Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/07/b1c31a-fc39-4160-b1da-8373a6a411bf/1/N0kwALmnBFMdoaF2a-U4Jx7gzMk.mft
File: N0kwALmnBFMdoaF2a-U4Jx7gzMk.mft (raw, json)
Hash identifier: rOrGamXEM314fqYjnpEnzYTA9x32V15iIJB6h9vIk8s=
Subject key identifier: 75:16:FA:12:EC:CD:F3:BB:34:E9:04:6D:C2:02:27:69:3F:F1:0F:20
Authority key identifier: 37:49:30:00:B9:A7:04:53:1D:A1:A1:76:6B:E5:38:27:1E:E0:CC:C9
Certificate issuer: /CN=37493000b9a704531da1a1766be538271ee0ccc9
Certificate serial: 019A73385F2C75ABC6676CE26FAC8C72C435
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/N0kwALmnBFMdoaF2a-U4Jx7gzMk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/07/b1c31a-fc39-4160-b1da-8373a6a411bf/1/N0kwALmnBFMdoaF2a-U4Jx7gzMk.mft
Manifest number: F2
Signing time: Tue 11 Nov 2025 14:01:05 +0000
Manifest this update: Tue 11 Nov 2025 14:01:05 +0000
Manifest next update: Wed 12 Nov 2025 14:01:05 +0000
Files and hashes: 1: DWNtN1UdTBREYyaanUpXB_FD8t4.roa (hash: xHaaIDZ06J/70dT/JEm/SEDUNciR+mQ5wcEXZY/Pc2k=)
2: N0kwALmnBFMdoaF2a-U4Jx7gzMk.crl (hash: 9HFsoaEEk46X3Hn+NI1osD2kaVcjmS0pj2+gcwxUE1g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/07/b1c31a-fc39-4160-b1da-8373a6a411bf/1/N0kwALmnBFMdoaF2a-U4Jx7gzMk.crl
rsync://rpki.ripe.net/repository/DEFAULT/07/b1c31a-fc39-4160-b1da-8373a6a411bf/1/N0kwALmnBFMdoaF2a-U4Jx7gzMk.mft
rsync://rpki.ripe.net/repository/DEFAULT/N0kwALmnBFMdoaF2a-U4Jx7gzMk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:73:38:5f:2c:75:ab:c6:67:6c:e2:6f:ac:8c:72:c4:35
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=37493000b9a704531da1a1766be538271ee0ccc9
Validity
Not Before: Nov 11 14:01:05 2025 GMT
Not After : Nov 12 14:01:05 2025 GMT
Subject: CN=7516fa12eccdf3bb34e9046dc20227693ff10f20
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:62:46:39:0a:f6:89:ec:b3:be:7f:02:89:a7:
3c:6f:15:d9:5d:fe:8c:c3:20:c3:29:d6:f1:cd:33:
f8:32:95:74:41:87:ea:ae:98:05:53:13:46:77:dc:
20:a5:5a:db:80:b2:75:03:31:21:c0:76:83:fc:bd:
bd:b9:27:39:82:69:24:6a:ab:54:c7:20:f6:7e:29:
5b:6e:ae:fa:60:ce:f5:b4:ff:ce:8a:b6:82:54:a0:
49:f5:d0:7f:8c:6a:35:2d:e3:82:50:d8:b7:6d:ee:
02:0f:de:2c:93:d0:2a:90:37:8f:28:24:29:88:40:
a0:1b:01:44:fd:9f:6c:28:82:46:5e:3d:47:05:5b:
83:dd:85:43:c8:31:6e:fe:9f:72:67:06:e4:dd:d8:
7e:11:ae:bb:93:26:d9:2f:65:0f:21:42:bc:ca:b0:
c5:3c:b2:d5:a6:21:1f:fb:e1:cb:b8:47:fe:05:1e:
46:2d:a0:46:88:72:71:49:95:db:45:6b:40:ad:d6:
3e:b4:11:1f:17:39:51:70:eb:9f:33:e2:9b:5e:65:
49:dd:3d:b9:19:c0:de:7f:57:cc:ea:4c:21:a3:d2:
27:06:8b:8f:ed:11:13:72:d8:46:a4:9b:88:f0:33:
b4:26:2f:45:a0:e8:66:f6:13:a4:b2:47:98:dc:84:
dc:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:16:FA:12:EC:CD:F3:BB:34:E9:04:6D:C2:02:27:69:3F:F1:0F:20
X509v3 Authority Key Identifier:
keyid:37:49:30:00:B9:A7:04:53:1D:A1:A1:76:6B:E5:38:27:1E:E0:CC:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/N0kwALmnBFMdoaF2a-U4Jx7gzMk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/b1c31a-fc39-4160-b1da-8373a6a411bf/1/N0kwALmnBFMdoaF2a-U4Jx7gzMk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/07/b1c31a-fc39-4160-b1da-8373a6a411bf/1/N0kwALmnBFMdoaF2a-U4Jx7gzMk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
57:34:48:57:8a:4b:90:0a:70:14:e4:15:c1:81:64:e0:52:e2:
96:56:e2:01:ee:23:b9:a8:ff:7d:d6:32:53:ba:60:70:92:ba:
14:55:45:93:6b:04:76:8d:58:bc:ee:2c:0b:9e:26:63:18:07:
da:47:c0:c6:08:f5:86:c2:71:d3:b3:0b:e3:5a:28:70:9c:e9:
35:14:54:d4:f8:62:34:82:65:7f:5f:a3:ee:8f:d8:7a:29:cc:
a7:b4:50:a4:63:cd:54:57:86:52:0c:89:08:e8:6c:e9:72:9c:
f1:1e:70:1e:24:96:1e:4e:a8:90:df:63:32:ef:3c:82:86:be:
31:67:b5:83:4f:74:af:5a:09:47:85:f9:48:0d:7b:08:10:cd:
e8:f7:76:38:44:b3:67:00:66:cc:20:ee:e1:de:fa:32:0d:8c:
e0:e7:99:b9:24:5b:68:c9:a1:96:ce:e0:54:2f:54:a1:60:41:
6f:f3:7c:2e:35:31:9c:e9:c3:ac:26:f6:bd:69:a6:98:17:7c:
fc:9b:10:ed:c1:4f:34:c9:f3:7c:28:d9:48:8d:e9:72:e6:d8:
70:7f:70:9a:31:e7:be:27:53:b9:af:1c:01:28:b7:b4:04:d6:
92:25:a6:52:ce:14:0b:b1:28:54:73:16:8c:b5:eb:76:47:d4:
e4:fd:31:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 15:38:40 2025 by rpki-client