Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/644501-9d42-4816-89c9-10aca3313387/1/n3LjoM10kAU1tqb4_8ZX2ToJB6Y.mft
File: n3LjoM10kAU1tqb4_8ZX2ToJB6Y.mft (raw, json)
Hash identifier: dfqmsvkXD5LOm5eDZ+Rm2DaXC/eBj6sLn/84Cq5MdVU=
Subject key identifier: A7:0C:6D:85:4D:55:AB:0B:C3:F7:56:DE:2B:61:67:D6:1C:5F:2E:CC
Authority key identifier: 9F:72:E3:A0:CD:74:90:05:35:B6:A6:F8:FF:C6:57:D9:3A:09:07:A6
Certificate issuer: /CN=9f72e3a0cd74900535b6a6f8ffc657d93a0907a6
Certificate serial: 019A729341973C20B16D7233FB4FBAB3385A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/n3LjoM10kAU1tqb4_8ZX2ToJB6Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/644501-9d42-4816-89c9-10aca3313387/1/n3LjoM10kAU1tqb4_8ZX2ToJB6Y.mft
Manifest number: 0B2D
Signing time: Tue 11 Nov 2025 11:00:44 +0000
Manifest this update: Tue 11 Nov 2025 11:00:44 +0000
Manifest next update: Wed 12 Nov 2025 11:00:44 +0000
Files and hashes: 1: n3LjoM10kAU1tqb4_8ZX2ToJB6Y.crl (hash: CHupRewhUBxylFsZwWfYASRQ3ncSIjhpIqpEvisAsuk=)
2: xCIH9wp6RKlehql4M5SLCZPHQEs.roa (hash: 80w1j7Z/qMuNCNOWS8szAQAtDk98iD2/lDFP83CUU3U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bc/644501-9d42-4816-89c9-10aca3313387/1/n3LjoM10kAU1tqb4_8ZX2ToJB6Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/bc/644501-9d42-4816-89c9-10aca3313387/1/n3LjoM10kAU1tqb4_8ZX2ToJB6Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/n3LjoM10kAU1tqb4_8ZX2ToJB6Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:93:41:97:3c:20:b1:6d:72:33:fb:4f:ba:b3:38:5a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9f72e3a0cd74900535b6a6f8ffc657d93a0907a6
Validity
Not Before: Nov 11 11:00:44 2025 GMT
Not After : Nov 12 11:00:44 2025 GMT
Subject: CN=a70c6d854d55ab0bc3f756de2b6167d61c5f2ecc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:9a:09:d7:af:29:b5:a1:f2:cd:17:8c:ca:45:
1c:4b:2d:ee:f1:86:44:b6:2a:e6:03:3c:82:5a:70:
a4:25:8b:32:8a:a1:b7:a1:c3:95:bb:27:a1:1c:36:
94:52:91:70:df:b7:ed:6f:6e:09:85:ef:e6:a4:ac:
f5:51:c3:22:63:9f:89:a6:01:e2:45:a7:03:62:99:
5d:55:8f:d6:81:7e:64:3f:cf:b5:a3:98:51:68:7e:
48:bd:4c:14:b6:7c:52:24:af:a4:a3:6c:af:31:6a:
99:e4:c4:70:56:a8:aa:30:b0:e9:76:1b:71:80:38:
d4:66:00:c3:04:53:92:52:d0:e1:0f:88:cb:11:f5:
00:cc:12:72:b7:2b:64:de:61:66:dc:7a:96:7f:0e:
af:c8:52:3c:b6:d0:a9:06:d6:04:e3:9f:37:74:fc:
f4:68:a5:87:6a:1f:87:20:76:a1:3a:16:39:42:b9:
15:19:59:c8:97:59:f2:7a:33:6b:9d:6c:38:9a:f2:
07:67:3a:20:b8:72:62:cc:9f:57:86:ad:70:75:1d:
e3:45:9a:1f:4d:38:7e:f0:0a:59:5e:8a:80:c5:55:
04:df:e8:04:6a:2e:8c:07:68:5a:a6:87:61:b6:3d:
23:d0:03:b6:fb:30:64:60:4e:c2:1b:b2:ff:6f:f0:
1e:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:0C:6D:85:4D:55:AB:0B:C3:F7:56:DE:2B:61:67:D6:1C:5F:2E:CC
X509v3 Authority Key Identifier:
keyid:9F:72:E3:A0:CD:74:90:05:35:B6:A6:F8:FF:C6:57:D9:3A:09:07:A6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/n3LjoM10kAU1tqb4_8ZX2ToJB6Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/644501-9d42-4816-89c9-10aca3313387/1/n3LjoM10kAU1tqb4_8ZX2ToJB6Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/644501-9d42-4816-89c9-10aca3313387/1/n3LjoM10kAU1tqb4_8ZX2ToJB6Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
60:ed:2b:04:62:c5:05:7f:6d:e4:28:11:4e:1f:29:35:a0:6a:
64:75:29:23:61:cc:c3:af:9c:2d:85:b2:e9:32:80:37:9a:c8:
81:59:3e:53:30:d9:e2:85:b4:37:88:e0:4c:66:f6:ba:19:7b:
b4:43:9c:ea:b9:91:8f:0e:7f:33:60:8f:2c:d2:d7:03:00:11:
5b:fe:cc:8d:a1:69:df:b2:21:f0:a4:7a:5f:07:75:37:20:d9:
ef:5f:ef:dd:cf:cd:10:fb:45:f1:51:f1:64:a7:28:a8:22:fe:
44:bc:89:ee:8c:4f:aa:4a:29:7d:ec:1c:cf:0d:a5:99:a4:49:
81:6a:33:ef:c5:b8:0b:cd:15:cb:2b:3e:5f:7d:fd:87:f0:b0:
99:f9:0a:08:60:ae:38:12:a2:1e:ae:4b:c8:da:4b:36:06:40:
ef:12:e4:82:87:e5:07:49:2f:20:62:83:e9:d4:1b:bd:1d:78:
f7:59:93:f1:9e:78:f1:57:80:52:76:17:64:fb:08:6c:a3:0d:
4b:b0:21:7b:c6:81:2d:08:31:01:66:80:f6:a1:2d:62:28:0c:
af:9d:da:c9:2b:fc:a7:1e:6d:0a:bf:e9:fa:2d:95:7f:41:8c:
a4:ee:c0:06:ea:c7:93:cb:4d:1a:42:cc:75:71:02:07:94:5a:
64:58:7f:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 14:16:18 2025 by rpki-client