39:ca:79:0f:b4:e3:89:ae:46:89:c1:48:b8:
2f:64:46:31:f8:83:d0:29:59:de:0e:0f:71:43:d7:
25:69:a4:6a:3e:d7:64:ca:e6:67:b4:4a:c6:18:60:
4c:32:de:2c:1c:b7:0d:8e:b3:86:95:4f:e0:0f:e2:
ca:ee:d1:7b:18:5d:50:c2:01:d7:0c:44:40:c0:bf:
3a:52:2c:af:5b:b4:ae:d0:8e:d0:0a:a1:2a:46:0f:
85:a0:9d:81:44:ac:d8:17:c8:95:e2:3c:c0:1e:59:
ad:1a:10:89:80:35:4c:84:d8:c9:fc:bf:71:a1:35:
88:58:07:ca:ce:47:e8:3b:3a:ae:3f:cc:61:7e:d9:
95:a4:9d:ac:a6:cd:9a:ea:fc:a9:ac:6c:02:39:d0:
1d:0d:cc:2b:b8:bd:41:8b:f3:db:6e:03:38:1f:c5:
14:62:7a:8b:df:88:7a:b0:86:fa:a8:8e:08:07:bc:
26:31:27:1e:21:de:e5:03:76:2b:f3:3c:10:04:9d:
25:00:ce:84:e7:43:8f:f5:7a:9e:dc:6b:1c:02:cb:
1c:9a:8e:48:22:45:3c:49:f1:be:e8:ab:e3:07:e0:
1d:75:d0:6c:03:eb:f4:88:33:7a:9d:bc:ca:d4:52:
77:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:9E:F0:FF:9C:19:62:06:40:60:59:E2:A2:4B:A5:3C:12:28:8A:9C
X509v3 Authority Key Identifier:
keyid:9F:8E:77:E7:38:31:3E:65:70:68:4D:D1:52:C2:E2:84:33:2B:2C:5B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/n4535zgxPmVwaE3RUsLihDMrLFs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/205c19-b73a-48fe-a086-356c09380887/1/n4535zgxPmVwaE3RUsLihDMrLFs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/205c19-b73a-48fe-a086-356c09380887/1/n4535zgxPmVwaE3RUsLihDMrLFs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a2:62:6e:82:33:4b:b2:76:a4:0d:58:8c:8c:2d:43:d0:d7:ac:
62:67:1a:98:0b:0a:58:a9:e9:5e:e1:04:61:a3:2b:c6:a4:57:
42:1b:12:bd:48:90:7f:a9:a9:dc:ed:b1:8b:9b:9e:74:dc:3c:
51:c5:66:eb:0c:ed:79:3c:ad:ef:36:2f:b3:b9:98:55:26:73:
0b:9f:55:7b:ed:66:aa:46:cd:58:b7:29:f6:bb:f0:d9:5c:50:
d2:8f:b1:7c:8e:c1:18:79:02:72:4a:ad:bb:02:e9:57:98:9e:
a8:34:62:00:2e:d7:10:f5:4a:bc:b6:71:98:ca:d1:4d:4f:13:
c3:4d:74:0b:5d:9d:7d:40:aa:b3:41:c4:24:f3:1d:04:75:98:
93:a5:de:c1:cd:86:ca:54:af:52:76:fa:f9:17:80:1c:9d:3f:
e6:31:65:1d:87:f3:2d:1a:ff:49:34:6b:c2:d3:aa:c7:03:a3:
32:f3:a4:59:49:c7:36:90:ac:3f:63:68:96:57:5d:17:86:b9:
8f:e6:2a:dd:e5:39:e9:73:67:6a:d9:ab:bc:03:1b:ec:83:c0:
17:6a:5d:5f:ed:98:53:1b:34:53:20:93:d4:bd:a6:86:5d:b0:
9b:ff:e6:66:84:65:97:c9:eb:2f:e2:a3:a8:2a:1d:46:4c:a2:
14:81:2b:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 26 20:17:14 2025 by rpki-client