Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2f/ad8994-51f1-4b65-aca0-e15a8b70e8d2/1/N86qYmy9iQUvNUUzXf2zGhM4MAQ.mft
File: N86qYmy9iQUvNUUzXf2zGhM4MAQ.mft (raw, json)
Hash identifier: P9vUPJOkmMd/8Aj1xmMLu+N7NfLVEYUXD8sfFHwjbSo=
Subject key identifier: 85:56:B3:B9:92:7C:07:F4:12:5F:B1:67:17:36:63:98:B5:C0:13:50
Authority key identifier: 37:CE:AA:62:6C:BD:89:05:2F:35:45:33:5D:FD:B3:1A:13:38:30:04
Certificate issuer: /CN=37ceaa626cbd89052f3545335dfdb31a13383004
Certificate serial: 019A232EA50DDA1B69AA3949F7483FAC4404
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/N86qYmy9iQUvNUUzXf2zGhM4MAQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2f/ad8994-51f1-4b65-aca0-e15a8b70e8d2/1/N86qYmy9iQUvNUUzXf2zGhM4MAQ.mft
Manifest number: 1651
Signing time: Mon 27 Oct 2025 01:00:50 +0000
Manifest this update: Mon 27 Oct 2025 01:00:50 +0000
Manifest next update: Tue 28 Oct 2025 01:00:50 +0000
Files and hashes: 1: N86qYmy9iQUvNUUzXf2zGhM4MAQ.crl (hash: 6cn3POP7bEdJlda3C0gXFu+ruz3klRbobFui+8ggwzY=)
2: n9uV52lUlBfny_mibwK9eMiu_og.roa (hash: 54PSRM/jpJmSMS9ihIFUAJNjZSe2qLiVsg1xoZD4Jhk=)
3: spA2D5bFhwjtsAUrsUVWAYuQYCw.roa (hash: G0F7ImWqWoF9HSrIReZ5ZDnra1S9Yg59kPLrgfQKBWo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2f/ad8994-51f1-4b65-aca0-e15a8b70e8d2/1/N86qYmy9iQUvNUUzXf2zGhM4MAQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/2f/ad8994-51f1-4b65-aca0-e15a8b70e8d2/1/N86qYmy9iQUvNUUzXf2zGhM4MAQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/N86qYmy9iQUvNUUzXf2zGhM4MAQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 27 Oct 2025 19:48:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:23:2e:a5:0d:da:1b:69:aa:39:49:f7:48:3f:ac:44:04
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=37ceaa626cbd89052f3545335dfdb31a13383004
Validity
Not Before: Oct 27 01:00:50 2025 GMT
Not After : Oct 28 01:00:50 2025 GMT
Subject: CN=8556b3b9927c07f4125fb16717366398b5c01350
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:d5:2e:a1:46:01:e1:24:bf:cd:44:d8:7f:20:
4d:48:73:00:56:e7:05:65:f1:6e:a6:b9:59:c7:d9:
09:22:4d:c6:dd:74:26:ba:c6:49:f4:a7:af:f4:28:
61:9c:2f:b5:f0:e6:98:20:eb:f6:39:b2:f1:af:d7:
5a:75:c2:33:be:c8:7c:d1:6e:a7:38:41:20:d9:08:
22:87:e4:01:25:bd:90:01:4d:b7:34:bc:c3:e8:7d:
93:41:e2:9f:cd:e9:32:d3:19:71:65:3c:93:40:fe:
83:70:ad:98:ba:dc:86:ff:72:a2:e4:36:34:5d:ad:
28:7b:45:17:bb:3b:26:40:3f:cf:a6:21:bf:82:e8:
d8:73:e1:54:97:b0:1c:ad:41:d9:9e:10:76:79:b1:
a4:e5:8e:10:29:37:68:60:16:e2:27:33:6d:21:44:
80:ee:82:05:e2:4f:95:80:9e:f9:cb:06:8f:e6:20:
d9:e2:2a:c0:05:3e:ca:88:af:99:b9:e9:e6:61:8e:
35:bd:f5:c4:8f:d1:30:10:33:f9:d3:75:38:5d:fb:
e3:9b:5b:3b:77:f5:a1:0d:54:4a:2a:ee:67:d6:cd:
16:a3:1b:26:6e:65:9c:b9:c9:4f:c7:0b:df:cd:39:
34:c6:07:0e:be:90:85:ed:46:cc:8d:d3:e7:f8:9a:
a6:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:56:B3:B9:92:7C:07:F4:12:5F:B1:67:17:36:63:98:B5:C0:13:50
X509v3 Authority Key Identifier:
keyid:37:CE:AA:62:6C:BD:89:05:2F:35:45:33:5D:FD:B3:1A:13:38:30:04
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/N86qYmy9iQUvNUUzXf2zGhM4MAQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/ad8994-51f1-4b65-aca0-e15a8b70e8d2/1/N86qYmy9iQUvNUUzXf2zGhM4MAQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/ad8994-51f1-4b65-aca0-e15a8b70e8d2/1/N86qYmy9iQUvNUUzXf2zGhM4MAQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6c:a3:6d:9b:e2:89:4a:b6:3c:3c:62:b7:c4:e6:5e:35:64:67:
de:f7:a8:6a:39:d5:91:ab:72:96:09:86:59:39:a4:b6:a6:81:
04:02:6c:b9:b1:22:c0:99:8a:43:f2:1e:fd:9a:7a:c4:90:f7:
46:24:38:ed:48:27:2d:2d:14:5b:3a:2a:ab:55:b8:14:85:7b:
40:76:f7:ab:7d:a1:53:32:80:d7:03:b8:fe:e5:ab:5b:92:cb:
14:bf:e2:bb:78:1e:3c:a5:5e:4f:4b:63:c4:c9:04:f4:cc:7f:
ee:76:db:0e:f9:a6:02:40:a5:11:c5:40:c5:b6:ce:7f:c3:eb:
e0:1d:5a:7a:57:3d:a7:a8:c3:cb:b2:4a:af:71:0c:04:61:24:
f3:1a:df:f8:46:aa:2b:26:61:81:14:3f:4a:ef:92:ca:43:0e:
12:b9:12:c8:f1:c4:a6:46:c1:d6:f5:ec:5c:fe:a7:52:a8:67:
59:2e:f8:70:3f:62:f3:ca:9f:ec:3b:4c:e8:e6:71:73:e0:02:
7f:f7:10:4a:fa:35:c7:0a:d0:01:35:a0:d0:b9:d7:4d:23:9e:
ed:b8:a5:dd:37:8f:7c:9a:18:ee:64:31:5d:69:1c:44:2d:1e:
6e:93:b3:dd:0a:d4:1d:c1:d7:f5:7f:79:0a:1b:c9:d4:e7:7d:
96:18:f1:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 27 04:19:05 2025 by rpki-client