Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/25fb54-d467-4e90-a41f-91c0d8e7549d/1/N6TS5C8jYsLm71K4Lxn35WN1fgw.mft
File: N6TS5C8jYsLm71K4Lxn35WN1fgw.mft (raw, json)
Hash identifier: FsVFRbi4lvq9e9eqXpNZy/6kp+OC5WqXJFQsSRRMQUA=
Subject key identifier: 48:39:92:DD:81:43:6F:36:9E:02:91:78:71:78:5E:C2:65:60:2F:25
Authority key identifier: 37:A4:D2:E4:2F:23:62:C2:E6:EF:52:B8:2F:19:F7:E5:63:75:7E:0C
Certificate issuer: /CN=37a4d2e42f2362c2e6ef52b82f19f7e563757e0c
Certificate serial: 019A71B8E4C1FDE72EB22BCC53D30B1AE6C1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/N6TS5C8jYsLm71K4Lxn35WN1fgw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/25fb54-d467-4e90-a41f-91c0d8e7549d/1/N6TS5C8jYsLm71K4Lxn35WN1fgw.mft
Manifest number: 044A
Signing time: Tue 11 Nov 2025 07:02:13 +0000
Manifest this update: Tue 11 Nov 2025 07:02:13 +0000
Manifest next update: Wed 12 Nov 2025 07:02:13 +0000
Files and hashes: 1: 3PpgKNG0AmRV_aCWCsXZ_tB5eIg.roa (hash: eRzqoJ+wnFE50kPBIiEdOOr71bv/+CxmFvCCuPDTNi4=)
2: N6TS5C8jYsLm71K4Lxn35WN1fgw.crl (hash: S/O3jNiuf8/NYTat8GK9ncY1amDVs0GizZ5KGjxvcW0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/36/25fb54-d467-4e90-a41f-91c0d8e7549d/1/N6TS5C8jYsLm71K4Lxn35WN1fgw.crl
rsync://rpki.ripe.net/repository/DEFAULT/36/25fb54-d467-4e90-a41f-91c0d8e7549d/1/N6TS5C8jYsLm71K4Lxn35WN1fgw.mft
rsync://rpki.ripe.net/repository/DEFAULT/N6TS5C8jYsLm71K4Lxn35WN1fgw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 07:02:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:b8:e4:c1:fd:e7:2e:b2:2b:cc:53:d3:0b:1a:e6:c1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=37a4d2e42f2362c2e6ef52b82f19f7e563757e0c
Validity
Not Before: Nov 11 07:02:13 2025 GMT
Not After : Nov 12 07:02:13 2025 GMT
Subject: CN=483992dd81436f369e02917871785ec265602f25
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:9a:61:1d:73:41:20:84:c2:22:88:be:4f:6e:
07:e8:8a:e4:ef:e5:9e:71:65:eb:20:80:ad:aa:6c:
88:73:16:c0:4f:d0:8b:0d:17:ce:56:fa:98:9e:d8:
5a:bc:d7:8c:43:31:74:93:ab:b5:07:e9:1a:96:89:
60:8b:1f:0c:28:06:17:eb:39:c6:ab:a9:db:69:37:
67:c9:1e:0d:14:84:f9:62:e7:a7:34:3a:ca:b9:d3:
13:39:23:5b:9e:cc:54:b1:47:7f:37:c7:2e:48:92:
54:91:88:66:36:88:04:de:6e:7d:e9:15:2c:9d:4f:
2e:7c:b3:da:9e:91:7d:a5:dc:8d:f2:d1:de:ed:fc:
36:fc:5c:38:46:6f:7c:5b:cb:78:31:60:37:29:ef:
e7:4a:e7:d6:3a:44:41:ab:eb:79:13:87:72:8e:7d:
39:44:28:68:54:d0:83:53:2e:3c:9c:e3:82:ab:a7:
d6:06:ad:38:5a:42:59:c5:ce:8c:31:82:65:ee:e3:
01:19:6c:f5:cc:d4:18:55:e3:6b:3b:2f:70:81:f9:
0e:f4:24:76:d9:97:79:db:58:4f:7f:a1:15:82:f4:
9e:41:32:bf:95:89:8d:f8:aa:fe:fb:92:98:46:cd:
3d:4f:79:bc:3c:88:84:c4:f4:da:3b:2d:42:00:c1:
c2:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:39:92:DD:81:43:6F:36:9E:02:91:78:71:78:5E:C2:65:60:2F:25
X509v3 Authority Key Identifier:
keyid:37:A4:D2:E4:2F:23:62:C2:E6:EF:52:B8:2F:19:F7:E5:63:75:7E:0C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/N6TS5C8jYsLm71K4Lxn35WN1fgw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/25fb54-d467-4e90-a41f-91c0d8e7549d/1/N6TS5C8jYsLm71K4Lxn35WN1fgw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/25fb54-d467-4e90-a41f-91c0d8e7549d/1/N6TS5C8jYsLm71K4Lxn35WN1fgw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
44:8c:b7:cc:1d:76:3e:4f:79:4f:d1:6e:e9:75:e1:16:5a:7f:
fd:60:a9:e3:a8:d8:44:f0:90:e1:31:15:13:fc:80:c2:75:0b:
d0:9e:92:4d:9d:e1:47:26:61:5e:40:3c:b2:34:83:eb:21:ac:
9c:af:e4:34:3d:bc:66:e8:a5:74:29:1a:96:f4:77:26:d8:5f:
e1:49:61:9b:56:d4:82:7e:33:fe:87:b1:7e:29:b7:20:d6:ed:
28:c4:fd:c3:01:1d:14:3b:5c:28:ba:0d:0e:7b:96:c4:df:5b:
cc:15:4e:db:a9:cf:df:b8:a8:08:cb:32:29:fd:37:5d:9a:4a:
e3:d8:cc:2d:8e:50:2c:c3:3a:56:67:6c:48:9a:69:52:42:57:
05:ce:ca:b6:f9:b1:5a:57:60:d1:03:6a:1a:8a:28:3b:dd:c3:
ce:57:4b:83:dc:c1:6e:ab:9e:5b:4f:3c:3e:56:3a:1d:85:4b:
49:15:7f:77:75:91:c7:67:c3:91:e2:af:25:f4:90:13:28:e5:
67:d4:8e:a2:d3:60:32:4e:be:e0:6c:51:86:b2:62:00:b4:40:
9e:37:c9:6f:1c:c5:60:84:9f:ba:b2:84:18:4e:4c:4e:1c:3a:
9b:62:82:a9:90:a8:66:00:0a:e4:06:d4:ab:5d:b9:00:51:9e:
e0:f8:b5:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 14:22:07 2025 by rpki-client