Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/06/24c5a3-2a31-4b85-840e-26806ec35c20/1/N0zC_9dpwY5ebw38mg6nT7P4wQg.mft
File: N0zC_9dpwY5ebw38mg6nT7P4wQg.mft (raw, json)
Hash identifier: U3f7ymK2keTCIvuWkoEhMGlr5xNAV0wNUTXbPLGTqwA=
Subject key identifier: B3:60:4D:F1:4F:2C:1D:28:0C:26:2A:D5:88:24:CA:58:D4:F9:E2:5F
Authority key identifier: 37:4C:C2:FF:D7:69:C1:8E:5E:6F:0D:FC:9A:0E:A7:4F:B3:F8:C1:08
Certificate issuer: /CN=374cc2ffd769c18e5e6f0dfc9a0ea74fb3f8c108
Certificate serial: 0199D16E2BF7A7BAA960657B10AEB03FA286
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/N0zC_9dpwY5ebw38mg6nT7P4wQg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/06/24c5a3-2a31-4b85-840e-26806ec35c20/1/N0zC_9dpwY5ebw38mg6nT7P4wQg.mft
Manifest number: 068C
Signing time: Sat 11 Oct 2025 04:01:22 +0000
Manifest this update: Sat 11 Oct 2025 04:01:22 +0000
Manifest next update: Sun 12 Oct 2025 04:01:22 +0000
Files and hashes: 1: N0zC_9dpwY5ebw38mg6nT7P4wQg.crl (hash: +h8Pk9qwbBg4u/hW+owRvv95GQcTSdJQ7GEaowZPmgE=)
2: vhowbyAk5Rh70uoSE00L17bmBWw.roa (hash: BWCvKLZnXJi7kB8pBa3EtqBdHPmAZ8d1B0Q3jz/KOuk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/06/24c5a3-2a31-4b85-840e-26806ec35c20/1/N0zC_9dpwY5ebw38mg6nT7P4wQg.crl
rsync://rpki.ripe.net/repository/DEFAULT/06/24c5a3-2a31-4b85-840e-26806ec35c20/1/N0zC_9dpwY5ebw38mg6nT7P4wQg.mft
rsync://rpki.ripe.net/repository/DEFAULT/N0zC_9dpwY5ebw38mg6nT7P4wQg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 12 Oct 2025 02:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:d1:6e:2b:f7:a7:ba:a9:60:65:7b:10:ae:b0:3f:a2:86
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=374cc2ffd769c18e5e6f0dfc9a0ea74fb3f8c108
Validity
Not Before: Oct 11 04:01:22 2025 GMT
Not After : Oct 12 04:01:22 2025 GMT
Subject: CN=b3604df14f2c1d280c262ad58824ca58d4f9e25f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:d6:c6:db:46:9b:ef:cd:21:94:14:08:7e:22:
4f:cb:47:90:96:77:12:27:32:8d:ad:51:ca:b3:64:
25:5b:05:7a:74:d0:dd:7f:d1:87:2e:bd:37:06:4d:
f8:3e:a6:db:b4:dc:a4:33:31:8e:c9:e7:7d:75:fb:
ed:48:d7:ac:a6:37:34:3a:3c:8d:14:36:4d:3c:57:
b1:20:0b:5b:c7:6a:b0:2b:95:2c:3f:66:df:98:5f:
80:54:83:42:e7:b5:ae:48:8f:d1:26:69:b6:bd:c6:
30:b5:bd:9a:41:e2:e1:27:25:d8:f4:95:5b:7d:84:
11:6d:f7:dc:bb:1e:8e:0d:1e:16:e2:5e:6f:f2:c8:
ee:b5:e4:64:6b:bb:17:70:4f:5e:8e:31:55:61:28:
58:2e:dd:8a:58:50:13:25:bd:a7:3a:50:25:0c:1c:
66:85:9c:0b:3f:18:d5:42:85:9e:32:be:24:43:87:
3b:be:4a:6b:67:53:c4:e0:96:4b:dd:67:79:70:17:
9a:10:aa:d8:47:a9:4c:1f:6e:32:31:d7:66:a7:81:
37:59:8e:21:11:c3:38:45:7c:50:af:44:d9:6c:13:
1d:7c:15:ca:34:dd:97:5c:ae:6a:7f:ca:7f:ab:9a:
e7:a0:6c:18:d6:e6:a6:a7:a5:df:58:f8:36:83:f5:
b4:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:60:4D:F1:4F:2C:1D:28:0C:26:2A:D5:88:24:CA:58:D4:F9:E2:5F
X509v3 Authority Key Identifier:
keyid:37:4C:C2:FF:D7:69:C1:8E:5E:6F:0D:FC:9A:0E:A7:4F:B3:F8:C1:08
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/N0zC_9dpwY5ebw38mg6nT7P4wQg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/06/24c5a3-2a31-4b85-840e-26806ec35c20/1/N0zC_9dpwY5ebw38mg6nT7P4wQg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/06/24c5a3-2a31-4b85-840e-26806ec35c20/1/N0zC_9dpwY5ebw38mg6nT7P4wQg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
70:e4:3e:47:ae:33:ee:1d:02:28:71:a5:e4:ed:65:cc:1d:f0:
80:c9:b7:e2:31:55:1f:24:2d:77:ab:0b:c0:1c:43:de:0c:cc:
ea:63:91:de:50:79:3c:39:4e:ad:9c:9e:d1:95:50:a1:85:3e:
f4:fe:f1:50:c7:7c:d1:ea:d4:0d:14:fd:14:56:b0:a7:98:1b:
ff:40:84:4d:99:da:91:1b:fc:b8:e4:c6:4e:14:5a:72:e3:51:
ec:4a:2b:25:43:a5:1f:76:d2:2d:58:1d:f2:a1:32:2d:02:0e:
29:34:16:38:41:ae:64:23:ad:33:20:f8:32:b7:f4:da:b3:11:
94:30:53:3a:00:aa:de:0d:14:5f:3b:4c:2a:a8:b2:d5:bc:71:
36:6e:8a:a1:64:70:65:02:c2:00:26:c7:e0:ae:a5:78:7c:3f:
80:65:4b:33:f4:bc:ed:1c:ac:2c:d9:e8:c3:31:b0:da:4e:3f:
ad:18:90:7f:f3:29:f1:12:b7:e4:99:fc:7c:82:be:c6:33:c1:
53:35:ef:4f:ba:cf:c4:bb:ea:85:dc:86:0e:3e:fb:04:c3:a2:
b5:a3:56:b9:0e:46:0a:09:f3:e7:7a:21:3f:82:6d:bf:34:3a:
5b:d7:18:3e:60:ee:44:6e:27:b1:48:9f:6a:8e:72:0b:ff:c9:
35:d8:6f:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 11 11:28:23 2025 by rpki-client