Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/51ea49-7128-46e0-838d-7d5ecb4f181f/1/n5dNpF1ZFO3hOB7q-cK7FkW2ZDo.mft
File: n5dNpF1ZFO3hOB7q-cK7FkW2ZDo.mft (raw, json)
Hash identifier: rSiI/fztwvPCR8l4lJ7KRWR3bPqQ9TGu2zyDn7Zq5fA=
Subject key identifier: DD:DC:C9:6E:4B:52:29:3E:BB:F8:0B:8A:AA:A0:24:BA:F2:45:68:6D
Authority key identifier: 9F:97:4D:A4:5D:59:14:ED:E1:38:1E:EA:F9:C2:BB:16:45:B6:64:3A
Certificate issuer: /CN=9f974da45d5914ede1381eeaf9c2bb1645b6643a
Certificate serial: 019A70DBFF9312456282E5261D4B55B49A22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/n5dNpF1ZFO3hOB7q-cK7FkW2ZDo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/51ea49-7128-46e0-838d-7d5ecb4f181f/1/n5dNpF1ZFO3hOB7q-cK7FkW2ZDo.mft
Manifest number: 0687
Signing time: Tue 11 Nov 2025 03:00:57 +0000
Manifest this update: Tue 11 Nov 2025 03:00:57 +0000
Manifest next update: Wed 12 Nov 2025 03:00:57 +0000
Files and hashes: 1: FKRN7VX-M9zNuJ0Xi5mXAJ-i93Y.roa (hash: tPWo9Bc4jubOwnfbiLhbqZLh4bX+yga6cCmXXhQ2NPA=)
2: n5dNpF1ZFO3hOB7q-cK7FkW2ZDo.crl (hash: vKRrVAHdyTkja7/MzGQ8wRcXtgvERqJtFyeg1Ul7c+4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5b/51ea49-7128-46e0-838d-7d5ecb4f181f/1/n5dNpF1ZFO3hOB7q-cK7FkW2ZDo.crl
rsync://rpki.ripe.net/repository/DEFAULT/5b/51ea49-7128-46e0-838d-7d5ecb4f181f/1/n5dNpF1ZFO3hOB7q-cK7FkW2ZDo.mft
rsync://rpki.ripe.net/repository/DEFAULT/n5dNpF1ZFO3hOB7q-cK7FkW2ZDo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 03:00:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:70:db:ff:93:12:45:62:82:e5:26:1d:4b:55:b4:9a:22
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9f974da45d5914ede1381eeaf9c2bb1645b6643a
Validity
Not Before: Nov 11 03:00:57 2025 GMT
Not After : Nov 12 03:00:57 2025 GMT
Subject: CN=dddcc96e4b52293ebbf80b8aaaa024baf245686d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:3e:29:e5:b0:2e:81:dc:6f:63:e0:d2:a5:2f:
93:0f:13:89:37:4c:f9:8c:3e:6a:b2:78:7c:a7:6f:
20:be:f7:65:cf:a4:cf:b2:f6:21:ac:98:7c:6e:87:
46:e1:d4:66:03:0d:95:42:96:88:20:07:13:c7:ef:
51:7c:33:22:05:ea:df:8e:95:a2:f1:0f:fb:48:d5:
d9:8c:5f:66:1d:e3:72:1f:9b:9f:e5:17:19:1c:ad:
2d:e4:6b:f8:c3:2c:6d:c6:03:a6:84:ee:3e:bb:4f:
63:39:80:cf:77:cc:bd:b0:35:cb:0c:ce:8c:c0:ee:
5d:e7:ec:11:11:07:45:1b:cb:43:fa:97:ff:50:7a:
f0:0a:05:90:0b:1a:20:49:8e:be:9e:ec:30:cf:bb:
1a:57:b7:28:0c:ae:43:00:05:01:03:90:6f:bd:1d:
ee:0f:f0:3e:e1:c7:18:00:eb:52:ac:e7:19:7c:6b:
33:fb:e4:62:03:6d:9b:d3:6b:0a:18:16:12:a9:dd:
83:a4:17:ae:7d:0b:6c:25:fb:e4:6d:9a:9e:44:b9:
2d:ca:cd:bd:34:e7:9d:02:28:8f:5c:43:43:13:e4:
ca:15:ed:f5:5e:1f:a7:23:2b:44:15:67:eb:98:13:
c8:e8:c4:cc:c4:72:da:e7:71:3f:ae:7c:d2:5f:17:
a0:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:DC:C9:6E:4B:52:29:3E:BB:F8:0B:8A:AA:A0:24:BA:F2:45:68:6D
X509v3 Authority Key Identifier:
keyid:9F:97:4D:A4:5D:59:14:ED:E1:38:1E:EA:F9:C2:BB:16:45:B6:64:3A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/n5dNpF1ZFO3hOB7q-cK7FkW2ZDo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/51ea49-7128-46e0-838d-7d5ecb4f181f/1/n5dNpF1ZFO3hOB7q-cK7FkW2ZDo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/51ea49-7128-46e0-838d-7d5ecb4f181f/1/n5dNpF1ZFO3hOB7q-cK7FkW2ZDo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
61:56:bc:6e:76:2f:3f:55:60:ef:33:8e:79:33:4d:f1:34:b6:
00:e5:df:f3:7c:be:b0:c6:52:da:e7:e4:62:90:b4:7b:36:ad:
07:17:e1:37:fc:a4:11:00:3c:26:5c:65:40:59:47:da:e5:67:
55:51:77:2b:26:43:64:9d:91:92:6c:30:9d:61:64:7f:42:d1:
c6:c2:0d:e0:f6:f0:a7:47:ce:a2:98:42:72:fb:53:85:d7:f1:
7e:52:07:c4:09:ad:21:55:df:af:4b:99:c7:09:dd:b4:59:88:
af:e4:ea:ec:fd:a3:8c:86:3c:ca:02:86:28:71:8c:fe:21:4d:
93:b1:5a:ae:74:14:5f:20:c2:af:93:4b:7d:47:d7:7b:71:68:
f0:2c:1c:15:1c:f4:95:97:3e:cc:12:da:ce:5c:8b:51:f0:b8:
59:a9:1a:ce:97:37:bd:53:15:e4:b8:c1:8a:a6:50:f2:32:d8:
86:99:99:6d:c5:f6:98:e1:d1:42:71:0f:ca:b2:62:5b:b5:59:
e6:a7:0f:ad:aa:23:b9:6b:ee:81:50:85:7b:3a:43:1a:d8:b9:
5b:12:3c:fd:69:b9:ef:16:56:4b:c4:dc:20:a5:52:e2:ff:3a:
46:36:5f:f1:a3:c6:45:2f:3d:d2:78:d6:f8:de:49:d1:9e:c3:
f1:92:22:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 12:52:20 2025 by rpki-client