Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/ad0f8d-a5e7-40b3-b8a8-7362b19de73e/1/n7jb0z1dO8T6Nknt9_kU6uejiF0.mft
File: n7jb0z1dO8T6Nknt9_kU6uejiF0.mft (raw, json)
Hash identifier: +ivf/fqEVDyZ0J07hT4FNe4A1j+0GdD3tqeFFKVYgeE=
Subject key identifier: A8:64:E4:06:F5:C7:C6:99:CD:59:27:A1:0D:3A:52:F4:06:E7:F4:82
Authority key identifier: 9F:B8:DB:D3:3D:5D:3B:C4:FA:36:49:ED:F7:F9:14:EA:E7:A3:88:5D
Certificate issuer: /CN=9fb8dbd33d5d3bc4fa3649edf7f914eae7a3885d
Certificate serial: 019A71B8D1066783792D7B61ECF0482B29E5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/n7jb0z1dO8T6Nknt9_kU6uejiF0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4e/ad0f8d-a5e7-40b3-b8a8-7362b19de73e/1/n7jb0z1dO8T6Nknt9_kU6uejiF0.mft
Manifest number: 0493
Signing time: Tue 11 Nov 2025 07:02:08 +0000
Manifest this update: Tue 11 Nov 2025 07:02:08 +0000
Manifest next update: Wed 12 Nov 2025 07:02:08 +0000
Files and hashes: 1: n7jb0z1dO8T6Nknt9_kU6uejiF0.crl (hash: c3lnOqf0aWKG7mZOienB2gPCTpDjqEPs1+LS2Ypb8l0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4e/ad0f8d-a5e7-40b3-b8a8-7362b19de73e/1/n7jb0z1dO8T6Nknt9_kU6uejiF0.crl
rsync://rpki.ripe.net/repository/DEFAULT/4e/ad0f8d-a5e7-40b3-b8a8-7362b19de73e/1/n7jb0z1dO8T6Nknt9_kU6uejiF0.mft
rsync://rpki.ripe.net/repository/DEFAULT/n7jb0z1dO8T6Nknt9_kU6uejiF0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 07:02:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:b8:d1:06:67:83:79:2d:7b:61:ec:f0:48:2b:29:e5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9fb8dbd33d5d3bc4fa3649edf7f914eae7a3885d
Validity
Not Before: Nov 11 07:02:08 2025 GMT
Not After : Nov 12 07:02:08 2025 GMT
Subject: CN=a864e406f5c7c699cd5927a10d3a52f406e7f482
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:be:95:ff:6c:cd:84:e2:40:92:cb:29:29:f6:
5b:f4:2d:15:a1:63:fa:a0:44:67:91:b6:db:c2:1a:
4a:6f:58:1a:d7:91:ba:77:c7:0a:97:e6:7c:54:4f:
73:ad:aa:b1:2b:fb:4e:45:c4:48:26:7a:d7:d2:2b:
3e:50:77:79:c5:4e:46:cd:f0:42:99:c8:e1:19:34:
8e:d0:68:82:e2:e1:f3:10:9e:2f:0a:4c:c9:41:50:
be:33:75:0e:f9:a1:21:eb:f4:2d:06:8c:c5:c5:56:
88:65:4b:9a:94:ec:67:70:17:de:23:38:2e:75:a2:
61:f7:e0:85:8f:f9:ba:79:bc:b0:3d:28:fb:59:06:
2b:0f:86:0b:55:b3:9b:05:d3:a0:8a:bf:b4:46:f2:
8e:8d:73:c7:50:b0:bb:bf:ca:2e:a3:2f:52:39:61:
32:e7:2f:dd:ea:7b:80:7c:7e:9b:27:92:52:7c:6e:
52:10:2f:08:9c:15:6d:43:35:4f:c2:34:6d:44:fa:
4f:d6:7b:71:a6:8c:13:3d:84:3d:81:7c:c5:6c:a8:
5d:8a:6d:63:03:09:5e:01:92:5e:58:d9:aa:4f:58:
fd:d2:b5:f7:fb:8a:9a:c6:1b:2f:85:b6:2a:44:73:
4e:3f:78:09:63:19:1d:83:ca:e3:78:8a:5f:bf:0e:
64:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:64:E4:06:F5:C7:C6:99:CD:59:27:A1:0D:3A:52:F4:06:E7:F4:82
X509v3 Authority Key Identifier:
keyid:9F:B8:DB:D3:3D:5D:3B:C4:FA:36:49:ED:F7:F9:14:EA:E7:A3:88:5D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/n7jb0z1dO8T6Nknt9_kU6uejiF0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/ad0f8d-a5e7-40b3-b8a8-7362b19de73e/1/n7jb0z1dO8T6Nknt9_kU6uejiF0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/ad0f8d-a5e7-40b3-b8a8-7362b19de73e/1/n7jb0z1dO8T6Nknt9_kU6uejiF0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4a:bd:d4:bc:9c:9a:ab:dd:c4:78:94:9a:21:5b:48:84:94:57:
95:89:e3:93:be:d5:b7:a2:9f:6c:f4:b3:1a:1f:3c:7a:47:5e:
ff:7c:08:cc:1f:ec:3c:1d:f9:29:cf:82:7f:53:86:b0:cf:c2:
f5:a0:6c:9a:e6:3d:73:46:ef:0c:d9:5c:9e:ba:13:22:1f:48:
c3:a4:fb:81:c4:35:cc:45:28:90:a9:28:98:f1:2b:37:1c:72:
1e:23:71:6d:d8:71:e3:e2:8b:6a:1a:bc:8f:3c:3d:e5:e5:df:
cb:c5:26:06:92:8e:40:97:eb:a4:86:fc:08:fd:ba:e8:b3:b9:
59:08:fe:c0:d7:8d:91:df:c9:9e:db:fb:cd:78:77:7a:0c:0b:
90:5c:01:19:dc:73:b1:ec:f9:65:1d:d8:f7:f4:59:be:d4:c7:
fd:7e:e7:27:0a:02:94:dc:b7:6e:cc:4d:cc:d6:e9:24:47:b3:
ef:86:80:99:db:43:dc:9a:91:0c:19:11:53:0a:42:2a:5c:e5:
25:8b:a2:ac:72:7b:12:53:c0:61:6e:39:2c:8f:ed:43:74:49:
66:ce:c7:82:e0:b0:e9:27:6c:61:07:da:64:39:0e:c3:6a:d3:
71:2a:47:58:17:1d:16:9e:f5:04:dd:ec:a8:d3:88:5d:8d:f2:
04:a6:0a:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 13:12:21 2025 by rpki-client