Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/0f7d30-6f24-4b8c-b75c-61700dde7692/1/n5FENjC-1KQYJ6zlcHmpR6yHy74.mft
File: n5FENjC-1KQYJ6zlcHmpR6yHy74.mft (raw, json)
Hash identifier: iCBGDuSN7UzUswKk90Vb9hNw3wMmn+5PUqgykwhDYQc=
Subject key identifier: CD:70:4C:7F:21:28:85:A3:80:D8:3C:19:4B:E6:59:8E:ED:B4:99:A5
Authority key identifier: 9F:91:44:36:30:BE:D4:A4:18:27:AC:E5:70:79:A9:47:AC:87:CB:BE
Certificate issuer: /CN=9f91443630bed4a41827ace57079a947ac87cbbe
Certificate serial: 019A71EEA2D0E68E0075BC0C96F8C6174FD8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/n5FENjC-1KQYJ6zlcHmpR6yHy74.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e9/0f7d30-6f24-4b8c-b75c-61700dde7692/1/n5FENjC-1KQYJ6zlcHmpR6yHy74.mft
Manifest number: 021F
Signing time: Tue 11 Nov 2025 08:00:55 +0000
Manifest this update: Tue 11 Nov 2025 08:00:55 +0000
Manifest next update: Wed 12 Nov 2025 08:00:55 +0000
Files and hashes: 1: FTz3I1LwzTnAWMfdkHFOvWrYtnw.roa (hash: ON7nD9k8gZbbUe0iuDqX0lxMxjEVRpGMdIVVvIAhjDg=)
2: n5FENjC-1KQYJ6zlcHmpR6yHy74.crl (hash: c+BRWomD+oKpygcqtUZk0lElliXyMX8eLPl0wtc1jnE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e9/0f7d30-6f24-4b8c-b75c-61700dde7692/1/n5FENjC-1KQYJ6zlcHmpR6yHy74.crl
rsync://rpki.ripe.net/repository/DEFAULT/e9/0f7d30-6f24-4b8c-b75c-61700dde7692/1/n5FENjC-1KQYJ6zlcHmpR6yHy74.mft
rsync://rpki.ripe.net/repository/DEFAULT/n5FENjC-1KQYJ6zlcHmpR6yHy74.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 08:00:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:ee:a2:d0:e6:8e:00:75:bc:0c:96:f8:c6:17:4f:d8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9f91443630bed4a41827ace57079a947ac87cbbe
Validity
Not Before: Nov 11 08:00:55 2025 GMT
Not After : Nov 12 08:00:55 2025 GMT
Subject: CN=cd704c7f212885a380d83c194be6598eedb499a5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:88:20:48:e2:a3:da:59:d0:d9:b5:69:fd:91:
64:fe:83:0a:5b:25:f4:c0:0c:73:72:3f:ae:a1:d2:
0e:60:16:40:1a:b9:f0:3c:7d:f7:bb:d5:51:7d:fb:
8f:af:d5:67:56:26:96:ec:96:62:df:c6:d3:8e:4b:
80:a5:59:a9:c9:48:64:bb:ae:83:4f:7d:b3:85:a3:
be:72:59:0b:8c:2a:96:e2:54:2c:5a:11:7e:5e:90:
41:30:7e:35:c0:16:bf:68:83:32:53:36:ad:a4:78:
40:1e:59:fa:64:57:1f:c3:8d:2c:f9:56:3c:15:60:
c9:9c:14:36:38:bd:8a:09:9f:2b:6f:38:a5:db:92:
32:e2:07:24:fa:8f:1d:f6:e7:1a:4c:95:3f:ce:49:
d8:f6:3f:20:b1:23:6a:25:1b:2d:bd:60:d9:b8:f5:
e5:21:04:16:46:b4:30:e8:75:64:3e:43:05:d7:d2:
82:ef:d7:cd:52:47:60:7b:56:ff:77:96:2c:25:12:
29:27:33:28:89:75:b7:b4:f8:0c:57:b6:a3:f6:cb:
7c:6b:c7:18:8e:69:37:5a:65:78:16:0b:a9:b3:17:
c4:3b:bc:76:0c:0c:e1:a1:5b:92:4e:e4:6d:fc:36:
ef:23:45:25:67:67:7b:f0:66:f7:8e:06:95:8e:3a:
0e:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:70:4C:7F:21:28:85:A3:80:D8:3C:19:4B:E6:59:8E:ED:B4:99:A5
X509v3 Authority Key Identifier:
keyid:9F:91:44:36:30:BE:D4:A4:18:27:AC:E5:70:79:A9:47:AC:87:CB:BE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/n5FENjC-1KQYJ6zlcHmpR6yHy74.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/0f7d30-6f24-4b8c-b75c-61700dde7692/1/n5FENjC-1KQYJ6zlcHmpR6yHy74.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/0f7d30-6f24-4b8c-b75c-61700dde7692/1/n5FENjC-1KQYJ6zlcHmpR6yHy74.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1b:80:61:8e:00:3d:35:f0:15:a4:61:92:f2:76:84:7c:b3:31:
d6:1f:44:f2:ed:23:b7:12:39:f4:6e:3a:95:00:70:10:6d:1d:
59:7a:a2:99:97:36:c3:e6:fa:db:6e:81:62:b7:f0:ed:1d:1a:
4f:b1:d0:f7:b3:06:50:90:63:08:b7:b9:7f:8d:04:6f:36:54:
fb:7d:4a:f8:5a:4c:01:e6:85:7c:7f:46:b4:23:3d:e3:b3:40:
b6:49:7f:be:b6:72:7c:0d:72:82:ff:37:cc:53:09:02:a3:e6:
4d:79:19:3c:b9:12:4e:a7:f0:4b:f9:b7:b2:de:b8:7a:e3:ff:
ad:c3:78:9c:de:a3:76:a9:4e:0e:e1:62:bc:8a:c4:d4:de:6c:
69:97:3b:43:a9:e2:71:13:01:af:3f:67:67:64:56:1a:67:d4:
f9:c9:58:c6:9e:7e:a1:19:47:9d:fe:6e:c5:af:95:14:8c:8a:
fb:c6:fa:14:d6:26:fb:b7:b9:c9:5c:34:d1:34:d7:2e:78:31:
a5:b1:59:a5:c7:35:e8:95:fc:81:c2:69:84:55:55:b3:89:33:
48:ff:ad:2c:a8:c9:95:72:43:61:0a:c8:7a:1c:98:2e:cc:40:
1e:45:6e:24:e2:24:82:a5:bd:e2:27:81:12:fe:e8:47:08:1d:
1d:1e:21:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 12:45:34 2025 by rpki-client