Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/86/35dee5-d8db-48e3-b7bb-0810d16bcc87/1/n9aPGyQUI9qXZHuZIkUwOG0laYw.mft
File: n9aPGyQUI9qXZHuZIkUwOG0laYw.mft (raw, json)
Hash identifier: EFDq3lUrfoK3L03rLjvRPivo4wqIExIKuHQyOo5apLY=
Subject key identifier: 17:36:30:E0:4E:EF:6C:B9:DB:A8:06:61:5A:10:A8:0D:65:0B:A2:71
Authority key identifier: 9F:D6:8F:1B:24:14:23:DA:97:64:7B:99:22:45:30:38:6D:25:69:8C
Certificate issuer: /CN=9fd68f1b241423da97647b99224530386d25698c
Certificate serial: 019A2B559F2384A64886770DB73AC3DBC2EF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/n9aPGyQUI9qXZHuZIkUwOG0laYw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/86/35dee5-d8db-48e3-b7bb-0810d16bcc87/1/n9aPGyQUI9qXZHuZIkUwOG0laYw.mft
Manifest number: 16FB
Signing time: Tue 28 Oct 2025 15:00:22 +0000
Manifest this update: Tue 28 Oct 2025 15:00:22 +0000
Manifest next update: Wed 29 Oct 2025 15:00:22 +0000
Files and hashes: 1: 6zp8k7ws-z1aCcsmWGLYmfVsv4E.roa (hash: bUIQEUVAIaujbjPg7okGrEKCeQdfL4efouwX9EGneXc=)
2: n9aPGyQUI9qXZHuZIkUwOG0laYw.crl (hash: sqWEJ3DbL8cBj3Mvy4WwUU9a3kXR7Gh370r/LtKXTTA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/86/35dee5-d8db-48e3-b7bb-0810d16bcc87/1/n9aPGyQUI9qXZHuZIkUwOG0laYw.crl
rsync://rpki.ripe.net/repository/DEFAULT/86/35dee5-d8db-48e3-b7bb-0810d16bcc87/1/n9aPGyQUI9qXZHuZIkUwOG0laYw.mft
rsync://rpki.ripe.net/repository/DEFAULT/n9aPGyQUI9qXZHuZIkUwOG0laYw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Oct 2025 14:12:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:2b:55:9f:23:84:a6:48:86:77:0d:b7:3a:c3:db:c2:ef
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9fd68f1b241423da97647b99224530386d25698c
Validity
Not Before: Oct 28 15:00:22 2025 GMT
Not After : Oct 29 15:00:22 2025 GMT
Subject: CN=173630e04eef6cb9dba806615a10a80d650ba271
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:fa:5f:ec:b4:b8:b0:5d:ae:36:48:64:03:b2:
09:d2:e5:7e:1a:7c:47:4c:6b:fc:df:a9:e4:ba:24:
16:9d:ea:0a:90:a3:9a:41:da:9c:fa:a0:ca:f4:85:
24:38:19:fa:e0:23:47:a6:9d:4f:d5:bc:cd:d9:cc:
24:bc:ff:24:9d:16:5c:27:43:f4:40:e7:01:da:ac:
51:9e:c0:37:89:e2:92:3a:5c:90:bd:16:57:80:fa:
b7:f3:c0:df:f4:98:e9:d0:78:f1:90:b9:3b:fb:d4:
54:4c:3a:96:5a:0c:09:cd:48:eb:da:b5:5f:c8:c7:
89:b3:88:46:d6:bc:18:97:d0:e6:c1:3c:1b:17:9c:
18:58:b9:21:90:b0:c5:e6:7a:d4:53:7f:d3:34:67:
66:ef:05:ae:4b:ee:14:97:ec:aa:27:de:77:a7:ff:
0e:b7:3e:d5:16:06:a9:e4:ac:e9:d9:f7:da:af:4f:
2f:1a:28:11:cd:9b:23:a0:be:0b:89:6b:15:32:9a:
3f:01:d7:29:72:af:30:20:78:af:48:7a:ac:90:46:
42:5f:e5:cb:6f:8b:13:3a:6f:b5:94:34:83:f5:51:
7c:1b:0c:85:6b:c6:92:80:a3:b2:3e:ce:bf:58:40:
a8:c3:2a:71:fd:6e:90:7e:7a:48:11:21:78:2a:59:
02:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:36:30:E0:4E:EF:6C:B9:DB:A8:06:61:5A:10:A8:0D:65:0B:A2:71
X509v3 Authority Key Identifier:
keyid:9F:D6:8F:1B:24:14:23:DA:97:64:7B:99:22:45:30:38:6D:25:69:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/n9aPGyQUI9qXZHuZIkUwOG0laYw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/35dee5-d8db-48e3-b7bb-0810d16bcc87/1/n9aPGyQUI9qXZHuZIkUwOG0laYw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/86/35dee5-d8db-48e3-b7bb-0810d16bcc87/1/n9aPGyQUI9qXZHuZIkUwOG0laYw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
11:5d:c2:20:38:1b:d6:b8:1a:a4:50:15:71:7b:3d:20:06:ea:
17:1d:e4:4c:f8:f6:ba:3e:1e:48:20:33:99:60:bc:48:f1:0f:
a4:71:0a:a8:52:59:40:08:f8:0c:bd:43:21:94:75:49:12:b3:
51:4c:87:c7:a4:4c:74:3d:76:4e:02:af:61:89:fe:1d:c2:9e:
f3:ea:f4:12:1d:2f:54:19:33:b0:bd:26:17:31:27:26:24:ab:
f9:03:e6:67:4f:fd:7b:98:52:10:af:f7:b1:b4:7e:1f:24:41:
2e:f7:33:8e:2b:42:2f:1e:31:49:a0:8a:2c:c3:de:77:33:75:
64:ba:ec:6b:0a:d9:5d:f3:4a:a1:2d:bc:eb:36:da:3d:ea:88:
f2:4e:ec:61:2d:53:ee:7d:ad:5f:6c:0d:8d:e2:bf:82:e8:9a:
bb:f4:c7:f1:03:c0:50:93:ce:49:b2:62:a1:f0:35:9f:bd:2f:
a7:7e:1c:f7:01:30:85:a9:b5:f1:e5:e2:be:df:1a:2e:7b:35:
af:8a:49:c9:70:22:4f:4c:18:1d:7b:2f:40:3a:b1:66:e9:aa:
55:13:76:b1:a3:49:b7:52:a6:24:74:a3:d9:69:5f:8a:5c:af:
04:a8:ef:18:0b:2f:76:b8:73:b7:77:2d:a2:ec:d4:d9:9f:43:
7b:ec:aa:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 29 00:01:43 2025 by rpki-client