Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2b/523c7d-3917-4137-9df3-abea625868a8/1/N8ZRc24kPV6mzsymOv20oDEtdzA.mft
File: N8ZRc24kPV6mzsymOv20oDEtdzA.mft (raw, json)
Hash identifier: HVI6bpvPRbcvCKNFbrPn2eBQpbZaXGYbZ+PY512I5b8=
Subject key identifier: B1:B9:96:9C:F5:A4:DE:E9:BC:7E:F6:9C:61:52:87:FB:15:5C:B6:31
Authority key identifier: 37:C6:51:73:6E:24:3D:5E:A6:CE:CC:A6:3A:FD:B4:A0:31:2D:77:30
Certificate issuer: /CN=37c651736e243d5ea6cecca63afdb4a0312d7730
Certificate serial: 019A533F0DE1EA31B69A45ABBD94428B3C66
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/N8ZRc24kPV6mzsymOv20oDEtdzA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2b/523c7d-3917-4137-9df3-abea625868a8/1/N8ZRc24kPV6mzsymOv20oDEtdzA.mft
Manifest number: 1710
Signing time: Wed 05 Nov 2025 09:00:32 +0000
Manifest this update: Wed 05 Nov 2025 09:00:32 +0000
Manifest next update: Thu 06 Nov 2025 09:00:32 +0000
Files and hashes: 1: N8ZRc24kPV6mzsymOv20oDEtdzA.crl (hash: NqtXIu72WL5/6ZwhmHXTeJkpCwgtRVPSf1l/kQ8of44=)
2: ZRv7bLa28b8tf6OWanURzCF5xRg.roa (hash: oK8tGS8JdWtsRZmm08fTUJdRLOafRX6MArGF8Pv/FL0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2b/523c7d-3917-4137-9df3-abea625868a8/1/N8ZRc24kPV6mzsymOv20oDEtdzA.crl
rsync://rpki.ripe.net/repository/DEFAULT/2b/523c7d-3917-4137-9df3-abea625868a8/1/N8ZRc24kPV6mzsymOv20oDEtdzA.mft
rsync://rpki.ripe.net/repository/DEFAULT/N8ZRc24kPV6mzsymOv20oDEtdzA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Nov 2025 09:00:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:53:3f:0d:e1:ea:31:b6:9a:45:ab:bd:94:42:8b:3c:66
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=37c651736e243d5ea6cecca63afdb4a0312d7730
Validity
Not Before: Nov 5 09:00:32 2025 GMT
Not After : Nov 6 09:00:32 2025 GMT
Subject: CN=b1b9969cf5a4dee9bc7ef69c615287fb155cb631
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:56:43:8a:56:70:b1:ec:82:1c:5a:e4:d6:09:
1b:d6:69:9d:70:00:e0:bb:b2:7f:94:71:f6:8e:b6:
67:2f:49:2d:37:00:d9:c0:51:78:cd:ca:30:74:49:
ac:f7:47:41:08:d9:c8:f5:be:16:44:07:8f:a9:90:
3b:9b:57:4b:c9:ca:e5:3b:5b:25:a8:a2:fb:92:36:
bf:31:16:c6:1e:93:3a:9c:41:28:e4:36:31:97:87:
d0:87:5a:90:ed:e9:38:7c:6f:b8:8a:04:34:1c:fe:
aa:b3:43:41:7e:ef:d0:9f:dc:71:84:5d:1f:e3:e3:
2e:2a:89:e9:85:04:a2:3e:1c:62:13:33:6a:83:8f:
74:b9:32:7e:fe:4a:7b:6e:73:18:b5:f9:71:85:c1:
75:61:fc:f8:e9:cf:a5:d8:5c:6e:07:8c:5e:87:ce:
45:79:78:bd:a2:50:09:37:af:ac:59:2e:c3:29:bf:
7d:30:67:68:f4:30:03:4a:2d:ac:b3:b5:45:84:5d:
df:f3:b7:01:51:9e:57:f8:93:f0:4d:56:03:d6:8f:
ba:e9:1b:40:67:8f:b4:d5:6b:40:68:1d:a3:ee:be:
92:d2:e4:dd:45:6e:36:88:6e:83:4c:47:16:9d:75:
dd:2b:12:c5:2c:78:11:ec:79:43:61:64:ac:46:f0:
7a:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:B9:96:9C:F5:A4:DE:E9:BC:7E:F6:9C:61:52:87:FB:15:5C:B6:31
X509v3 Authority Key Identifier:
keyid:37:C6:51:73:6E:24:3D:5E:A6:CE:CC:A6:3A:FD:B4:A0:31:2D:77:30
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/N8ZRc24kPV6mzsymOv20oDEtdzA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/523c7d-3917-4137-9df3-abea625868a8/1/N8ZRc24kPV6mzsymOv20oDEtdzA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/523c7d-3917-4137-9df3-abea625868a8/1/N8ZRc24kPV6mzsymOv20oDEtdzA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b0:87:8b:7b:ed:b9:97:0b:b5:3c:81:cd:18:33:40:9d:44:a8:
5a:d7:63:8f:b4:1c:2e:1f:59:52:e3:32:69:c1:0c:7e:2a:73:
d6:82:86:43:a2:80:ca:81:60:48:0f:db:28:fc:18:b3:86:17:
0c:a9:d8:1b:83:43:75:fe:df:0b:5b:7b:68:ca:cd:30:cc:ca:
7e:2e:d1:38:9e:ff:35:17:5e:0b:f7:bf:40:db:b0:11:b0:11:
92:dc:f4:65:17:4f:99:03:f8:06:c0:4a:1e:be:99:45:f7:a6:
39:c5:ec:4b:ce:e3:6b:4b:e9:7d:8e:7e:28:65:82:7f:1e:bc:
1b:e8:38:fc:bc:04:f1:c5:c8:e3:c0:3d:42:49:b3:4e:f5:7c:
63:48:10:e9:98:c2:0c:ad:3a:7c:7a:dd:4a:c7:fe:00:d7:3b:
96:f4:96:a7:4f:84:85:2c:2e:c0:64:27:f8:d6:06:ff:fd:33:
53:09:79:d4:8a:36:19:42:70:cf:ed:de:fe:d0:57:e0:15:fe:
49:e2:7e:6d:29:44:57:7c:46:bc:74:02:f3:f9:90:76:dd:01:
fe:cf:72:0b:92:65:33:ae:ac:7b:38:79:84:fa:0e:3c:de:ac:
8c:9f:2e:91:fb:fa:4f:2c:9f:cb:f7:61:96:8d:40:17:8a:ca:
bc:33:fd:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 17:54:39 2025 by rpki-client