Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/3a9021-2959-47e7-a615-81144fd01564/1/N6W4zf0deX2GBmDjS_oaKthf-dk.mft
File: N6W4zf0deX2GBmDjS_oaKthf-dk.mft (raw, json)
Hash identifier: 8l5OHFgY6Rmj7M5lY7u9rTaluEJtjjdI+ITBC02JPHg=
Subject key identifier: B7:58:67:90:C9:DD:7E:30:7D:3F:5A:82:BA:37:F9:25:A4:52:21:31
Authority key identifier: 37:A5:B8:CD:FD:1D:79:7D:86:06:60:E3:4B:FA:1A:2A:D8:5F:F9:D9
Certificate issuer: /CN=37a5b8cdfd1d797d860660e34bfa1a2ad85ff9d9
Certificate serial: 019A4F62D17507BD91013653D3DD36B7CE6D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/N6W4zf0deX2GBmDjS_oaKthf-dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e9/3a9021-2959-47e7-a615-81144fd01564/1/N6W4zf0deX2GBmDjS_oaKthf-dk.mft
Manifest number: 1710
Signing time: Tue 04 Nov 2025 15:01:07 +0000
Manifest this update: Tue 04 Nov 2025 15:01:07 +0000
Manifest next update: Wed 05 Nov 2025 15:01:07 +0000
Files and hashes: 1: N6W4zf0deX2GBmDjS_oaKthf-dk.crl (hash: enjuUm16dIdWV/WH0tbcW3D9MIquDbqxLrr8C7u500I=)
2: Ofe5y963IBdAewU6cuUJ3GOhnPg.roa (hash: wYPWSR0SRCo8lw+izQyw6mN43vzofM40zE5eYO1oT9w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e9/3a9021-2959-47e7-a615-81144fd01564/1/N6W4zf0deX2GBmDjS_oaKthf-dk.crl
rsync://rpki.ripe.net/repository/DEFAULT/e9/3a9021-2959-47e7-a615-81144fd01564/1/N6W4zf0deX2GBmDjS_oaKthf-dk.mft
rsync://rpki.ripe.net/repository/DEFAULT/N6W4zf0deX2GBmDjS_oaKthf-dk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4f:62:d1:75:07:bd:91:01:36:53:d3:dd:36:b7:ce:6d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=37a5b8cdfd1d797d860660e34bfa1a2ad85ff9d9
Validity
Not Before: Nov 4 15:01:07 2025 GMT
Not After : Nov 5 15:01:07 2025 GMT
Subject: CN=b7586790c9dd7e307d3f5a82ba37f925a4522131
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:a5:cc:d5:18:6b:be:d6:28:6a:3e:9c:45:f3:
e1:f9:a7:fe:05:0d:10:f1:79:91:37:5b:cc:67:51:
aa:e7:11:12:56:26:ee:dd:61:0e:b2:e6:e4:dd:2a:
43:32:93:9d:7b:a7:e3:f8:74:7c:ab:ce:a1:7e:34:
78:f0:db:f2:6c:9a:a6:12:97:04:83:94:7f:12:92:
4b:07:43:c0:5a:45:a6:9b:ba:f9:e1:f4:05:aa:9a:
58:6b:d4:ce:8a:df:af:89:ec:65:36:4f:45:9a:89:
0b:3c:44:42:64:42:63:1f:80:e4:d7:2d:0f:c1:0e:
9e:a4:cf:6b:07:67:09:c7:0a:cc:1b:73:58:30:78:
37:0a:45:41:2c:e0:f0:72:04:29:1f:9f:6f:07:26:
7b:99:9c:52:af:90:0b:4e:39:e9:da:a0:10:7a:6f:
0f:33:18:69:9a:78:b9:4e:10:88:5b:14:30:d9:48:
4c:84:a0:ef:33:91:79:33:7a:2c:7d:cd:5e:3c:7e:
a3:43:62:fb:8c:a8:f5:ce:0a:13:e3:38:1b:88:3d:
8f:1f:82:4a:73:54:2b:a3:fd:a0:15:29:79:ab:e7:
a6:9c:52:54:a8:9c:d7:e8:18:16:ce:40:4c:0e:d4:
0d:bf:51:58:af:d6:1c:2e:df:e5:53:11:92:73:4b:
f2:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:58:67:90:C9:DD:7E:30:7D:3F:5A:82:BA:37:F9:25:A4:52:21:31
X509v3 Authority Key Identifier:
keyid:37:A5:B8:CD:FD:1D:79:7D:86:06:60:E3:4B:FA:1A:2A:D8:5F:F9:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/N6W4zf0deX2GBmDjS_oaKthf-dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/3a9021-2959-47e7-a615-81144fd01564/1/N6W4zf0deX2GBmDjS_oaKthf-dk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/3a9021-2959-47e7-a615-81144fd01564/1/N6W4zf0deX2GBmDjS_oaKthf-dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
18:47:2a:ed:6b:8e:a3:8a:8d:2a:b6:53:22:82:07:9f:7c:c0:
55:98:07:97:8f:c5:ca:64:66:3e:b3:58:e2:ec:ff:f0:25:86:
7c:93:b0:0c:f0:a7:6b:85:6b:60:04:16:14:fb:41:85:21:75:
39:7f:65:6a:42:8a:47:3e:81:9a:ac:32:ba:a5:fe:2a:fe:85:
7a:bb:e2:40:61:41:89:38:f6:32:a7:e5:61:0f:81:d3:ed:e7:
67:90:14:0b:c1:4c:1a:7b:e4:f9:7e:0e:2a:d5:b7:bb:73:c6:
37:07:96:33:c4:27:26:7a:c1:84:3e:2c:99:91:6a:66:60:38:
ab:f7:4d:2a:bd:aa:15:d4:b6:5c:2c:88:c6:ed:31:5a:f6:47:
eb:c2:ec:d4:c8:af:cf:ee:95:e1:66:ba:7e:32:d8:ee:87:80:
36:0b:eb:4d:86:06:24:68:1f:0e:87:47:73:41:2a:58:44:4b:
1b:36:41:86:21:49:da:25:24:87:10:1e:d7:ff:71:5c:a5:f2:
82:9a:77:cd:92:d6:dd:81:66:68:e7:46:39:af:f2:22:48:20:
c4:e0:9e:a9:96:e3:55:5e:64:ac:88:c1:63:bb:ae:3f:0c:7f:
65:88:18:98:63:ed:70:68:81:96:69:17:36:d6:bd:e9:3a:66:
15:6e:2b:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 18:05:04 2025 by rpki-client