Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c1/2b0928-5cb6-4d6b-a8ad-00e55a2499d0/1/n3g9_Cib-qPEuhsyTx27V_WGoB0.mft
File: n3g9_Cib-qPEuhsyTx27V_WGoB0.mft (raw, json)
Hash identifier: +nCN8Whp9a88586YQQgcNG881I+IOAM7jqpk6WBPBW8=
Subject key identifier: 2D:35:DC:05:7A:CE:76:05:8F:65:05:FE:68:28:9A:4F:83:92:3C:80
Authority key identifier: 9F:78:3D:FC:28:9B:FA:A3:C4:BA:1B:32:4F:1D:BB:57:F5:86:A0:1D
Certificate issuer: /CN=9f783dfc289bfaa3c4ba1b324f1dbb57f586a01d
Certificate serial: 019A71B953EE583E8A710AFAD01F0F786491
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/n3g9_Cib-qPEuhsyTx27V_WGoB0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c1/2b0928-5cb6-4d6b-a8ad-00e55a2499d0/1/n3g9_Cib-qPEuhsyTx27V_WGoB0.mft
Manifest number: 0373
Signing time: Tue 11 Nov 2025 07:02:42 +0000
Manifest this update: Tue 11 Nov 2025 07:02:42 +0000
Manifest next update: Wed 12 Nov 2025 07:02:42 +0000
Files and hashes: 1: AE5IQSZ07aDFdSNH0kV7_4HeAEw.roa (hash: urftXRrLYNfHknYhlBilfeq0wuuzqoCnp0BIMu9jSb4=)
2: n3g9_Cib-qPEuhsyTx27V_WGoB0.crl (hash: ZqopaBZCBSppo8teoPfcAyvUmmnj2lwE8id0vpbX7T4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c1/2b0928-5cb6-4d6b-a8ad-00e55a2499d0/1/n3g9_Cib-qPEuhsyTx27V_WGoB0.crl
rsync://rpki.ripe.net/repository/DEFAULT/c1/2b0928-5cb6-4d6b-a8ad-00e55a2499d0/1/n3g9_Cib-qPEuhsyTx27V_WGoB0.mft
rsync://rpki.ripe.net/repository/DEFAULT/n3g9_Cib-qPEuhsyTx27V_WGoB0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 07:02:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:b9:53:ee:58:3e:8a:71:0a:fa:d0:1f:0f:78:64:91
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9f783dfc289bfaa3c4ba1b324f1dbb57f586a01d
Validity
Not Before: Nov 11 07:02:42 2025 GMT
Not After : Nov 12 07:02:42 2025 GMT
Subject: CN=2d35dc057ace76058f6505fe68289a4f83923c80
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:6f:71:da:17:8c:a2:c9:15:9c:c0:62:af:f5:
21:71:1e:61:ce:ed:f7:c2:54:3a:87:3f:51:bf:03:
a6:f3:3b:27:4c:01:d4:3c:55:89:94:68:a0:44:7f:
6f:4a:64:e1:09:b0:ce:f1:bb:6a:89:e1:8e:03:dd:
54:d4:5f:07:7e:46:4a:f4:76:8d:80:ff:f0:58:05:
6a:5d:1e:fa:10:66:3d:84:99:20:d2:a5:46:bf:ea:
a0:3e:8e:88:b4:af:51:43:1d:03:d7:05:8b:da:e4:
e7:d8:56:c5:a3:02:6f:18:5e:2b:11:ca:d5:b1:59:
0a:e0:47:61:c9:17:3a:a5:be:ca:31:8e:97:11:73:
c9:3f:75:17:e7:50:99:47:fa:06:5c:65:7b:a5:12:
67:2c:76:46:7f:77:20:21:c2:61:45:e4:e1:f9:1d:
a4:c5:82:ed:8f:d9:88:a1:f4:26:44:21:0f:b3:ac:
85:c2:e8:9c:f0:2b:5e:b1:fd:0a:7e:44:b0:8f:c3:
5e:39:2b:cf:84:78:d4:03:6a:5b:6f:ca:e7:ac:9f:
e0:56:58:63:94:d5:4e:bc:ed:7e:fb:29:ea:60:f8:
41:2b:13:89:e3:d2:85:2d:60:e1:05:37:84:11:a3:
2a:7a:15:f0:7d:80:8a:c1:c2:6c:ac:1d:17:13:be:
55:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:35:DC:05:7A:CE:76:05:8F:65:05:FE:68:28:9A:4F:83:92:3C:80
X509v3 Authority Key Identifier:
keyid:9F:78:3D:FC:28:9B:FA:A3:C4:BA:1B:32:4F:1D:BB:57:F5:86:A0:1D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/n3g9_Cib-qPEuhsyTx27V_WGoB0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/2b0928-5cb6-4d6b-a8ad-00e55a2499d0/1/n3g9_Cib-qPEuhsyTx27V_WGoB0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/2b0928-5cb6-4d6b-a8ad-00e55a2499d0/1/n3g9_Cib-qPEuhsyTx27V_WGoB0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
12:bf:da:99:d3:7e:88:27:d9:71:c8:d9:b1:59:48:5f:0c:71:
71:3b:d9:79:25:94:95:a0:8a:0d:21:b8:66:26:a3:56:25:32:
c3:15:77:3b:b0:92:26:24:40:99:84:53:69:b4:a4:65:6a:d7:
c7:21:73:06:0e:3a:2c:9b:d0:6d:39:4f:8f:ae:1d:b8:78:e5:
02:9c:32:2d:68:64:aa:93:68:05:c0:2b:d5:2a:b3:85:94:16:
fb:00:27:eb:74:26:16:60:85:d0:03:63:a3:6e:0b:73:ae:af:
d9:1c:9e:c2:70:75:1b:e0:37:7c:a6:7b:40:65:1a:65:23:14:
d8:f7:6e:5c:93:11:8e:8d:13:7a:79:ec:10:90:55:ff:8a:22:
34:5b:4d:15:d5:49:f9:b3:0e:6a:43:09:cc:e7:7c:43:a7:3e:
82:cd:98:ba:30:9d:c3:3a:80:c9:db:23:c5:08:ae:61:b8:fa:
19:b4:05:ff:5a:e4:37:40:20:87:9a:2b:c0:c4:bd:13:d6:0c:
f1:2b:2b:a3:e8:35:c7:f6:94:c4:72:18:63:8f:74:38:a2:df:
2d:fa:85:c6:d2:fa:8e:6e:56:0f:89:30:47:9f:15:79:bd:1b:
26:70:68:cb:a1:9c:9b:c5:df:8c:44:85:2a:32:51:63:76:fe:
23:cf:83:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 14:03:41 2025 by rpki-client