Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c1/680589-8472-43eb-b034-21769de4a1a8/1/n4dSHxXgRXKIqfGWqMiGXDaSIVA.mft
File: n4dSHxXgRXKIqfGWqMiGXDaSIVA.mft (raw, json)
Hash identifier: jc52BPO8+BCDOJtzdosX4eyZSPmphdCBMkeQj3BgjsM=
Subject key identifier: E6:71:1F:49:D6:F0:5D:2E:44:B2:7E:96:A4:5B:B1:D7:39:D6:B1:77
Authority key identifier: 9F:87:52:1F:15:E0:45:72:88:A9:F1:96:A8:C8:86:5C:36:92:21:50
Certificate issuer: /CN=9f87521f15e0457288a9f196a8c8865c36922150
Certificate serial: 019A7112DA967216C3FAFC7CD013E310F01E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/n4dSHxXgRXKIqfGWqMiGXDaSIVA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c1/680589-8472-43eb-b034-21769de4a1a8/1/n4dSHxXgRXKIqfGWqMiGXDaSIVA.mft
Manifest number: 1720
Signing time: Tue 11 Nov 2025 04:00:52 +0000
Manifest this update: Tue 11 Nov 2025 04:00:52 +0000
Manifest next update: Wed 12 Nov 2025 04:00:52 +0000
Files and hashes: 1: ItUfI_e5TZV8Ja35X57TtR81NmA.roa (hash: IR3NcH60QSQHq12hzjVbCSbj+J8hOMovAsbbfhH0qaA=)
2: n4dSHxXgRXKIqfGWqMiGXDaSIVA.crl (hash: ufw2vzGMqtKXvLkOl9FPD/LItagfUM14BJor5hOpYLA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c1/680589-8472-43eb-b034-21769de4a1a8/1/n4dSHxXgRXKIqfGWqMiGXDaSIVA.crl
rsync://rpki.ripe.net/repository/DEFAULT/c1/680589-8472-43eb-b034-21769de4a1a8/1/n4dSHxXgRXKIqfGWqMiGXDaSIVA.mft
rsync://rpki.ripe.net/repository/DEFAULT/n4dSHxXgRXKIqfGWqMiGXDaSIVA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 04:00:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:12:da:96:72:16:c3:fa:fc:7c:d0:13:e3:10:f0:1e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9f87521f15e0457288a9f196a8c8865c36922150
Validity
Not Before: Nov 11 04:00:52 2025 GMT
Not After : Nov 12 04:00:52 2025 GMT
Subject: CN=e6711f49d6f05d2e44b27e96a45bb1d739d6b177
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:bd:22:02:d3:34:60:66:69:e6:80:4d:fa:88:
0e:46:d6:8e:c7:83:16:ff:1b:79:fb:3b:ea:ce:95:
04:5a:ce:22:0e:d6:5c:bc:6f:9e:f3:fb:dd:5c:09:
c0:69:a3:d5:9b:a5:d6:c4:8a:5e:c2:d5:7e:27:e7:
e3:6a:ac:65:ce:b2:0d:4e:e1:08:6c:a7:97:32:2c:
be:c3:20:78:35:66:d4:57:4e:46:1c:46:b7:6d:38:
e5:db:e8:db:67:98:c3:1d:56:31:5d:68:dd:7c:dd:
f5:55:c0:c9:3d:a4:d0:b0:67:c7:68:6d:9b:58:15:
70:ca:92:e5:07:51:46:bc:99:23:b3:ed:c5:25:fe:
c9:33:f6:86:6d:1e:8e:b4:54:6e:c8:f4:a2:85:67:
41:f2:ca:82:82:bc:11:dc:06:e9:5d:67:06:c3:d3:
cb:22:22:2e:17:09:b1:87:6b:e9:b1:91:9d:92:2a:
7c:a2:24:e5:d9:d8:66:01:17:50:98:06:17:67:c0:
1c:a8:61:a1:63:f5:0d:13:a3:94:34:81:20:cd:ca:
68:c2:03:83:6a:ef:fc:d4:62:39:d4:7d:aa:1d:53:
fe:11:a5:24:ee:20:9a:34:48:7d:58:a5:7d:18:f6:
e6:21:6f:52:d3:e7:99:1e:86:a1:69:56:d9:af:d8:
97:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E6:71:1F:49:D6:F0:5D:2E:44:B2:7E:96:A4:5B:B1:D7:39:D6:B1:77
X509v3 Authority Key Identifier:
keyid:9F:87:52:1F:15:E0:45:72:88:A9:F1:96:A8:C8:86:5C:36:92:21:50
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/n4dSHxXgRXKIqfGWqMiGXDaSIVA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/680589-8472-43eb-b034-21769de4a1a8/1/n4dSHxXgRXKIqfGWqMiGXDaSIVA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/680589-8472-43eb-b034-21769de4a1a8/1/n4dSHxXgRXKIqfGWqMiGXDaSIVA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
86:75:eb:6f:fb:10:2e:9a:9e:6b:f0:19:64:1b:6f:b3:c8:4f:
b8:85:41:99:55:90:21:93:14:5e:b8:3d:5a:88:bf:f0:bc:07:
ee:d2:5b:73:72:c9:4e:4f:69:f7:fa:35:58:15:1e:b0:de:57:
db:67:bf:1e:39:e3:c1:da:b5:26:5f:c1:5e:8a:87:a3:9e:cc:
58:8f:9a:54:0c:b7:b7:cf:68:b7:26:3f:a4:e5:3c:3c:b6:f9:
f9:bc:09:0e:75:f2:b6:79:21:71:4b:0e:9e:1f:68:f1:f9:fc:
46:40:d5:d7:ea:9f:d6:ff:31:d2:23:bd:75:7c:d4:ab:19:ae:
73:30:b9:cc:9a:98:88:4f:31:f2:5f:74:e4:95:c6:11:56:6b:
9b:01:6d:f5:bd:58:96:f3:85:0d:15:b1:a9:d8:0e:3e:66:31:
f7:24:71:33:72:3d:f5:4c:9d:43:4b:63:92:e3:83:b8:25:27:
4f:ed:e5:93:7e:95:19:94:e8:1b:14:f1:66:d5:66:34:b8:e8:
81:ef:72:15:3a:fe:7a:e6:c7:92:13:c4:a8:f7:d1:7a:c0:5e:
ad:4d:62:7e:58:c1:2e:dd:4e:d9:92:13:64:e5:56:ea:a8:91:
d0:f5:b9:e7:51:10:4c:d8:63:49:85:7c:75:38:43:1a:ee:64:
bb:9c:a3:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 11:35:11 2025 by rpki-client