Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/89/ca8d98-e7a4-4bdc-8c90-b29606d51f9d/1/ni19W4LIN4uiFTlDzpSCzkzUlRs.mft
File: ni19W4LIN4uiFTlDzpSCzkzUlRs.mft (raw, json)
Hash identifier: p7G8KGt76ncy+QXJm7fip2enPydT7oWUt3SgHiFOl9s=
Subject key identifier: 46:57:3A:90:D6:78:B0:85:41:A4:C9:C9:F0:E1:29:EC:EB:FB:76:52
Authority key identifier: 9E:2D:7D:5B:82:C8:37:8B:A2:15:39:43:CE:94:82:CE:4C:D4:95:1B
Certificate issuer: /CN=9e2d7d5b82c8378ba2153943ce9482ce4cd4951b
Certificate serial: 019A70A4EC93FA209D962FAF3906001FC99E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ni19W4LIN4uiFTlDzpSCzkzUlRs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/89/ca8d98-e7a4-4bdc-8c90-b29606d51f9d/1/ni19W4LIN4uiFTlDzpSCzkzUlRs.mft
Manifest number: 13C1
Signing time: Tue 11 Nov 2025 02:00:47 +0000
Manifest this update: Tue 11 Nov 2025 02:00:47 +0000
Manifest next update: Wed 12 Nov 2025 02:00:47 +0000
Files and hashes: 1: WTmdMFPzU41Yj6CYfdDHa3cKmOo.roa (hash: ZRrWNdq+lRZfywzlRdTcVIMqLndtMkQtQ6MhxjI8HvM=)
2: ni19W4LIN4uiFTlDzpSCzkzUlRs.crl (hash: 8dbXs7LEAid9dfhFQsCeOhkoPSRvi/C2bP3/WQSGZhI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/89/ca8d98-e7a4-4bdc-8c90-b29606d51f9d/1/ni19W4LIN4uiFTlDzpSCzkzUlRs.crl
rsync://rpki.ripe.net/repository/DEFAULT/89/ca8d98-e7a4-4bdc-8c90-b29606d51f9d/1/ni19W4LIN4uiFTlDzpSCzkzUlRs.mft
rsync://rpki.ripe.net/repository/DEFAULT/ni19W4LIN4uiFTlDzpSCzkzUlRs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 02:00:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:70:a4:ec:93:fa:20:9d:96:2f:af:39:06:00:1f:c9:9e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9e2d7d5b82c8378ba2153943ce9482ce4cd4951b
Validity
Not Before: Nov 11 02:00:47 2025 GMT
Not After : Nov 12 02:00:47 2025 GMT
Subject: CN=46573a90d678b08541a4c9c9f0e129ecebfb7652
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:4c:8a:b1:df:f2:c0:12:fa:62:b3:c7:f7:17:
70:7d:30:45:d7:99:a8:e7:ff:bc:a6:74:1c:d0:59:
11:d3:ef:c2:96:58:4c:8a:e0:b2:05:ec:50:7c:d9:
94:82:7b:bd:0b:25:37:8e:e3:cd:ca:82:c2:0c:70:
e4:57:7e:d5:e8:7b:33:1f:cf:f7:57:83:02:0e:bb:
95:f7:a7:29:c3:bc:76:5f:27:09:0a:b9:52:2b:b9:
a7:bd:bb:13:eb:57:77:17:5c:c5:f0:1e:37:6c:6e:
2f:c8:c5:1b:d5:d0:66:57:2a:d7:83:74:e3:7d:c9:
8c:6b:31:f2:e7:12:51:5c:c5:30:ae:01:84:0d:3e:
12:6c:53:9c:c0:b0:f5:65:38:cc:f4:8a:00:14:0d:
9c:87:f5:0c:bb:d7:35:4b:65:eb:9a:85:57:cc:85:
b1:f0:8c:03:fa:01:47:3b:c2:8e:eb:95:13:a4:3d:
4d:0d:d0:14:64:4f:46:b1:7c:f1:8b:c5:34:c7:55:
a1:bd:db:e6:25:53:f1:9c:41:b8:a7:93:18:be:ff:
0d:8b:47:b8:71:12:02:01:a4:82:e5:37:58:fa:ad:
c7:30:97:43:e7:f5:f1:d6:27:25:33:7a:59:4c:d4:
ee:68:a7:a8:30:04:04:f6:28:f7:12:82:7c:1e:f4:
5e:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:57:3A:90:D6:78:B0:85:41:A4:C9:C9:F0:E1:29:EC:EB:FB:76:52
X509v3 Authority Key Identifier:
keyid:9E:2D:7D:5B:82:C8:37:8B:A2:15:39:43:CE:94:82:CE:4C:D4:95:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ni19W4LIN4uiFTlDzpSCzkzUlRs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/89/ca8d98-e7a4-4bdc-8c90-b29606d51f9d/1/ni19W4LIN4uiFTlDzpSCzkzUlRs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/89/ca8d98-e7a4-4bdc-8c90-b29606d51f9d/1/ni19W4LIN4uiFTlDzpSCzkzUlRs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
48:00:af:03:7b:22:40:df:3a:7f:08:e2:a6:8a:8e:c2:f7:c3:
7d:b8:59:fb:94:fa:36:77:3d:e0:2c:c6:2e:0f:0a:ea:ab:e6:
70:ff:5e:b4:63:57:98:a8:d5:a5:b7:f2:5a:d1:eb:bb:39:17:
5a:84:48:92:39:25:1a:bf:63:56:d3:79:d2:e3:32:57:a9:2d:
78:3d:ad:d6:4d:f7:7c:e8:ab:d7:94:af:bd:36:fc:37:81:6d:
61:dc:ff:3d:28:ed:0b:f4:cc:9a:63:d1:08:77:08:c9:03:5d:
21:3d:de:cf:66:f3:3a:90:7a:83:fc:42:ad:41:97:87:cf:a9:
57:18:08:3e:28:a5:2d:6c:6f:a6:3f:bd:09:91:09:05:20:dd:
9a:78:cc:dd:68:9e:a2:a9:87:e2:ce:ef:14:ac:4c:e3:a4:ff:
6c:b8:09:d0:78:7a:ab:60:de:c5:3a:f4:47:f4:40:24:ec:f4:
26:a4:71:0a:b4:c7:2b:73:8b:41:f4:c0:a1:5b:07:ee:2e:05:
9c:43:01:82:a5:e0:1d:52:ef:7d:50:1f:9a:96:d2:10:b0:0b:
2f:c7:bf:47:91:6a:d8:b8:fd:67:20:f7:50:9c:0d:f6:95:d7:
7f:6f:44:93:fc:ae:51:01:e6:91:7f:d0:58:22:19:93:58:ab:
fd:8f:a1:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 11:33:18 2025 by rpki-client