Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e1/a60c29-74aa-4b2b-9066-99bbbafe9c4b/1/N5zWfAwYlZI5NYVTIp6R9UPMWl8.mft
File: N5zWfAwYlZI5NYVTIp6R9UPMWl8.mft (raw, json)
Hash identifier: IsIDHoNpNx94sWZbHYyQxM1/WagGCZJUVdQ4CZAEwp0=
Subject key identifier: FF:29:D9:69:60:A4:4B:26:4B:5B:D7:AB:C8:96:01:05:2A:FF:89:5E
Authority key identifier: 37:9C:D6:7C:0C:18:95:92:39:35:85:53:22:9E:91:F5:43:CC:5A:5F
Certificate issuer: /CN=379cd67c0c18959239358553229e91f543cc5a5f
Certificate serial: 019A4F2B4AA8F2E41C22C176A8B4BFF355AB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/N5zWfAwYlZI5NYVTIp6R9UPMWl8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e1/a60c29-74aa-4b2b-9066-99bbbafe9c4b/1/N5zWfAwYlZI5NYVTIp6R9UPMWl8.mft
Manifest number: 16F0
Signing time: Tue 04 Nov 2025 14:00:28 +0000
Manifest this update: Tue 04 Nov 2025 14:00:28 +0000
Manifest next update: Wed 05 Nov 2025 14:00:28 +0000
Files and hashes: 1: N5zWfAwYlZI5NYVTIp6R9UPMWl8.crl (hash: I2Iv7Of3mD7dIukFkUOy9JtIsH7BwOYBVnYucZSmXNE=)
2: _OMF5Nl70k5FI6dZyBbjhO75Whc.roa (hash: 9Vx2B9Q4z5L6Kqh9xs9MrJDUwmGHBM33p0J4623FkWI=)
3: rWytEJ3FiAYVl_Gh2eAbgXCpgnc.roa (hash: N2Jpj3ow/5rvsnHjtA7tEJKRTrNoSnYmSjGqItrSpc0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e1/a60c29-74aa-4b2b-9066-99bbbafe9c4b/1/N5zWfAwYlZI5NYVTIp6R9UPMWl8.crl
rsync://rpki.ripe.net/repository/DEFAULT/e1/a60c29-74aa-4b2b-9066-99bbbafe9c4b/1/N5zWfAwYlZI5NYVTIp6R9UPMWl8.mft
rsync://rpki.ripe.net/repository/DEFAULT/N5zWfAwYlZI5NYVTIp6R9UPMWl8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4f:2b:4a:a8:f2:e4:1c:22:c1:76:a8:b4:bf:f3:55:ab
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=379cd67c0c18959239358553229e91f543cc5a5f
Validity
Not Before: Nov 4 14:00:28 2025 GMT
Not After : Nov 5 14:00:28 2025 GMT
Subject: CN=ff29d96960a44b264b5bd7abc89601052aff895e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:b2:30:6a:ce:28:38:27:10:b8:38:a5:28:9f:
44:06:e7:de:7d:05:09:d7:e4:69:04:27:ea:73:fe:
55:39:1b:18:39:c1:ce:37:a5:dc:4b:7b:20:9f:fa:
b8:71:df:00:79:bd:8b:58:93:f9:49:72:80:d3:33:
4c:b8:be:5c:3d:84:d7:e8:47:c8:fc:2d:fb:91:ad:
25:eb:dc:76:79:60:78:8d:c3:70:e0:49:84:1f:d7:
4a:b0:fb:a8:91:ca:9d:0e:f1:39:cf:67:39:c2:11:
5d:48:57:99:e4:51:03:31:f5:24:04:43:54:05:e2:
3e:00:23:31:b9:11:9c:1f:d9:ed:09:f9:d5:91:ce:
d8:c9:4f:ec:f4:53:75:f3:84:2b:07:2d:8d:c8:7c:
60:57:b2:41:c1:a6:a1:71:4b:2f:a8:75:f5:74:41:
96:af:c4:82:e1:65:24:4b:7d:d1:9f:99:81:38:a9:
65:df:ea:a0:a9:6a:36:40:55:ce:53:24:e7:e1:2b:
6b:c9:9f:c2:db:bb:95:a1:94:44:3f:cb:a6:dd:69:
a0:d2:d7:2e:5d:e5:31:a0:c6:4b:48:3a:fd:98:0b:
56:69:ef:36:c2:2a:28:43:29:5b:85:6b:7e:25:f7:
23:88:c6:a2:0e:f8:03:81:0d:94:2d:8e:ae:0c:b9:
51:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:29:D9:69:60:A4:4B:26:4B:5B:D7:AB:C8:96:01:05:2A:FF:89:5E
X509v3 Authority Key Identifier:
keyid:37:9C:D6:7C:0C:18:95:92:39:35:85:53:22:9E:91:F5:43:CC:5A:5F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/N5zWfAwYlZI5NYVTIp6R9UPMWl8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/a60c29-74aa-4b2b-9066-99bbbafe9c4b/1/N5zWfAwYlZI5NYVTIp6R9UPMWl8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/a60c29-74aa-4b2b-9066-99bbbafe9c4b/1/N5zWfAwYlZI5NYVTIp6R9UPMWl8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
19:b3:e2:0e:a8:0f:f7:21:0c:1f:e0:7d:af:73:28:2c:81:9e:
3f:65:7a:dd:e6:f4:c5:af:e5:2f:b0:dd:8e:0f:5c:60:96:33:
62:5c:ad:83:a4:9d:ea:60:42:58:98:c3:57:95:ab:f5:a9:0e:
f8:c2:9b:44:95:8c:be:83:b9:0b:79:83:ae:5d:f0:29:e7:94:
28:95:24:89:c6:c3:5c:9c:f8:f6:bc:ca:54:6a:9e:62:06:4a:
d2:5a:2c:70:f0:e2:cc:65:fb:54:a1:c3:93:a1:4c:56:74:fe:
9e:d1:c2:22:e2:36:62:16:f8:43:a2:5e:38:50:ed:a1:47:32:
fe:d6:92:38:1f:26:7d:2e:96:a4:df:f1:1e:18:87:77:b0:16:
4b:d2:af:18:7f:a1:cc:84:20:58:20:1f:1a:2b:df:10:87:64:
42:5e:2c:57:36:99:83:34:f0:57:fd:1b:a1:c2:ea:54:7d:db:
7d:00:24:53:83:65:38:4c:54:76:89:a5:86:fe:0e:93:a7:0b:
3c:a6:1c:75:d8:f2:5e:57:e7:17:ea:a2:5b:de:7a:ba:cc:00:
68:b3:10:79:31:30:b9:51:07:ed:5c:33:ed:95:3c:2a:4e:7f:
cf:a9:73:88:f8:9f:91:f8:78:8c:67:59:6c:13:d6:8e:b6:5f:
c1:8f:81:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 18:00:52 2025 by rpki-client