Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/0cf187-ecb3-4b42-91e4-6addfcb18f99/1/n3Qy9pnL0kmy48nFW976-DmGtEI.mft
File: n3Qy9pnL0kmy48nFW976-DmGtEI.mft (raw, json)
Hash identifier: nRhGj41eFWONGkAtzH5oI9PfSir3526OK6VCXoBuEnE=
Subject key identifier: 42:B4:34:88:EE:CE:53:FD:BB:70:E9:27:B3:65:36:38:FD:56:EA:91
Authority key identifier: 9F:74:32:F6:99:CB:D2:49:B2:E3:C9:C5:5B:DE:FA:F8:39:86:B4:42
Certificate issuer: /CN=9f7432f699cbd249b2e3c9c55bdefaf83986b442
Certificate serial: 019A72CA6515006E2F45811543A047887BB5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/n3Qy9pnL0kmy48nFW976-DmGtEI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ab/0cf187-ecb3-4b42-91e4-6addfcb18f99/1/n3Qy9pnL0kmy48nFW976-DmGtEI.mft
Manifest number: 11E6
Signing time: Tue 11 Nov 2025 12:00:57 +0000
Manifest this update: Tue 11 Nov 2025 12:00:57 +0000
Manifest next update: Wed 12 Nov 2025 12:00:57 +0000
Files and hashes: 1: n3Qy9pnL0kmy48nFW976-DmGtEI.crl (hash: lRXzXs7hT2Pk30vRQv2T0JGmjitwGAOp/2VR+Yqep4w=)
2: yY1iNFVSPGpVBCv6e5Q4VD19NB8.roa (hash: Xz+3ntm5iVPl2B9YcE2P65g+xG5FxMjLX4w1n0LEPnc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ab/0cf187-ecb3-4b42-91e4-6addfcb18f99/1/n3Qy9pnL0kmy48nFW976-DmGtEI.crl
rsync://rpki.ripe.net/repository/DEFAULT/ab/0cf187-ecb3-4b42-91e4-6addfcb18f99/1/n3Qy9pnL0kmy48nFW976-DmGtEI.mft
rsync://rpki.ripe.net/repository/DEFAULT/n3Qy9pnL0kmy48nFW976-DmGtEI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:ca:65:15:00:6e:2f:45:81:15:43:a0:47:88:7b:b5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9f7432f699cbd249b2e3c9c55bdefaf83986b442
Validity
Not Before: Nov 11 12:00:57 2025 GMT
Not After : Nov 12 12:00:57 2025 GMT
Subject: CN=42b43488eece53fdbb70e927b3653638fd56ea91
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:24:59:9b:e0:26:24:bd:07:3e:59:78:34:55:
a9:a8:4f:7a:8a:0e:23:58:36:4a:40:13:56:3e:d1:
91:60:fe:f6:17:54:88:b2:41:c9:4b:ef:f5:ed:54:
ba:a0:fd:b3:96:7e:0a:32:7a:18:39:33:9d:a2:86:
db:ad:fd:f3:ca:12:c5:fb:10:46:35:b5:ac:80:33:
48:34:11:4e:9d:c9:d2:38:cf:3f:e8:c2:52:2b:75:
5c:aa:23:7e:3e:50:f7:07:39:ba:19:d6:a4:b6:fa:
24:2f:1e:a8:20:bc:30:1a:9c:b9:f7:e4:4f:f3:d6:
ba:85:b5:26:3c:49:d0:3f:3b:d2:8d:b6:db:0e:f1:
8b:e7:c3:d9:13:a6:bc:d1:ae:7c:7e:b7:93:7e:b9:
a8:40:95:c7:69:dd:66:d8:f4:7f:74:bb:40:96:18:
52:98:72:59:40:84:b1:59:f0:3d:84:c4:a8:40:4c:
87:9f:89:e2:46:49:99:a0:49:18:c6:93:d9:35:35:
47:67:bf:b5:02:90:d6:ee:2d:b7:df:02:26:2d:c9:
22:4a:b8:04:2c:e2:c4:15:da:09:5d:94:bd:ba:e3:
11:70:bd:b0:5c:2e:1f:d7:fd:9b:b4:57:6f:92:10:
55:39:72:66:ef:bd:f7:5a:61:c5:6d:19:10:9a:01:
26:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:B4:34:88:EE:CE:53:FD:BB:70:E9:27:B3:65:36:38:FD:56:EA:91
X509v3 Authority Key Identifier:
keyid:9F:74:32:F6:99:CB:D2:49:B2:E3:C9:C5:5B:DE:FA:F8:39:86:B4:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/n3Qy9pnL0kmy48nFW976-DmGtEI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/0cf187-ecb3-4b42-91e4-6addfcb18f99/1/n3Qy9pnL0kmy48nFW976-DmGtEI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/0cf187-ecb3-4b42-91e4-6addfcb18f99/1/n3Qy9pnL0kmy48nFW976-DmGtEI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
87:72:6d:1e:f2:d2:2c:8a:95:a4:4a:f1:b9:13:c9:82:94:3a:
48:f6:ca:6e:32:1f:9a:54:07:fd:b2:ba:00:7d:2a:a7:c0:f6:
4a:e2:92:61:96:a5:7e:b1:6c:61:9c:ee:71:53:98:a4:f2:57:
a9:df:53:57:8b:12:35:eb:62:b7:02:34:51:d6:a8:b3:48:d1:
ae:e3:89:96:38:dd:e2:d9:60:b1:af:05:9d:a3:a5:1b:eb:65:
1e:42:83:30:97:3f:4c:0e:de:8a:ef:20:70:ff:58:2c:c4:b0:
af:2b:7d:4f:55:a9:7f:89:12:8c:46:b4:cf:0d:57:6b:74:00:
d7:28:23:1f:6c:e8:a2:99:61:17:03:3c:fa:7b:77:d3:47:52:
db:cd:0a:00:8e:27:32:56:f0:f0:24:a6:ea:09:e6:3a:ab:50:
f1:19:0c:27:d0:6b:70:96:d7:bc:46:b4:d6:ba:25:da:1f:ad:
8a:7c:a3:6a:6a:20:2f:6c:f3:b2:66:ee:1a:b2:30:5e:bb:0f:
2f:1a:10:80:d7:8d:be:31:1c:10:5e:32:df:13:8f:2c:17:b8:
6f:5b:73:08:44:3c:6f:22:0d:59:97:11:ec:f0:98:ab:f6:86:
92:56:96:c1:2d:d2:42:e3:48:62:03:1f:65:50:dc:e8:15:25:
27:ce:a1:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 16:53:03 2025 by rpki-client