Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/79/cdbd0a-68ec-487d-8fea-619281380bc2/1/n2m9-bvSpFl-Js4gv-E4YkytM9w.mft
File: n2m9-bvSpFl-Js4gv-E4YkytM9w.mft (raw, json)
Hash identifier: phvKRHQqrkMzWhbCTZ92YTQ6eyucGfCgn/ehHtE4ixc=
Subject key identifier: DC:75:1A:29:57:FE:A2:B9:F6:EA:B2:AF:AF:8C:22:1D:57:24:78:C8
Authority key identifier: 9F:69:BD:F9:BB:D2:A4:59:7E:26:CE:20:BF:E1:38:62:4C:AD:33:DC
Certificate issuer: /CN=9f69bdf9bbd2a4597e26ce20bfe138624cad33dc
Certificate serial: 019A1918B131586124723D27C039D0C8EC6C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/n2m9-bvSpFl-Js4gv-E4YkytM9w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/79/cdbd0a-68ec-487d-8fea-619281380bc2/1/n2m9-bvSpFl-Js4gv-E4YkytM9w.mft
Manifest number: 16F5
Signing time: Sat 25 Oct 2025 02:00:39 +0000
Manifest this update: Sat 25 Oct 2025 02:00:39 +0000
Manifest next update: Sun 26 Oct 2025 02:00:39 +0000
Files and hashes: 1: c6IRErIGfaFkFauAsD0yX1D2OJo.roa (hash: xl23q8TaDjC94/sI1Iw9HbGjuwzReW51qdpjOFZcIcI=)
2: n2m9-bvSpFl-Js4gv-E4YkytM9w.crl (hash: 70QwahnAoFqeY3kaAmcGSL97kVLXjbUPMCNrNCey41Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/79/cdbd0a-68ec-487d-8fea-619281380bc2/1/n2m9-bvSpFl-Js4gv-E4YkytM9w.crl
rsync://rpki.ripe.net/repository/DEFAULT/79/cdbd0a-68ec-487d-8fea-619281380bc2/1/n2m9-bvSpFl-Js4gv-E4YkytM9w.mft
rsync://rpki.ripe.net/repository/DEFAULT/n2m9-bvSpFl-Js4gv-E4YkytM9w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 26 Oct 2025 00:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:19:18:b1:31:58:61:24:72:3d:27:c0:39:d0:c8:ec:6c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9f69bdf9bbd2a4597e26ce20bfe138624cad33dc
Validity
Not Before: Oct 25 02:00:39 2025 GMT
Not After : Oct 26 02:00:39 2025 GMT
Subject: CN=dc751a2957fea2b9f6eab2afaf8c221d572478c8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:6d:44:1a:22:6c:76:95:35:a4:4f:e0:d9:8c:
81:91:e0:a9:b0:76:32:36:2f:00:79:1e:61:f3:00:
08:90:6f:0a:d6:b8:49:06:5b:a4:c5:32:fa:7b:0b:
e8:1a:ef:fc:07:1b:f1:f8:a0:17:48:68:0a:fd:0a:
e8:07:56:80:39:67:ce:11:79:4f:42:73:58:9e:be:
88:5c:48:f4:7a:c8:13:ae:7d:e0:0b:6e:2e:17:c1:
43:9d:23:a6:29:61:ae:23:98:4f:10:ee:ba:d2:f8:
7b:98:e9:89:16:04:fb:ca:53:33:cf:a7:be:03:44:
a5:9f:91:a1:c9:ee:76:cd:43:c2:e9:8c:1e:47:13:
6b:58:19:29:cb:c7:85:25:51:b1:55:48:24:9d:6a:
a9:cf:03:c6:25:65:76:ce:d1:67:98:80:2f:cc:c0:
fc:ab:00:e3:f4:b4:a7:dc:61:7c:5c:b9:07:38:c9:
cc:06:d5:98:3e:47:0a:c3:e4:c6:c5:14:39:c0:b8:
6d:4e:68:54:ed:96:f8:9a:96:8b:2e:11:3d:39:1d:
74:92:47:05:9d:b0:b1:fe:ac:62:a4:9a:bc:bc:75:
e8:ce:65:10:aa:6e:7a:dc:ec:86:52:a0:13:18:0f:
a7:f2:06:8f:25:64:b3:61:27:04:9b:19:03:7d:74:
46:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:75:1A:29:57:FE:A2:B9:F6:EA:B2:AF:AF:8C:22:1D:57:24:78:C8
X509v3 Authority Key Identifier:
keyid:9F:69:BD:F9:BB:D2:A4:59:7E:26:CE:20:BF:E1:38:62:4C:AD:33:DC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/n2m9-bvSpFl-Js4gv-E4YkytM9w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/79/cdbd0a-68ec-487d-8fea-619281380bc2/1/n2m9-bvSpFl-Js4gv-E4YkytM9w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/79/cdbd0a-68ec-487d-8fea-619281380bc2/1/n2m9-bvSpFl-Js4gv-E4YkytM9w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
41:d9:98:31:73:1d:55:ed:7b:11:c5:98:e1:2d:d0:7b:e2:55:
b4:ea:51:bf:0b:e0:1f:51:c1:ce:6d:55:47:d7:98:d5:44:68:
bd:19:52:f1:a9:00:12:66:75:db:07:5d:3c:87:3e:47:69:bd:
d1:7d:07:76:f4:a8:90:78:31:17:d5:c4:75:53:d1:44:fe:33:
d8:b4:1f:99:c8:1d:f5:91:7b:f6:5a:1c:79:d7:b8:cb:18:2e:
aa:ea:51:fe:dc:0b:08:8d:c6:6a:84:a5:b3:ea:47:a5:e3:db:
d5:31:74:02:72:9e:90:6a:ff:00:20:9d:b0:8e:cc:e1:ef:fe:
3e:dd:76:a6:9c:38:a8:9c:ed:20:45:bf:54:bd:d8:d6:fa:de:
bd:6f:b1:55:64:f6:e9:b3:02:84:1b:44:f2:6e:de:c2:f4:4c:
fb:95:7b:5a:d4:04:e2:12:dd:1c:67:14:b6:96:a1:51:41:00:
f3:c7:b7:ab:69:b7:0b:8e:33:3c:39:0b:95:1f:e5:db:fe:c8:
fc:b3:8a:ba:02:6e:fa:20:a8:17:ef:5d:43:84:ff:c5:81:f4:
18:5f:ec:b1:b6:2d:ce:d1:d6:b6:b3:1d:4f:0a:af:f0:bd:90:
09:ff:f0:49:ae:ca:11:76:81:68:15:7a:2d:d3:73:67:0e:53:
6d:b6:9e:71
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZoZGLExWGEkcj0nwDnQyOxsMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDlmNjliZGY5YmJkMmE0NTk3ZTI2Y2UyMGJmZTEzODYyNGNh
ZDMzZGMwHhcNMjUxMDI1MDIwMDM5WhcNMjUxMDI2MDIwMDM5WjAzMTEwLwYDVQQD
EyhkYzc1MWEyOTU3ZmVhMmI5ZjZlYWIyYWZhZjhjMjIxZDU3MjQ3OGM4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsG1EGiJsdpU1pE/g2YyBkeCpsHYy
Ni8AeR5h8wAIkG8K1rhJBlukxTL6ewvoGu/8Bxvx+KAXSGgK/QroB1aAOWfOEXlP
QnNYnr6IXEj0esgTrn3gC24uF8FDnSOmKWGuI5hPEO660vh7mOmJFgT7ylMzz6e+
A0Sln5Ghye52zUPC6YweRxNrWBkpy8eFJVGxVUgknWqpzwPGJWV2ztFnmIAvzMD8
qwDj9LSn3GF8XLkHOMnMBtWYPkcKw+TGxRQ5wLhtTmhU7Zb4mpaLLhE9OR10kkcF
nbCx/qxipJq8vHXozmUQqm563OyGUqATGA+n8gaPJWSzYScEmxkDfXRG1wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNx1GilX/qK59uqyr6+MIh1XJHjIMB8GA1UdIwQY
MBaAFJ9pvfm70qRZfibOIL/hOGJMrTPcMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbjJtOS1idlNwRmwtSnM0Z3YtRTRZa3l0TTl3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83OS9jZGJkMGEtNjhlYy00ODdkLThmZWEt
NjE5MjgxMzgwYmMyLzEvbjJtOS1idlNwRmwtSnM0Z3YtRTRZa3l0TTl3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83OS9jZGJkMGEtNjhlYy00ODdkLThmZWEtNjE5MjgxMzgwYmMy
LzEvbjJtOS1idlNwRmwtSnM0Z3YtRTRZa3l0TTl3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQdmYMXMd
Ve17EcWY4S3Qe+JVtOpRvwvgH1HBzm1VR9eY1URovRlS8akAEmZ12wddPIc+R2m9
0X0HdvSokHgxF9XEdVPRRP4z2LQfmcgd9ZF79locede4yxguqupR/twLCI3GaoSl
s+pHpePb1TF0AnKekGr/ACCdsI7M4e/+Pt12ppw4qJztIEW/VL3Y1vrevW+xVWT2
6bMChBtE8m7ewvRM+5V7WtQE4hLdHGcUtpahUUEA88e3q2m3C44zPDkLlR/l2/7I
/LOKugJu+iCoF+9dQ4T/xYH0GF/ssbYtztHWtrMdTwqv8L2QCf/wSa7KEXaBaBV6
LdNzZw5TbbaecQ==
-----END CERTIFICATE-----
Generated at Sat Oct 25 04:24:25 2025 by rpki-client