Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/341508-a0aa-40c9-ae0c-0379930f8286/1/N1PbxYKexQCzNCahiNA5k5W4Bqo.mft
File: N1PbxYKexQCzNCahiNA5k5W4Bqo.mft (raw, json)
Hash identifier: DChmbues/D6QuKzZmaZZXgra3x/s7I449CmwgmxP+s4=
Subject key identifier: A5:2C:A1:66:0D:94:C9:6F:A9:DE:41:01:D0:E6:3E:D1:0C:35:F6:78
Authority key identifier: 37:53:DB:C5:82:9E:C5:00:B3:34:26:A1:88:D0:39:93:95:B8:06:AA
Certificate issuer: /CN=3753dbc5829ec500b33426a188d0399395b806aa
Certificate serial: 019A503E231B3166FF8CC04AA1B8CC9A2466
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/N1PbxYKexQCzNCahiNA5k5W4Bqo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/341508-a0aa-40c9-ae0c-0379930f8286/1/N1PbxYKexQCzNCahiNA5k5W4Bqo.mft
Manifest number: 0533
Signing time: Tue 04 Nov 2025 19:00:40 +0000
Manifest this update: Tue 04 Nov 2025 19:00:40 +0000
Manifest next update: Wed 05 Nov 2025 19:00:40 +0000
Files and hashes: 1: N1PbxYKexQCzNCahiNA5k5W4Bqo.crl (hash: thLDL38at+/utFYZHprS5e3rzokieLUUQU59ftiETvk=)
2: hr1FzTLzhvjdHRGQawXaK0XuGQ4.roa (hash: wRJW1xVVLpDSguuiY7y5qT4f4RgVOBoZp/PuXmFp+qI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fd/341508-a0aa-40c9-ae0c-0379930f8286/1/N1PbxYKexQCzNCahiNA5k5W4Bqo.crl
rsync://rpki.ripe.net/repository/DEFAULT/fd/341508-a0aa-40c9-ae0c-0379930f8286/1/N1PbxYKexQCzNCahiNA5k5W4Bqo.mft
rsync://rpki.ripe.net/repository/DEFAULT/N1PbxYKexQCzNCahiNA5k5W4Bqo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 18:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:50:3e:23:1b:31:66:ff:8c:c0:4a:a1:b8:cc:9a:24:66
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3753dbc5829ec500b33426a188d0399395b806aa
Validity
Not Before: Nov 4 19:00:40 2025 GMT
Not After : Nov 5 19:00:40 2025 GMT
Subject: CN=a52ca1660d94c96fa9de4101d0e63ed10c35f678
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:f4:84:0d:49:d7:58:32:47:3d:93:5a:4f:9e:
df:4a:14:d7:ed:11:df:5c:aa:fe:39:f6:a8:8f:18:
b6:61:00:31:6d:4e:44:c5:7d:eb:18:3f:e8:5c:a4:
b5:6a:65:25:bf:53:9c:43:1d:9c:72:95:82:88:1b:
81:85:41:87:2a:1e:84:ef:16:5b:f0:bf:8b:1a:13:
37:98:a5:5e:04:57:b7:7e:09:bb:1c:49:e2:2a:d1:
aa:33:2e:db:c4:8c:60:eb:d3:89:9d:a0:01:38:cb:
9e:88:9f:1a:ce:78:62:f1:31:03:38:ce:2f:b5:a1:
f4:08:bd:ee:ca:23:02:e0:7a:15:db:3b:15:97:a5:
b6:4a:e0:6c:a6:3d:57:13:52:1d:19:8f:68:bf:44:
1d:32:8a:83:a5:03:e4:9b:23:89:38:26:e3:c4:0e:
fb:da:dc:fa:2e:5f:22:94:88:d8:0b:c0:72:12:2c:
56:4b:39:59:a7:9e:42:18:df:77:a4:08:ee:f1:6a:
03:fe:51:87:2f:10:98:35:2c:51:6c:02:02:f9:00:
ab:61:d6:e3:4a:d0:bb:aa:b7:e5:47:cc:76:6d:04:
4a:d0:79:c5:59:04:ce:2d:92:a5:04:2c:53:22:3f:
8e:07:7f:c3:c5:c2:ed:16:f5:6a:a9:0c:09:d2:31:
fb:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:2C:A1:66:0D:94:C9:6F:A9:DE:41:01:D0:E6:3E:D1:0C:35:F6:78
X509v3 Authority Key Identifier:
keyid:37:53:DB:C5:82:9E:C5:00:B3:34:26:A1:88:D0:39:93:95:B8:06:AA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/N1PbxYKexQCzNCahiNA5k5W4Bqo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/341508-a0aa-40c9-ae0c-0379930f8286/1/N1PbxYKexQCzNCahiNA5k5W4Bqo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/341508-a0aa-40c9-ae0c-0379930f8286/1/N1PbxYKexQCzNCahiNA5k5W4Bqo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
14:0b:e2:76:35:63:a2:49:94:4b:19:7a:27:79:91:ab:d1:f3:
9c:b2:36:37:73:67:0b:a2:18:0c:03:0a:95:3a:38:ea:bd:63:
6a:2d:80:e5:d8:5b:3d:80:0b:cf:67:27:14:d5:be:75:8a:44:
38:6f:92:25:4c:6c:a8:57:a7:74:26:eb:d9:e5:b6:51:67:1f:
53:ac:42:e2:d0:12:be:79:7b:8d:0a:64:f9:52:88:23:80:d5:
0e:0b:d8:63:66:21:16:a0:ab:ca:db:f3:38:d6:79:86:d3:ce:
71:13:3b:3c:b1:8a:b9:66:80:00:0a:56:e2:af:67:bb:9f:c2:
bc:d4:a2:06:5c:76:e0:99:5f:9f:6c:35:cb:51:ae:ca:02:c5:
41:23:fe:4e:1d:18:8e:37:8f:94:26:e4:d3:2f:d4:fe:61:56:
c2:4c:cd:0d:5c:66:b8:9b:43:a7:dc:5a:4a:b5:c1:d7:90:3b:
46:47:6c:45:54:5f:f4:2d:51:25:5f:5b:7a:37:31:2d:56:72:
d9:3b:16:d7:9f:11:74:26:c9:ac:1f:cb:de:0e:0b:c6:0a:0b:
f5:79:24:c0:dd:00:0a:60:57:df:a9:e2:7b:a5:b5:6f:4e:a5:
6c:ad:8e:3b:88:d0:d8:61:ca:be:a6:34:e2:a2:82:83:27:b0:
14:cc:55:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 01:25:00 2025 by rpki-client