Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e0/dc43fb-4656-4af9-aad2-ee28a65c8a22/1/N1UunJZN5v9U4JnHEVXBod7IpzA.mft
File: N1UunJZN5v9U4JnHEVXBod7IpzA.mft (raw, json)
Hash identifier: Xd66hr0BqikNGMj7/YiT7P/ikGrltL18fiBNoqMiLA0=
Subject key identifier: F8:22:BE:93:EB:5F:44:C5:8B:7A:96:09:EA:10:A7:1C:F8:01:78:04
Authority key identifier: 37:55:2E:9C:96:4D:E6:FF:54:E0:99:C7:11:55:C1:A1:DE:C8:A7:30
Certificate issuer: /CN=37552e9c964de6ff54e099c71155c1a1dec8a730
Certificate serial: 019A4D3D33794199927804F32E7238C9110B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/N1UunJZN5v9U4JnHEVXBod7IpzA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e0/dc43fb-4656-4af9-aad2-ee28a65c8a22/1/N1UunJZN5v9U4JnHEVXBod7IpzA.mft
Manifest number: 170C
Signing time: Tue 04 Nov 2025 05:00:47 +0000
Manifest this update: Tue 04 Nov 2025 05:00:47 +0000
Manifest next update: Wed 05 Nov 2025 05:00:47 +0000
Files and hashes: 1: N1UunJZN5v9U4JnHEVXBod7IpzA.crl (hash: DAn/k+0joSi+Q4OACHicsBgobZwOCasxay5EyM2+/BE=)
2: erhlDHo6u2N8SbRRVUL49trJG0Q.roa (hash: 3V4uI/Y1go20Ur/8ybcFLPuVLcruMM7J3PxGXh059Vg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e0/dc43fb-4656-4af9-aad2-ee28a65c8a22/1/N1UunJZN5v9U4JnHEVXBod7IpzA.crl
rsync://rpki.ripe.net/repository/DEFAULT/e0/dc43fb-4656-4af9-aad2-ee28a65c8a22/1/N1UunJZN5v9U4JnHEVXBod7IpzA.mft
rsync://rpki.ripe.net/repository/DEFAULT/N1UunJZN5v9U4JnHEVXBod7IpzA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 05:00:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4d:3d:33:79:41:99:92:78:04:f3:2e:72:38:c9:11:0b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=37552e9c964de6ff54e099c71155c1a1dec8a730
Validity
Not Before: Nov 4 05:00:47 2025 GMT
Not After : Nov 5 05:00:47 2025 GMT
Subject: CN=f822be93eb5f44c58b7a9609ea10a71cf8017804
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:fd:cf:21:56:0f:b5:4f:02:4f:b9:af:f2:42:
f0:0e:43:51:46:e2:a1:5d:3a:56:75:4e:95:2f:d1:
32:68:97:ae:4f:a2:68:66:82:08:28:f0:19:a8:e9:
2a:6b:f2:f1:df:63:9c:c5:aa:ae:0f:6e:97:b9:69:
89:26:12:9c:7f:fb:22:ee:a1:3a:b1:cd:9e:97:ef:
ff:6a:ec:81:03:aa:c5:e9:0b:fa:ff:fe:f5:72:b1:
7c:b1:98:35:ca:17:b8:d8:4d:ad:5b:18:c7:76:41:
e7:82:53:1e:53:f9:3a:5d:6d:63:a4:14:53:3d:32:
fe:7d:9f:a8:a5:5b:ca:15:10:45:e9:cd:19:70:e5:
ad:40:bd:9e:8a:67:6c:8a:e0:ab:c9:61:d9:dc:cf:
c5:c0:21:96:e5:04:69:58:f4:4f:1f:71:10:28:67:
06:86:55:fa:f3:71:11:75:a0:8d:9d:e1:b8:6e:5f:
42:e1:08:a3:4c:f4:9f:a3:47:23:27:db:b2:ce:0a:
92:24:c6:71:01:3a:0b:c5:28:ba:26:69:f1:bc:71:
4c:30:bf:10:54:38:d4:30:fa:87:57:13:f4:22:1d:
2b:5f:cb:9b:36:8a:24:b6:3f:f5:c3:6a:f3:82:bb:
f9:9e:a8:cf:0e:b9:96:6a:f9:e0:7d:0f:d4:82:62:
9d:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:22:BE:93:EB:5F:44:C5:8B:7A:96:09:EA:10:A7:1C:F8:01:78:04
X509v3 Authority Key Identifier:
keyid:37:55:2E:9C:96:4D:E6:FF:54:E0:99:C7:11:55:C1:A1:DE:C8:A7:30
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/N1UunJZN5v9U4JnHEVXBod7IpzA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/dc43fb-4656-4af9-aad2-ee28a65c8a22/1/N1UunJZN5v9U4JnHEVXBod7IpzA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/dc43fb-4656-4af9-aad2-ee28a65c8a22/1/N1UunJZN5v9U4JnHEVXBod7IpzA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
99:b3:b9:27:71:1d:f3:f0:21:0b:a7:27:e9:df:ca:6d:02:29:
bc:77:f0:b3:8b:0d:e6:55:2c:93:9d:67:ef:f7:2d:8a:26:ee:
f6:00:0d:d2:34:3f:41:4e:78:a3:57:04:24:9a:63:79:d5:c8:
0e:46:48:18:da:dd:b2:25:5c:5e:c7:1d:ba:a9:b7:b3:f1:62:
14:df:94:5b:53:9f:d3:bb:6a:b2:44:89:06:d8:50:44:85:f8:
2c:4a:71:42:93:c1:23:59:fc:24:c4:65:21:93:cd:f3:fc:7e:
71:47:34:09:76:55:cd:2c:0c:58:67:84:f4:3e:80:8e:f4:c2:
d3:ad:c8:2d:bf:2d:b8:9e:86:9c:aa:f6:a9:44:d6:02:7a:e8:
06:af:d0:dd:50:56:e8:e8:38:8d:20:72:d3:e4:81:0b:c1:a6:
8e:32:ac:47:6a:12:dc:f5:aa:b2:13:50:0f:19:ac:48:a8:43:
4a:9d:3c:73:8d:12:90:7f:36:96:19:42:08:63:48:93:f0:24:
f7:09:8f:19:3f:0b:77:c8:92:58:a0:29:70:76:d3:0f:bf:c4:
76:0f:62:8d:7d:93:c5:2d:d3:32:8a:5c:14:6f:a5:6c:02:3a:
c8:89:90:3e:2d:6b:05:03:d1:1f:d7:99:cb:7f:08:21:b4:22:
9b:af:d2:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 15:05:59 2025 by rpki-client