Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/d74e10-3494-446f-a005-96b2242193f9/1/n5cRCdLqVpsz6Qo44DAs_xZ70DU.mft
File: n5cRCdLqVpsz6Qo44DAs_xZ70DU.mft (raw, json)
Hash identifier: nUCXFV2ZrkFp368vnVrK7yqRJOWkuOT6k7PPtU3G7iU=
Subject key identifier: 1A:1E:DA:55:74:E0:DA:5B:EF:00:FE:68:8F:F1:1B:1F:13:75:93:2A
Authority key identifier: 9F:97:11:09:D2:EA:56:9B:33:E9:0A:38:E0:30:2C:FF:16:7B:D0:35
Certificate issuer: /CN=9f971109d2ea569b33e90a38e0302cff167bd035
Certificate serial: 019A71B7D766B52488F561A4D8A84D61D9FC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/n5cRCdLqVpsz6Qo44DAs_xZ70DU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/15/d74e10-3494-446f-a005-96b2242193f9/1/n5cRCdLqVpsz6Qo44DAs_xZ70DU.mft
Manifest number: 0C1F
Signing time: Tue 11 Nov 2025 07:01:04 +0000
Manifest this update: Tue 11 Nov 2025 07:01:04 +0000
Manifest next update: Wed 12 Nov 2025 07:01:04 +0000
Files and hashes: 1: n5cRCdLqVpsz6Qo44DAs_xZ70DU.crl (hash: 9BX1CPwWCYyka+TaVZNFoZePOPyFsBrHLCCYJbcYSrk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/15/d74e10-3494-446f-a005-96b2242193f9/1/n5cRCdLqVpsz6Qo44DAs_xZ70DU.crl
rsync://rpki.ripe.net/repository/DEFAULT/15/d74e10-3494-446f-a005-96b2242193f9/1/n5cRCdLqVpsz6Qo44DAs_xZ70DU.mft
rsync://rpki.ripe.net/repository/DEFAULT/n5cRCdLqVpsz6Qo44DAs_xZ70DU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 07:01:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:b7:d7:66:b5:24:88:f5:61:a4:d8:a8:4d:61:d9:fc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9f971109d2ea569b33e90a38e0302cff167bd035
Validity
Not Before: Nov 11 07:01:04 2025 GMT
Not After : Nov 12 07:01:04 2025 GMT
Subject: CN=1a1eda5574e0da5bef00fe688ff11b1f1375932a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:18:fc:8d:6b:3e:9c:69:b6:7b:46:7b:89:d3:
e1:f6:24:ea:f4:5d:f7:e6:ba:07:68:c2:8b:ce:f6:
60:63:a2:4b:0d:f1:83:13:33:fe:1d:2d:88:4c:94:
e2:28:3c:be:c2:28:c6:6a:74:18:8e:3e:94:c1:f9:
27:34:43:ad:0b:70:04:95:4d:2a:95:00:83:b3:c5:
1a:d1:f8:fe:cc:21:18:9a:10:dc:49:72:93:99:0e:
5c:d1:d0:64:bf:28:59:21:69:c1:85:a7:35:bb:76:
98:f9:a5:55:03:c9:17:22:e2:d9:f4:d9:04:67:ad:
d0:86:07:4f:33:60:88:a2:61:d5:b5:13:0d:d3:4b:
e3:66:9e:3d:c1:da:b7:48:bf:b1:36:22:3d:92:f8:
5a:0f:66:b0:53:67:95:cc:8d:66:f0:9d:6a:3b:9e:
08:d6:24:f5:7d:a6:7e:5b:b3:69:33:35:77:8c:fd:
65:79:0a:c1:6a:e8:eb:83:a9:93:a7:1b:a4:05:f2:
4f:c8:2e:c6:28:8c:4f:c5:f5:9e:8e:fa:7c:db:f3:
76:33:de:ff:7f:f1:72:6e:15:4d:61:ed:10:ab:fc:
f3:5c:b3:c4:ca:7a:fe:81:57:97:b4:2b:c7:0b:41:
90:e0:13:b2:fc:ca:2b:7f:96:f5:27:46:61:eb:9d:
66:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:1E:DA:55:74:E0:DA:5B:EF:00:FE:68:8F:F1:1B:1F:13:75:93:2A
X509v3 Authority Key Identifier:
keyid:9F:97:11:09:D2:EA:56:9B:33:E9:0A:38:E0:30:2C:FF:16:7B:D0:35
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/n5cRCdLqVpsz6Qo44DAs_xZ70DU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/d74e10-3494-446f-a005-96b2242193f9/1/n5cRCdLqVpsz6Qo44DAs_xZ70DU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/15/d74e10-3494-446f-a005-96b2242193f9/1/n5cRCdLqVpsz6Qo44DAs_xZ70DU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c3:57:2a:9d:ac:f5:b9:f3:51:f2:30:ba:fa:ae:7d:96:12:da:
6e:e7:1b:2c:18:e4:60:74:01:4c:21:0c:d2:ba:ed:83:e5:8b:
0b:9a:3e:c8:db:d9:5f:d9:32:e0:8d:f5:4a:16:63:32:4c:a9:
e2:9f:16:79:5b:58:43:0e:a6:f3:92:97:16:06:e2:e5:79:e0:
2b:b8:5a:ce:c5:0b:4d:73:e7:2d:98:49:99:51:6e:fe:4a:39:
61:49:20:5f:3e:b0:c3:60:59:46:b8:aa:7b:fb:11:6e:9a:7f:
b2:3a:ae:dc:af:45:a2:e9:7c:77:42:c5:30:77:d9:3b:93:8f:
87:bd:ba:79:c1:9b:36:01:f3:d8:5a:a2:93:3c:68:17:96:8b:
7f:47:3a:c9:ef:0c:8a:4e:60:bb:1d:00:7e:c4:bb:c4:10:62:
cb:8a:64:ed:89:7a:8d:cb:db:46:da:90:62:1a:1e:43:14:78:
2e:a0:9c:17:b9:e0:f0:e0:8f:87:a4:4b:a6:0e:df:14:86:0a:
99:ce:9e:d7:d2:8d:14:28:96:64:62:a4:50:a2:8d:bf:aa:77:
80:fb:13:5c:8c:a6:5f:3f:33:cc:c1:be:0d:92:f5:71:9f:42:
e5:4f:0c:3d:f6:03:de:f8:01:a4:5c:88:22:e5:7f:ad:43:08:
0e:7c:15:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 13:14:30 2025 by rpki-client