Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ea/c77833-31ae-4412-b049-70a4a8d7c43f/1/n4kf80d-1_2qz64uPw36ZP2SrAw.mft
File: n4kf80d-1_2qz64uPw36ZP2SrAw.mft (raw, json)
Hash identifier: bITMArM5e+Qwe1lQFqPYjPG1g2NCa81NPmbMjIDdwwE=
Subject key identifier: 36:C9:2C:7F:E5:73:BE:70:20:4A:DD:EA:08:D5:05:6E:F9:C7:AC:CA
Authority key identifier: 9F:89:1F:F3:47:7E:D7:FD:AA:CF:AE:2E:3F:0D:FA:64:FD:92:AC:0C
Certificate issuer: /CN=9f891ff3477ed7fdaacfae2e3f0dfa64fd92ac0c
Certificate serial: 019A71B81E13776986177E0869E1C71CDB98
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/n4kf80d-1_2qz64uPw36ZP2SrAw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ea/c77833-31ae-4412-b049-70a4a8d7c43f/1/n4kf80d-1_2qz64uPw36ZP2SrAw.mft
Manifest number: 0B5D
Signing time: Tue 11 Nov 2025 07:01:22 +0000
Manifest this update: Tue 11 Nov 2025 07:01:22 +0000
Manifest next update: Wed 12 Nov 2025 07:01:22 +0000
Files and hashes: 1: D3yjJU5h_FTDERrGNrsGZ8LgMxc.roa (hash: zDBANuUPdW/jRqqSGkjw8mcyfQtAQBZkgjZavcu4Hqg=)
2: n4kf80d-1_2qz64uPw36ZP2SrAw.crl (hash: 7rGY0H+lsCSJNkETXwjHfO4LJtJoHy9z889qb0SiA20=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ea/c77833-31ae-4412-b049-70a4a8d7c43f/1/n4kf80d-1_2qz64uPw36ZP2SrAw.crl
rsync://rpki.ripe.net/repository/DEFAULT/ea/c77833-31ae-4412-b049-70a4a8d7c43f/1/n4kf80d-1_2qz64uPw36ZP2SrAw.mft
rsync://rpki.ripe.net/repository/DEFAULT/n4kf80d-1_2qz64uPw36ZP2SrAw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 07:01:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:b8:1e:13:77:69:86:17:7e:08:69:e1:c7:1c:db:98
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9f891ff3477ed7fdaacfae2e3f0dfa64fd92ac0c
Validity
Not Before: Nov 11 07:01:22 2025 GMT
Not After : Nov 12 07:01:22 2025 GMT
Subject: CN=36c92c7fe573be70204addea08d5056ef9c7acca
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:51:f7:05:7b:e5:cd:a6:4c:3f:33:dc:92:90:
24:71:b7:ae:6f:14:6d:ea:a5:fe:28:96:c5:30:69:
12:e3:ee:dc:46:b9:04:3a:0a:24:87:c0:05:14:d7:
97:25:a1:dc:14:99:7e:74:5e:0f:38:10:5e:0b:55:
03:ac:24:2a:81:cd:aa:bd:c7:56:5f:9d:aa:e8:14:
dc:e5:25:f1:ee:55:ec:26:02:9e:aa:9d:49:f5:ba:
bd:d3:b4:ef:c8:e0:b9:8f:26:a7:52:2b:ab:36:a3:
78:e4:a0:75:e3:24:85:da:f5:db:03:7f:6b:27:25:
0e:af:c6:aa:c5:c6:92:5d:0f:5d:83:94:f5:43:bf:
7e:58:3a:3b:2c:6b:90:a1:9e:b9:cf:4d:ba:93:3a:
35:13:fc:e9:30:9c:00:1b:0d:d6:02:f9:6b:dd:78:
5c:f9:f2:9a:a1:4c:6e:81:49:dd:23:ad:b9:f0:5c:
82:e9:f4:e3:fb:30:3b:9f:88:3a:90:dc:16:70:03:
a9:57:0d:1c:19:d2:30:de:a5:81:b1:58:6d:7e:fa:
10:c2:17:30:81:df:89:91:e9:27:da:4b:1c:f0:ee:
16:14:8a:39:3f:17:0e:35:ee:2e:23:94:8c:64:47:
b3:f0:7c:16:59:55:78:92:7c:35:97:f9:04:10:f5:
8f:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:C9:2C:7F:E5:73:BE:70:20:4A:DD:EA:08:D5:05:6E:F9:C7:AC:CA
X509v3 Authority Key Identifier:
keyid:9F:89:1F:F3:47:7E:D7:FD:AA:CF:AE:2E:3F:0D:FA:64:FD:92:AC:0C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/n4kf80d-1_2qz64uPw36ZP2SrAw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/c77833-31ae-4412-b049-70a4a8d7c43f/1/n4kf80d-1_2qz64uPw36ZP2SrAw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/c77833-31ae-4412-b049-70a4a8d7c43f/1/n4kf80d-1_2qz64uPw36ZP2SrAw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
03:c1:24:55:b2:78:12:b4:03:1e:dc:75:f1:92:cc:a0:46:0a:
5b:d6:24:60:ef:87:c9:4c:02:b5:0f:f9:60:e3:97:27:da:7b:
c0:6e:a3:75:db:08:5d:b2:bf:46:49:aa:47:d3:70:2d:a4:ab:
81:7e:dc:71:45:31:c7:ee:76:ff:7d:eb:4d:15:a8:2d:8f:96:
f3:36:ff:0b:c8:b1:83:45:95:ed:47:0c:b1:bc:df:7a:3f:a8:
77:36:f0:5e:8f:de:b2:2d:8e:9e:aa:fe:f9:10:27:85:7d:75:
6c:e0:7f:53:95:10:d9:63:8b:b5:78:78:51:91:2f:5d:9d:0a:
92:c2:c0:fa:40:43:7a:7d:24:07:21:02:e9:92:ab:f9:03:7e:
a0:8f:44:a8:d4:f9:c5:70:f5:5a:b0:56:00:cb:93:40:4b:e7:
95:5b:be:f4:be:46:95:06:04:4b:3f:65:21:f8:77:83:d9:c2:
5b:a8:47:30:e6:af:35:6f:3f:6f:64:be:ab:77:a8:6b:ed:f3:
21:0c:49:f1:e9:ac:cc:99:e4:e4:76:0f:01:9d:ac:17:e5:b8:
49:b4:a0:34:50:05:11:f3:de:8f:33:d1:1d:92:d1:a2:85:36:
72:14:a2:b5:40:59:f1:1f:2b:70:f5:db:38:8a:c7:62:17:f2:
67:f3:76:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 11:27:43 2025 by rpki-client