Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b2/cbd332-a8db-4606-ac9b-14ec41d4c0a6/1/n4IkN_Se1TiGaJAir93aWfefinE.mft
File: n4IkN_Se1TiGaJAir93aWfefinE.mft (raw, json)
Hash identifier: d7tGDTdZ37DdKU9lwqieYegVmAIKvw+SgL+M51Ct+RM=
Subject key identifier: 72:9E:AA:C3:44:1B:31:59:0E:1E:09:4D:03:B9:54:A6:43:5F:ED:F0
Authority key identifier: 9F:82:24:37:F4:9E:D5:38:86:68:90:22:AF:DD:DA:59:F7:9F:8A:71
Certificate issuer: /CN=9f822437f49ed53886689022afddda59f79f8a71
Certificate serial: 019A2D43C8C6ADDD116334BEC3D864E40251
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/n4IkN_Se1TiGaJAir93aWfefinE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b2/cbd332-a8db-4606-ac9b-14ec41d4c0a6/1/n4IkN_Se1TiGaJAir93aWfefinE.mft
Manifest number: 09F2
Signing time: Wed 29 Oct 2025 00:00:08 +0000
Manifest this update: Wed 29 Oct 2025 00:00:08 +0000
Manifest next update: Thu 30 Oct 2025 00:00:08 +0000
Files and hashes: 1: IdEYIsWCps3Gl-CPOJNmXVY_KDA.roa (hash: V5/YEnbALkGDiezb6/4H3zOCBx4UZLrATG4CYdBNlRA=)
2: n4IkN_Se1TiGaJAir93aWfefinE.crl (hash: HhELNFZ3F8aLumunKfJXUd2Y/viiSUbU3qY3/tq2lP0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b2/cbd332-a8db-4606-ac9b-14ec41d4c0a6/1/n4IkN_Se1TiGaJAir93aWfefinE.crl
rsync://rpki.ripe.net/repository/DEFAULT/b2/cbd332-a8db-4606-ac9b-14ec41d4c0a6/1/n4IkN_Se1TiGaJAir93aWfefinE.mft
rsync://rpki.ripe.net/repository/DEFAULT/n4IkN_Se1TiGaJAir93aWfefinE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Oct 2025 23:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:2d:43:c8:c6:ad:dd:11:63:34:be:c3:d8:64:e4:02:51
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9f822437f49ed53886689022afddda59f79f8a71
Validity
Not Before: Oct 29 00:00:08 2025 GMT
Not After : Oct 30 00:00:08 2025 GMT
Subject: CN=729eaac3441b31590e1e094d03b954a6435fedf0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:02:2e:be:5e:82:a0:0d:c9:6d:1a:52:55:d0:
aa:fb:f5:68:84:1b:cc:5d:c2:b5:39:bc:4c:71:ec:
bd:25:53:a7:a9:2e:b2:66:6b:b4:a8:37:d9:3a:4b:
34:56:c7:d9:31:ca:50:56:27:3d:6f:99:1a:63:1a:
16:b9:63:1e:93:e6:13:e7:a9:2d:0c:fd:e3:6d:64:
a5:61:ee:7d:14:b4:f3:70:dd:75:3d:ce:7c:b8:bc:
28:8a:69:ce:3e:62:c6:a8:60:05:63:27:eb:00:90:
06:1c:45:e4:ab:72:a6:a2:bb:e6:12:51:fd:49:bf:
be:92:84:95:3c:84:d9:2c:5b:99:cb:0d:67:db:f8:
f9:ad:74:c1:af:d0:aa:5e:e2:a2:02:dd:c7:14:d1:
d0:00:ef:1f:bf:6a:bb:43:66:c7:15:32:23:66:14:
b4:9e:aa:f6:4b:15:7d:9c:63:01:d4:4b:85:b0:28:
d4:f9:f7:c7:96:7f:78:13:3f:a5:a1:93:62:ec:7f:
9f:e2:55:aa:08:15:ea:8b:aa:22:33:65:b7:ea:45:
e5:03:1e:51:d0:93:38:13:b3:15:12:6b:f7:72:0b:
6a:37:71:90:e7:63:8e:76:57:5c:76:48:73:8d:b5:
01:0e:79:be:dc:f6:d3:ac:97:b4:dd:f0:64:09:36:
79:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:9E:AA:C3:44:1B:31:59:0E:1E:09:4D:03:B9:54:A6:43:5F:ED:F0
X509v3 Authority Key Identifier:
keyid:9F:82:24:37:F4:9E:D5:38:86:68:90:22:AF:DD:DA:59:F7:9F:8A:71
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/n4IkN_Se1TiGaJAir93aWfefinE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/cbd332-a8db-4606-ac9b-14ec41d4c0a6/1/n4IkN_Se1TiGaJAir93aWfefinE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/cbd332-a8db-4606-ac9b-14ec41d4c0a6/1/n4IkN_Se1TiGaJAir93aWfefinE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
53:d8:1c:52:d4:6e:5a:e1:66:12:df:a8:38:4f:f6:b5:b1:32:
51:09:1b:67:c4:dd:b5:d8:9d:a9:84:19:d6:aa:4e:76:75:16:
26:7f:7d:f7:70:80:8a:5b:a8:2b:87:1d:97:fb:72:6f:51:04:
7c:ee:a7:d7:de:fb:bc:af:9d:db:bd:ab:f5:f7:d3:83:d4:23:
07:1f:bc:82:de:b5:23:80:e0:bc:df:de:39:96:35:db:0d:79:
82:12:fd:6a:50:d8:70:7d:cc:1b:6e:46:d3:99:4a:fd:7a:db:
98:5f:b4:dd:73:44:a6:3f:d4:c9:46:d8:98:87:1e:4e:8d:a9:
dc:7d:16:bb:35:59:04:6b:60:8b:10:ec:6e:ca:d9:96:f2:a1:
ab:3a:ef:94:68:1f:b6:2c:ac:9e:27:b5:16:85:5e:38:7d:e4:
20:26:5e:38:b0:bc:6a:e9:e9:b0:c5:c3:7e:d2:03:13:e3:ca:
26:37:b5:06:2c:a5:55:34:c1:fc:f8:e5:24:34:a8:38:5c:62:
fb:74:96:4f:40:02:bb:bd:60:26:a2:97:31:62:71:f2:e6:ee:
b7:28:aa:63:8b:0b:21:1b:71:c4:6b:7b:a5:c9:d4:65:a5:23:
c1:af:56:26:4e:4b:ec:57:81:90:ce:40:1a:28:59:1f:1e:b7:
25:54:d2:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 29 09:10:59 2025 by rpki-client