Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/af/46c38b-4324-44aa-9bb5-386910dcb903/1/N-DLWK4j1HOuE6c0G3pzvdECig0.mft
File: N-DLWK4j1HOuE6c0G3pzvdECig0.mft (raw, json)
Hash identifier: IGkrIpZmaN6h8KlxTJN7CkacrSh/Vjr5lSa3FrtZZYc=
Subject key identifier: A0:AB:CD:A7:2A:41:54:52:28:26:34:7D:9A:91:5E:74:14:88:50:68
Authority key identifier: 37:E0:CB:58:AE:23:D4:73:AE:13:A7:34:1B:7A:73:BD:D1:02:8A:0D
Certificate issuer: /CN=37e0cb58ae23d473ae13a7341b7a73bdd1028a0d
Certificate serial: 019A4EF5930C37053A0EE7F81639D28A5897
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/N-DLWK4j1HOuE6c0G3pzvdECig0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/af/46c38b-4324-44aa-9bb5-386910dcb903/1/N-DLWK4j1HOuE6c0G3pzvdECig0.mft
Manifest number: 1106
Signing time: Tue 04 Nov 2025 13:01:47 +0000
Manifest this update: Tue 04 Nov 2025 13:01:47 +0000
Manifest next update: Wed 05 Nov 2025 13:01:47 +0000
Files and hashes: 1: N-DLWK4j1HOuE6c0G3pzvdECig0.crl (hash: M+oe6FClQG+WRa9F3mAwl72ADI/2j+YXA6W/p6ofwQA=)
2: cxXgE4ze3p5Y_SSxlmeJ4o5QzaU.roa (hash: VnVBSnuyvJSL8u2y/xmozn76q7jfteZhwwoJt7Qqpuc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/af/46c38b-4324-44aa-9bb5-386910dcb903/1/N-DLWK4j1HOuE6c0G3pzvdECig0.crl
rsync://rpki.ripe.net/repository/DEFAULT/af/46c38b-4324-44aa-9bb5-386910dcb903/1/N-DLWK4j1HOuE6c0G3pzvdECig0.mft
rsync://rpki.ripe.net/repository/DEFAULT/N-DLWK4j1HOuE6c0G3pzvdECig0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 13:01:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:f5:93:0c:37:05:3a:0e:e7:f8:16:39:d2:8a:58:97
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=37e0cb58ae23d473ae13a7341b7a73bdd1028a0d
Validity
Not Before: Nov 4 13:01:47 2025 GMT
Not After : Nov 5 13:01:47 2025 GMT
Subject: CN=a0abcda72a4154522826347d9a915e7414885068
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:66:82:0e:8c:12:d6:b3:7a:4a:41:0b:57:db:
78:f2:e5:74:50:e8:ab:99:6d:13:d1:56:15:ce:a3:
f2:87:6d:e3:92:5e:8a:6e:13:27:91:24:82:a7:1b:
13:5a:e9:0e:6e:55:84:86:0b:dd:78:ab:80:a6:e3:
b9:6e:5f:c3:0a:36:50:ac:42:16:24:87:13:20:19:
3d:ec:cf:3d:3e:14:50:26:99:d3:4e:71:4d:d1:50:
71:9b:c8:f5:4d:27:e1:c6:9d:b9:a2:a1:6b:fc:08:
5c:e7:ea:f8:b0:81:b1:41:78:66:70:bc:13:29:fa:
f4:0a:2a:49:dd:d9:61:c0:f6:a5:64:38:06:22:65:
2e:a5:3f:05:3c:8c:a8:bd:14:4f:be:9c:93:34:01:
47:ae:45:f2:5a:6e:49:94:a0:46:3a:4a:d2:e4:30:
a2:ea:e8:fc:6e:29:75:88:f8:90:2e:50:60:35:9c:
6f:5d:27:7c:ca:29:fb:92:66:eb:d8:33:58:65:19:
62:2c:64:7f:01:d7:ad:6d:0b:dd:a5:75:d5:29:79:
3a:16:6a:0b:1c:b5:6a:04:79:c0:5c:ff:83:8a:29:
c0:0d:13:f6:1d:dc:a8:3c:24:6e:e7:93:91:4f:0d:
fb:97:7e:7b:77:6c:39:a9:b3:d7:5d:63:b2:2a:19:
2b:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:AB:CD:A7:2A:41:54:52:28:26:34:7D:9A:91:5E:74:14:88:50:68
X509v3 Authority Key Identifier:
keyid:37:E0:CB:58:AE:23:D4:73:AE:13:A7:34:1B:7A:73:BD:D1:02:8A:0D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/N-DLWK4j1HOuE6c0G3pzvdECig0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/46c38b-4324-44aa-9bb5-386910dcb903/1/N-DLWK4j1HOuE6c0G3pzvdECig0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/af/46c38b-4324-44aa-9bb5-386910dcb903/1/N-DLWK4j1HOuE6c0G3pzvdECig0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
65:a0:07:4e:ad:0a:19:73:04:e1:3b:10:46:c4:b0:95:a2:89:
c8:b7:27:6c:f7:e5:24:63:76:1f:13:ec:4e:93:2d:cb:29:08:
65:3d:32:3b:84:e0:4e:b1:4e:7b:08:7f:77:a1:bb:52:ce:2a:
8e:d8:9c:e1:8b:34:6e:e5:df:db:b7:a4:60:19:55:82:fc:1c:
2b:00:81:96:bb:c9:f1:be:cd:0f:91:9a:d0:29:3c:9d:f4:f6:
a1:db:2e:96:b8:8e:41:a3:52:32:b8:b2:85:d4:20:87:57:1d:
0b:eb:9b:c2:a2:5c:9b:a3:cc:37:8f:e1:bc:86:c2:bd:84:30:
c6:1e:5c:e5:6a:1b:e9:b6:86:9d:27:09:d7:cf:bf:16:92:22:
89:7d:9b:87:4d:8a:8d:72:93:09:45:c7:f2:08:8b:ae:48:d4:
f1:e6:8d:81:0d:fe:f7:e3:11:22:dd:7e:07:4c:b7:55:77:fe:
22:65:5c:ae:3f:22:49:ed:fd:06:e0:2e:ca:0d:8f:b4:bb:ce:
fa:78:07:3b:ed:2b:0d:13:19:f6:05:21:f6:26:83:ed:69:d3:
b4:90:c8:65:b5:8a:e3:0a:3b:d7:65:38:cd:a3:4c:86:ee:0a:
06:87:bf:99:14:c7:64:5c:68:65:43:60:9f:7d:59:17:2e:8c:
e2:6f:5e:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 20:43:45 2025 by rpki-client