Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/6b0344-8229-4d25-b498-8ce7c4fc5e0b/1/N-dRoRwaeIj6WNv8MsiVm8lGMD4.mft
File: N-dRoRwaeIj6WNv8MsiVm8lGMD4.mft (raw, json)
Hash identifier: 4LpIX62lEZOJbawzpFu+uZlSIqaNSEad/+nB+0F8bY0=
Subject key identifier: 12:D5:A5:26:72:61:0D:E6:14:D8:61:27:31:C0:1E:05:76:FE:8E:54
Authority key identifier: 37:E7:51:A1:1C:1A:78:88:FA:58:DB:FC:32:C8:95:9B:C9:46:30:3E
Certificate issuer: /CN=37e751a11c1a7888fa58dbfc32c8959bc946303e
Certificate serial: 019A47A856B57FDD27B6193B7D8D1767C0E2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/N-dRoRwaeIj6WNv8MsiVm8lGMD4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/6b0344-8229-4d25-b498-8ce7c4fc5e0b/1/N-dRoRwaeIj6WNv8MsiVm8lGMD4.mft
Manifest number: 1455
Signing time: Mon 03 Nov 2025 03:00:05 +0000
Manifest this update: Mon 03 Nov 2025 03:00:05 +0000
Manifest next update: Tue 04 Nov 2025 03:00:05 +0000
Files and hashes: 1: 1iavcJFqwR6rzZKxM06ahcbF1Us.roa (hash: AJ47Zqj/T7JKUetOVwikynuHEcJu1eg9YDS731mpe6I=)
2: N-dRoRwaeIj6WNv8MsiVm8lGMD4.crl (hash: F4RP/Fjz8vQ+741NFv3eaLw+Y6QBq//c7ogOYzB9YFs=)
3: dqEoxI3WEV2rOPAYE8C4EEj1ebI.roa (hash: nVo4yJxw9EhxkUipVljpw16vPXrVAlAiSw+4KWPaovY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/45/6b0344-8229-4d25-b498-8ce7c4fc5e0b/1/N-dRoRwaeIj6WNv8MsiVm8lGMD4.crl
rsync://rpki.ripe.net/repository/DEFAULT/45/6b0344-8229-4d25-b498-8ce7c4fc5e0b/1/N-dRoRwaeIj6WNv8MsiVm8lGMD4.mft
rsync://rpki.ripe.net/repository/DEFAULT/N-dRoRwaeIj6WNv8MsiVm8lGMD4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 04 Nov 2025 03:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:47:a8:56:b5:7f:dd:27:b6:19:3b:7d:8d:17:67:c0:e2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=37e751a11c1a7888fa58dbfc32c8959bc946303e
Validity
Not Before: Nov 3 03:00:05 2025 GMT
Not After : Nov 4 03:00:05 2025 GMT
Subject: CN=12d5a52672610de614d8612731c01e0576fe8e54
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:74:29:5b:a4:ba:a0:61:90:a4:6a:2f:1c:80:
06:5f:54:eb:08:a7:73:39:db:9a:06:1c:99:50:a1:
23:a2:de:5b:29:40:0d:27:0b:a8:76:a1:69:7b:dc:
28:c3:17:52:7f:a2:32:85:31:29:c4:1d:05:55:9c:
21:2a:76:88:1c:35:aa:6b:f8:a0:9a:db:3c:58:16:
0e:18:37:29:d3:14:06:5b:90:3b:af:92:bd:3f:a3:
ae:75:0e:bc:c9:56:67:14:f1:ab:e6:eb:aa:46:48:
c4:69:da:55:12:83:76:0a:19:7a:2e:b7:7a:f6:4b:
27:b6:bd:d8:6d:68:f0:fc:2c:0a:71:9f:e4:c3:91:
ca:39:95:d2:90:a6:b1:62:61:4f:69:b1:fc:15:a4:
d9:8f:92:29:a4:bf:2f:56:7e:2c:24:33:6d:fe:2e:
da:9b:5b:46:ed:a9:5a:be:90:77:74:58:44:01:f5:
05:87:20:6b:03:9d:4a:88:1e:2c:73:aa:f2:8e:8c:
44:b5:8a:88:8c:8f:13:ea:ac:1a:55:ca:c8:aa:57:
8e:4d:48:d4:a0:c7:ca:ee:1a:80:d9:32:e3:8b:bd:
82:06:a5:65:c5:32:b2:7c:e4:35:1f:c5:2b:ce:e2:
06:6a:45:10:e5:50:50:ce:ef:e9:29:39:d3:bf:49:
f0:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:D5:A5:26:72:61:0D:E6:14:D8:61:27:31:C0:1E:05:76:FE:8E:54
X509v3 Authority Key Identifier:
keyid:37:E7:51:A1:1C:1A:78:88:FA:58:DB:FC:32:C8:95:9B:C9:46:30:3E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/N-dRoRwaeIj6WNv8MsiVm8lGMD4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/6b0344-8229-4d25-b498-8ce7c4fc5e0b/1/N-dRoRwaeIj6WNv8MsiVm8lGMD4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/45/6b0344-8229-4d25-b498-8ce7c4fc5e0b/1/N-dRoRwaeIj6WNv8MsiVm8lGMD4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3e:af:91:1f:75:db:71:31:9e:f2:34:bb:1d:42:f9:cf:65:05:
71:94:8d:6e:33:3e:56:71:73:55:96:e0:3f:e9:e9:8d:d0:2b:
55:5c:24:3a:7e:d4:a1:c5:c9:c9:99:4f:ba:68:0b:7b:23:47:
bf:79:25:4e:ce:b4:4a:bd:24:a7:08:dd:f8:11:1f:28:52:f5:
c6:a6:75:b4:88:70:55:8c:16:0d:2c:e3:c9:5b:a4:04:e0:57:
89:8a:4e:68:93:29:0d:09:3c:93:57:c7:2b:c7:63:eb:79:8c:
2a:24:69:45:3a:94:c5:e7:f5:40:09:c4:65:fe:28:9c:f9:6e:
e1:b5:61:a8:ff:ac:a8:89:85:7a:ce:dc:e2:20:53:7c:71:d2:
cf:41:a5:7b:ed:a4:fd:03:45:3c:ac:9c:39:a2:38:72:ab:27:
35:3d:e1:c5:bd:74:91:2a:68:5e:1b:3f:61:a5:d2:ab:bb:cc:
b2:2a:b9:60:63:28:c6:c7:6d:e5:29:48:a3:2f:f3:e1:54:99:
cc:b4:dc:f0:fa:99:b0:e2:9c:00:fc:97:cd:65:1d:01:44:d4:
e1:18:b3:1a:ad:3b:41:bb:dc:88:7c:82:e6:83:2b:6f:b3:61:
a9:f5:26:d0:ce:99:bf:d0:90:80:8f:2a:6f:13:71:69:0c:57:
41:aa:2e:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 3 11:09:10 2025 by rpki-client