Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ea/c77833-31ae-4412-b049-70a4a8d7c43f/1/n4kf80d-1_2qz64uPw36ZP2SrAw.mft
File: n4kf80d-1_2qz64uPw36ZP2SrAw.mft (raw, json)
Hash identifier: a2ZeUkdhKeIaBBt4SAz9qKXLjP2TFrQjf1PZvgbT05k=
Subject key identifier: D6:20:41:4E:40:79:67:CC:E2:25:B9:EA:A1:E9:3D:3E:F0:CB:EB:3B
Authority key identifier: 9F:89:1F:F3:47:7E:D7:FD:AA:CF:AE:2E:3F:0D:FA:64:FD:92:AC:0C
Certificate issuer: /CN=9f891ff3477ed7fdaacfae2e3f0dfa64fd92ac0c
Certificate serial: 0199239EE3C831903DC529099C5DC8716FC9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/n4kf80d-1_2qz64uPw36ZP2SrAw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ea/c77833-31ae-4412-b049-70a4a8d7c43f/1/n4kf80d-1_2qz64uPw36ZP2SrAw.mft
Manifest number: 0AB0
Signing time: Sun 07 Sep 2025 10:00:39 +0000
Manifest this update: Sun 07 Sep 2025 10:00:39 +0000
Manifest next update: Mon 08 Sep 2025 10:00:39 +0000
Files and hashes: 1: D3yjJU5h_FTDERrGNrsGZ8LgMxc.roa (hash: zDBANuUPdW/jRqqSGkjw8mcyfQtAQBZkgjZavcu4Hqg=)
2: n4kf80d-1_2qz64uPw36ZP2SrAw.crl (hash: X3vYkOP3UTGEiLh4QfLBtb0yNvNg+MtCnmVQH5qinE0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ea/c77833-31ae-4412-b049-70a4a8d7c43f/1/n4kf80d-1_2qz64uPw36ZP2SrAw.crl
rsync://rpki.ripe.net/repository/DEFAULT/ea/c77833-31ae-4412-b049-70a4a8d7c43f/1/n4kf80d-1_2qz64uPw36ZP2SrAw.mft
rsync://rpki.ripe.net/repository/DEFAULT/n4kf80d-1_2qz64uPw36ZP2SrAw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 05:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:23:9e:e3:c8:31:90:3d:c5:29:09:9c:5d:c8:71:6f:c9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9f891ff3477ed7fdaacfae2e3f0dfa64fd92ac0c
Validity
Not Before: Sep 7 10:00:39 2025 GMT
Not After : Sep 8 10:00:39 2025 GMT
Subject: CN=d620414e407967cce225b9eaa1e93d3ef0cbeb3b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:e7:fb:ab:45:49:bc:44:57:58:7b:47:45:19:
c5:48:f0:aa:2d:b8:52:f2:bf:98:38:26:2c:ac:8d:
05:80:43:ff:25:2b:b1:90:d1:a7:fa:25:11:c3:18:
23:e8:64:97:ca:80:16:98:37:0a:be:d3:80:34:53:
96:c2:44:95:e7:0a:b8:3f:67:b0:0e:7a:69:a7:ff:
47:d5:77:91:d2:c6:f5:cc:5e:fd:c0:a5:8b:74:5c:
6a:a1:fb:3a:6d:1c:9d:0e:da:22:1d:73:93:cb:ab:
b4:13:0c:90:eb:06:f8:25:45:df:29:99:75:e1:61:
46:01:e2:3c:e4:46:be:54:ed:5a:f5:f7:a9:7f:7b:
e8:94:37:29:df:4c:da:3c:2e:7b:d4:e0:89:f1:4f:
53:75:da:ef:c1:34:1e:05:f9:91:c3:97:8f:6b:7d:
a9:1c:a7:95:90:b8:0a:40:13:54:6a:91:da:a4:79:
7e:5c:00:9a:f6:44:ac:3c:81:2e:eb:ba:6a:bd:0e:
41:31:48:3b:ab:11:6b:53:4c:49:93:93:49:9e:6b:
06:5c:eb:a5:9d:b1:35:ea:97:af:6b:07:0e:2b:80:
84:64:ff:a6:17:5d:f6:d6:dc:9c:3f:72:65:43:df:
fb:f4:82:8e:b7:60:9e:50:45:09:a6:ba:44:e3:f8:
5c:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:20:41:4E:40:79:67:CC:E2:25:B9:EA:A1:E9:3D:3E:F0:CB:EB:3B
X509v3 Authority Key Identifier:
keyid:9F:89:1F:F3:47:7E:D7:FD:AA:CF:AE:2E:3F:0D:FA:64:FD:92:AC:0C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/n4kf80d-1_2qz64uPw36ZP2SrAw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/c77833-31ae-4412-b049-70a4a8d7c43f/1/n4kf80d-1_2qz64uPw36ZP2SrAw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/c77833-31ae-4412-b049-70a4a8d7c43f/1/n4kf80d-1_2qz64uPw36ZP2SrAw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0a:c2:f5:b0:cc:ff:25:de:94:1d:4c:74:38:5d:83:0d:f7:88:
db:65:03:f1:e7:38:38:78:c1:90:16:d8:cc:ee:2a:d9:c1:44:
a9:d4:47:00:d6:e6:0c:59:6b:8c:e5:20:84:38:c9:c2:d6:ad:
42:a5:f8:62:7a:9d:b0:2f:8a:18:10:7d:11:dd:08:3b:05:ae:
4e:c8:9d:89:94:ea:45:21:ec:e8:99:49:8c:cc:58:e2:f8:d1:
cb:ec:cd:91:b7:1b:ac:28:fd:f6:e9:b8:1c:93:1b:2f:46:f8:
14:d4:c4:ae:27:5e:c6:be:90:93:71:02:eb:b0:8b:fc:4f:83:
45:13:7c:4d:79:85:c0:9d:9e:a0:28:95:6e:69:d4:20:f1:06:
da:52:41:41:d2:d2:19:08:af:a5:8a:fb:b0:21:ee:df:70:d2:
09:bb:6d:82:0a:e9:8b:7e:89:68:7e:aa:de:03:c5:97:d5:ee:
e2:b7:af:a0:92:c6:94:8e:f7:f2:5b:bf:9d:7c:c5:0a:ca:2f:
53:10:3c:37:5d:63:b8:8d:9b:29:1b:05:a9:1a:4a:fd:ad:e7:
f9:00:90:56:22:ba:cc:57:c5:0f:ef:6e:d4:24:89:09:da:0b:
be:ac:e8:b6:8e:37:3b:e7:b7:0d:cf:15:f0:d1:4c:60:9f:31:
fc:0b:18:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 11:22:08 2025 by rpki-client