Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d2/4cae10-37a5-40ef-89d5-5701d01c1e87/1/n1_z3hCjG79XAcC9smxlCAF9oso.mft
File: n1_z3hCjG79XAcC9smxlCAF9oso.mft (raw, json)
Hash identifier: INszQyxhCIJsMUhoLT85gMCFAju4UpNQuM4H5Ij1zJ8=
Subject key identifier: 10:F5:E9:7C:B4:C7:2C:CC:62:E2:14:86:F8:2B:A2:15:01:0C:82:8D
Authority key identifier: 9F:5F:F3:DE:10:A3:1B:BF:57:01:C0:BD:B2:6C:65:08:01:7D:A2:CA
Certificate issuer: /CN=9f5ff3de10a31bbf5701c0bdb26c6508017da2ca
Certificate serial: 01992255B8D841960B8FEA55D684353AFAB9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/n1_z3hCjG79XAcC9smxlCAF9oso.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d2/4cae10-37a5-40ef-89d5-5701d01c1e87/1/n1_z3hCjG79XAcC9smxlCAF9oso.mft
Manifest number: 0C78
Signing time: Sun 07 Sep 2025 04:01:07 +0000
Manifest this update: Sun 07 Sep 2025 04:01:07 +0000
Manifest next update: Mon 08 Sep 2025 04:01:07 +0000
Files and hashes: 1: bY74pa2C3Js_pk8zrLxwAIuld50.roa (hash: hw+4FaOxGozuL2NvwyX/np4qCkqg+xjCV1sHwedmazg=)
2: n1_z3hCjG79XAcC9smxlCAF9oso.crl (hash: xVDq4/+JtZX815sQwTGEzVivNL26GEoWxy3XlmYooHE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d2/4cae10-37a5-40ef-89d5-5701d01c1e87/1/n1_z3hCjG79XAcC9smxlCAF9oso.crl
rsync://rpki.ripe.net/repository/DEFAULT/d2/4cae10-37a5-40ef-89d5-5701d01c1e87/1/n1_z3hCjG79XAcC9smxlCAF9oso.mft
rsync://rpki.ripe.net/repository/DEFAULT/n1_z3hCjG79XAcC9smxlCAF9oso.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 04:01:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:22:55:b8:d8:41:96:0b:8f:ea:55:d6:84:35:3a:fa:b9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9f5ff3de10a31bbf5701c0bdb26c6508017da2ca
Validity
Not Before: Sep 7 04:01:07 2025 GMT
Not After : Sep 8 04:01:07 2025 GMT
Subject: CN=10f5e97cb4c72ccc62e21486f82ba215010c828d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:aa:42:38:e1:14:cf:8a:03:f6:ab:84:fe:9c:
8b:d4:74:25:65:7b:21:37:0b:ca:3c:3f:5d:44:36:
5b:14:04:5a:85:b4:f7:24:56:f5:ba:d4:d7:ae:b0:
f6:09:58:ff:77:a0:bd:4d:f4:9b:91:2d:16:58:65:
81:9b:7a:1c:55:d6:32:df:3c:88:97:cf:e3:cf:55:
9b:0b:20:3f:83:f0:85:a2:f9:86:68:25:aa:9c:07:
da:51:76:0a:ec:63:ca:bd:6b:57:fc:eb:d6:ce:d7:
02:8e:e3:96:4a:e6:7e:d5:44:b3:34:94:ec:d1:01:
15:62:29:02:fa:40:40:57:e8:3e:05:95:8f:78:21:
4e:e1:c5:1d:f3:9a:b2:e4:61:b6:cc:1b:c1:bd:fa:
d8:be:e7:e9:1f:17:09:cc:10:54:fd:5d:b5:50:98:
55:fa:56:c6:99:e4:84:ad:99:b4:17:4e:df:bb:fe:
fd:cb:00:3e:43:de:ec:b8:7a:67:c0:27:3e:7f:bb:
3e:ba:55:f6:35:85:41:3a:b4:d7:4c:58:f5:f9:09:
d1:05:4c:f4:3f:b0:eb:14:85:44:ad:81:ca:91:4e:
13:c7:44:fd:0c:26:f0:26:e2:55:f4:a5:34:34:d9:
5a:aa:28:22:6f:aa:9e:91:a0:83:64:94:1e:a9:68:
b9:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:F5:E9:7C:B4:C7:2C:CC:62:E2:14:86:F8:2B:A2:15:01:0C:82:8D
X509v3 Authority Key Identifier:
keyid:9F:5F:F3:DE:10:A3:1B:BF:57:01:C0:BD:B2:6C:65:08:01:7D:A2:CA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/n1_z3hCjG79XAcC9smxlCAF9oso.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/4cae10-37a5-40ef-89d5-5701d01c1e87/1/n1_z3hCjG79XAcC9smxlCAF9oso.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/4cae10-37a5-40ef-89d5-5701d01c1e87/1/n1_z3hCjG79XAcC9smxlCAF9oso.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
21:ff:b8:76:ff:ce:77:cd:c0:05:e3:5c:c9:ca:27:16:83:bb:
c9:2f:2e:89:8e:8c:fa:8d:2e:04:12:e9:10:67:c5:60:b4:82:
1c:42:0d:2e:c1:20:44:a3:51:ff:24:7f:fd:c2:d9:be:e7:ce:
03:d7:b9:5a:66:e7:50:3b:fb:67:07:63:87:aa:3c:6c:6e:3f:
3f:fd:d4:a6:a5:67:f6:33:24:f6:c3:59:35:9d:5e:83:8f:61:
79:72:75:97:f6:7a:8d:8a:08:c3:6e:de:b2:c2:a4:2f:dd:e3:
98:f0:8f:f0:8f:72:5f:fd:5b:09:f8:49:b3:a8:59:a7:fb:4a:
85:88:bb:57:40:34:47:07:ca:7d:cf:57:3a:af:6d:c2:33:9a:
78:b7:a0:a1:88:c1:19:84:3e:60:b0:6c:fd:fc:b8:fd:0d:23:
4e:dd:99:e3:cf:36:3f:f1:e9:db:fa:83:ed:05:eb:1b:6d:e3:
2b:cb:e7:fa:89:4e:c8:ee:54:b4:2a:71:af:48:5c:c7:c6:01:
2d:8f:7a:bc:21:33:b3:a0:9c:b5:47:24:20:83:cc:12:63:2a:
84:55:e9:6e:a1:18:a2:ae:60:0d:a9:7a:50:1a:b8:96:3f:4a:
73:4d:88:08:ea:93:2b:84:bc:58:e4:8c:7f:0a:a1:33:3a:21:
c6:62:58:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 10:01:54 2025 by rpki-client