Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/dc76ff-2b35-42be-ab56-5df2de08b695/1/N9Zwai4nDLSGu0ckNGPMu_n01co.mft
File: N9Zwai4nDLSGu0ckNGPMu_n01co.mft (raw, json)
Hash identifier: ELhOAk2McngjI3HM571Wu1jMMyLz687BBFzemK1gG7M=
Subject key identifier: AE:26:D3:B5:09:D8:FF:51:26:BB:BE:CC:1C:B4:9F:F4:35:12:D4:EB
Authority key identifier: 37:D6:70:6A:2E:27:0C:B4:86:BB:47:24:34:63:CC:BB:F9:F4:D5:CA
Certificate issuer: /CN=37d6706a2e270cb486bb47243463ccbbf9f4d5ca
Certificate serial: 0199C569DD1A6B2B59C1D8460E3365C1B250
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/N9Zwai4nDLSGu0ckNGPMu_n01co.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f6/dc76ff-2b35-42be-ab56-5df2de08b695/1/N9Zwai4nDLSGu0ckNGPMu_n01co.mft
Manifest number: 13CA
Signing time: Wed 08 Oct 2025 20:01:13 +0000
Manifest this update: Wed 08 Oct 2025 20:01:13 +0000
Manifest next update: Thu 09 Oct 2025 20:01:13 +0000
Files and hashes: 1: 7YrGIJ8Lq47CmtHh_aA30VmkPjo.roa (hash: hoLOmqh1vosQ/NxuWEBoizkiy56HJ0MD/vugBLaASkY=)
2: N9Zwai4nDLSGu0ckNGPMu_n01co.crl (hash: Kp2OrwqVRMByTH5eYTSbuk8+oMyfrpEBHL/O7Xq9z00=)
3: bWi2Mkf_arohbIgqpZEaCaewlho.roa (hash: o4YIfYScSNSPxx9rfmbXoBu7Bh9velBEqxyrfd2MDmI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f6/dc76ff-2b35-42be-ab56-5df2de08b695/1/N9Zwai4nDLSGu0ckNGPMu_n01co.crl
rsync://rpki.ripe.net/repository/DEFAULT/f6/dc76ff-2b35-42be-ab56-5df2de08b695/1/N9Zwai4nDLSGu0ckNGPMu_n01co.mft
rsync://rpki.ripe.net/repository/DEFAULT/N9Zwai4nDLSGu0ckNGPMu_n01co.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 09 Oct 2025 16:33:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:c5:69:dd:1a:6b:2b:59:c1:d8:46:0e:33:65:c1:b2:50
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=37d6706a2e270cb486bb47243463ccbbf9f4d5ca
Validity
Not Before: Oct 8 20:01:13 2025 GMT
Not After : Oct 9 20:01:13 2025 GMT
Subject: CN=ae26d3b509d8ff5126bbbecc1cb49ff43512d4eb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:36:5c:d2:cb:19:54:55:0d:f9:cb:48:90:68:
eb:04:d1:be:ee:1c:e4:2f:79:b2:19:50:e4:20:c6:
0f:97:79:c1:3a:33:ea:5a:4d:ed:e9:5c:e6:c6:e6:
7a:60:dd:51:76:b0:1a:81:24:49:4b:8d:6f:12:a2:
23:5f:fd:d4:6b:bf:07:51:43:02:ac:6a:4a:1e:17:
2d:76:4a:ca:18:56:86:5f:48:6f:7b:b6:a3:d5:3e:
69:2b:08:a6:3a:39:5b:ee:14:15:b4:8e:fd:eb:12:
f5:2b:c9:df:26:84:41:2f:08:60:d7:7a:78:91:04:
bb:dc:64:18:14:a9:fb:77:23:c1:0c:7f:9e:a3:ab:
22:86:dd:dc:6e:5a:43:4f:5d:73:9a:87:fb:08:37:
6a:f1:c9:13:a2:61:80:43:e3:35:01:2f:d2:ce:9c:
87:d4:8e:df:db:bf:71:49:12:9e:94:76:7a:e5:48:
54:2d:5d:9b:a7:08:4e:f9:8c:aa:2d:77:b5:c4:26:
5b:45:e4:0f:7d:71:9f:03:69:e5:eb:fb:c4:2b:00:
37:6f:ba:13:61:ed:6b:0f:6f:ef:e5:d9:ba:20:08:
bd:0c:1f:8c:95:14:d3:59:bb:86:80:9c:3d:14:27:
91:1d:96:34:6b:5e:28:04:ac:14:3b:38:8d:a3:cb:
a7:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:26:D3:B5:09:D8:FF:51:26:BB:BE:CC:1C:B4:9F:F4:35:12:D4:EB
X509v3 Authority Key Identifier:
keyid:37:D6:70:6A:2E:27:0C:B4:86:BB:47:24:34:63:CC:BB:F9:F4:D5:CA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/N9Zwai4nDLSGu0ckNGPMu_n01co.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/dc76ff-2b35-42be-ab56-5df2de08b695/1/N9Zwai4nDLSGu0ckNGPMu_n01co.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/dc76ff-2b35-42be-ab56-5df2de08b695/1/N9Zwai4nDLSGu0ckNGPMu_n01co.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
57:5d:2a:78:77:f9:41:23:e9:f6:26:ea:d7:ac:b5:3f:ab:92:
bc:e0:4b:9f:43:b3:1a:8f:39:c1:08:ab:66:b8:2b:94:39:23:
5d:cc:0c:8d:15:61:e0:49:a2:90:2a:30:70:8f:4b:28:70:34:
3a:5d:08:5c:58:18:29:4e:84:09:11:e3:12:ff:40:77:49:2e:
83:98:93:09:f0:6c:b3:bc:c5:a5:a1:a3:16:db:b2:f9:ab:fb:
ad:aa:8a:e0:74:98:a6:93:8b:07:24:01:b1:a2:d0:42:11:c6:
c5:73:c0:46:82:50:e6:29:13:50:ce:0e:15:33:7a:c3:01:a5:
c9:dc:d3:a7:0b:cb:3c:9a:0b:02:8e:3b:a4:1e:8d:8a:57:d8:
7d:d0:26:9c:7d:b0:45:db:67:9e:70:91:e4:21:51:6c:ed:42:
d1:b7:99:f2:26:8b:19:11:37:82:24:99:d0:34:69:7a:28:b8:
1d:79:67:c8:70:01:2b:08:fc:95:3a:9c:bf:b0:29:14:07:8a:
25:e4:40:69:c2:35:f1:85:cc:44:93:58:f5:8c:b8:47:59:61:
7b:2d:9f:10:7e:8e:f0:44:06:53:ec:67:aa:a0:3b:a0:e5:6a:
64:f8:84:e8:57:dd:99:e4:76:09:a9:f4:2a:1f:19:80:9e:56:
72:c0:7b:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 8 23:18:50 2025 by rpki-client