Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2f/ad8994-51f1-4b65-aca0-e15a8b70e8d2/1/N86qYmy9iQUvNUUzXf2zGhM4MAQ.mft
File: N86qYmy9iQUvNUUzXf2zGhM4MAQ.mft (raw, json)
Hash identifier: CHkd4MDOFnjkvSFU5msqRV62/ZZ7Pt5myawrILsCsss=
Subject key identifier: 99:40:4F:33:2F:69:1D:B3:C5:F1:D8:76:DC:A1:F6:2A:38:CE:48:9D
Authority key identifier: 37:CE:AA:62:6C:BD:89:05:2F:35:45:33:5D:FD:B3:1A:13:38:30:04
Certificate issuer: /CN=37ceaa626cbd89052f3545335dfdb31a13383004
Certificate serial: 019A5187F3495E15681E623FD344AC5BB648
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/N86qYmy9iQUvNUUzXf2zGhM4MAQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2f/ad8994-51f1-4b65-aca0-e15a8b70e8d2/1/N86qYmy9iQUvNUUzXf2zGhM4MAQ.mft
Manifest number: 1669
Signing time: Wed 05 Nov 2025 01:00:55 +0000
Manifest this update: Wed 05 Nov 2025 01:00:55 +0000
Manifest next update: Thu 06 Nov 2025 01:00:55 +0000
Files and hashes: 1: N86qYmy9iQUvNUUzXf2zGhM4MAQ.crl (hash: kLEGIlG7BgvZblq8/+aTR0H44w1johTFwuyRVUtbDT4=)
2: n9uV52lUlBfny_mibwK9eMiu_og.roa (hash: 54PSRM/jpJmSMS9ihIFUAJNjZSe2qLiVsg1xoZD4Jhk=)
3: spA2D5bFhwjtsAUrsUVWAYuQYCw.roa (hash: G0F7ImWqWoF9HSrIReZ5ZDnra1S9Yg59kPLrgfQKBWo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2f/ad8994-51f1-4b65-aca0-e15a8b70e8d2/1/N86qYmy9iQUvNUUzXf2zGhM4MAQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/2f/ad8994-51f1-4b65-aca0-e15a8b70e8d2/1/N86qYmy9iQUvNUUzXf2zGhM4MAQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/N86qYmy9iQUvNUUzXf2zGhM4MAQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Nov 2025 01:00:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:51:87:f3:49:5e:15:68:1e:62:3f:d3:44:ac:5b:b6:48
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=37ceaa626cbd89052f3545335dfdb31a13383004
Validity
Not Before: Nov 5 01:00:55 2025 GMT
Not After : Nov 6 01:00:55 2025 GMT
Subject: CN=99404f332f691db3c5f1d876dca1f62a38ce489d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:c0:91:f2:b4:65:c6:5e:41:2d:35:a5:da:98:
41:a4:07:3d:91:6b:a5:12:36:a4:ec:b4:23:c5:ef:
f4:ec:e6:f3:c4:84:80:73:2e:b6:70:68:73:39:67:
7c:28:b7:8a:70:37:0c:c0:6e:ae:38:32:2b:4c:d2:
21:67:94:88:a6:11:d5:40:b6:01:3b:a1:11:c1:08:
79:d8:ab:28:69:32:3b:92:7c:b5:72:94:fb:5a:3f:
83:5b:22:39:16:0d:90:aa:c4:1f:58:5b:9a:dc:98:
7c:45:76:d0:ce:e6:38:09:54:50:87:ab:83:0f:f8:
3c:c0:64:87:39:56:f8:ed:67:c1:b4:f7:ab:fa:74:
7a:fa:7b:a3:c7:5b:7f:48:5b:43:c4:60:c7:1d:1c:
dc:19:c6:43:63:a9:8c:bd:0b:3e:b7:c0:03:fb:2b:
05:34:2a:8f:7d:6a:4e:6b:7f:8d:76:0d:25:f4:25:
5e:ca:fe:86:38:f3:83:9d:2c:d6:e2:e0:05:bc:c9:
05:a9:58:ef:10:f3:41:2b:9d:31:4e:91:76:94:89:
21:60:8f:0f:af:23:b4:c1:50:de:28:fc:76:97:b6:
f7:66:8d:5c:65:da:3d:ea:1d:f6:fe:60:dc:82:9a:
81:7f:41:db:3f:d1:7a:61:99:95:cd:ec:9d:79:22:
58:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:40:4F:33:2F:69:1D:B3:C5:F1:D8:76:DC:A1:F6:2A:38:CE:48:9D
X509v3 Authority Key Identifier:
keyid:37:CE:AA:62:6C:BD:89:05:2F:35:45:33:5D:FD:B3:1A:13:38:30:04
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/N86qYmy9iQUvNUUzXf2zGhM4MAQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/ad8994-51f1-4b65-aca0-e15a8b70e8d2/1/N86qYmy9iQUvNUUzXf2zGhM4MAQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/ad8994-51f1-4b65-aca0-e15a8b70e8d2/1/N86qYmy9iQUvNUUzXf2zGhM4MAQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2a:35:4f:e0:55:c0:e0:db:63:de:53:7a:aa:01:ba:7b:9c:03:
7e:26:58:5c:f5:53:95:11:5a:a0:90:1a:c2:2f:69:c6:b3:26:
f5:d9:0d:67:33:e9:d5:86:73:c1:63:21:35:c4:52:bc:7a:fa:
b1:24:6e:7c:38:7f:42:bf:c0:f1:f2:87:58:db:dd:94:b5:0c:
b6:e5:44:d2:8b:76:23:6a:7b:13:b8:1a:16:c7:90:7e:69:cc:
37:48:bb:44:de:67:fe:e5:37:2b:56:8e:73:27:da:67:92:5d:
76:0a:31:6c:20:c3:23:06:c4:c6:d4:5e:fd:33:0d:71:9e:72:
b5:ed:83:dc:80:c5:89:b4:5c:05:e4:e0:64:93:a1:61:d6:00:
03:e2:de:5a:65:1b:9a:b6:6b:3a:76:05:c0:12:0c:f2:ba:dd:
49:2f:e6:e8:dc:7a:8b:60:84:5b:75:f1:42:93:15:09:89:b0:
2c:7b:c5:be:a3:4a:33:c0:f7:c2:0e:2a:88:1c:ba:dc:53:3d:
99:20:1e:f4:82:ee:b0:73:b2:63:3e:5d:d7:cf:e3:6e:14:49:
1c:27:b0:d7:27:4b:f2:98:92:61:f1:01:e5:ea:39:86:b6:d9:
5d:e2:b5:01:0d:2e:06:f0:3a:80:21:5e:02:59:2c:df:ef:84:
d0:3e:e8:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 09:03:35 2025 by rpki-client