Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/56/1d575d-7b22-47c7-a17e-8a136cb0dd5c/1/N8SLeJzH_-e-CURGQ_24a9tXP30.mft
File: N8SLeJzH_-e-CURGQ_24a9tXP30.mft (raw, json)
Hash identifier: 6L9W5o6rWEtB7jCebuU8wH7uE0jde6nOeviz6JhywCM=
Subject key identifier: 04:86:8A:4A:E5:4A:2C:82:63:74:B8:39:DD:41:83:4A:56:20:B7:2B
Authority key identifier: 37:C4:8B:78:9C:C7:FF:E7:BE:09:44:46:43:FD:B8:6B:DB:57:3F:7D
Certificate issuer: /CN=37c48b789cc7ffe7be09444643fdb86bdb573f7d
Certificate serial: 019A706E5776123A0F16AB972AD3BB8EB5ED
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/N8SLeJzH_-e-CURGQ_24a9tXP30.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/56/1d575d-7b22-47c7-a17e-8a136cb0dd5c/1/N8SLeJzH_-e-CURGQ_24a9tXP30.mft
Manifest number: 0BB6
Signing time: Tue 11 Nov 2025 01:01:10 +0000
Manifest this update: Tue 11 Nov 2025 01:01:10 +0000
Manifest next update: Wed 12 Nov 2025 01:01:10 +0000
Files and hashes: 1: N8SLeJzH_-e-CURGQ_24a9tXP30.crl (hash: XxtuO/vRf1+z/Lit8156EYpHQMzERxtHEq4Q1SxMdoQ=)
2: zElW9nBSEefX0nViIsarFQPCkZs.roa (hash: CmIv1btIhlBvo+yXBuSYJkAIeImv5p3pKaVYvxzuwhU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/56/1d575d-7b22-47c7-a17e-8a136cb0dd5c/1/N8SLeJzH_-e-CURGQ_24a9tXP30.crl
rsync://rpki.ripe.net/repository/DEFAULT/56/1d575d-7b22-47c7-a17e-8a136cb0dd5c/1/N8SLeJzH_-e-CURGQ_24a9tXP30.mft
rsync://rpki.ripe.net/repository/DEFAULT/N8SLeJzH_-e-CURGQ_24a9tXP30.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 01:01:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:70:6e:57:76:12:3a:0f:16:ab:97:2a:d3:bb:8e:b5:ed
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=37c48b789cc7ffe7be09444643fdb86bdb573f7d
Validity
Not Before: Nov 11 01:01:10 2025 GMT
Not After : Nov 12 01:01:10 2025 GMT
Subject: CN=04868a4ae54a2c826374b839dd41834a5620b72b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:ac:fc:e5:da:b4:22:04:9a:4a:7d:76:43:1d:
cb:7f:16:74:64:76:f0:64:7f:de:b4:94:fd:53:a6:
80:e0:a0:e0:f2:41:d1:57:fd:d8:0d:4c:cc:83:a2:
99:20:85:20:4d:e8:e4:3e:36:13:cd:2e:50:bd:60:
13:7c:d2:6c:7f:77:0b:3e:c1:9f:f4:ce:ec:96:69:
30:70:6d:8c:3d:47:5f:f7:a6:8a:27:69:ba:7b:96:
ad:a5:6c:c7:3d:20:f8:8b:fd:56:ad:5d:97:0d:02:
8c:34:93:f3:05:b7:ac:53:7c:28:62:3e:15:57:49:
81:9e:97:ee:49:9a:50:95:d6:a8:3e:eb:82:ab:95:
12:42:de:c1:23:0f:88:c8:64:d1:87:68:33:c5:67:
6c:77:b1:66:f9:f2:45:e8:26:a0:df:d4:be:79:8d:
19:36:35:9f:2d:ea:10:22:c3:87:3a:dc:8d:40:18:
d9:6a:d6:87:cd:45:96:53:bd:94:6f:fa:94:f3:6f:
6a:bb:bf:89:15:96:0f:60:9f:0e:b0:e3:c2:c5:e9:
58:41:96:1c:7c:93:87:ec:02:30:43:92:5f:86:b0:
8f:c1:44:7d:32:e2:e2:37:4f:6c:c2:2c:da:9c:79:
70:68:ec:e3:19:73:36:93:5a:3b:9b:f6:a4:a0:db:
c4:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:86:8A:4A:E5:4A:2C:82:63:74:B8:39:DD:41:83:4A:56:20:B7:2B
X509v3 Authority Key Identifier:
keyid:37:C4:8B:78:9C:C7:FF:E7:BE:09:44:46:43:FD:B8:6B:DB:57:3F:7D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/N8SLeJzH_-e-CURGQ_24a9tXP30.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/1d575d-7b22-47c7-a17e-8a136cb0dd5c/1/N8SLeJzH_-e-CURGQ_24a9tXP30.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/56/1d575d-7b22-47c7-a17e-8a136cb0dd5c/1/N8SLeJzH_-e-CURGQ_24a9tXP30.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
01:72:c9:ca:f9:1e:99:19:65:a9:20:80:03:8b:b2:c4:06:b5:
f7:44:93:09:8b:52:bb:e1:3e:24:0c:ac:1c:53:61:e8:b6:87:
ce:d8:8c:07:6e:11:63:f2:c3:b3:89:b5:55:88:67:9a:a6:47:
df:da:c2:7f:26:b3:e1:ff:1f:70:7b:5a:eb:50:e4:d5:cb:cf:
d7:7b:fa:db:bd:41:8f:c9:33:84:65:2d:32:f1:01:75:22:9c:
2e:c9:4a:31:17:fc:49:4d:ad:be:d0:34:ee:24:79:a2:8b:f7:
1d:89:6c:b7:bb:b4:8c:a1:28:69:90:72:5b:58:40:fb:46:85:
8b:a3:e6:59:41:2a:2e:64:fe:a4:73:69:6b:65:9e:51:55:29:
f3:a3:0c:22:88:c1:9f:6c:a8:c9:b1:96:89:95:7c:3a:ca:c7:
da:7c:cb:7b:93:0f:ae:7a:dc:2a:ed:bf:b1:f7:71:a5:00:55:
a7:95:f4:82:59:97:be:2e:bb:a8:e9:0d:a0:a3:5a:36:87:38:
56:9e:4f:3b:1f:1b:a5:56:84:37:83:be:60:74:17:bd:d1:08:
f9:25:17:79:f0:4e:8b:7c:01:fe:b1:ee:ff:dd:e8:eb:74:95:
ad:54:f2:b3:a7:98:f1:58:7d:10:87:72:0f:bb:01:4d:ea:c5:
ee:ca:b3:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 11:32:12 2025 by rpki-client