Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a4/a33b29-bef3-461d-8878-2155126b1643/1/nPxi7NyR0Rl5zB0hpHxuw3jfpDY.mft
File: nPxi7NyR0Rl5zB0hpHxuw3jfpDY.mft (raw, json)
Hash identifier: +bsdn7UvPOwdAQ2QWDmdbn1nD9I2DlrxZTYhAEio+lY=
Subject key identifier: AF:A6:E9:D4:31:D2:B8:0E:B0:9C:F4:49:7C:55:77:ED:4A:62:EE:3B
Authority key identifier: 9C:FC:62:EC:DC:91:D1:19:79:CC:1D:21:A4:7C:6E:C3:78:DF:A4:36
Certificate issuer: /CN=9cfc62ecdc91d11979cc1d21a47c6ec378dfa436
Certificate serial: 019A71B7CB26E50B9F43F2310DC4A0A2E060
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nPxi7NyR0Rl5zB0hpHxuw3jfpDY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a4/a33b29-bef3-461d-8878-2155126b1643/1/nPxi7NyR0Rl5zB0hpHxuw3jfpDY.mft
Manifest number: 1119
Signing time: Tue 11 Nov 2025 07:01:01 +0000
Manifest this update: Tue 11 Nov 2025 07:01:01 +0000
Manifest next update: Wed 12 Nov 2025 07:01:01 +0000
Files and hashes: 1: BuFdaMS1qY4jt-i_y_cN4QOcG_g.roa (hash: ltXbKfkdHFu9ibmOqMdLpCxXbbDufLPF6M4KyVnL37o=)
2: nPxi7NyR0Rl5zB0hpHxuw3jfpDY.crl (hash: pJ0RLEvaXTHnrEXqTlorqyhRmy3ojY6ltem9U+vwYh4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a4/a33b29-bef3-461d-8878-2155126b1643/1/nPxi7NyR0Rl5zB0hpHxuw3jfpDY.crl
rsync://rpki.ripe.net/repository/DEFAULT/a4/a33b29-bef3-461d-8878-2155126b1643/1/nPxi7NyR0Rl5zB0hpHxuw3jfpDY.mft
rsync://rpki.ripe.net/repository/DEFAULT/nPxi7NyR0Rl5zB0hpHxuw3jfpDY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 07:01:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:b7:cb:26:e5:0b:9f:43:f2:31:0d:c4:a0:a2:e0:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9cfc62ecdc91d11979cc1d21a47c6ec378dfa436
Validity
Not Before: Nov 11 07:01:01 2025 GMT
Not After : Nov 12 07:01:01 2025 GMT
Subject: CN=afa6e9d431d2b80eb09cf4497c5577ed4a62ee3b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:23:b5:52:f4:84:95:65:ca:cd:80:7e:2b:17:
05:78:95:65:2b:7c:98:4a:5d:df:0d:06:78:7d:07:
51:3a:2f:e6:2a:dd:a6:d2:e8:19:42:35:4f:11:64:
48:ad:24:2d:57:be:f5:f7:7e:5f:f5:43:b1:08:18:
2c:51:38:29:8f:cf:94:f7:38:63:a4:2c:d2:55:7f:
0d:08:5e:38:d9:e4:cc:dd:a8:17:9e:a2:ab:57:af:
6b:91:6e:2e:57:4c:b1:fd:03:df:fe:45:10:87:aa:
14:cb:af:66:1f:8e:c9:23:5a:e6:b7:6e:5c:d5:12:
9f:41:96:8b:ee:da:e7:0c:fe:17:02:db:1e:37:04:
94:0f:61:34:57:22:20:e5:ae:5a:98:34:e0:54:93:
25:21:5a:82:f0:39:a5:53:11:18:e9:4f:6b:7c:3b:
1e:44:53:ff:60:dd:f6:61:a9:33:92:31:fa:11:cb:
10:55:e6:50:48:2d:8a:8b:6a:b7:f7:80:10:74:9a:
02:5c:1e:40:c5:dd:09:32:39:6e:71:38:b7:43:ca:
7e:43:d4:91:f0:65:27:ec:5c:53:cc:da:a9:52:48:
b4:4f:21:5e:31:f7:47:a7:3e:21:95:63:26:9f:0d:
19:59:61:6f:92:4a:5c:c7:0e:7d:76:ef:1f:98:e9:
0a:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:A6:E9:D4:31:D2:B8:0E:B0:9C:F4:49:7C:55:77:ED:4A:62:EE:3B
X509v3 Authority Key Identifier:
keyid:9C:FC:62:EC:DC:91:D1:19:79:CC:1D:21:A4:7C:6E:C3:78:DF:A4:36
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nPxi7NyR0Rl5zB0hpHxuw3jfpDY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/a33b29-bef3-461d-8878-2155126b1643/1/nPxi7NyR0Rl5zB0hpHxuw3jfpDY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/a33b29-bef3-461d-8878-2155126b1643/1/nPxi7NyR0Rl5zB0hpHxuw3jfpDY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8b:b5:9e:26:8b:ec:fa:df:13:ea:7d:43:27:93:52:93:d7:f8:
e9:49:69:3d:92:7b:ac:02:25:36:06:1b:a2:87:35:b7:1f:7c:
6a:cc:c8:05:d1:c2:56:16:a6:ef:b3:8c:c4:13:f0:0c:ec:3e:
6d:5d:79:b9:0e:d0:ae:25:51:a0:0c:52:f7:b3:05:a4:20:95:
09:52:af:45:56:89:64:a2:fa:86:65:50:80:bb:6d:b6:f1:74:
16:f8:2b:c3:ca:a5:8a:d8:be:2c:0c:2c:ac:b2:66:6e:46:e4:
ae:0d:dc:fd:f8:76:14:a0:40:15:f5:5c:ae:07:28:40:f4:a1:
89:fc:ab:ca:26:63:08:d8:2f:a8:be:44:8f:d2:f2:dc:e8:77:
e0:29:a2:cd:5d:3f:85:fe:25:13:89:bc:8c:8c:9c:69:ce:af:
12:ed:3b:31:b4:09:9f:fd:ae:e8:dc:4d:80:7f:2a:62:b9:f7:
16:85:a0:12:3b:d2:a5:30:2a:fa:60:0d:b9:97:92:44:86:87:
f1:83:2b:16:f6:d7:6f:8f:03:83:2a:09:a4:fe:39:88:53:e8:
05:38:eb:31:a4:d4:1b:f9:4b:cd:3a:b2:c4:60:f7:17:5b:e8:
49:22:91:16:7c:a8:98:6d:60:8a:fa:b5:86:7e:cb:af:c1:5c:
32:83:10:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 17:19:31 2025 by rpki-client