Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4f/35faed-c2d7-4cb9-97f5-df6f20dcb94b/1/N69IEx7Nnco97yst54jxUGBid1U.mft
File: N69IEx7Nnco97yst54jxUGBid1U.mft (raw, json)
Hash identifier: LCImS6KaOkr9seUljtQDqTyjWHYeDKtJN+0tP3xJ3nE=
Subject key identifier: C5:99:FC:7B:FD:FB:A0:A4:CB:56:5B:36:83:5B:B2:40:DB:98:DB:F5
Authority key identifier: 37:AF:48:13:1E:CD:9D:CA:3D:EF:2B:2D:E7:88:F1:50:60:62:77:55
Certificate issuer: /CN=37af48131ecd9dca3def2b2de788f15060627755
Certificate serial: 019A7275DBA6AE0D1F42C5F82BC28E0C06BB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/N69IEx7Nnco97yst54jxUGBid1U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4f/35faed-c2d7-4cb9-97f5-df6f20dcb94b/1/N69IEx7Nnco97yst54jxUGBid1U.mft
Manifest number: 1728
Signing time: Tue 11 Nov 2025 10:28:37 +0000
Manifest this update: Tue 11 Nov 2025 10:28:37 +0000
Manifest next update: Wed 12 Nov 2025 10:28:37 +0000
Files and hashes: 1: HxZU0iTvv354MAx-YYeydPcZNIw.roa (hash: ZmBmkbINPjgbF7Kx8488Fp1UyAG+oYkTQNgORCAbrMc=)
2: Lv93kZr3FrSvC5fAGNeod6j_6yM.roa (hash: 37H9uvEBQ9sb3AaWMyi05t5K1mxRb/qz/+D6tmcVRbg=)
3: N69IEx7Nnco97yst54jxUGBid1U.crl (hash: l18z+WMPkpmb0kS0tvVZKq0HXg0JTwIJHoCzt4ZKpDs=)
4: nCYRFHxESiPTOP0DiwWAA3vf6pc.roa (hash: n1iHEUmqWKjUYGzT2fByz8YLuqOJY83LkJFmv6uksFE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4f/35faed-c2d7-4cb9-97f5-df6f20dcb94b/1/N69IEx7Nnco97yst54jxUGBid1U.crl
rsync://rpki.ripe.net/repository/DEFAULT/4f/35faed-c2d7-4cb9-97f5-df6f20dcb94b/1/N69IEx7Nnco97yst54jxUGBid1U.mft
rsync://rpki.ripe.net/repository/DEFAULT/N69IEx7Nnco97yst54jxUGBid1U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:75:db:a6:ae:0d:1f:42:c5:f8:2b:c2:8e:0c:06:bb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=37af48131ecd9dca3def2b2de788f15060627755
Validity
Not Before: Nov 11 10:28:37 2025 GMT
Not After : Nov 12 10:28:37 2025 GMT
Subject: CN=c599fc7bfdfba0a4cb565b36835bb240db98dbf5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:61:63:ce:b2:b7:41:81:02:35:fd:91:7e:ee:
20:6e:b5:c3:db:35:e7:a8:e3:63:2b:d7:e5:26:1b:
d9:bd:bb:81:54:27:93:ba:fe:9c:2d:62:03:e3:66:
6e:e6:8a:46:0a:0d:41:21:ba:34:c0:74:c6:10:75:
ae:a1:f1:a9:30:cc:88:cb:4c:48:e8:9d:97:66:5b:
03:99:3f:2c:8b:1b:a6:88:93:83:b8:42:da:41:6e:
1f:90:b6:a4:6c:4b:50:05:0a:ba:22:f0:e2:21:9f:
ad:2d:2f:bd:d4:29:4d:71:a0:54:15:25:e7:3b:8c:
e1:3a:dc:93:73:ef:38:74:d4:44:64:36:c7:ff:98:
38:f7:c3:1a:31:8b:45:ab:3b:8d:d6:33:d3:f1:e0:
94:65:33:2f:2f:a9:20:0d:44:9f:81:d8:b4:1c:62:
13:96:9c:6c:b6:f6:34:c8:26:fd:54:e9:88:0f:ed:
63:ce:60:60:e9:c4:20:2c:b3:ec:86:92:c4:c3:e8:
66:ac:b8:75:0c:2c:bc:5a:9b:3e:40:94:d8:a6:a7:
de:06:8c:1d:2c:14:b9:53:72:55:f9:d7:30:59:9e:
f6:b6:e2:68:c0:5d:5e:08:ca:52:a7:06:ca:1c:43:
12:d4:8c:59:5d:a1:7d:35:eb:31:bf:9e:a0:71:68:
a6:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:99:FC:7B:FD:FB:A0:A4:CB:56:5B:36:83:5B:B2:40:DB:98:DB:F5
X509v3 Authority Key Identifier:
keyid:37:AF:48:13:1E:CD:9D:CA:3D:EF:2B:2D:E7:88:F1:50:60:62:77:55
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/N69IEx7Nnco97yst54jxUGBid1U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/35faed-c2d7-4cb9-97f5-df6f20dcb94b/1/N69IEx7Nnco97yst54jxUGBid1U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/35faed-c2d7-4cb9-97f5-df6f20dcb94b/1/N69IEx7Nnco97yst54jxUGBid1U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
90:0a:ca:99:b4:30:a8:4a:94:65:3f:1f:4d:f5:c6:51:f5:77:
51:c6:fd:55:2e:00:35:72:d3:73:c2:43:16:0e:2c:e0:b8:1a:
f6:65:f6:c7:95:7d:ce:08:6a:c3:5e:cd:8e:c3:00:f6:6a:be:
b2:7a:83:2b:e0:90:54:d6:ac:50:5d:fe:69:b2:8d:11:53:ff:
a8:e7:9f:e8:e6:91:38:88:7e:4c:bc:23:0b:6f:75:b0:a2:ad:
45:37:cf:f0:b5:9d:9a:3d:3e:b1:17:ca:c2:c8:01:08:61:75:
07:5e:ec:31:1c:67:04:37:4d:46:d0:c7:e8:a7:5e:26:31:ff:
c3:5f:39:83:d8:bc:39:c9:c9:92:2c:84:4c:04:43:6c:88:5b:
f7:10:e4:04:b0:e1:e7:3a:17:f0:3c:af:bb:12:17:b0:70:55:
29:8d:de:2a:85:e5:c8:2b:a7:a2:8f:27:d6:c4:bd:89:49:6f:
08:a2:dd:04:87:69:4e:64:bc:7d:2b:97:cf:e3:ea:d7:45:5a:
ea:02:48:3a:5f:bc:e6:f2:d4:37:a8:63:09:f0:a7:37:c0:f7:
91:57:6f:ab:a9:09:be:1f:32:4d:b1:fc:e1:bc:06:1e:8f:e8:
b6:30:28:a1:64:fc:95:71:24:9a:a0:ac:68:ed:de:a1:fa:94:
0e:79:1c:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 15:46:44 2025 by rpki-client