Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4f/8d1167-0c4d-488f-9a83-c0177dfda847/1/N09vPjy5c7rIpD9sC4BrPRHJrcM.mft
File: N09vPjy5c7rIpD9sC4BrPRHJrcM.mft (raw, json)
Hash identifier: ormHcFinbDUjdRGs9duCkbfXjwFSKIch+wOLm5gP6Mk=
Subject key identifier: 3A:0E:F9:AF:51:CE:3C:02:12:89:63:AA:D2:67:85:44:EA:FA:A8:BC
Authority key identifier: 37:4F:6F:3E:3C:B9:73:BA:C8:A4:3F:6C:0B:80:6B:3D:11:C9:AD:C3
Certificate issuer: /CN=374f6f3e3cb973bac8a43f6c0b806b3d11c9adc3
Certificate serial: 019A4D738AF3B9DC87E2A25099B2B7BCB2FD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/N09vPjy5c7rIpD9sC4BrPRHJrcM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4f/8d1167-0c4d-488f-9a83-c0177dfda847/1/N09vPjy5c7rIpD9sC4BrPRHJrcM.mft
Manifest number: 06C3
Signing time: Tue 04 Nov 2025 06:00:08 +0000
Manifest this update: Tue 04 Nov 2025 06:00:08 +0000
Manifest next update: Wed 05 Nov 2025 06:00:08 +0000
Files and hashes: 1: 0Kp_vvvf6gB9qqLzUTydjsFEHvg.roa (hash: oleso0bnDn/Cva++ppJhacS1E2sFVBntDJn2BA8AVW0=)
2: G4jepCncoOzlCnpnZ7cxE_Dx-eo.roa (hash: LGsZV/1AkhKvUqqsgs+A2xdwU0JvTeOBXFcZUHaT2bc=)
3: N09vPjy5c7rIpD9sC4BrPRHJrcM.crl (hash: i/Jp3/8Ms22JcmfWqPuDlMWofy0sioFVnsScFqlz3iY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4f/8d1167-0c4d-488f-9a83-c0177dfda847/1/N09vPjy5c7rIpD9sC4BrPRHJrcM.crl
rsync://rpki.ripe.net/repository/DEFAULT/4f/8d1167-0c4d-488f-9a83-c0177dfda847/1/N09vPjy5c7rIpD9sC4BrPRHJrcM.mft
rsync://rpki.ripe.net/repository/DEFAULT/N09vPjy5c7rIpD9sC4BrPRHJrcM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 06:00:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4d:73:8a:f3:b9:dc:87:e2:a2:50:99:b2:b7:bc:b2:fd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=374f6f3e3cb973bac8a43f6c0b806b3d11c9adc3
Validity
Not Before: Nov 4 06:00:08 2025 GMT
Not After : Nov 5 06:00:08 2025 GMT
Subject: CN=3a0ef9af51ce3c02128963aad2678544eafaa8bc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:82:6e:e2:a4:f4:f3:c6:74:fd:82:bb:6d:9e:
93:17:c1:c6:e4:9d:f9:a4:1d:ec:8a:38:88:94:41:
68:50:95:51:48:33:92:7f:9b:5b:ac:3b:25:89:e2:
ab:ca:d2:ee:71:bf:6b:b2:c3:9d:70:b0:d8:ce:0b:
69:ab:90:a5:63:bc:61:66:73:0c:5c:4b:f5:df:90:
4e:af:ab:52:63:c6:a6:9e:51:bb:bd:22:9f:2c:2d:
5f:c4:98:50:a9:df:b7:a7:e5:d9:4d:02:8e:dc:ea:
f6:19:17:72:fc:1c:f3:55:7b:b8:db:ae:cd:6e:d8:
27:55:7c:bc:62:c7:ae:af:01:d1:86:a8:84:f5:91:
7b:ab:70:fe:a9:c9:2b:e3:f6:eb:06:c8:e5:4c:1a:
2a:66:7d:20:66:7a:42:26:3c:16:5d:16:77:63:9a:
75:2b:11:af:c6:c9:d6:3b:57:89:be:10:88:8e:c1:
05:e3:18:4a:bc:96:66:53:ab:2d:f0:30:a1:f0:fe:
b4:fe:94:f9:60:b9:d9:ba:39:e7:1a:0f:62:c9:74:
fe:1f:f0:68:9d:6a:a7:2c:9f:fa:47:53:20:32:04:
5d:42:c1:24:a3:73:27:73:28:d1:94:48:c9:ab:0a:
77:47:9f:8a:d2:21:06:22:17:84:c8:90:9c:97:2b:
53:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:0E:F9:AF:51:CE:3C:02:12:89:63:AA:D2:67:85:44:EA:FA:A8:BC
X509v3 Authority Key Identifier:
keyid:37:4F:6F:3E:3C:B9:73:BA:C8:A4:3F:6C:0B:80:6B:3D:11:C9:AD:C3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/N09vPjy5c7rIpD9sC4BrPRHJrcM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/8d1167-0c4d-488f-9a83-c0177dfda847/1/N09vPjy5c7rIpD9sC4BrPRHJrcM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/8d1167-0c4d-488f-9a83-c0177dfda847/1/N09vPjy5c7rIpD9sC4BrPRHJrcM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5c:51:78:c1:aa:f4:08:68:a6:c3:0b:1f:b2:9d:0f:54:cb:51:
1d:a1:8a:fb:49:4b:14:f5:24:79:f1:44:02:b3:94:3b:6e:b3:
39:5b:15:0d:4a:c9:55:98:32:21:e3:95:f4:a3:e1:ca:93:fd:
41:3b:2a:2a:e9:5a:b5:52:be:a3:43:33:bc:d9:52:72:2a:65:
17:3a:af:6f:69:71:86:2a:97:7a:40:dc:bd:52:55:dd:63:6a:
00:24:3f:8f:f3:e0:9b:5f:f5:a2:de:68:5c:eb:5e:e4:0c:d5:
2f:39:f4:ac:98:dc:c8:fc:4a:94:6f:e3:53:8e:61:6a:74:1b:
48:22:58:42:f7:f5:46:2c:fd:f3:3d:2d:35:f8:3d:a7:37:19:
a1:b3:36:da:04:89:ec:46:08:55:38:b9:47:55:df:79:b0:62:
a2:c9:bc:29:0d:eb:16:23:60:89:01:0f:7c:ba:f4:1c:15:b8:
53:fb:30:32:74:5e:c4:c2:78:7d:8c:8a:1b:5a:ff:f7:f5:aa:
cb:33:0b:28:e7:14:5e:13:e5:4b:da:24:91:fe:7f:82:1a:b3:
a8:72:e3:15:59:f1:65:98:aa:12:f3:d3:de:54:8a:e7:34:f4:
f4:65:8a:44:c0:55:3c:31:af:30:ee:43:1a:93:0e:87:e1:ba:
bc:51:57:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 14:40:55 2025 by rpki-client