Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/9b1928-9929-4ee8-9f35-077b29730ce6/1/N5D3H6pDya9aDc9gP9Cyp4wiSpM.mft
File: N5D3H6pDya9aDc9gP9Cyp4wiSpM.mft (raw, json)
Hash identifier: 1djJlpTPw0g4PYXuD6lIiNunSWET9/PwhtvTGpFYwJE=
Subject key identifier: C0:56:06:8C:CF:9D:EB:56:C4:C3:7B:E4:A9:0F:E2:34:4F:EC:55:03
Authority key identifier: 37:90:F7:1F:AA:43:C9:AF:5A:0D:CF:60:3F:D0:B2:A7:8C:22:4A:93
Certificate issuer: /CN=3790f71faa43c9af5a0dcf603fd0b2a78c224a93
Certificate serial: 019A72934489F326851BE8B4ECE82B980CCE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/N5D3H6pDya9aDc9gP9Cyp4wiSpM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/62/9b1928-9929-4ee8-9f35-077b29730ce6/1/N5D3H6pDya9aDc9gP9Cyp4wiSpM.mft
Manifest number: 0CAA
Signing time: Tue 11 Nov 2025 11:00:45 +0000
Manifest this update: Tue 11 Nov 2025 11:00:45 +0000
Manifest next update: Wed 12 Nov 2025 11:00:45 +0000
Files and hashes: 1: N5D3H6pDya9aDc9gP9Cyp4wiSpM.crl (hash: 6ejWYIMMD66KtSkFyhi2KVN5250LYTXb9UkaHHvDlKI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/62/9b1928-9929-4ee8-9f35-077b29730ce6/1/N5D3H6pDya9aDc9gP9Cyp4wiSpM.crl
rsync://rpki.ripe.net/repository/DEFAULT/62/9b1928-9929-4ee8-9f35-077b29730ce6/1/N5D3H6pDya9aDc9gP9Cyp4wiSpM.mft
rsync://rpki.ripe.net/repository/DEFAULT/N5D3H6pDya9aDc9gP9Cyp4wiSpM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:93:44:89:f3:26:85:1b:e8:b4:ec:e8:2b:98:0c:ce
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3790f71faa43c9af5a0dcf603fd0b2a78c224a93
Validity
Not Before: Nov 11 11:00:45 2025 GMT
Not After : Nov 12 11:00:45 2025 GMT
Subject: CN=c056068ccf9deb56c4c37be4a90fe2344fec5503
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:59:a9:ab:f8:44:22:c8:1f:c9:52:99:b7:34:
e6:4a:21:16:6f:16:32:20:67:a5:b3:85:e0:db:76:
14:b0:1f:fa:fe:09:dd:ba:a7:4c:2d:eb:42:bd:3b:
f3:21:7a:8e:96:71:14:97:9f:88:28:41:0b:4b:93:
80:82:02:a1:a7:9d:a0:ef:dc:4a:a1:8f:59:ff:02:
48:28:b4:63:20:b2:38:52:49:37:7a:c5:97:45:a9:
a3:f7:a6:09:e7:30:3d:b9:72:2e:a7:3e:2e:af:83:
8a:91:f6:f0:e3:bd:f3:2b:c7:af:d6:7d:f5:48:90:
b4:88:57:c1:51:a1:32:a4:28:5e:e6:a3:79:4c:58:
36:7d:ab:33:5e:bb:6b:30:d9:68:15:e0:23:17:85:
e5:5d:7c:64:ee:73:21:5d:6e:5c:78:30:24:58:a0:
e9:2d:5a:c2:ce:c0:8d:b1:82:3e:8f:69:96:e6:b8:
81:13:93:5b:19:59:c5:c4:f8:ad:22:a8:c1:88:fd:
ca:eb:7b:b2:b7:1f:dd:d8:d3:7c:20:e9:3b:af:28:
b4:74:00:f9:bf:a0:91:46:45:bf:74:f2:1e:34:4d:
c2:fb:ea:9a:91:53:a6:68:2a:73:91:4f:18:fc:6b:
95:e8:26:f4:b5:8b:d8:48:4f:90:88:15:47:d1:00:
9c:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:56:06:8C:CF:9D:EB:56:C4:C3:7B:E4:A9:0F:E2:34:4F:EC:55:03
X509v3 Authority Key Identifier:
keyid:37:90:F7:1F:AA:43:C9:AF:5A:0D:CF:60:3F:D0:B2:A7:8C:22:4A:93
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/N5D3H6pDya9aDc9gP9Cyp4wiSpM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/9b1928-9929-4ee8-9f35-077b29730ce6/1/N5D3H6pDya9aDc9gP9Cyp4wiSpM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/62/9b1928-9929-4ee8-9f35-077b29730ce6/1/N5D3H6pDya9aDc9gP9Cyp4wiSpM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
33:50:9b:a5:a0:a5:26:06:a5:ef:a3:6b:14:cd:5c:e5:02:46:
48:51:68:e2:ca:19:fb:c5:7c:21:c7:f0:19:af:31:35:bd:55:
80:2c:1c:b9:aa:64:b5:b7:9e:82:a5:e2:e6:2c:8f:20:4d:69:
52:a1:bc:c5:31:8f:03:be:97:42:ed:20:89:ae:c1:25:14:04:
c4:a6:6f:10:32:0e:fd:00:c5:37:15:91:a7:85:4f:d3:ee:88:
4b:28:5f:8c:b6:be:f3:a7:00:18:ae:69:2e:55:61:a3:77:5f:
54:59:4b:fe:7e:14:1a:6b:07:16:0b:c8:8b:c8:15:77:c4:fd:
c1:51:66:0d:49:bf:52:c3:e3:ff:a4:f4:46:1b:34:49:65:9d:
13:72:fb:af:f6:93:e3:ca:ea:62:cf:3f:b2:2e:44:08:75:b8:
3d:c5:a5:8f:9c:43:9c:23:b3:0f:fc:b6:46:9d:58:6c:11:10:
d5:99:91:8b:27:df:0b:40:57:7a:91:44:92:84:c1:8f:3e:24:
1d:04:eb:82:84:10:45:42:c4:46:9c:ce:38:06:97:42:e7:79:
54:f6:41:56:e9:b8:fd:60:61:fa:40:7b:f4:b9:84:ee:6a:66:
14:0c:d4:db:43:4a:b7:8a:4e:7a:0d:02:01:35:f5:0c:be:59:
a3:68:49:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 14:07:12 2025 by rpki-client