Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e1/602244-7699-4103-bc7e-c4711482380e/1/N4ezJLDTL7GjZ4sCxIIobUwmug8.mft
File: N4ezJLDTL7GjZ4sCxIIobUwmug8.mft (raw, json)
Hash identifier: YZPLxeEvR1U3v7YK+azx+WNNgzatvQc4gISLZhSBxq0=
Subject key identifier: 8D:4A:29:4A:A9:6D:D0:A1:EE:A3:9E:E4:70:4F:7B:5F:0A:A2:D5:E0
Authority key identifier: 37:87:B3:24:B0:D3:2F:B1:A3:67:8B:02:C4:82:28:6D:4C:26:BA:0F
Certificate issuer: /CN=3787b324b0d32fb1a3678b02c482286d4c26ba0f
Certificate serial: 019A4F2B124265767FE4495FE72ECF33C8E1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/N4ezJLDTL7GjZ4sCxIIobUwmug8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e1/602244-7699-4103-bc7e-c4711482380e/1/N4ezJLDTL7GjZ4sCxIIobUwmug8.mft
Manifest number: 170E
Signing time: Tue 04 Nov 2025 14:00:13 +0000
Manifest this update: Tue 04 Nov 2025 14:00:13 +0000
Manifest next update: Wed 05 Nov 2025 14:00:13 +0000
Files and hashes: 1: N4ezJLDTL7GjZ4sCxIIobUwmug8.crl (hash: hkocHxmhmjeDY+zgGpYrr3pyctRY9sxDaHnd+eDRZ7I=)
2: OpF39dteeAgdG0uMSaeSye2QMl4.roa (hash: 6AawtRpq3DsNtx6xd7OyKZI4o4kWWfOmTgahYICncm4=)
3: iddMiGg8ovKZ_KW8pvcXVd9RE60.roa (hash: tlHNfQDbOnq01Er7SY3BPzZvcVpBmTMeqa5ifXXCQPU=)
4: jPdoFO28ZYmIy0FwhFbaKyywLn4.roa (hash: 2DMBsYGpILPZ83xfOVSe8IYb5O9R3Gf6YlNKmTmqMeg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e1/602244-7699-4103-bc7e-c4711482380e/1/N4ezJLDTL7GjZ4sCxIIobUwmug8.crl
rsync://rpki.ripe.net/repository/DEFAULT/e1/602244-7699-4103-bc7e-c4711482380e/1/N4ezJLDTL7GjZ4sCxIIobUwmug8.mft
rsync://rpki.ripe.net/repository/DEFAULT/N4ezJLDTL7GjZ4sCxIIobUwmug8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 14:00:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4f:2b:12:42:65:76:7f:e4:49:5f:e7:2e:cf:33:c8:e1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3787b324b0d32fb1a3678b02c482286d4c26ba0f
Validity
Not Before: Nov 4 14:00:13 2025 GMT
Not After : Nov 5 14:00:13 2025 GMT
Subject: CN=8d4a294aa96dd0a1eea39ee4704f7b5f0aa2d5e0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:99:e4:e7:af:dd:4f:f0:17:48:ca:5e:98:c0:
68:6f:59:09:2f:3e:fd:9c:7e:77:6c:00:f1:12:32:
56:e4:c8:8e:1f:b2:1a:b7:05:01:2d:95:17:83:60:
c9:44:b4:31:14:7d:8a:3e:26:0a:97:0f:fc:43:9d:
0b:61:ee:8b:2b:6c:c8:a2:cd:7f:60:c6:fa:47:e1:
14:e2:f1:52:31:93:b9:a9:e7:93:6a:68:4d:21:0e:
23:25:67:6a:1d:51:92:ef:23:31:01:74:53:31:d5:
73:66:71:04:ba:bd:73:21:a0:3f:38:b6:57:a2:5f:
ad:9d:f2:8e:86:70:5f:a7:de:5a:77:0b:e1:0f:77:
bf:a7:64:44:d3:52:4a:f1:4f:e6:e0:3a:fe:c7:97:
39:8a:b9:97:4b:99:42:47:bb:66:3f:89:03:7d:84:
3e:80:9a:44:9d:33:69:aa:c9:48:ac:a8:f2:40:3b:
03:dd:6b:7b:0e:51:61:ba:f7:39:8c:67:9d:37:ea:
aa:29:ca:e2:e2:25:97:70:eb:2a:5b:d9:4d:9e:68:
7e:94:98:c5:14:3f:50:c6:84:2e:17:cb:1f:cb:6e:
d5:24:d9:20:45:ea:e3:1c:61:bc:f4:f6:38:87:c8:
74:5f:07:62:6b:2e:7a:bb:53:bd:08:b5:f4:f6:09:
9d:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:4A:29:4A:A9:6D:D0:A1:EE:A3:9E:E4:70:4F:7B:5F:0A:A2:D5:E0
X509v3 Authority Key Identifier:
keyid:37:87:B3:24:B0:D3:2F:B1:A3:67:8B:02:C4:82:28:6D:4C:26:BA:0F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/N4ezJLDTL7GjZ4sCxIIobUwmug8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/602244-7699-4103-bc7e-c4711482380e/1/N4ezJLDTL7GjZ4sCxIIobUwmug8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/602244-7699-4103-bc7e-c4711482380e/1/N4ezJLDTL7GjZ4sCxIIobUwmug8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8c:d0:db:d7:a5:41:70:81:7f:be:94:6c:ab:90:4e:14:e5:60:
5e:9b:29:87:58:35:77:51:e6:6c:6d:3c:eb:6e:b8:e3:63:aa:
74:1f:65:75:a9:33:00:cd:3e:83:a9:df:eb:a0:18:4f:eb:90:
76:bd:cf:d2:12:8a:27:bb:8e:e0:9d:60:6e:a3:0b:4e:98:2d:
91:52:5c:e2:5b:14:e9:7b:30:61:46:94:72:9a:9e:29:1f:e5:
5f:a1:5b:f3:26:20:a6:84:4f:85:dc:84:75:7a:f0:b2:b5:81:
24:2a:b0:0e:fc:64:6b:bf:d1:e2:5c:2e:33:7f:ca:c1:59:2b:
46:36:ca:78:19:cc:20:26:45:1b:cc:a2:95:18:11:25:a9:ab:
e9:1c:58:8e:22:a5:6d:4b:31:cc:7d:f7:26:97:db:4b:1b:de:
8a:5c:14:94:db:40:1e:d1:8f:5c:84:7b:ab:80:37:5f:72:f6:
77:a6:6d:13:b6:15:5e:a7:30:81:b4:ea:c9:3d:f1:ae:36:9a:
7b:a7:45:aa:3d:0e:c1:f4:e0:91:8c:0d:7b:40:1d:20:d1:f7:
42:01:cb:cb:4e:fb:0f:3d:5c:02:3e:12:e5:b2:74:62:f8:72:
e1:f7:ef:18:d8:02:4d:4a:0b:fb:b7:4c:1e:ed:ac:d9:57:1e:
e3:7c:5c:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 21:04:32 2025 by rpki-client