Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ad/a977ea-4a93-4618-b7ff-35b21bffad4d/1/N6NS4Xr4fuLl3Bc9FVQ9pjvlVHM.mft
File: N6NS4Xr4fuLl3Bc9FVQ9pjvlVHM.mft (raw, json)
Hash identifier: kZ1ps7V/15/M51u9YZ42CnUlwf5dgDmO+i5CA/NQWCs=
Subject key identifier: C4:E9:DE:06:13:87:B3:2E:18:7C:74:1C:44:0C:44:83:57:D0:19:9E
Authority key identifier: 37:A3:52:E1:7A:F8:7E:E2:E5:DC:17:3D:15:54:3D:A6:3B:E5:54:73
Certificate issuer: /CN=37a352e17af87ee2e5dc173d15543da63be55473
Certificate serial: 019A4DE1943A6D79F9098C24245BB47EA1C6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/N6NS4Xr4fuLl3Bc9FVQ9pjvlVHM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ad/a977ea-4a93-4618-b7ff-35b21bffad4d/1/N6NS4Xr4fuLl3Bc9FVQ9pjvlVHM.mft
Manifest number: 0DBA
Signing time: Tue 04 Nov 2025 08:00:20 +0000
Manifest this update: Tue 04 Nov 2025 08:00:20 +0000
Manifest next update: Wed 05 Nov 2025 08:00:20 +0000
Files and hashes: 1: N6NS4Xr4fuLl3Bc9FVQ9pjvlVHM.crl (hash: uH7wzo8Hh2UgGgWTf3xUpkSTb3aK8z7Crta55q44AaA=)
2: w7ZlxQ56cvfd-unUwhZZ7Ey414Y.roa (hash: Sw49Q+rxJAup0a+X2SL/Sh4sYdS3S/9cJU8WjYNncf8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ad/a977ea-4a93-4618-b7ff-35b21bffad4d/1/N6NS4Xr4fuLl3Bc9FVQ9pjvlVHM.crl
rsync://rpki.ripe.net/repository/DEFAULT/ad/a977ea-4a93-4618-b7ff-35b21bffad4d/1/N6NS4Xr4fuLl3Bc9FVQ9pjvlVHM.mft
rsync://rpki.ripe.net/repository/DEFAULT/N6NS4Xr4fuLl3Bc9FVQ9pjvlVHM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 08:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4d:e1:94:3a:6d:79:f9:09:8c:24:24:5b:b4:7e:a1:c6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=37a352e17af87ee2e5dc173d15543da63be55473
Validity
Not Before: Nov 4 08:00:20 2025 GMT
Not After : Nov 5 08:00:20 2025 GMT
Subject: CN=c4e9de061387b32e187c741c440c448357d0199e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:35:ba:ce:fb:38:91:97:dd:c4:85:68:71:f5:
64:fc:d5:7d:34:dd:ac:5b:b2:32:62:76:7a:a9:02:
90:95:42:34:13:20:33:39:9a:01:75:ac:22:24:89:
96:d8:6e:bc:9c:a4:62:3a:34:f9:95:b5:12:69:c6:
8c:e3:19:18:8b:dd:6a:c2:f7:4f:5a:2b:3f:5c:f6:
b5:5b:aa:32:b2:4a:f8:b6:ae:02:71:74:96:d4:f7:
e9:55:a0:1d:3c:d4:9e:42:5c:be:27:56:ab:e3:8e:
60:23:bf:8d:9d:8a:6f:85:6a:de:50:22:4f:0f:ff:
76:71:b8:f2:09:a8:f8:da:95:b8:c1:c0:0a:15:a5:
52:73:a3:7e:0d:dc:48:a5:2e:54:1f:b1:f8:1b:fd:
55:d9:50:94:d2:cc:a7:93:77:55:3a:92:8f:8e:80:
82:b9:33:15:44:92:af:6e:91:4d:20:7c:73:e5:2e:
ea:e1:80:2d:5a:94:9d:27:48:3d:ed:6d:d4:d0:0f:
1e:fa:78:fc:49:e2:3c:30:59:02:65:0f:cd:cc:78:
5f:1f:a7:ee:a4:bc:a2:0d:4d:9b:38:e9:42:8a:15:
31:5e:b6:ca:fc:d7:84:b1:ce:cf:64:ba:24:73:28:
5c:ed:07:1a:d8:e5:8d:a2:fe:28:52:e8:bf:30:5f:
e1:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:E9:DE:06:13:87:B3:2E:18:7C:74:1C:44:0C:44:83:57:D0:19:9E
X509v3 Authority Key Identifier:
keyid:37:A3:52:E1:7A:F8:7E:E2:E5:DC:17:3D:15:54:3D:A6:3B:E5:54:73
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/N6NS4Xr4fuLl3Bc9FVQ9pjvlVHM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/a977ea-4a93-4618-b7ff-35b21bffad4d/1/N6NS4Xr4fuLl3Bc9FVQ9pjvlVHM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/a977ea-4a93-4618-b7ff-35b21bffad4d/1/N6NS4Xr4fuLl3Bc9FVQ9pjvlVHM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
33:32:46:65:52:29:aa:b6:40:2e:8b:5b:ff:f0:2f:86:02:bb:
11:89:85:96:03:13:b9:b7:f8:14:96:c3:fd:fe:10:72:03:a5:
11:88:92:02:ec:f6:90:21:de:91:89:98:7b:2a:bf:d8:5d:ed:
05:b7:c7:91:9e:7a:37:84:f0:81:ce:34:31:ce:f7:7c:86:e1:
8a:9a:3e:63:dd:af:31:df:59:0a:3c:b6:ec:77:ca:25:23:2b:
7c:ab:c4:ec:6b:25:7c:c5:bd:d1:33:01:69:d1:1c:22:c9:e0:
3b:e7:79:93:2b:f9:73:d7:2c:e2:17:58:69:3e:68:ed:72:3b:
06:fe:3a:40:f5:c3:20:cb:c7:42:61:8c:a1:81:ce:02:6d:2d:
fa:f7:9d:ed:3b:6f:ae:f7:f8:3b:bc:67:27:b1:5d:12:42:d3:
de:15:90:8a:97:84:2f:8b:fc:77:24:6c:9c:26:31:3c:cf:c6:
9b:50:97:69:a7:de:04:7f:95:8c:e1:7b:91:96:ed:91:7c:96:
cb:47:6b:25:4a:70:39:35:d2:fd:c8:38:bc:9f:89:ae:e5:6f:
30:6f:c5:eb:f7:03:7f:44:2f:8a:47:00:bd:c9:20:2a:20:b9:
99:cf:23:31:38:da:78:8f:51:ec:c2:fb:76:17:41:3a:bb:1f:
7e:45:b0:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 14:53:07 2025 by rpki-client