Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/22/e128e0-00a6-4689-95be-524c2109cb05/1/N4kaRySqxrXaAAUymqOlq-h3edY.mft
File: N4kaRySqxrXaAAUymqOlq-h3edY.mft (raw, json)
Hash identifier: 7ccC3SMP1/nrsAd0eSWoZDTwrOuD7YCYolLkl5QUMb8=
Subject key identifier: 60:73:DE:64:2A:BE:04:AB:6D:33:3D:B0:09:44:61:64:19:3A:38:91
Authority key identifier: 37:89:1A:47:24:AA:C6:B5:DA:00:05:32:9A:A3:A5:AB:E8:77:79:D6
Certificate issuer: /CN=37891a4724aac6b5da0005329aa3a5abe87779d6
Certificate serial: 019A70A50C2AA51CA09B92EF6E49FDB365AE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/N4kaRySqxrXaAAUymqOlq-h3edY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/22/e128e0-00a6-4689-95be-524c2109cb05/1/N4kaRySqxrXaAAUymqOlq-h3edY.mft
Manifest number: 171E
Signing time: Tue 11 Nov 2025 02:00:56 +0000
Manifest this update: Tue 11 Nov 2025 02:00:56 +0000
Manifest next update: Wed 12 Nov 2025 02:00:56 +0000
Files and hashes: 1: N4kaRySqxrXaAAUymqOlq-h3edY.crl (hash: N88gpogHApPzo7Kqv+L5FUcDNsZzZFW7FOI5x+7bz/A=)
2: mUVCmxlyRHOtQgqO0rU0Vfd_JxM.roa (hash: 4mDmX111g5PLlffQE3BOZIPTW2uYVk7yBC9oTl48FX8=)
3: mpaZpMO6isSTObvE2wXG4DntXik.roa (hash: 8jJ5y7EIdegRe7Ybgq0RJ3e4AspmvthPjv+Sjpecx5Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/22/e128e0-00a6-4689-95be-524c2109cb05/1/N4kaRySqxrXaAAUymqOlq-h3edY.crl
rsync://rpki.ripe.net/repository/DEFAULT/22/e128e0-00a6-4689-95be-524c2109cb05/1/N4kaRySqxrXaAAUymqOlq-h3edY.mft
rsync://rpki.ripe.net/repository/DEFAULT/N4kaRySqxrXaAAUymqOlq-h3edY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 02:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:70:a5:0c:2a:a5:1c:a0:9b:92:ef:6e:49:fd:b3:65:ae
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=37891a4724aac6b5da0005329aa3a5abe87779d6
Validity
Not Before: Nov 11 02:00:56 2025 GMT
Not After : Nov 12 02:00:56 2025 GMT
Subject: CN=6073de642abe04ab6d333db009446164193a3891
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:cf:f7:81:fd:00:54:39:e7:35:dd:8d:bd:09:
35:a4:d8:52:f2:7c:03:85:11:cc:d8:0a:5d:44:85:
a0:38:7f:37:80:37:4f:e1:b3:79:0c:1c:f6:38:f1:
cc:14:73:9a:1c:85:c7:0b:f8:1d:fc:b0:28:2d:b6:
96:22:a7:a5:68:98:8f:f9:b3:a0:0e:c8:80:8c:28:
c8:65:1a:7c:ef:16:1a:1b:78:e4:3c:e2:00:c9:80:
57:4a:4f:23:fc:63:70:66:82:13:a2:e4:c1:50:de:
fb:8b:15:5d:91:62:97:fb:29:ee:93:00:1f:20:67:
30:cc:ee:a1:5d:3f:23:59:0e:18:d3:72:7e:be:94:
4a:d9:4d:1f:69:e5:92:b9:6d:b0:e2:33:f7:d3:23:
7c:68:24:de:52:31:dc:24:e6:2c:40:50:1d:db:c7:
41:7f:46:88:95:90:90:76:ab:7d:5e:12:72:9f:3d:
12:e4:06:7d:03:6c:1b:6f:21:be:f8:2e:a8:cb:cb:
f0:44:92:9d:a6:65:88:f4:92:9b:d2:e2:8c:1d:b1:
f0:92:b2:b0:5d:cb:b1:03:30:c7:49:be:26:cf:76:
bb:f2:01:bd:20:5f:4c:48:62:25:62:c2:81:7c:d7:
70:06:b1:ff:47:9d:28:c6:95:79:ee:46:27:cc:83:
06:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:73:DE:64:2A:BE:04:AB:6D:33:3D:B0:09:44:61:64:19:3A:38:91
X509v3 Authority Key Identifier:
keyid:37:89:1A:47:24:AA:C6:B5:DA:00:05:32:9A:A3:A5:AB:E8:77:79:D6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/N4kaRySqxrXaAAUymqOlq-h3edY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/e128e0-00a6-4689-95be-524c2109cb05/1/N4kaRySqxrXaAAUymqOlq-h3edY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/22/e128e0-00a6-4689-95be-524c2109cb05/1/N4kaRySqxrXaAAUymqOlq-h3edY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
15:16:82:12:56:dd:b8:36:26:4d:91:8d:af:01:b8:47:5c:48:
dd:c2:87:f8:cd:31:4b:78:64:e4:9d:f3:90:a8:8f:59:e3:bf:
11:5d:17:dc:87:2a:3e:3e:86:96:8f:db:2f:cb:69:9d:c6:ec:
fc:f2:b0:41:79:b5:34:7a:c9:71:4c:36:7b:38:60:eb:ab:6a:
87:93:54:a6:c4:de:e4:af:7b:d1:61:75:e4:e9:91:46:e8:d1:
45:0c:ad:65:1a:10:9f:84:03:f3:d0:f1:5c:99:04:9f:f6:d4:
fb:12:32:22:89:6b:ec:20:69:fd:4b:a8:9a:e4:a1:ad:7f:37:
16:31:7d:0a:82:af:3b:88:93:44:8d:ba:d6:e4:32:de:62:ff:
61:f9:fd:8d:64:47:bc:80:fa:15:8f:95:81:70:e5:3c:6d:f0:
80:11:4d:7d:cb:6c:19:ca:9c:4d:e8:d7:a9:0b:51:71:d5:a3:
7b:c0:a3:28:e0:73:c4:82:30:0d:8a:de:0a:f9:55:fb:e5:6f:
f5:ee:95:e9:dc:e6:46:da:94:12:f8:b5:b1:af:58:97:96:36:
3f:3b:30:29:be:83:c7:97:6a:7e:14:55:dd:4b:00:bf:e8:60:
d4:a0:46:5c:b4:25:bf:83:8d:75:b7:8c:8a:69:91:f8:ea:29:
d0:e4:04:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 12:54:39 2025 by rpki-client