Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/95/30764e-799f-4736-9686-92d5d3970a59/1/ni6I9QfNLq27IyyGT3Htum7LXaA.mft
File: ni6I9QfNLq27IyyGT3Htum7LXaA.mft (raw, json)
Hash identifier: a+3xwAcf6IBz+UPX1HnpJVXviOfLae0dbqPYel8C7/o=
Subject key identifier: D3:65:A6:02:B2:D6:68:B0:C3:44:47:10:85:C4:D4:81:65:7F:CB:4A
Authority key identifier: 9E:2E:88:F5:07:CD:2E:AD:BB:23:2C:86:4F:71:ED:BA:6E:CB:5D:A0
Certificate issuer: /CN=9e2e88f507cd2eadbb232c864f71edba6ecb5da0
Certificate serial: 019A3FB80161667C066B4EBFF13CAAEE0E55
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ni6I9QfNLq27IyyGT3Htum7LXaA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/95/30764e-799f-4736-9686-92d5d3970a59/1/ni6I9QfNLq27IyyGT3Htum7LXaA.mft
Manifest number: 0F5D
Signing time: Sat 01 Nov 2025 14:00:14 +0000
Manifest this update: Sat 01 Nov 2025 14:00:14 +0000
Manifest next update: Sun 02 Nov 2025 14:00:14 +0000
Files and hashes: 1: ni6I9QfNLq27IyyGT3Htum7LXaA.crl (hash: hxWE6zQEnQ776j7Jlhzxs3FhqGvQo0zidxPCNGDLjfo=)
2: uweYkDCu-qqfi3ug1YgUgTCGT6M.roa (hash: /KpNT+Dkmz13bWhCJTvJ8D+AbxL/YrXSoux1HxprkcQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/95/30764e-799f-4736-9686-92d5d3970a59/1/ni6I9QfNLq27IyyGT3Htum7LXaA.crl
rsync://rpki.ripe.net/repository/DEFAULT/95/30764e-799f-4736-9686-92d5d3970a59/1/ni6I9QfNLq27IyyGT3Htum7LXaA.mft
rsync://rpki.ripe.net/repository/DEFAULT/ni6I9QfNLq27IyyGT3Htum7LXaA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Nov 2025 12:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:3f:b8:01:61:66:7c:06:6b:4e:bf:f1:3c:aa:ee:0e:55
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9e2e88f507cd2eadbb232c864f71edba6ecb5da0
Validity
Not Before: Nov 1 14:00:14 2025 GMT
Not After : Nov 2 14:00:14 2025 GMT
Subject: CN=d365a602b2d668b0c344471085c4d481657fcb4a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:7c:42:e8:42:33:67:89:ca:96:23:d9:9c:6a:
70:a6:ca:9e:b3:3a:ca:fa:63:79:3e:4f:0e:49:f1:
e5:64:18:41:ed:f3:8c:36:34:13:37:38:a0:68:00:
49:b4:dd:5c:fd:2a:15:d9:e1:7d:ce:88:29:70:94:
3c:2e:cb:57:37:10:bf:a3:01:59:62:32:96:f2:d7:
b9:a7:7e:87:48:fd:22:30:3d:da:7d:c6:31:b9:59:
2c:a6:2a:dc:5d:af:7e:60:d5:f2:0b:8d:5a:d1:38:
24:3a:d4:42:b7:f7:ad:68:83:6c:69:2d:66:a0:ab:
40:cc:dc:1e:19:99:50:58:a8:f5:3c:25:dc:dc:7d:
39:12:9e:8a:1e:4b:96:a1:13:cd:f3:94:45:73:73:
7e:20:cd:4d:ef:87:a7:56:47:e9:0d:a3:4a:36:4c:
9c:0e:11:f2:c8:81:6a:e5:3e:d1:b6:df:5a:df:42:
30:56:7d:ea:25:68:22:e4:60:be:04:5e:35:84:1b:
a8:a0:60:19:03:0f:18:98:27:fd:e0:47:70:a9:31:
5c:92:72:2c:03:0b:c2:1b:c9:92:78:ef:77:2d:28:
99:5b:6f:79:b9:fd:ed:54:87:08:19:57:f9:ee:cf:
ab:cb:36:eb:6a:36:40:4c:0e:ae:89:32:c8:57:44:
8b:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:65:A6:02:B2:D6:68:B0:C3:44:47:10:85:C4:D4:81:65:7F:CB:4A
X509v3 Authority Key Identifier:
keyid:9E:2E:88:F5:07:CD:2E:AD:BB:23:2C:86:4F:71:ED:BA:6E:CB:5D:A0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ni6I9QfNLq27IyyGT3Htum7LXaA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/95/30764e-799f-4736-9686-92d5d3970a59/1/ni6I9QfNLq27IyyGT3Htum7LXaA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/95/30764e-799f-4736-9686-92d5d3970a59/1/ni6I9QfNLq27IyyGT3Htum7LXaA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
93:28:c3:e8:95:e0:b8:8e:c4:bc:96:ab:da:f7:9d:24:6f:92:
4e:6e:76:5e:1a:f7:66:4e:32:5a:1b:78:2e:8d:b5:ef:fe:21:
00:76:66:a0:69:fe:28:93:d7:d9:7a:d9:e0:51:e4:42:b5:0d:
8b:3f:e5:3d:72:99:c5:8c:5f:f2:95:29:a2:0c:96:97:ff:a5:
b2:21:62:4a:78:1b:e6:50:7f:a8:e9:39:5b:23:35:b9:bd:d9:
bc:cc:a8:f4:75:9d:f0:f0:04:0d:a5:49:1a:0f:0a:6f:04:e5:
4a:b8:e8:ca:3a:c2:b9:fd:c7:4f:32:ce:a7:59:1b:88:48:3d:
52:47:e0:bf:96:52:9c:6b:89:5f:f9:33:ec:00:84:91:ce:e1:
76:b6:a4:03:48:b5:65:e9:9b:f9:80:8b:72:48:3f:d2:c1:10:
97:ae:89:17:5d:76:3c:ac:21:95:cd:85:4f:6a:b5:82:05:09:
32:a3:84:a9:c3:f1:3f:a9:cd:5b:59:15:8c:8e:75:5e:f1:95:
31:94:1a:82:61:5d:7c:a3:9c:4b:1c:c6:4d:bc:ce:3c:4a:13:
79:88:12:28:e7:72:43:c5:d9:02:28:69:b3:11:2c:19:45:22:
81:15:60:11:40:42:0a:31:76:d3:77:48:e6:0e:ff:70:87:d3:
da:64:ef:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 1 14:59:27 2025 by rpki-client