Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/6b0344-8229-4d25-b498-8ce7c4fc5e0b/1/N-dRoRwaeIj6WNv8MsiVm8lGMD4.mft
File: N-dRoRwaeIj6WNv8MsiVm8lGMD4.mft (raw, json)
Hash identifier: zCnTTwQuNlwfxc9yfoR0URk6vXapPTJdoSDOhlPTBC0=
Subject key identifier: 2A:64:9B:B7:68:8C:F2:E3:3F:18:68:38:04:AC:CC:8A:8B:B9:DE:D3
Authority key identifier: 37:E7:51:A1:1C:1A:78:88:FA:58:DB:FC:32:C8:95:9B:C9:46:30:3E
Certificate issuer: /CN=37e751a11c1a7888fa58dbfc32c8959bc946303e
Certificate serial: 019A4D741E9C45E7384B7DB1422A33B73811
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/N-dRoRwaeIj6WNv8MsiVm8lGMD4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/6b0344-8229-4d25-b498-8ce7c4fc5e0b/1/N-dRoRwaeIj6WNv8MsiVm8lGMD4.mft
Manifest number: 1458
Signing time: Tue 04 Nov 2025 06:00:46 +0000
Manifest this update: Tue 04 Nov 2025 06:00:46 +0000
Manifest next update: Wed 05 Nov 2025 06:00:46 +0000
Files and hashes: 1: 1iavcJFqwR6rzZKxM06ahcbF1Us.roa (hash: AJ47Zqj/T7JKUetOVwikynuHEcJu1eg9YDS731mpe6I=)
2: N-dRoRwaeIj6WNv8MsiVm8lGMD4.crl (hash: J0eSD6MAY7t78UNqjSJrzKrXDnWSBl5MMWq4a2/cHws=)
3: dqEoxI3WEV2rOPAYE8C4EEj1ebI.roa (hash: nVo4yJxw9EhxkUipVljpw16vPXrVAlAiSw+4KWPaovY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/45/6b0344-8229-4d25-b498-8ce7c4fc5e0b/1/N-dRoRwaeIj6WNv8MsiVm8lGMD4.crl
rsync://rpki.ripe.net/repository/DEFAULT/45/6b0344-8229-4d25-b498-8ce7c4fc5e0b/1/N-dRoRwaeIj6WNv8MsiVm8lGMD4.mft
rsync://rpki.ripe.net/repository/DEFAULT/N-dRoRwaeIj6WNv8MsiVm8lGMD4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 06:00:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4d:74:1e:9c:45:e7:38:4b:7d:b1:42:2a:33:b7:38:11
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=37e751a11c1a7888fa58dbfc32c8959bc946303e
Validity
Not Before: Nov 4 06:00:46 2025 GMT
Not After : Nov 5 06:00:46 2025 GMT
Subject: CN=2a649bb7688cf2e33f18683804accc8a8bb9ded3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:f0:8d:c4:d0:27:d8:07:2e:0a:ef:e0:5a:ff:
5c:a4:cc:9c:f1:c4:03:6c:d4:83:87:d4:08:8b:03:
07:ac:fe:b0:d8:33:a7:90:5d:07:98:81:eb:3d:54:
8f:f1:34:6c:6f:66:aa:88:2d:c7:e3:60:d4:82:ad:
34:68:e6:ec:ae:80:15:89:dd:f7:cf:f9:ed:e1:a5:
a0:ed:5f:7e:65:1d:8f:03:fb:0a:e7:65:70:a6:fd:
1f:07:bc:eb:6f:e5:bc:df:72:3d:0d:b5:d7:d8:38:
72:34:59:d9:ff:25:c4:44:2f:9f:29:c1:c3:87:9a:
0e:fa:b5:0b:87:b0:e1:6b:b0:b4:9b:19:a0:22:f3:
a8:d3:64:30:5d:37:76:be:cf:f3:2a:82:a2:d9:09:
4b:0d:16:1e:47:d1:83:03:2b:53:32:fe:77:59:7b:
8b:61:10:19:ed:0b:6d:3c:dc:af:67:fc:62:f7:44:
00:c3:08:72:50:52:da:4b:88:25:df:04:91:17:5b:
52:bd:31:30:10:a6:19:ba:8d:b4:dd:da:1f:c5:02:
c3:59:2a:94:1a:ca:fb:b9:77:30:dd:2c:c8:c5:ca:
61:cf:56:e8:69:b5:f3:2d:eb:17:85:fa:35:bf:bb:
2e:43:c8:7d:e2:78:a8:ae:92:ff:33:05:af:35:cc:
f0:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:64:9B:B7:68:8C:F2:E3:3F:18:68:38:04:AC:CC:8A:8B:B9:DE:D3
X509v3 Authority Key Identifier:
keyid:37:E7:51:A1:1C:1A:78:88:FA:58:DB:FC:32:C8:95:9B:C9:46:30:3E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/N-dRoRwaeIj6WNv8MsiVm8lGMD4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/6b0344-8229-4d25-b498-8ce7c4fc5e0b/1/N-dRoRwaeIj6WNv8MsiVm8lGMD4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/45/6b0344-8229-4d25-b498-8ce7c4fc5e0b/1/N-dRoRwaeIj6WNv8MsiVm8lGMD4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
79:f0:48:cb:13:2f:3f:c0:84:84:9b:44:2a:67:5b:46:bb:e0:
18:a0:f8:e5:84:29:51:8f:ab:81:f7:7b:6a:9f:3c:a6:01:69:
88:c9:77:72:b0:9d:e3:08:55:f4:c5:5f:d4:cd:9b:d8:a6:ae:
bc:84:98:76:23:42:bb:2d:c5:9a:e7:4c:2a:58:75:1b:60:63:
ac:a4:b6:3f:49:c9:9e:67:87:e1:b1:28:bb:9e:9d:92:3a:2c:
8f:64:0e:8f:00:c0:7f:c1:99:3d:c7:4b:51:ad:ef:e8:c4:d4:
fe:4b:1c:81:46:43:56:3f:68:70:d4:84:89:09:a8:bc:13:86:
a3:81:c1:5e:f3:86:cf:75:65:50:eb:8d:de:a7:b6:75:ef:7c:
94:83:ba:cb:a4:4f:e3:10:28:23:b4:a3:e5:4f:0f:99:de:d3:
19:e3:96:2a:0f:a3:8b:5c:6f:c7:e5:9c:7a:1c:36:a0:60:7e:
4f:7f:65:57:6c:4b:0d:84:ff:98:a0:ef:89:eb:77:6c:79:52:
28:4d:b0:15:22:c7:d5:49:8b:a2:4d:87:e3:3c:14:7b:f3:fc:
ab:a3:5e:ef:62:c6:1a:cd:8d:b1:ae:48:f5:ea:91:cb:0d:37:
31:a7:71:6d:be:37:71:a5:71:76:b0:d7:39:77:ad:eb:63:ba:
79:6e:a1:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 14:42:54 2025 by rpki-client