Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/0cf187-ecb3-4b42-91e4-6addfcb18f99/1/n3Qy9pnL0kmy48nFW976-DmGtEI.mft
File: n3Qy9pnL0kmy48nFW976-DmGtEI.mft (raw, json)
Hash identifier: JFbtFtLBvWI0bPC3u0FWpS8lArTc6GqbH00+l3v2jMg=
Subject key identifier: 68:D8:88:0F:7E:5E:7E:6B:E4:F0:69:E8:0B:3B:BA:AC:19:12:06:4A
Authority key identifier: 9F:74:32:F6:99:CB:D2:49:B2:E3:C9:C5:5B:DE:FA:F8:39:86:B4:42
Certificate issuer: /CN=9f7432f699cbd249b2e3c9c55bdefaf83986b442
Certificate serial: 019922C379936AE9FE743A9BF64BAA0C77E0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/n3Qy9pnL0kmy48nFW976-DmGtEI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ab/0cf187-ecb3-4b42-91e4-6addfcb18f99/1/n3Qy9pnL0kmy48nFW976-DmGtEI.mft
Manifest number: 1138
Signing time: Sun 07 Sep 2025 06:00:59 +0000
Manifest this update: Sun 07 Sep 2025 06:00:59 +0000
Manifest next update: Mon 08 Sep 2025 06:00:59 +0000
Files and hashes: 1: n3Qy9pnL0kmy48nFW976-DmGtEI.crl (hash: 2dgae7yT04v7eayVq3i7AVH62z0TQIH0XFrlw9oBm2I=)
2: yY1iNFVSPGpVBCv6e5Q4VD19NB8.roa (hash: Xz+3ntm5iVPl2B9YcE2P65g+xG5FxMjLX4w1n0LEPnc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ab/0cf187-ecb3-4b42-91e4-6addfcb18f99/1/n3Qy9pnL0kmy48nFW976-DmGtEI.crl
rsync://rpki.ripe.net/repository/DEFAULT/ab/0cf187-ecb3-4b42-91e4-6addfcb18f99/1/n3Qy9pnL0kmy48nFW976-DmGtEI.mft
rsync://rpki.ripe.net/repository/DEFAULT/n3Qy9pnL0kmy48nFW976-DmGtEI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 06:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:22:c3:79:93:6a:e9:fe:74:3a:9b:f6:4b:aa:0c:77:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9f7432f699cbd249b2e3c9c55bdefaf83986b442
Validity
Not Before: Sep 7 06:00:59 2025 GMT
Not After : Sep 8 06:00:59 2025 GMT
Subject: CN=68d8880f7e5e7e6be4f069e80b3bbaac1912064a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:34:e8:82:4a:f4:6e:e3:6d:c6:e5:f9:3b:26:
77:dd:4d:e3:cf:0d:29:83:e0:66:d7:37:3d:34:11:
b4:45:0c:2a:91:46:2c:b7:94:b2:c7:9b:f6:f1:f4:
07:3c:5d:5e:a0:df:16:e2:07:6e:2e:9d:0a:9e:93:
83:18:26:25:f8:70:99:9b:75:c7:19:d5:20:4b:98:
79:57:d3:7a:f2:ce:0f:6f:fe:4f:c8:e5:72:16:cc:
33:e8:66:2d:3e:c7:ca:f0:41:40:d2:40:98:d6:91:
de:1c:ef:0f:26:50:4e:f3:a4:e0:bb:41:5f:b7:75:
f5:55:c4:84:85:b8:c5:31:75:64:3a:47:7d:44:67:
46:10:f8:4e:78:ef:68:be:49:59:95:53:15:fc:6a:
a8:8e:98:fb:74:91:46:27:ad:c1:c6:85:95:09:c2:
50:a6:62:07:19:bb:41:8c:8b:dd:45:a6:7f:38:55:
2a:8a:ed:51:9e:83:9a:fe:cd:92:9d:bd:89:ff:d9:
ff:67:77:26:76:44:89:de:da:cc:8f:e7:f6:21:63:
d6:84:d1:9c:36:4f:68:7b:9b:de:47:73:10:de:cb:
38:2d:ec:f7:0f:af:61:ea:01:72:91:c1:6b:dd:60:
1f:39:60:d9:7e:de:93:0e:d6:fd:24:ef:38:b1:c6:
05:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:D8:88:0F:7E:5E:7E:6B:E4:F0:69:E8:0B:3B:BA:AC:19:12:06:4A
X509v3 Authority Key Identifier:
keyid:9F:74:32:F6:99:CB:D2:49:B2:E3:C9:C5:5B:DE:FA:F8:39:86:B4:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/n3Qy9pnL0kmy48nFW976-DmGtEI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/0cf187-ecb3-4b42-91e4-6addfcb18f99/1/n3Qy9pnL0kmy48nFW976-DmGtEI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/0cf187-ecb3-4b42-91e4-6addfcb18f99/1/n3Qy9pnL0kmy48nFW976-DmGtEI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bb:6f:27:fa:41:69:0c:68:3e:c7:a8:68:a6:6c:61:33:94:37:
ae:b8:3a:24:7d:fc:3f:ba:0b:91:4a:d1:a3:cf:53:15:a7:3d:
55:fa:30:02:fe:bf:f3:ad:45:a1:a6:8f:0d:51:16:39:f4:78:
bb:60:ca:e9:9e:57:e3:e2:89:94:0b:3c:7d:65:e0:77:cc:58:
e6:a2:12:03:1a:f3:da:99:6c:45:fb:70:65:c3:a4:ca:2f:d6:
83:a8:99:3b:45:72:a7:ea:44:11:91:05:79:48:d6:e2:11:e6:
d8:b1:b4:75:f3:19:4e:f6:5b:68:27:1d:5c:4f:76:20:e1:d8:
dc:8d:b8:59:1c:8c:9d:af:c0:c1:e9:6d:af:57:96:ac:77:94:
13:1a:0c:26:0d:e8:e4:d3:f5:3c:68:a7:83:70:ae:54:07:7a:
ac:6a:7f:3d:cd:f8:92:c1:18:ad:10:96:6a:cb:8d:ad:15:23:
20:dd:22:ab:e6:ec:6f:9f:59:be:6c:f0:a4:f2:63:72:9e:7d:
08:50:eb:89:6f:c2:12:9e:46:ee:ec:f2:22:04:4d:13:da:bf:
a9:cc:63:8d:65:6e:a0:83:bb:cc:16:9e:60:ae:a6:d5:90:ea:
ee:7d:12:4c:26:7b:91:cb:20:3e:5a:12:d7:aa:2e:80:f8:4a:
36:3d:86:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 14:38:34 2025 by rpki-client