Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/44/6bb5b1-1e6a-4455-9d75-e64c885f62ce/1/n5auJ3AmWvMufUvoa6sHoHwtM1M.mft
File: n5auJ3AmWvMufUvoa6sHoHwtM1M.mft (raw, json)
Hash identifier: PMvtHaMqg/jSBVquWxxAln4P4g14ILH70v485eKqo70=
Subject key identifier: DA:88:AC:16:06:99:8F:97:C2:C0:8F:CB:B0:CD:BB:02:87:1A:AD:71
Authority key identifier: 9F:96:AE:27:70:26:5A:F3:2E:7D:4B:E8:6B:AB:07:A0:7C:2D:33:53
Certificate issuer: /CN=9f96ae2770265af32e7d4be86bab07a07c2d3353
Certificate serial: 019A730169E9747387C1F356BCDA7A3A5A63
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/n5auJ3AmWvMufUvoa6sHoHwtM1M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/44/6bb5b1-1e6a-4455-9d75-e64c885f62ce/1/n5auJ3AmWvMufUvoa6sHoHwtM1M.mft
Manifest number: 1721
Signing time: Tue 11 Nov 2025 13:01:03 +0000
Manifest this update: Tue 11 Nov 2025 13:01:03 +0000
Manifest next update: Wed 12 Nov 2025 13:01:03 +0000
Files and hashes: 1: UvEQh_w3pDpxL5Zm-5aViUxyqU0.roa (hash: 1pbBgB/1Q5Ec8C6USLAWvrMVYcZC0MxJ5lbRr8Zsraw=)
2: n5auJ3AmWvMufUvoa6sHoHwtM1M.crl (hash: o57JACNSoojoEbBby6GDDAC+8funEYtIhQDT1rv5rB0=)
3: oW7xXBoOfOplj3IQ3tHAFq1-5Ro.roa (hash: FvAVYSvPEbqL+jm0fRgeU20CKG+6Yq/KWe4x3D/uqak=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/44/6bb5b1-1e6a-4455-9d75-e64c885f62ce/1/n5auJ3AmWvMufUvoa6sHoHwtM1M.crl
rsync://rpki.ripe.net/repository/DEFAULT/44/6bb5b1-1e6a-4455-9d75-e64c885f62ce/1/n5auJ3AmWvMufUvoa6sHoHwtM1M.mft
rsync://rpki.ripe.net/repository/DEFAULT/n5auJ3AmWvMufUvoa6sHoHwtM1M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:73:01:69:e9:74:73:87:c1:f3:56:bc:da:7a:3a:5a:63
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9f96ae2770265af32e7d4be86bab07a07c2d3353
Validity
Not Before: Nov 11 13:01:03 2025 GMT
Not After : Nov 12 13:01:03 2025 GMT
Subject: CN=da88ac1606998f97c2c08fcbb0cdbb02871aad71
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:0d:82:c5:2a:df:e2:25:e1:78:a9:78:3c:a5:
7a:b9:db:35:db:29:c2:3d:05:3e:35:b9:6d:1c:98:
86:57:0f:3f:72:ae:b6:ac:8f:8f:a3:0b:43:09:a6:
02:9f:8b:86:a9:22:9f:65:10:74:12:cf:0a:d3:13:
80:5f:1b:82:4d:bf:91:41:b1:a4:e3:55:0b:41:ca:
7a:46:75:a3:a3:83:e7:84:09:43:8a:18:4e:f9:34:
6d:56:63:14:8a:58:6a:87:08:55:92:b1:76:b5:16:
3f:52:e8:37:32:2a:fa:ee:3f:d8:09:12:4f:bb:6e:
2c:13:d0:29:ca:34:c2:32:35:8c:cf:75:42:db:81:
87:e0:61:92:4d:74:b3:fa:48:fd:e6:8c:11:66:0d:
44:41:e5:e5:36:ad:20:4d:98:2a:f8:0b:06:7e:5c:
ca:5d:59:9d:f5:6d:95:f1:e1:4a:e8:cc:39:24:91:
d4:f7:9c:52:b1:29:09:6a:e6:9c:ba:64:2c:82:ef:
a7:f9:40:90:80:d9:97:e8:ab:6b:ce:ec:ec:50:82:
6a:dd:04:b3:ba:c6:fe:a8:1b:d1:79:bc:6d:27:af:
41:26:35:c0:ba:8f:39:33:4d:0f:80:c6:45:9b:73:
b2:be:73:7e:aa:8f:53:a5:94:84:53:74:82:4d:21:
00:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:88:AC:16:06:99:8F:97:C2:C0:8F:CB:B0:CD:BB:02:87:1A:AD:71
X509v3 Authority Key Identifier:
keyid:9F:96:AE:27:70:26:5A:F3:2E:7D:4B:E8:6B:AB:07:A0:7C:2D:33:53
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/n5auJ3AmWvMufUvoa6sHoHwtM1M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/6bb5b1-1e6a-4455-9d75-e64c885f62ce/1/n5auJ3AmWvMufUvoa6sHoHwtM1M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/44/6bb5b1-1e6a-4455-9d75-e64c885f62ce/1/n5auJ3AmWvMufUvoa6sHoHwtM1M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
75:34:a3:93:8f:b7:0e:ba:f1:8d:22:f6:c4:9d:a7:3f:9a:71:
55:34:e9:d8:71:72:da:dd:08:1e:c2:41:df:26:c4:79:09:3d:
36:a3:d5:2a:17:e2:54:50:6e:aa:d7:20:b2:1c:78:8e:a4:ba:
ca:e7:0c:52:45:3e:aa:e7:43:19:4b:fc:dd:07:b2:61:a9:e4:
7d:52:6f:28:96:65:f8:ad:e4:43:7c:5c:cc:c0:d9:79:e3:d1:
5b:3a:2a:03:2c:b9:5d:8a:94:39:5b:f9:19:f4:1b:a4:bf:c2:
51:4d:7e:5c:0f:cf:73:a9:0d:c5:3b:dc:ce:ac:26:18:f9:85:
fd:21:1b:66:34:28:d4:99:74:7e:37:dd:b8:c2:82:22:31:80:
63:35:b3:d1:66:16:3f:28:a9:a0:0a:fa:9f:89:37:8f:4b:7c:
1c:95:07:34:e2:8f:b8:08:6b:6c:2b:49:e6:67:82:18:cb:f3:
25:13:45:3e:af:21:13:1f:d6:84:fd:33:89:5c:44:e3:ba:2c:
be:6c:af:d1:a6:d6:9b:5e:6f:c8:ad:9d:ec:69:ee:cb:6b:8c:
11:cd:d2:2d:94:29:83:23:88:dc:3f:f5:c4:6c:84:3b:f8:bd:
17:11:34:19:75:9c:76:92:de:14:df:c4:76:7b:a5:6c:d7:4f:
01:25:af:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 16:51:29 2025 by rpki-client