Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/1bdda9-64ec-4fb6-8b40-f4b9da480ee2/1/N4qm7UtsrGs6UpYbz6Ipz9oACA4.mft
File: N4qm7UtsrGs6UpYbz6Ipz9oACA4.mft (raw, json)
Hash identifier: Yx9T+Oxw91yqziZd2PKJyznT1Xajs9G+I5O5Rm8cq/w=
Subject key identifier: 16:FE:68:DA:28:68:92:5E:DB:95:77:B4:0F:9F:B6:2D:19:E9:BA:89
Authority key identifier: 37:8A:A6:ED:4B:6C:AC:6B:3A:52:96:1B:CF:A2:29:CF:DA:00:08:0E
Certificate issuer: /CN=378aa6ed4b6cac6b3a52961bcfa229cfda00080e
Certificate serial: 019A51BE549EAF32FDDCF8DF492B14A7EC05
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/N4qm7UtsrGs6UpYbz6Ipz9oACA4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/1bdda9-64ec-4fb6-8b40-f4b9da480ee2/1/N4qm7UtsrGs6UpYbz6Ipz9oACA4.mft
Manifest number: 1712
Signing time: Wed 05 Nov 2025 02:00:19 +0000
Manifest this update: Wed 05 Nov 2025 02:00:19 +0000
Manifest next update: Thu 06 Nov 2025 02:00:19 +0000
Files and hashes: 1: MstP95zOzuruszF1xnk5WwohZes.roa (hash: Dd3ffiYJWQ1ODq8HBmZJ5uvdbho1vmy4ZZ9l1KbRzqQ=)
2: N4qm7UtsrGs6UpYbz6Ipz9oACA4.crl (hash: /PeyMPv1/f9uql51cTFIkjzp8c7D33fO4fMxBB41euk=)
3: hZQ03z7hQseGqeqTK23z9sR3KoU.roa (hash: BE/vA6xe/FX485GgKXSnHBPVCcNJNeizsyA4atJDjzU=)
4: mZJe0dOtlVGQXR5nCGtTxDjtYUg.roa (hash: vhmVQoIhA3FIJBKAD6bm8klXoG45fnkM5F0sTYLfvS8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/09/1bdda9-64ec-4fb6-8b40-f4b9da480ee2/1/N4qm7UtsrGs6UpYbz6Ipz9oACA4.crl
rsync://rpki.ripe.net/repository/DEFAULT/09/1bdda9-64ec-4fb6-8b40-f4b9da480ee2/1/N4qm7UtsrGs6UpYbz6Ipz9oACA4.mft
rsync://rpki.ripe.net/repository/DEFAULT/N4qm7UtsrGs6UpYbz6Ipz9oACA4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Nov 2025 02:00:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:51:be:54:9e:af:32:fd:dc:f8:df:49:2b:14:a7:ec:05
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=378aa6ed4b6cac6b3a52961bcfa229cfda00080e
Validity
Not Before: Nov 5 02:00:19 2025 GMT
Not After : Nov 6 02:00:19 2025 GMT
Subject: CN=16fe68da2868925edb9577b40f9fb62d19e9ba89
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:36:49:b2:56:9a:a3:50:59:ef:96:5a:cd:07:
44:57:e5:ff:c8:c6:08:51:60:cd:c8:74:80:61:d7:
56:22:22:53:49:ed:bd:f5:9a:ab:17:9f:54:56:fb:
03:51:39:39:66:43:2d:06:f4:97:da:db:3e:66:2f:
5d:a0:f0:6c:56:d1:67:da:f9:76:ed:bc:05:eb:2b:
82:ce:ea:e5:7c:cf:36:49:e1:d6:26:78:47:7e:b2:
01:1f:d9:3f:10:b1:27:a4:58:1b:b6:f9:a6:7a:59:
81:fb:05:4c:10:d3:e8:10:76:6d:a1:3c:01:cc:0f:
0d:0e:8d:1d:71:72:36:13:f9:cf:fa:bb:6d:9b:0c:
3e:d5:20:f3:37:a6:60:dd:b7:a5:a5:56:7e:6b:97:
3b:b9:fb:35:98:fe:bb:86:e6:d7:70:6f:bc:d1:d9:
d0:37:24:92:af:f7:54:7d:8d:fb:fb:91:b8:e7:62:
a5:5f:ac:54:d7:38:02:b0:33:6e:31:d7:72:41:a7:
03:6d:49:fa:f3:c1:46:75:f2:1b:50:16:3a:99:c7:
5a:58:99:81:4f:bc:a6:1c:7b:d6:22:06:ce:37:b0:
af:64:6b:87:e7:3c:7e:f9:8e:3e:30:74:38:91:11:
ce:c5:9c:57:cc:82:8b:0f:71:0a:92:37:8f:b4:16:
b2:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:FE:68:DA:28:68:92:5E:DB:95:77:B4:0F:9F:B6:2D:19:E9:BA:89
X509v3 Authority Key Identifier:
keyid:37:8A:A6:ED:4B:6C:AC:6B:3A:52:96:1B:CF:A2:29:CF:DA:00:08:0E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/N4qm7UtsrGs6UpYbz6Ipz9oACA4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/1bdda9-64ec-4fb6-8b40-f4b9da480ee2/1/N4qm7UtsrGs6UpYbz6Ipz9oACA4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/09/1bdda9-64ec-4fb6-8b40-f4b9da480ee2/1/N4qm7UtsrGs6UpYbz6Ipz9oACA4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ba:eb:cf:ad:82:73:74:02:cf:4b:84:63:ad:20:53:56:f3:a4:
95:cd:53:1a:ed:1c:0a:11:41:7a:2a:3f:84:29:40:73:1e:2b:
8e:15:c3:cf:59:48:1d:db:27:d5:eb:70:2e:0d:e1:b3:c2:bb:
7c:ca:08:86:48:ae:70:5a:ab:96:cf:69:67:3e:ef:42:1e:ab:
2f:9f:48:39:f3:23:21:ed:35:80:b9:d0:a3:8b:60:f4:ac:86:
b2:3a:3b:80:eb:0c:e1:fa:98:24:ab:bc:b4:a1:0a:ca:72:cd:
06:f6:90:cf:a5:8b:52:5a:21:9b:02:a1:16:23:4d:70:4f:67:
74:f4:80:39:55:3e:3e:d9:3e:51:0d:6b:a9:ee:cb:02:a8:d5:
8f:52:fe:a8:64:60:03:84:26:07:f6:81:ed:37:b8:4e:4c:6f:
35:36:41:d2:16:5a:96:c6:7a:d5:87:5b:95:9a:9d:99:2b:3f:
10:fe:fc:09:90:cd:ef:b9:5c:09:8e:4c:46:a8:be:fb:10:b0:
0e:8a:6e:84:51:67:df:16:60:a9:99:4c:2d:4d:d3:a9:ee:24:
8c:8d:c2:ab:3a:fa:71:0e:51:d6:17:da:48:c3:0b:94:f9:ee:
e7:cb:49:d4:66:d9:73:bf:e8:e0:68:15:e6:42:07:a4:8b:44:
fb:d8:14:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 09:00:12 2025 by rpki-client