Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e1/2155f1-976a-4f7e-95a4-076e1d77aebe/1/N2AlOewyw5Gf8cvJWU3cq4FWdMU.mft
File: N2AlOewyw5Gf8cvJWU3cq4FWdMU.mft (raw, json)
Hash identifier: ryRtfeKPCqT5nbiHFbC2b2F66Z0yRpBb8j2fCqxDSLU=
Subject key identifier: 41:D1:9B:4E:2F:08:87:15:D2:71:91:86:09:FB:AD:28:FC:C4:D5:AF
Authority key identifier: 37:60:25:39:EC:32:C3:91:9F:F1:CB:C9:59:4D:DC:AB:81:56:74:C5
Certificate issuer: /CN=37602539ec32c3919ff1cbc9594ddcab815674c5
Certificate serial: 019A4E862FC7B6387FF8B1DC580DF91CF855
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/N2AlOewyw5Gf8cvJWU3cq4FWdMU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e1/2155f1-976a-4f7e-95a4-076e1d77aebe/1/N2AlOewyw5Gf8cvJWU3cq4FWdMU.mft
Manifest number: 0DC3
Signing time: Tue 04 Nov 2025 11:00:07 +0000
Manifest this update: Tue 04 Nov 2025 11:00:07 +0000
Manifest next update: Wed 05 Nov 2025 11:00:07 +0000
Files and hashes: 1: 8OUuy6RxMKAA3VbPAT05z8x14Y0.roa (hash: /S82CRuIWRkEgkIG58XNeFsI8Jv6K3dyodJP/54XncE=)
2: N2AlOewyw5Gf8cvJWU3cq4FWdMU.crl (hash: A4519s+eTmW+DvbKgvLUVc9WDjwP8F8aAM165hqWNxY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e1/2155f1-976a-4f7e-95a4-076e1d77aebe/1/N2AlOewyw5Gf8cvJWU3cq4FWdMU.crl
rsync://rpki.ripe.net/repository/DEFAULT/e1/2155f1-976a-4f7e-95a4-076e1d77aebe/1/N2AlOewyw5Gf8cvJWU3cq4FWdMU.mft
rsync://rpki.ripe.net/repository/DEFAULT/N2AlOewyw5Gf8cvJWU3cq4FWdMU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:86:2f:c7:b6:38:7f:f8:b1:dc:58:0d:f9:1c:f8:55
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=37602539ec32c3919ff1cbc9594ddcab815674c5
Validity
Not Before: Nov 4 11:00:07 2025 GMT
Not After : Nov 5 11:00:07 2025 GMT
Subject: CN=41d19b4e2f088715d271918609fbad28fcc4d5af
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:88:23:84:6b:75:b8:40:83:16:2f:02:5c:31:
93:7e:68:f0:8a:1d:99:ea:dd:a8:3d:94:1f:c7:1f:
51:4a:f9:c9:29:fb:d5:d1:77:63:1c:bb:f4:7b:e2:
dd:79:81:6e:b6:9b:84:c6:fd:4e:e4:33:c4:75:1c:
a3:aa:8a:fc:d7:4c:25:ca:18:fa:03:e4:7e:11:01:
42:df:0d:b0:45:37:9c:21:fa:a0:ab:c7:30:38:1d:
25:bb:04:d5:3e:60:db:1d:21:a2:35:46:05:54:38:
f7:dd:39:88:f9:82:46:fc:58:ad:fb:9e:b1:3a:87:
3c:0d:90:54:ff:0b:bd:1d:5b:32:9f:a4:07:f0:3d:
74:d0:71:36:88:be:28:9d:16:24:3d:34:ef:c0:01:
51:6f:ee:64:90:21:95:01:4b:b0:2c:05:6c:e3:71:
c3:c0:2a:f4:63:80:b7:5f:e1:40:fa:1e:3b:83:4e:
49:7b:d7:ec:b1:c2:11:03:96:93:70:32:66:8e:b7:
cc:bd:01:51:ec:6d:4a:e3:44:be:90:85:39:e6:1e:
4a:f7:1f:2a:ad:cb:b1:5f:d7:14:74:24:14:ee:1b:
ab:7d:76:86:c7:a1:6c:bb:70:9d:f0:d0:0d:b7:88:
ac:87:19:d6:ba:2f:fb:b3:2d:d9:61:58:51:1a:76:
b8:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:D1:9B:4E:2F:08:87:15:D2:71:91:86:09:FB:AD:28:FC:C4:D5:AF
X509v3 Authority Key Identifier:
keyid:37:60:25:39:EC:32:C3:91:9F:F1:CB:C9:59:4D:DC:AB:81:56:74:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/N2AlOewyw5Gf8cvJWU3cq4FWdMU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/2155f1-976a-4f7e-95a4-076e1d77aebe/1/N2AlOewyw5Gf8cvJWU3cq4FWdMU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/2155f1-976a-4f7e-95a4-076e1d77aebe/1/N2AlOewyw5Gf8cvJWU3cq4FWdMU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
23:c0:2d:16:e8:ed:e0:73:aa:2e:af:e0:89:a4:ce:ed:08:6a:
d5:80:6d:9f:34:64:72:55:48:8f:60:31:e0:f3:55:5f:dd:45:
99:90:f6:44:1c:f2:e9:f2:7b:79:2b:e7:d8:fd:fe:a3:ba:66:
95:6b:ac:db:f2:6c:c3:08:b6:54:4d:86:dc:43:eb:89:3b:3f:
3c:28:be:65:13:47:19:3a:b2:a6:62:f1:52:b6:7d:53:64:7e:
97:31:dc:d9:28:1c:ea:0d:f0:d1:e9:da:fd:38:61:ce:64:f6:
35:e7:07:e4:ef:d3:e9:be:77:7a:e1:03:ff:e6:a8:ca:ee:fa:
7b:77:2d:c1:df:cd:08:d6:e4:d4:ed:5a:4f:50:8e:8d:e0:56:
5f:37:3e:56:1b:3d:8e:e1:5e:8b:86:96:01:a1:fb:ca:09:0d:
8e:50:8d:7c:62:51:42:68:de:5d:2e:ba:e8:07:e7:5a:ad:de:
cd:64:e8:18:79:29:7e:35:96:f7:a6:ab:bc:a8:c3:c6:9c:0f:
89:67:2f:cb:bc:c0:70:b6:d0:8b:81:e5:2a:69:27:83:3c:74:
87:0d:42:d6:ae:84:07:d2:40:a9:8b:ba:54:07:de:6b:d0:03:
d1:79:f6:8f:4c:39:89:82:06:cf:59:07:76:0c:aa:08:3a:89:
11:ae:93:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 14:42:05 2025 by rpki-client