Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/9678f9-9dfe-4b39-a80b-c54af960ef18/1/N6lZHUhfwNCQKom-hBijuxJ1BqU.mft
File: N6lZHUhfwNCQKom-hBijuxJ1BqU.mft (raw, json)
Hash identifier: qg/+DZT19TFvs/Opx8RL8ow9lWt2VZTApy5Xu6SEvnc=
Subject key identifier: CE:A6:AA:AF:79:D5:FB:B7:AD:20:26:85:69:52:67:25:49:ED:51:37
Authority key identifier: 37:A9:59:1D:48:5F:C0:D0:90:2A:89:BE:84:18:A3:BB:12:75:06:A5
Certificate issuer: /CN=37a9591d485fc0d0902a89be8418a3bb127506a5
Certificate serial: 019A4D3CBD3CD2528CA35C9068276615324E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/N6lZHUhfwNCQKom-hBijuxJ1BqU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/9678f9-9dfe-4b39-a80b-c54af960ef18/1/N6lZHUhfwNCQKom-hBijuxJ1BqU.mft
Manifest number: 06E7
Signing time: Tue 04 Nov 2025 05:00:17 +0000
Manifest this update: Tue 04 Nov 2025 05:00:17 +0000
Manifest next update: Wed 05 Nov 2025 05:00:17 +0000
Files and hashes: 1: N6lZHUhfwNCQKom-hBijuxJ1BqU.crl (hash: wor3dW6RhqOz9zzcfbHLxZjoA2O1aSPtMxXKMlsw4tY=)
2: vUnbbu8skzS26iiXfWJzScSr25E.roa (hash: ImAxTHT0Xe4VXBRsFAB4OoUTkv7HmDfrBn2Cev7GldU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/00/9678f9-9dfe-4b39-a80b-c54af960ef18/1/N6lZHUhfwNCQKom-hBijuxJ1BqU.crl
rsync://rpki.ripe.net/repository/DEFAULT/00/9678f9-9dfe-4b39-a80b-c54af960ef18/1/N6lZHUhfwNCQKom-hBijuxJ1BqU.mft
rsync://rpki.ripe.net/repository/DEFAULT/N6lZHUhfwNCQKom-hBijuxJ1BqU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 05:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4d:3c:bd:3c:d2:52:8c:a3:5c:90:68:27:66:15:32:4e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=37a9591d485fc0d0902a89be8418a3bb127506a5
Validity
Not Before: Nov 4 05:00:17 2025 GMT
Not After : Nov 5 05:00:17 2025 GMT
Subject: CN=cea6aaaf79d5fbb7ad2026856952672549ed5137
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:53:ec:e2:12:80:4e:fd:16:02:ff:5a:bf:78:
e5:20:e4:11:d9:ae:36:d1:ce:5b:00:ef:61:bf:17:
d2:b1:45:e6:87:ae:68:71:a3:f6:66:b4:ae:8a:38:
a8:93:2e:d3:be:90:3f:47:14:fb:75:7a:a1:f2:0f:
12:39:2b:dc:4f:6e:d7:a5:7f:ba:13:87:67:2c:d6:
d9:04:82:26:96:1e:9d:41:fa:28:f0:78:ba:e0:60:
5b:fb:77:40:c8:7f:7d:29:1f:cc:85:7d:22:86:99:
0d:34:e2:0c:ee:71:ef:de:6d:45:6c:2d:80:97:0b:
e1:65:f0:94:29:0e:6c:73:0d:dc:36:43:0c:6d:77:
23:32:46:5c:a6:35:a0:49:fd:a8:7d:f2:e0:0e:6d:
4a:1f:0b:45:47:0b:a1:c6:47:a0:40:5b:f8:85:b2:
87:54:c1:08:cf:f5:12:09:aa:a7:db:36:75:7e:17:
ee:e4:39:84:aa:80:f1:d0:8d:2a:65:e0:a1:c4:02:
02:41:f9:f4:04:ee:6e:65:8b:43:7f:93:15:bd:17:
7e:85:73:79:f4:d3:00:85:9c:43:56:d5:bc:2d:19:
fa:48:b5:26:cf:20:ed:b5:d3:55:68:79:f9:9b:9e:
70:14:a4:fb:e4:0b:92:5e:21:b7:ce:33:0f:60:30:
48:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:A6:AA:AF:79:D5:FB:B7:AD:20:26:85:69:52:67:25:49:ED:51:37
X509v3 Authority Key Identifier:
keyid:37:A9:59:1D:48:5F:C0:D0:90:2A:89:BE:84:18:A3:BB:12:75:06:A5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/N6lZHUhfwNCQKom-hBijuxJ1BqU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/9678f9-9dfe-4b39-a80b-c54af960ef18/1/N6lZHUhfwNCQKom-hBijuxJ1BqU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/9678f9-9dfe-4b39-a80b-c54af960ef18/1/N6lZHUhfwNCQKom-hBijuxJ1BqU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
19:3a:a6:e3:ae:7c:ec:89:fe:98:29:0c:40:8a:d4:fe:fc:44:
b1:be:73:4b:49:c4:a3:a2:e3:e5:84:01:b6:29:85:4d:82:6a:
f7:a9:08:71:2c:3b:a9:24:ac:d5:c1:45:a1:9b:00:4b:d6:c2:
29:08:35:14:e6:d2:bb:92:b0:a5:5b:85:e2:97:2c:08:9d:fb:
d5:cd:72:db:8d:9a:16:84:73:e2:70:43:ab:37:08:de:55:9c:
a8:5a:89:53:80:6d:d5:ca:49:ca:59:62:92:cb:ba:df:02:f3:
f4:2f:8d:26:3c:22:45:a5:b9:67:13:89:d6:06:0c:ec:81:9d:
78:93:1e:d4:c6:4a:67:9b:cf:1f:93:f3:65:36:f2:6b:5b:45:
87:ae:0a:ec:72:ad:ea:74:1c:84:13:cd:4e:10:fc:b3:c2:f2:
86:28:0d:43:29:fa:e6:e1:ea:3a:48:e9:3e:88:3c:2c:9d:3e:
19:b6:e0:03:38:cf:17:50:7a:97:16:4c:b2:f0:52:7a:b3:a9:
9a:9f:94:9f:79:83:19:25:a9:eb:8d:ab:cc:5b:89:17:26:af:
4a:cb:64:d4:99:d4:02:7d:75:0e:a5:df:d9:8f:96:bc:aa:2b:
cf:be:17:41:78:d2:a5:bf:a8:6c:45:a7:35:0f:b3:bb:b2:db:
f1:e7:8d:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 14:47:05 2025 by rpki-client