Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ff/d8c58d-8d24-4280-91fd-48b1664d40d5/1/N9J_wkRD_N1LG2XPyAeMShQon54.mft
File: N9J_wkRD_N1LG2XPyAeMShQon54.mft (raw, json)
Hash identifier: pza3nJ3zvGdyl4kyEbdvwIXg9Qh0H7va//UpCpAoPeI=
Subject key identifier: 9E:D8:26:01:83:35:83:94:9E:D4:60:E6:04:45:78:0E:D5:46:01:E3
Authority key identifier: 37:D2:7F:C2:44:43:FC:DD:4B:1B:65:CF:C8:07:8C:4A:14:28:9F:9E
Certificate issuer: /CN=37d27fc24443fcdd4b1b65cfc8078c4a14289f9e
Certificate serial: 019A240A097A98ACFACBECE82E3DB1846D40
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/N9J_wkRD_N1LG2XPyAeMShQon54.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ff/d8c58d-8d24-4280-91fd-48b1664d40d5/1/N9J_wkRD_N1LG2XPyAeMShQon54.mft
Manifest number: 16F8
Signing time: Mon 27 Oct 2025 05:00:28 +0000
Manifest this update: Mon 27 Oct 2025 05:00:28 +0000
Manifest next update: Tue 28 Oct 2025 05:00:28 +0000
Files and hashes: 1: N9J_wkRD_N1LG2XPyAeMShQon54.crl (hash: zLxVDAJWVo0S72GuJkXryStqpPTrEY75KEUVYZ93l0g=)
2: TLZrPYGbv3OSz3l-n9m1uFTtYyY.roa (hash: BAfT0SDdeatk44A0MoM3KqLiELOkYEeVNpqrfHgFPvo=)
3: fTuGHUDbLXIf1K1JGZkDmgp4h30.roa (hash: CE5/seUejdLKBZqDs568ZVcYXPKEXW1OP4zxVz04Gmo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ff/d8c58d-8d24-4280-91fd-48b1664d40d5/1/N9J_wkRD_N1LG2XPyAeMShQon54.crl
rsync://rpki.ripe.net/repository/DEFAULT/ff/d8c58d-8d24-4280-91fd-48b1664d40d5/1/N9J_wkRD_N1LG2XPyAeMShQon54.mft
rsync://rpki.ripe.net/repository/DEFAULT/N9J_wkRD_N1LG2XPyAeMShQon54.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Oct 2025 05:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:24:0a:09:7a:98:ac:fa:cb:ec:e8:2e:3d:b1:84:6d:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=37d27fc24443fcdd4b1b65cfc8078c4a14289f9e
Validity
Not Before: Oct 27 05:00:28 2025 GMT
Not After : Oct 28 05:00:28 2025 GMT
Subject: CN=9ed82601833583949ed460e60445780ed54601e3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:43:ec:de:f1:6f:30:b3:a2:46:4d:9b:79:81:
1f:4b:2e:c8:ea:d9:91:68:68:da:7b:c3:ff:1d:90:
d5:e0:f5:89:dc:0e:51:a3:e2:6e:7e:8f:7b:98:59:
9f:e3:5d:41:e9:02:ea:d5:73:bf:90:96:8b:4f:63:
58:7e:cc:99:91:4d:d6:23:5b:06:08:ae:98:12:42:
d6:d1:41:e7:88:03:99:0a:7e:7f:d6:3d:51:4d:22:
62:87:fa:9c:bf:a3:7a:97:7f:51:b8:63:96:ce:59:
bb:be:93:30:27:0d:88:34:42:5d:44:55:c3:52:38:
cf:9e:82:a6:53:25:85:01:a2:a4:fa:e6:34:b5:b7:
99:d1:59:58:67:f9:7a:34:10:ec:b3:90:ba:c7:54:
54:4d:b4:11:ef:e1:c8:2a:97:25:e0:d4:6f:5a:8d:
00:44:ae:ee:1d:c0:7d:92:b8:82:15:e9:04:dc:a1:
b0:30:43:10:39:31:5f:8c:c6:5c:13:48:a0:33:36:
8d:52:d2:44:00:f3:68:fd:30:c9:56:20:a4:77:a5:
3e:31:a4:f7:59:4c:8a:d3:e6:61:76:1f:de:10:1e:
26:20:a9:d9:c7:c0:97:87:0a:bd:3b:ac:d2:8b:17:
bd:81:ab:e3:45:3b:2d:88:97:3c:95:ad:66:83:94:
7b:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:D8:26:01:83:35:83:94:9E:D4:60:E6:04:45:78:0E:D5:46:01:E3
X509v3 Authority Key Identifier:
keyid:37:D2:7F:C2:44:43:FC:DD:4B:1B:65:CF:C8:07:8C:4A:14:28:9F:9E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/N9J_wkRD_N1LG2XPyAeMShQon54.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/d8c58d-8d24-4280-91fd-48b1664d40d5/1/N9J_wkRD_N1LG2XPyAeMShQon54.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/d8c58d-8d24-4280-91fd-48b1664d40d5/1/N9J_wkRD_N1LG2XPyAeMShQon54.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
25:c6:c6:f3:ad:91:09:96:bc:8b:73:f5:52:20:7a:fa:74:0c:
46:d0:45:07:ee:f8:4b:e8:68:46:a8:d5:a1:a0:61:bd:e1:5d:
be:16:77:4b:cc:be:bb:1e:94:7e:b8:a6:d3:bd:19:23:cc:48:
38:d3:3e:59:51:c7:70:67:e0:07:eb:78:1c:3a:d1:ca:b4:50:
c8:2b:2c:8b:1e:3f:76:4e:1f:fa:ac:82:7a:d4:9a:c7:d0:50:
33:1b:fb:ec:d6:da:6b:61:e4:4c:5e:1e:57:16:c2:65:6c:82:
37:d2:07:7a:39:53:fc:64:5c:da:10:98:5a:92:5b:3f:0f:eb:
85:95:b1:e0:42:98:8e:3d:4e:c4:3f:96:41:e3:ea:cf:32:c6:
a0:11:15:a3:fe:e9:7e:ea:5b:ce:66:5d:6a:6c:48:f0:a3:b0:
26:d5:ab:ee:dd:3f:4f:09:5d:a4:6c:97:c4:9a:44:47:6a:c2:
10:09:33:15:cc:d9:af:c5:14:7a:fb:a8:dd:86:ec:01:68:81:
f0:56:0f:4a:93:78:78:8d:aa:b2:60:b3:81:9b:aa:bd:50:69:
6b:b0:24:6a:ba:1f:84:d7:7a:1e:bf:f0:87:45:4c:0d:82:47:
ba:26:f7:af:9f:8f:b9:a1:81:62:ac:49:3b:3b:b2:ec:ec:fe:
75:ef:ef:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 27 10:46:02 2025 by rpki-client