Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/dc76ff-2b35-42be-ab56-5df2de08b695/1/N9Zwai4nDLSGu0ckNGPMu_n01co.mft
File: N9Zwai4nDLSGu0ckNGPMu_n01co.mft (raw, json)
Hash identifier: fK4vPG/tKfvFqzgXzfrbg9J4woqjuKiCDjEhPSRLgvI=
Subject key identifier: AE:39:5A:76:B7:18:76:F1:57:5C:4D:FB:A3:B0:23:16:45:06:2C:9A
Authority key identifier: 37:D6:70:6A:2E:27:0C:B4:86:BB:47:24:34:63:CC:BB:F9:F4:D5:CA
Certificate issuer: /CN=37d6706a2e270cb486bb47243463ccbbf9f4d5ca
Certificate serial: 019A5262F76F4F6A9872BB8C76ACA35DFEA4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/N9Zwai4nDLSGu0ckNGPMu_n01co.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f6/dc76ff-2b35-42be-ab56-5df2de08b695/1/N9Zwai4nDLSGu0ckNGPMu_n01co.mft
Manifest number: 1413
Signing time: Wed 05 Nov 2025 05:00:08 +0000
Manifest this update: Wed 05 Nov 2025 05:00:08 +0000
Manifest next update: Thu 06 Nov 2025 05:00:08 +0000
Files and hashes: 1: 7YrGIJ8Lq47CmtHh_aA30VmkPjo.roa (hash: hoLOmqh1vosQ/NxuWEBoizkiy56HJ0MD/vugBLaASkY=)
2: N9Zwai4nDLSGu0ckNGPMu_n01co.crl (hash: NG9hHJF8zx7H+Ht02B1Ys9+WG0i3+elMXMXsEmJiT28=)
3: bWi2Mkf_arohbIgqpZEaCaewlho.roa (hash: o4YIfYScSNSPxx9rfmbXoBu7Bh9velBEqxyrfd2MDmI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f6/dc76ff-2b35-42be-ab56-5df2de08b695/1/N9Zwai4nDLSGu0ckNGPMu_n01co.crl
rsync://rpki.ripe.net/repository/DEFAULT/f6/dc76ff-2b35-42be-ab56-5df2de08b695/1/N9Zwai4nDLSGu0ckNGPMu_n01co.mft
rsync://rpki.ripe.net/repository/DEFAULT/N9Zwai4nDLSGu0ckNGPMu_n01co.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Nov 2025 03:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:52:62:f7:6f:4f:6a:98:72:bb:8c:76:ac:a3:5d:fe:a4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=37d6706a2e270cb486bb47243463ccbbf9f4d5ca
Validity
Not Before: Nov 5 05:00:08 2025 GMT
Not After : Nov 6 05:00:08 2025 GMT
Subject: CN=ae395a76b71876f1575c4dfba3b0231645062c9a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:d2:28:85:6a:ba:3f:af:4c:e3:ed:6c:65:f4:
b5:db:6b:40:59:74:7c:13:46:35:d3:2d:e6:6a:a8:
c8:84:05:67:9a:70:d0:f7:bc:b4:18:da:91:27:07:
97:3e:84:73:bb:76:9b:82:c5:e3:db:c4:7a:98:35:
0b:15:07:cd:c1:5e:5b:c0:90:2c:a0:2e:0d:03:4d:
50:d9:0b:b7:7a:c8:96:c6:91:1f:cb:5f:6c:60:ec:
d1:ea:5e:5d:83:84:04:14:b3:dc:df:e5:e2:30:27:
12:36:c7:d2:10:30:8f:f4:17:bf:66:c6:45:2e:53:
1a:95:61:8b:b7:f0:b5:b6:c5:3a:31:59:01:ba:d6:
ff:6b:1c:47:b3:79:7c:4e:5e:bb:d9:2d:ef:08:64:
a3:a5:ad:5b:b5:1d:78:f9:c3:4f:c9:ed:7b:b9:12:
2b:26:17:01:63:7d:b6:22:2d:ea:aa:f1:81:41:e4:
18:e4:07:72:bf:00:bd:cd:92:13:1a:08:92:30:39:
4c:33:cd:8d:ab:5d:68:b3:f5:9e:a5:f6:e9:90:e8:
31:e2:fa:92:5e:7f:3f:da:a0:b9:67:7e:58:dd:89:
c1:65:13:dc:93:d4:ed:e7:bd:de:0c:ff:2f:6b:38:
04:10:de:5b:30:70:54:14:f5:a4:07:06:40:ab:77:
10:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:39:5A:76:B7:18:76:F1:57:5C:4D:FB:A3:B0:23:16:45:06:2C:9A
X509v3 Authority Key Identifier:
keyid:37:D6:70:6A:2E:27:0C:B4:86:BB:47:24:34:63:CC:BB:F9:F4:D5:CA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/N9Zwai4nDLSGu0ckNGPMu_n01co.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/dc76ff-2b35-42be-ab56-5df2de08b695/1/N9Zwai4nDLSGu0ckNGPMu_n01co.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/dc76ff-2b35-42be-ab56-5df2de08b695/1/N9Zwai4nDLSGu0ckNGPMu_n01co.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3c:f7:8c:f5:25:37:86:3d:7c:15:f9:2b:a9:2c:53:f8:69:bb:
20:27:3d:93:97:b0:65:83:1e:7d:f0:e5:e7:f4:82:60:e4:13:
6c:9a:1e:3e:90:47:32:3e:1f:c7:fa:65:c9:83:73:6e:6d:80:
58:d4:bd:8c:18:0d:05:aa:3a:a6:71:f0:51:53:2b:f2:3e:1c:
2d:d0:d5:b1:76:38:d8:79:bf:bd:1d:37:39:19:51:51:28:16:
b5:de:71:37:09:a6:1d:35:23:c3:a3:ca:21:94:23:bf:96:f9:
be:a6:1d:44:9d:78:5c:16:d2:36:39:d7:40:d4:1d:34:78:6b:
eb:ee:18:36:84:ab:0f:f3:af:85:d8:99:98:e0:9c:42:d6:db:
fd:a0:80:da:45:f8:cc:f8:73:1a:2e:3f:85:5f:d8:91:94:cb:
e7:45:bd:f7:54:88:f6:10:87:c2:0e:e1:d8:5d:ad:e2:25:e8:
c1:1a:62:c1:9e:73:0d:94:f7:ca:17:f8:37:e5:77:5d:2e:a8:
26:6a:a3:0e:53:e0:df:7b:a9:0b:e4:f1:a0:66:0a:65:ff:9f:
f1:74:a0:43:b6:fa:c8:82:22:7e:2d:49:e0:aa:b1:9f:b2:ab:
66:b1:84:fd:78:f0:41:75:51:78:17:f8:1e:34:bd:bf:51:06:
6c:b1:50:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 11:56:05 2025 by rpki-client