Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/0206ff-7e87-44a6-9a56-ba3c64e14a1d/1/Njy1xqBc3UgfMEwM2V6G1yLZbTw.mft
File: Njy1xqBc3UgfMEwM2V6G1yLZbTw.mft (raw, json)
Hash identifier: U4orBASJneLOGgps6CJfGy25GsjJ17L/XFrg2FLQpI0=
Subject key identifier: D0:08:A1:0D:11:3D:68:2B:BC:86:C0:5B:EA:35:65:7F:84:E9:3E:95
Authority key identifier: 36:3C:B5:C6:A0:5C:DD:48:1F:30:4C:0C:D9:5E:86:D7:22:D9:6D:3C
Certificate issuer: /CN=363cb5c6a05cdd481f304c0cd95e86d722d96d3c
Certificate serial: 019A54C000A217C4F4F71F454AD039968F37
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Njy1xqBc3UgfMEwM2V6G1yLZbTw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/62/0206ff-7e87-44a6-9a56-ba3c64e14a1d/1/Njy1xqBc3UgfMEwM2V6G1yLZbTw.mft
Manifest number: 0381
Signing time: Wed 05 Nov 2025 16:01:00 +0000
Manifest this update: Wed 05 Nov 2025 16:01:00 +0000
Manifest next update: Thu 06 Nov 2025 16:01:00 +0000
Files and hashes: 1: Kzv57mrF6D4TzpWqRm4OMZsBabg.roa (hash: H8J62lGi+SVfaohRYvudVwS5cRkvujjbuKntKUtgcEc=)
2: Njy1xqBc3UgfMEwM2V6G1yLZbTw.crl (hash: 6aJb8pCANvoM6f57TiXl7LKe4WvcUk7MlNxb5FDLRic=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/62/0206ff-7e87-44a6-9a56-ba3c64e14a1d/1/Njy1xqBc3UgfMEwM2V6G1yLZbTw.crl
rsync://rpki.ripe.net/repository/DEFAULT/62/0206ff-7e87-44a6-9a56-ba3c64e14a1d/1/Njy1xqBc3UgfMEwM2V6G1yLZbTw.mft
rsync://rpki.ripe.net/repository/DEFAULT/Njy1xqBc3UgfMEwM2V6G1yLZbTw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Nov 2025 12:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:54:c0:00:a2:17:c4:f4:f7:1f:45:4a:d0:39:96:8f:37
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=363cb5c6a05cdd481f304c0cd95e86d722d96d3c
Validity
Not Before: Nov 5 16:01:00 2025 GMT
Not After : Nov 6 16:01:00 2025 GMT
Subject: CN=d008a10d113d682bbc86c05bea35657f84e93e95
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:2b:e6:26:44:6e:55:f8:84:1f:5b:0f:ef:63:
a1:a8:4d:4d:da:ab:81:37:ee:4a:e0:c6:42:78:55:
5b:51:e0:12:bf:92:6f:08:6b:2e:62:58:7e:ef:da:
d7:93:32:57:6e:1b:a1:4a:c5:17:fb:ae:6d:e8:ae:
10:63:c9:72:dd:7c:5e:c4:37:20:c3:e4:04:8a:ba:
53:0c:8b:c1:14:92:16:ea:7e:1a:24:1b:27:17:b6:
02:d3:26:b6:a4:ef:27:9b:11:71:7c:eb:b7:d4:6c:
8d:63:b6:a5:85:ea:f0:b2:fd:c6:ca:53:1d:aa:b3:
2d:e8:8c:41:34:4c:10:7e:0b:fe:fb:0a:80:65:60:
20:b8:74:fd:43:26:2b:c1:2a:c6:58:21:1a:c2:b4:
2f:fb:73:d9:7d:17:41:d1:ef:fa:37:57:94:1e:07:
6e:ef:63:73:9d:0e:1e:39:30:04:79:fb:6b:73:e5:
54:2f:49:50:fe:f7:a3:4a:42:7b:eb:1a:81:36:0d:
90:30:70:d8:24:fe:0b:7f:00:7d:14:ac:63:c1:52:
ae:cb:6f:0e:4e:58:e1:c4:12:c2:e1:2f:eb:88:ff:
27:fe:f6:ce:15:28:70:e1:e7:98:f8:2e:5f:2e:e5:
8b:78:97:2b:66:2d:9b:d7:6a:da:88:e4:89:47:e4:
da:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:08:A1:0D:11:3D:68:2B:BC:86:C0:5B:EA:35:65:7F:84:E9:3E:95
X509v3 Authority Key Identifier:
keyid:36:3C:B5:C6:A0:5C:DD:48:1F:30:4C:0C:D9:5E:86:D7:22:D9:6D:3C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Njy1xqBc3UgfMEwM2V6G1yLZbTw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/0206ff-7e87-44a6-9a56-ba3c64e14a1d/1/Njy1xqBc3UgfMEwM2V6G1yLZbTw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/62/0206ff-7e87-44a6-9a56-ba3c64e14a1d/1/Njy1xqBc3UgfMEwM2V6G1yLZbTw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
55:67:8d:c9:08:a0:df:ab:44:a4:d7:0a:a2:76:28:b7:f9:83:
c6:96:2d:8e:de:aa:42:1f:53:ec:39:f8:c8:71:0e:d8:b7:1f:
c4:22:82:aa:18:19:69:3b:91:c4:5a:5b:c6:ea:cc:26:57:02:
81:46:c3:e7:dc:b4:04:cd:f3:f6:d0:1e:43:eb:bd:54:2a:9e:
d0:79:44:3c:8e:43:2c:3c:cd:be:34:5e:93:72:68:ed:57:36:
ec:d1:f8:f2:cb:ab:b8:a6:36:73:ac:13:35:f0:12:66:41:ef:
c0:5b:73:c5:56:93:f7:b0:49:52:d4:77:10:0c:e9:a4:b5:07:
7f:c6:9a:e6:fb:10:09:c8:5b:39:6f:d8:fc:c9:af:a6:35:63:
c8:d9:d9:1c:f9:42:39:b0:e0:c4:00:a3:47:63:aa:4d:56:94:
55:f1:79:bf:ad:5b:49:32:a0:8a:0d:df:b6:2c:b3:78:71:52:
42:5d:8c:1f:c8:0f:0f:b6:99:ab:1b:8b:60:0b:e9:3a:7a:c4:
ae:1d:02:bf:06:bf:c4:9c:4b:58:f4:e4:4b:9a:af:d7:d6:76:
a6:a5:41:c1:82:e3:44:ea:8a:95:40:e3:ec:3d:eb:2f:62:24:
1b:0a:f4:8e:c3:d5:6b:51:fd:a7:15:dc:e8:19:f1:dd:fc:d9:
0e:ea:d7:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 18:04:35 2025 by rpki-client