Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/208129-d086-49d4-9dc7-5a9ac7f39023/1/N3vRD32QbBMcjJ4vxzFkFt9K4iQ.mft
File: N3vRD32QbBMcjJ4vxzFkFt9K4iQ.mft (raw, json)
Hash identifier: Mu/5PUP6JW1QBtoKxx1NAbhdGl6ofYHoy+ZvhaCGZDA=
Subject key identifier: 80:FC:F2:F7:1E:15:0F:13:29:CD:A0:A6:2F:F7:58:17:93:9C:C2:F8
Authority key identifier: 37:7B:D1:0F:7D:90:6C:13:1C:8C:9E:2F:C7:31:64:16:DF:4A:E2:24
Certificate issuer: /CN=377bd10f7d906c131c8c9e2fc7316416df4ae224
Certificate serial: 019A503D9DD06CE7FD8E2EA04F385A5793B7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/N3vRD32QbBMcjJ4vxzFkFt9K4iQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/208129-d086-49d4-9dc7-5a9ac7f39023/1/N3vRD32QbBMcjJ4vxzFkFt9K4iQ.mft
Manifest number: 0E94
Signing time: Tue 04 Nov 2025 19:00:06 +0000
Manifest this update: Tue 04 Nov 2025 19:00:06 +0000
Manifest next update: Wed 05 Nov 2025 19:00:06 +0000
Files and hashes: 1: N3vRD32QbBMcjJ4vxzFkFt9K4iQ.crl (hash: x0tpXD0ZSKKBYbi+r2qR+3nfgUOzraleyaMJqUaav4M=)
2: OMa6gi_iwh1hBu7tbqj9s02UqHs.roa (hash: MtN6hH7mkES8J6BxizWre+aErU3W714/kzoONVlpny4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/17/208129-d086-49d4-9dc7-5a9ac7f39023/1/N3vRD32QbBMcjJ4vxzFkFt9K4iQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/17/208129-d086-49d4-9dc7-5a9ac7f39023/1/N3vRD32QbBMcjJ4vxzFkFt9K4iQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/N3vRD32QbBMcjJ4vxzFkFt9K4iQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 18:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:50:3d:9d:d0:6c:e7:fd:8e:2e:a0:4f:38:5a:57:93:b7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=377bd10f7d906c131c8c9e2fc7316416df4ae224
Validity
Not Before: Nov 4 19:00:06 2025 GMT
Not After : Nov 5 19:00:06 2025 GMT
Subject: CN=80fcf2f71e150f1329cda0a62ff75817939cc2f8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:7e:af:e0:2b:66:1d:ee:0f:ad:f7:3f:0d:5f:
ba:a6:33:05:2e:f2:62:43:d2:6d:68:11:6c:59:f0:
5d:93:ac:e9:f9:0c:27:3b:ba:48:13:c4:e2:f6:42:
d0:3d:76:87:7d:d2:4d:ca:c8:2b:46:db:2f:bf:7d:
bd:74:e9:13:3d:92:7a:88:37:b4:e1:8e:0d:71:59:
0f:c5:0c:62:c7:d9:7a:fd:88:59:b2:4e:45:29:d9:
af:02:6c:6c:d1:eb:e4:29:31:76:f0:c2:34:ff:5e:
fb:91:8f:3d:1d:89:d3:ba:0a:35:f4:24:6e:5a:e0:
6d:62:64:4d:a0:e8:97:9f:9c:71:b1:3e:14:88:fe:
93:52:b8:45:d4:17:35:bb:d2:c6:19:7b:86:de:0b:
7c:26:ed:ce:35:5b:fb:79:b8:e5:1f:bc:77:5c:89:
34:65:3a:e7:29:30:56:96:20:d6:ee:0d:7c:a4:f5:
07:f5:e1:b4:2e:21:a4:7f:c9:93:b2:f1:4d:28:30:
71:67:34:f5:1f:a5:52:b7:4d:4f:73:8f:5f:44:ad:
8c:25:ef:62:7b:6a:20:ec:5a:07:10:30:4d:cf:27:
26:43:70:1f:53:f6:75:a0:ce:96:75:10:e9:f4:b6:
a8:d7:69:41:b8:4e:0c:f6:52:f2:84:ad:78:4d:65:
3a:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:FC:F2:F7:1E:15:0F:13:29:CD:A0:A6:2F:F7:58:17:93:9C:C2:F8
X509v3 Authority Key Identifier:
keyid:37:7B:D1:0F:7D:90:6C:13:1C:8C:9E:2F:C7:31:64:16:DF:4A:E2:24
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/N3vRD32QbBMcjJ4vxzFkFt9K4iQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/208129-d086-49d4-9dc7-5a9ac7f39023/1/N3vRD32QbBMcjJ4vxzFkFt9K4iQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/17/208129-d086-49d4-9dc7-5a9ac7f39023/1/N3vRD32QbBMcjJ4vxzFkFt9K4iQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
49:a9:fd:45:58:bc:a0:fe:2a:da:16:dd:39:b2:1d:9b:e4:b0:
b2:65:94:d7:1c:f3:b4:24:99:fb:bc:69:3d:6f:44:c5:b9:2d:
65:61:cd:6d:84:16:c4:d8:70:39:7b:13:22:9f:64:54:7a:e1:
04:d3:f5:85:38:4e:ba:21:f1:d8:03:d2:bc:10:61:aa:30:62:
70:83:75:b4:5c:22:7c:77:2c:7f:ab:6c:96:69:df:82:8c:3b:
3f:ab:ca:c8:a6:f4:88:7a:fd:2c:04:60:00:e1:b6:b3:05:2e:
af:d1:e3:e6:82:98:65:df:85:af:bf:3c:73:4a:e6:69:c1:e1:
d0:5b:9c:df:90:15:3a:8c:44:49:6e:36:c2:34:d1:93:f3:c0:
c4:74:bd:ce:1e:4c:d5:c2:d1:3f:dc:45:a6:a5:21:5b:3c:64:
96:86:a7:fd:81:f4:92:63:f3:d8:33:86:d0:9c:eb:7f:de:74:
56:67:a0:7f:92:4e:4f:e2:84:5b:f6:e8:d9:90:d0:6e:fa:12:
e9:8d:5d:8e:82:c2:be:d0:3e:4e:49:67:3a:b3:14:94:d6:08:
a3:00:1c:05:4b:fe:b9:79:8e:33:34:05:42:a6:7e:e6:5b:89:
69:55:40:32:a8:ab:e0:c4:44:46:da:e1:4e:18:8d:2d:ac:b3:
9a:7d:9a:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 00:23:08 2025 by rpki-client