Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2e/742299-f343-4321-b351-b53b64cf0d95/1/N_sATjl93wTn0F82Q6A28hg2_xA.mft
File: N_sATjl93wTn0F82Q6A28hg2_xA.mft (raw, json)
Hash identifier: kYNTPlTs0L5cLoGeNEzQi4hwitfhyE+Q0Fnu7r/URic=
Subject key identifier: 3F:37:AD:4A:47:0F:CA:EC:87:BA:90:9A:DE:F5:07:87:42:26:44:1E
Authority key identifier: 37:FB:00:4E:39:7D:DF:04:E7:D0:5F:36:43:A0:36:F2:18:36:FF:10
Certificate issuer: /CN=37fb004e397ddf04e7d05f3643a036f21836ff10
Certificate serial: 019A202D5FF422716F3D7B8E06D80396154C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/N_sATjl93wTn0F82Q6A28hg2_xA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2e/742299-f343-4321-b351-b53b64cf0d95/1/N_sATjl93wTn0F82Q6A28hg2_xA.mft
Manifest number: 16FB
Signing time: Sun 26 Oct 2025 11:00:35 +0000
Manifest this update: Sun 26 Oct 2025 11:00:35 +0000
Manifest next update: Mon 27 Oct 2025 11:00:35 +0000
Files and hashes: 1: 3-Pz_ACqotf_1pTiM38rfDDW65c.roa (hash: +6mxaP3CNTwVlIYMhWG+20r4HZR/llgs3lm8STPmGs0=)
2: 9kX4GrtqMRWRvdlXwe-ZIc9Ou2o.roa (hash: 6kYLXGHct4tBz4Kt7RTp0Yq24Dr5ZTh8EftVQx18Anw=)
3: N_sATjl93wTn0F82Q6A28hg2_xA.crl (hash: Snert+N0NLBG2oVlaLpFq/TGpTexMhOtwim7me2IYbk=)
4: PuYFjQeAMPYTJknY4a9xdl9WjmI.roa (hash: E2/hGT1MU9NO8befK4BGLovPtwxuEyai1B8Xt8zA7+A=)
5: QRbrmHMbnacFIghz2vQJ1iEwIPo.roa (hash: gpC7d4/OhCyOZcpUbHREfEufrTPs9FXkeTxWhp4MXlw=)
6: avUi3YjwZnz0yzUPnJu4Y8PDkW0.roa (hash: mWS6jEEzpU5C/mf65CgMVs1ygfIg+nXboKeBb7STrRk=)
7: nTWU5WV73x998fb6pecneWzKHj0.roa (hash: m9Al1FOb5Ruq1WL/BIhpl9I/8AOLD6hHB+5Qi5PqY4A=)
8: tQddqDtQw7NBgLftZFCqhwc_WuA.roa (hash: HvmNQRN7FhEkknx+nTyVHNveazbku60W7ld+fe7MosQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2e/742299-f343-4321-b351-b53b64cf0d95/1/N_sATjl93wTn0F82Q6A28hg2_xA.crl
rsync://rpki.ripe.net/repository/DEFAULT/2e/742299-f343-4321-b351-b53b64cf0d95/1/N_sATjl93wTn0F82Q6A28hg2_xA.mft
rsync://rpki.ripe.net/repository/DEFAULT/N_sATjl93wTn0F82Q6A28hg2_xA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 27 Oct 2025 11:00:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:20:2d:5f:f4:22:71:6f:3d:7b:8e:06:d8:03:96:15:4c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=37fb004e397ddf04e7d05f3643a036f21836ff10
Validity
Not Before: Oct 26 11:00:35 2025 GMT
Not After : Oct 27 11:00:35 2025 GMT
Subject: CN=3f37ad4a470fcaec87ba909adef507874226441e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:ee:8e:81:9b:cc:66:a1:f4:f4:af:2a:69:5a:
37:20:ed:1a:67:4a:31:6f:ea:d7:27:72:45:1c:d5:
92:fc:db:e0:b8:e5:5d:f4:7e:12:11:e7:9e:c9:9a:
12:fa:81:fa:1d:a5:d2:5f:60:15:f6:ab:6f:b1:a6:
75:dc:12:11:2c:d4:f2:b4:b4:21:40:cc:33:b7:e7:
0d:68:c5:fe:9e:a2:02:4b:36:f9:ad:4b:20:b6:db:
be:08:e9:7d:f1:f6:e4:14:15:af:ab:19:1e:d3:62:
c5:63:f6:61:0e:9d:62:75:bb:38:6d:a8:d5:46:46:
52:31:1c:a6:93:c5:9e:99:e8:55:e5:81:e8:bc:4e:
54:ab:35:6f:eb:41:b5:75:41:29:61:cb:4a:52:96:
a9:8a:bc:49:34:87:0d:86:bd:31:1a:c9:2f:da:01:
8a:cd:b6:f1:74:36:16:50:3e:6f:35:e9:8c:18:5c:
8f:6a:d5:04:04:b3:83:2e:fe:97:16:6c:fb:93:ad:
12:f9:53:79:35:c4:2d:f0:7a:01:3b:74:c2:84:e6:
66:7f:ec:65:6d:1b:e1:6d:0f:24:d6:ef:8a:89:0d:
dd:e4:b5:80:bb:f6:5c:59:4c:65:9f:28:b2:7f:ce:
46:64:ba:e9:9e:b1:a2:79:1a:04:22:aa:cf:78:89:
11:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:37:AD:4A:47:0F:CA:EC:87:BA:90:9A:DE:F5:07:87:42:26:44:1E
X509v3 Authority Key Identifier:
keyid:37:FB:00:4E:39:7D:DF:04:E7:D0:5F:36:43:A0:36:F2:18:36:FF:10
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/N_sATjl93wTn0F82Q6A28hg2_xA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/742299-f343-4321-b351-b53b64cf0d95/1/N_sATjl93wTn0F82Q6A28hg2_xA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/742299-f343-4321-b351-b53b64cf0d95/1/N_sATjl93wTn0F82Q6A28hg2_xA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
68:4f:b4:a4:2e:f2:e1:55:5e:57:72:99:9e:87:8c:6f:ad:ef:
19:ed:b8:0d:5d:c0:05:f8:2b:bd:b8:b4:c9:f3:02:89:5b:de:
8f:d4:9b:85:94:86:39:64:18:ef:17:b4:bc:04:69:2e:32:bf:
f8:3b:7a:51:76:dd:6f:08:a5:3e:61:59:9d:10:32:30:41:80:
6d:40:12:21:af:7f:f0:5d:0a:e0:ce:59:48:a3:a4:8b:e9:59:
10:22:e5:42:44:99:ef:e3:b8:48:a9:0a:97:f5:a4:c3:e1:39:
50:07:42:ea:fb:19:16:91:e3:01:80:47:3b:b4:cd:76:f7:4d:
51:12:de:8f:20:74:df:c3:c9:a2:4e:d2:0a:cc:8d:48:68:dc:
eb:cb:6f:66:15:82:02:5b:6b:13:90:21:1b:77:e6:27:55:a3:
55:0c:3e:18:3f:ce:10:e1:79:07:b0:26:39:8f:fc:a1:00:73:
85:3a:a0:87:ef:81:0e:0e:7f:ee:79:92:dd:b9:c0:2b:a3:49:
83:48:f5:05:c6:85:7a:13:04:4e:76:50:9b:d2:6b:21:13:a2:
52:ac:5b:f1:e0:0e:8b:92:70:3c:23:89:01:5c:b0:08:a8:00:
84:cd:bf:dc:c1:db:68:a4:6d:02:24:9f:69:1e:61:07:46:45:
07:29:ae:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 26 19:17:45 2025 by rpki-client