Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3e/85a03d-87c3-4401-9a0d-ab2bafa1ae4d/1/N_S5Gj_86fl1Bac8_V5K1ONeBC0.mft
File: N_S5Gj_86fl1Bac8_V5K1ONeBC0.mft (raw, json)
Hash identifier: l0wl2eowc/wHSBZoZdBMjESWcQdRfWx5AhuQLBuju7Q=
Subject key identifier: 2E:31:1C:F6:D6:F5:67:32:54:13:F1:1B:DE:BF:41:73:68:7E:A7:93
Authority key identifier: 37:F4:B9:1A:3F:FC:E9:F9:75:05:A7:3C:FD:5E:4A:D4:E3:5E:04:2D
Certificate issuer: /CN=37f4b91a3ffce9f97505a73cfd5e4ad4e35e042d
Certificate serial: 019A7226092CD997E6A08F98DE5BAC213B67
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/N_S5Gj_86fl1Bac8_V5K1ONeBC0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3e/85a03d-87c3-4401-9a0d-ab2bafa1ae4d/1/N_S5Gj_86fl1Bac8_V5K1ONeBC0.mft
Manifest number: 08B2
Signing time: Tue 11 Nov 2025 09:01:26 +0000
Manifest this update: Tue 11 Nov 2025 09:01:26 +0000
Manifest next update: Wed 12 Nov 2025 09:01:26 +0000
Files and hashes: 1: N_S5Gj_86fl1Bac8_V5K1ONeBC0.crl (hash: WECKzlBxEL8sVqAt3HHMXSCDIknB59s/cyZ74TpOL2Y=)
2: hS4qE69cRzq1LeuTH9FbxF7EdCM.roa (hash: CNvb1FlCruFxVWACj7/lI66W2B3Fn96cjXQxKd7K6v8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3e/85a03d-87c3-4401-9a0d-ab2bafa1ae4d/1/N_S5Gj_86fl1Bac8_V5K1ONeBC0.crl
rsync://rpki.ripe.net/repository/DEFAULT/3e/85a03d-87c3-4401-9a0d-ab2bafa1ae4d/1/N_S5Gj_86fl1Bac8_V5K1ONeBC0.mft
rsync://rpki.ripe.net/repository/DEFAULT/N_S5Gj_86fl1Bac8_V5K1ONeBC0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:26:09:2c:d9:97:e6:a0:8f:98:de:5b:ac:21:3b:67
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=37f4b91a3ffce9f97505a73cfd5e4ad4e35e042d
Validity
Not Before: Nov 11 09:01:26 2025 GMT
Not After : Nov 12 09:01:26 2025 GMT
Subject: CN=2e311cf6d6f567325413f11bdebf4173687ea793
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:f4:af:10:27:3b:a2:db:ee:d4:cb:79:59:3f:
4c:73:e0:39:e1:07:13:95:0a:ad:c6:4d:7c:37:44:
0f:d1:6c:bc:b4:90:c5:c3:78:f7:69:14:72:77:db:
42:ee:a7:0b:6f:d1:d1:82:4a:d0:cb:eb:ca:da:14:
95:75:13:c6:f3:c3:18:29:82:60:3c:f5:e9:43:45:
7a:2e:65:d6:d2:2a:b3:e5:e7:ea:e5:2d:4a:1e:fe:
ed:46:ea:17:4a:c7:d2:47:dc:b1:1e:9a:30:b9:43:
12:91:c4:d4:84:f7:95:71:ca:4f:d4:85:f2:d0:ba:
2a:39:f4:df:e5:f2:99:24:e9:36:ee:f1:96:a7:87:
0f:62:67:b8:a3:9e:ef:a1:88:da:d3:25:cb:c2:6b:
67:2b:55:e7:b1:b4:7a:74:88:1a:0f:0c:4e:3d:1e:
ec:dc:68:ab:60:1f:9c:01:a2:d9:f8:e0:d1:de:34:
74:e4:65:9b:df:4c:7d:a5:a7:07:37:de:5b:0f:da:
d4:26:a8:a2:00:4b:10:65:47:f8:ff:c0:76:86:84:
82:dd:c3:75:f0:d6:62:66:b5:54:fb:aa:55:68:a5:
73:bb:fb:80:46:c4:df:86:9c:a7:76:1a:7b:86:fe:
d6:7e:0a:33:10:94:0e:c5:ab:29:e6:06:4c:a6:36:
19:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:31:1C:F6:D6:F5:67:32:54:13:F1:1B:DE:BF:41:73:68:7E:A7:93
X509v3 Authority Key Identifier:
keyid:37:F4:B9:1A:3F:FC:E9:F9:75:05:A7:3C:FD:5E:4A:D4:E3:5E:04:2D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/N_S5Gj_86fl1Bac8_V5K1ONeBC0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/85a03d-87c3-4401-9a0d-ab2bafa1ae4d/1/N_S5Gj_86fl1Bac8_V5K1ONeBC0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/85a03d-87c3-4401-9a0d-ab2bafa1ae4d/1/N_S5Gj_86fl1Bac8_V5K1ONeBC0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7e:37:3f:e8:77:3f:66:bd:d1:28:1f:20:4f:53:53:68:41:2a:
77:59:16:e0:d1:7f:46:8b:0d:0b:8a:c3:78:57:55:f4:cb:66:
29:c4:55:c2:8d:1d:93:8d:6a:a5:7f:e6:c4:02:40:59:54:5a:
6c:ca:2f:0c:de:61:30:b1:9e:de:e6:da:e8:f5:29:d7:40:5c:
4d:ad:16:9c:4b:1d:77:2e:4e:d3:a0:6b:3e:62:19:ee:c6:8a:
56:f3:db:8e:6c:f5:7f:72:62:0c:ec:46:7d:cd:01:b3:1c:d3:
4e:0c:9e:a1:60:7b:9c:e0:c6:43:f7:28:6c:ab:f3:46:04:74:
85:66:c5:b4:07:01:16:04:c7:07:63:cb:41:80:4b:40:94:08:
ff:9c:f5:28:2a:b3:fa:4a:46:52:06:c0:37:8a:e3:df:84:1c:
58:b8:99:62:43:b7:63:ab:db:7f:6e:c2:34:5d:f6:86:30:6d:
c5:85:1a:07:46:21:2b:59:4a:35:ba:44:56:28:67:2b:23:e4:
d6:ef:b9:b3:59:a5:44:f2:65:3d:b3:ac:55:f7:10:b4:41:b3:
6b:18:61:9d:09:5b:8f:5b:a3:d8:51:b3:85:56:d5:4a:c0:b5:
84:ad:49:03:72:65:68:bb:44:e3:8c:8a:c9:9d:d1:bc:6c:79:
00:1a:bc:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 12:46:15 2025 by rpki-client