Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/208129-d086-49d4-9dc7-5a9ac7f39023/1/N3vRD32QbBMcjJ4vxzFkFt9K4iQ.mft
File: N3vRD32QbBMcjJ4vxzFkFt9K4iQ.mft (raw, json)
Hash identifier: V4mYpKntZmOTEtja9YtyFq7VlHzV3B6BGJ9KdfB2+qg=
Subject key identifier: BB:7E:78:17:29:EA:BC:D9:47:E7:41:34:68:28:39:87:5A:C8:EB:35
Authority key identifier: 37:7B:D1:0F:7D:90:6C:13:1C:8C:9E:2F:C7:31:64:16:DF:4A:E2:24
Certificate issuer: /CN=377bd10f7d906c131c8c9e2fc7316416df4ae224
Certificate serial: 019A7112BD9E0FB499D0C52D292E5F2407CB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/N3vRD32QbBMcjJ4vxzFkFt9K4iQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/208129-d086-49d4-9dc7-5a9ac7f39023/1/N3vRD32QbBMcjJ4vxzFkFt9K4iQ.mft
Manifest number: 0EA5
Signing time: Tue 11 Nov 2025 04:00:44 +0000
Manifest this update: Tue 11 Nov 2025 04:00:44 +0000
Manifest next update: Wed 12 Nov 2025 04:00:44 +0000
Files and hashes: 1: N3vRD32QbBMcjJ4vxzFkFt9K4iQ.crl (hash: gIEsZOtxAl/5/UpRmMteEcPr/AmfdEGyIGrpxhGlUlM=)
2: OMa6gi_iwh1hBu7tbqj9s02UqHs.roa (hash: MtN6hH7mkES8J6BxizWre+aErU3W714/kzoONVlpny4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/17/208129-d086-49d4-9dc7-5a9ac7f39023/1/N3vRD32QbBMcjJ4vxzFkFt9K4iQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/17/208129-d086-49d4-9dc7-5a9ac7f39023/1/N3vRD32QbBMcjJ4vxzFkFt9K4iQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/N3vRD32QbBMcjJ4vxzFkFt9K4iQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 04:00:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:12:bd:9e:0f:b4:99:d0:c5:2d:29:2e:5f:24:07:cb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=377bd10f7d906c131c8c9e2fc7316416df4ae224
Validity
Not Before: Nov 11 04:00:44 2025 GMT
Not After : Nov 12 04:00:44 2025 GMT
Subject: CN=bb7e781729eabcd947e74134682839875ac8eb35
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:f9:7c:05:75:64:1f:ba:08:9e:c6:1f:ae:ab:
c4:02:a1:8f:bb:73:9b:50:1d:51:f5:fc:1e:49:7e:
6e:72:18:3c:0d:71:70:dd:c6:77:ba:5b:58:85:30:
db:92:ff:ca:6d:41:05:26:1d:dd:20:c0:eb:5c:fc:
4c:a8:f2:1e:4d:ef:f0:f7:95:75:3e:2e:06:12:a7:
42:dc:8e:62:f8:96:f8:4e:98:11:fb:00:b0:76:5b:
de:df:68:ba:3f:32:54:10:4c:09:68:8d:ba:0b:0e:
49:be:a3:87:6c:86:91:8b:fa:f7:cd:44:b7:f5:2a:
08:bd:a2:0a:d6:30:1e:d4:54:d8:f9:57:45:51:0b:
81:05:12:97:af:7b:05:97:22:46:c6:3f:bd:d0:ba:
92:d2:ac:a3:70:35:32:cc:3a:40:0b:40:c4:ad:7d:
e7:a6:bc:79:ef:5c:93:db:98:56:d9:44:5d:c9:36:
25:e0:87:8f:61:68:87:47:4d:55:de:2c:9a:27:2b:
aa:98:a1:85:f1:7f:4e:61:5a:78:2e:29:3f:0f:f5:
a2:5a:25:d1:8e:f4:d0:cf:f3:66:3c:cc:59:0d:f0:
31:af:06:38:0c:7f:9c:90:48:b5:7e:32:8a:db:5d:
88:c6:6b:2d:eb:84:28:d8:40:6e:d4:89:e7:7d:14:
9a:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:7E:78:17:29:EA:BC:D9:47:E7:41:34:68:28:39:87:5A:C8:EB:35
X509v3 Authority Key Identifier:
keyid:37:7B:D1:0F:7D:90:6C:13:1C:8C:9E:2F:C7:31:64:16:DF:4A:E2:24
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/N3vRD32QbBMcjJ4vxzFkFt9K4iQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/208129-d086-49d4-9dc7-5a9ac7f39023/1/N3vRD32QbBMcjJ4vxzFkFt9K4iQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/17/208129-d086-49d4-9dc7-5a9ac7f39023/1/N3vRD32QbBMcjJ4vxzFkFt9K4iQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
92:10:b2:91:20:d1:98:4b:97:0a:52:9a:39:38:91:94:a2:00:
9e:40:90:48:9f:ef:85:1b:0e:f7:9a:25:b0:d9:c9:7a:7e:bf:
97:3c:36:04:43:de:d5:76:59:98:88:9f:05:15:40:d6:39:d9:
1b:dc:3d:b1:6a:3b:68:9d:20:02:4d:9c:73:8d:f5:04:6c:79:
f2:2f:c7:d3:cd:2b:1b:1b:7e:18:fa:29:0f:4a:36:ba:07:c9:
8e:1a:61:88:18:52:69:bc:a1:5a:cc:f0:75:a2:09:b8:d6:c2:
3e:c4:6f:6e:7b:c5:b2:da:eb:f5:01:05:21:96:9c:64:69:47:
d2:68:a5:90:57:a4:ef:4b:71:33:72:0d:93:82:6d:8a:ec:c2:
44:a8:4a:62:f2:3c:13:df:1a:a3:e9:eb:18:6d:15:b9:7a:d9:
a0:b6:54:3c:57:f6:51:65:27:a0:e7:14:ab:02:0a:b0:08:ff:
84:af:73:99:98:7d:17:0a:15:7e:4a:94:b2:af:c3:51:70:1e:
ad:3f:80:f2:f7:39:2e:ad:72:68:f4:22:e5:d8:ba:1a:ab:24:
af:d6:dd:55:b3:c7:ae:12:30:e0:02:21:ed:00:bf:a2:f8:ad:
d8:98:fe:40:03:04:68:8c:90:38:62:fb:89:2a:2c:7a:b5:8d:
89:96:9a:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 14:18:49 2025 by rpki-client