Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b9/84179d-4c65-44b8-b30b-5dabb4e47abb/1/N2ieqsuvaK810_r7lnTeSKb8CXg.mft
File: N2ieqsuvaK810_r7lnTeSKb8CXg.mft (raw, json)
Hash identifier: /G7xuekPDlT9jtC12Y0kCsy2KwX1lx9hNSouWWG8krk=
Subject key identifier: BF:CA:3B:D3:F4:1A:A7:81:C2:52:3A:3B:15:B2:7E:07:79:25:78:47
Authority key identifier: 37:68:9E:AA:CB:AF:68:AF:35:D3:FA:FB:96:74:DE:48:A6:FC:09:78
Certificate issuer: /CN=37689eaacbaf68af35d3fafb9674de48a6fc0978
Certificate serial: 019A51511E24ECAEB62DC6F73DE02F05F60E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/N2ieqsuvaK810_r7lnTeSKb8CXg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b9/84179d-4c65-44b8-b30b-5dabb4e47abb/1/N2ieqsuvaK810_r7lnTeSKb8CXg.mft
Manifest number: 0DB9
Signing time: Wed 05 Nov 2025 00:01:01 +0000
Manifest this update: Wed 05 Nov 2025 00:01:01 +0000
Manifest next update: Thu 06 Nov 2025 00:01:01 +0000
Files and hashes: 1: N2ieqsuvaK810_r7lnTeSKb8CXg.crl (hash: 2oCdJTtjU5XUYBTbhzOIwe9tjMWoWAkm/9OnJGQepPU=)
2: XD9exolZuPQ40dkfdus25Vf9rII.roa (hash: FmLN+c/lhCwCKONje2+AaEBWa+VnuluALCFAOq2/rro=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b9/84179d-4c65-44b8-b30b-5dabb4e47abb/1/N2ieqsuvaK810_r7lnTeSKb8CXg.crl
rsync://rpki.ripe.net/repository/DEFAULT/b9/84179d-4c65-44b8-b30b-5dabb4e47abb/1/N2ieqsuvaK810_r7lnTeSKb8CXg.mft
rsync://rpki.ripe.net/repository/DEFAULT/N2ieqsuvaK810_r7lnTeSKb8CXg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 22:37:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:51:51:1e:24:ec:ae:b6:2d:c6:f7:3d:e0:2f:05:f6:0e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=37689eaacbaf68af35d3fafb9674de48a6fc0978
Validity
Not Before: Nov 5 00:01:01 2025 GMT
Not After : Nov 6 00:01:01 2025 GMT
Subject: CN=bfca3bd3f41aa781c2523a3b15b27e0779257847
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:30:20:73:b1:17:cb:99:46:1b:7a:1a:a8:1a:
6d:cd:fe:cc:05:d7:4a:03:72:8e:05:fb:d3:09:0a:
fc:28:36:1b:97:7b:22:6b:fb:30:42:fa:55:7a:fa:
2e:bb:01:bc:38:57:2c:f6:e2:c5:82:80:e2:aa:2d:
fe:43:63:31:1b:c6:c0:d9:9c:2c:04:5d:75:48:d3:
d2:69:97:59:49:ad:ca:1e:04:a8:56:49:06:9a:30:
fd:87:3f:65:19:66:c0:da:b4:4c:4b:3f:47:c1:80:
9a:14:38:c4:4a:34:90:fc:e9:78:4e:8d:5d:f2:17:
81:1d:c0:fd:1c:53:ac:28:d4:4d:fa:0e:f8:ab:3c:
d3:9a:cc:a2:3a:5a:23:72:2a:74:d5:e3:38:01:cd:
f7:08:d9:d2:ae:8e:4f:b7:09:70:a9:4e:dc:69:14:
e7:5f:ff:32:26:f3:00:59:36:18:33:61:08:af:d4:
bf:aa:21:ac:45:03:d0:e9:10:09:a3:1c:4b:90:1e:
24:f0:ca:95:9c:48:51:2e:67:ea:ca:1f:76:3f:21:
01:f5:76:f5:f2:1e:1c:fc:6a:e7:6d:80:c9:4e:ed:
fa:bb:ab:63:ce:40:c7:2a:60:e9:3c:b6:7e:69:3f:
7f:64:01:9a:35:87:8a:2e:11:0a:f2:51:98:e9:09:
79:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:CA:3B:D3:F4:1A:A7:81:C2:52:3A:3B:15:B2:7E:07:79:25:78:47
X509v3 Authority Key Identifier:
keyid:37:68:9E:AA:CB:AF:68:AF:35:D3:FA:FB:96:74:DE:48:A6:FC:09:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/N2ieqsuvaK810_r7lnTeSKb8CXg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/84179d-4c65-44b8-b30b-5dabb4e47abb/1/N2ieqsuvaK810_r7lnTeSKb8CXg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/84179d-4c65-44b8-b30b-5dabb4e47abb/1/N2ieqsuvaK810_r7lnTeSKb8CXg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1c:ae:67:6b:e6:78:65:00:84:32:c6:25:0b:e2:5f:1d:db:14:
cd:64:f6:0c:16:d3:d4:9d:8f:c1:3d:ad:d5:ce:1c:c3:54:23:
d2:00:b2:a1:78:45:70:47:6c:4f:a9:2d:36:f6:8b:7d:8a:cb:
9e:90:ba:fe:1c:c7:5a:28:ce:d3:99:fe:6e:59:96:5f:c3:b5:
9c:09:66:74:b1:76:41:bf:5d:7d:97:cc:2a:1a:81:1c:3e:f1:
e7:be:f9:9d:2f:82:b2:cd:cc:33:35:a5:97:b3:98:2c:ec:2c:
f0:45:1e:e9:2c:c1:3c:7b:52:e3:d1:5b:f4:de:ef:7d:85:35:
2b:3d:4e:ee:e2:0d:8c:64:47:37:c3:7b:76:1c:a3:d1:72:9b:
12:a8:5a:1c:f9:e8:96:77:43:96:64:b9:fd:e8:48:4e:75:43:
f8:d7:cd:78:f7:c7:fa:7f:f7:2a:ba:42:26:21:77:66:fe:2f:
28:93:11:91:98:02:53:18:66:55:df:4a:fa:7d:ae:bf:d7:f8:
5b:b9:b3:6a:5e:6c:d7:c3:ab:17:00:bf:15:bf:11:87:ed:37:
99:b1:a1:53:34:4b:a2:5a:2f:67:8a:28:56:c2:83:fd:55:cf:
eb:53:3e:29:4b:34:4b:e1:62:21:b4:9e:7a:ee:eb:15:0c:9b:
00:11:50:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 07:44:56 2025 by rpki-client