Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/9678f9-9dfe-4b39-a80b-c54af960ef18/1/N6lZHUhfwNCQKom-hBijuxJ1BqU.mft
File: N6lZHUhfwNCQKom-hBijuxJ1BqU.mft (raw, json)
Hash identifier: iyjz5E0w3sywnL5BoCE4wBNIQDRh1kMWRR1ascErhMw=
Subject key identifier: 29:F0:BF:44:44:FD:1D:5D:AE:C0:7C:4C:E3:CC:67:0B:08:C6:BF:52
Authority key identifier: 37:A9:59:1D:48:5F:C0:D0:90:2A:89:BE:84:18:A3:BB:12:75:06:A5
Certificate issuer: /CN=37a9591d485fc0d0902a89be8418a3bb127506a5
Certificate serial: 019A71EEB967D1D6AB49AA7754136E9FDE6C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/N6lZHUhfwNCQKom-hBijuxJ1BqU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/9678f9-9dfe-4b39-a80b-c54af960ef18/1/N6lZHUhfwNCQKom-hBijuxJ1BqU.mft
Manifest number: 06FA
Signing time: Tue 11 Nov 2025 08:01:01 +0000
Manifest this update: Tue 11 Nov 2025 08:01:01 +0000
Manifest next update: Wed 12 Nov 2025 08:01:01 +0000
Files and hashes: 1: N6lZHUhfwNCQKom-hBijuxJ1BqU.crl (hash: Hyj9TiQw3bvm5jxewxA9wCanoW29B+vfSYSIWmzpuZY=)
2: vUnbbu8skzS26iiXfWJzScSr25E.roa (hash: ImAxTHT0Xe4VXBRsFAB4OoUTkv7HmDfrBn2Cev7GldU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/00/9678f9-9dfe-4b39-a80b-c54af960ef18/1/N6lZHUhfwNCQKom-hBijuxJ1BqU.crl
rsync://rpki.ripe.net/repository/DEFAULT/00/9678f9-9dfe-4b39-a80b-c54af960ef18/1/N6lZHUhfwNCQKom-hBijuxJ1BqU.mft
rsync://rpki.ripe.net/repository/DEFAULT/N6lZHUhfwNCQKom-hBijuxJ1BqU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 08:01:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:ee:b9:67:d1:d6:ab:49:aa:77:54:13:6e:9f:de:6c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=37a9591d485fc0d0902a89be8418a3bb127506a5
Validity
Not Before: Nov 11 08:01:01 2025 GMT
Not After : Nov 12 08:01:01 2025 GMT
Subject: CN=29f0bf4444fd1d5daec07c4ce3cc670b08c6bf52
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:f4:a1:97:34:17:9e:be:48:3f:ef:7a:fb:57:
1a:55:ec:ba:b3:94:db:e9:2b:be:d6:c9:50:bc:6d:
59:f1:84:84:cf:73:88:22:2d:37:f4:5b:72:63:49:
69:3c:82:f0:85:3b:89:96:ea:bd:0b:c8:0b:33:02:
a6:0d:1e:18:82:8b:7a:81:62:4f:50:a7:ab:73:57:
ce:5b:fa:63:51:8e:db:b0:f5:0c:24:a4:54:2e:0d:
c0:54:6b:13:94:d8:4a:3d:45:1c:c9:c8:a5:53:fc:
36:26:30:d4:18:e1:24:67:2b:70:54:bb:fb:52:22:
61:6a:96:21:d3:84:64:51:5f:f1:2e:fc:67:17:64:
e8:5a:e5:97:0d:06:5d:eb:60:c1:ba:de:57:b0:7e:
4a:d7:ec:64:de:48:83:48:98:11:44:00:4a:66:db:
64:0e:7e:b9:de:af:da:7d:c3:a9:7e:c9:c7:cc:83:
88:6e:f5:4e:b7:eb:0c:1c:41:94:0e:a1:9a:43:a2:
99:e3:d6:1c:1b:54:ec:3e:89:24:21:2f:79:b9:24:
42:56:14:46:a7:22:e1:7b:eb:c2:e4:5c:c9:c5:7b:
9c:31:14:04:19:7f:e8:c7:e6:ee:8f:c5:07:bd:f7:
5f:5e:1c:58:73:fa:2a:72:ca:ea:22:b5:4b:07:31:
6c:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:F0:BF:44:44:FD:1D:5D:AE:C0:7C:4C:E3:CC:67:0B:08:C6:BF:52
X509v3 Authority Key Identifier:
keyid:37:A9:59:1D:48:5F:C0:D0:90:2A:89:BE:84:18:A3:BB:12:75:06:A5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/N6lZHUhfwNCQKom-hBijuxJ1BqU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/9678f9-9dfe-4b39-a80b-c54af960ef18/1/N6lZHUhfwNCQKom-hBijuxJ1BqU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/9678f9-9dfe-4b39-a80b-c54af960ef18/1/N6lZHUhfwNCQKom-hBijuxJ1BqU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
65:11:ad:b0:8c:ae:fc:e9:81:89:cd:20:27:ae:cc:6e:02:b5:
ca:4f:e6:08:95:e9:5c:7e:93:be:c0:f7:a0:a6:e4:d7:1a:63:
ef:e8:21:8e:a2:a2:01:5b:64:68:13:52:39:1a:ce:08:65:3c:
3a:86:f6:f7:99:39:cb:65:39:d3:6b:ea:ce:7a:75:d6:39:a9:
f5:75:36:88:2d:59:d2:93:f2:18:d3:4a:1a:32:1a:f6:32:89:
85:f4:04:07:55:21:15:b0:7a:65:84:61:d6:90:48:4b:32:99:
b5:9c:0c:6b:13:f3:80:bf:3d:02:46:80:1b:a0:f6:5f:00:0e:
28:bb:85:27:a5:e3:18:e0:e5:1f:e6:22:28:9f:92:8e:0f:3e:
6d:49:24:aa:e3:95:a5:df:49:6b:0d:de:18:72:ba:08:41:8f:
03:ab:0d:67:f5:45:a1:22:07:0b:c2:cf:93:12:ed:20:ac:19:
d7:06:bd:69:c4:56:fa:4a:72:a7:f9:ad:9c:98:a9:79:cd:de:
b8:d6:f8:7f:8c:3e:84:45:bc:46:75:2e:90:cf:95:32:ef:ed:
26:a7:34:85:ca:fa:51:a7:e9:54:11:e4:21:58:80:02:1d:89:
5c:6b:85:fb:3a:a8:73:cf:88:61:6b:3b:60:84:14:a0:e5:31:
48:a0:f5:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 14:04:46 2025 by rpki-client