Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/64/c28ea4-059c-49dd-9278-a4db396c8987/1/N5SayE0LhpEPT9PPWWKSfYNFCus.mft
File: N5SayE0LhpEPT9PPWWKSfYNFCus.mft (raw, json)
Hash identifier: tTsMmAHHh4QjgEhz63yDkOKYQ6wpLzawXh/kv9X+KAA=
Subject key identifier: 44:64:DB:2B:79:29:DF:6B:24:CE:18:11:C5:B4:95:71:57:28:F3:64
Authority key identifier: 37:94:9A:C8:4D:0B:86:91:0F:4F:D3:CF:59:62:92:7D:83:45:0A:EB
Certificate issuer: /CN=37949ac84d0b86910f4fd3cf5962927d83450aeb
Certificate serial: 019A71B8BA9775E0F41E695F6774F9896082
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/N5SayE0LhpEPT9PPWWKSfYNFCus.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/64/c28ea4-059c-49dd-9278-a4db396c8987/1/N5SayE0LhpEPT9PPWWKSfYNFCus.mft
Manifest number: 172C
Signing time: Tue 11 Nov 2025 07:02:03 +0000
Manifest this update: Tue 11 Nov 2025 07:02:03 +0000
Manifest next update: Wed 12 Nov 2025 07:02:03 +0000
Files and hashes: 1: N5SayE0LhpEPT9PPWWKSfYNFCus.crl (hash: Ey6bTbzIseFfr6BpiYGi1CD5xVKOZ3XypI3aFwwtN8A=)
2: PRhohmSPpTdafiCYHQlb6tS5RSA.roa (hash: rmrtG9C35CBJyHZUuhN45njc7Z7w311hCWAJB2ctSsg=)
3: U3FGMgcx33zABNd6WUQZ6FgIXMg.roa (hash: Wpl9P0cBekHap/iywSD8clsCi8JMACpk0Rm1bx3lrQQ=)
4: ag6Uw2WZeIksxGOXDr4DgUkmA5c.roa (hash: Dv4MeWf6ZNTTsICz0sxMh5s96US2ndB/BMpQt263Gn0=)
5: hn5PYDOLpsdmTwt2qZTXNCawnyY.roa (hash: 3JeglmLM9o2mfs2x0MSYzgxU3A+vKl/1QHtc/EU9QCM=)
6: ncXYiMMk7Py1Om5tGMqWGLBtpDE.roa (hash: ue3PRYMatnVnCc7uFg9uHpheEoijmvmRSQgE1aUj8Qs=)
7: pehnBB-B-wysgLV5x41--aRvVZU.roa (hash: znIOUjgtTlPjJizZbJTREWW6ctyWS6FYMjde0/qvy2I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/64/c28ea4-059c-49dd-9278-a4db396c8987/1/N5SayE0LhpEPT9PPWWKSfYNFCus.crl
rsync://rpki.ripe.net/repository/DEFAULT/64/c28ea4-059c-49dd-9278-a4db396c8987/1/N5SayE0LhpEPT9PPWWKSfYNFCus.mft
rsync://rpki.ripe.net/repository/DEFAULT/N5SayE0LhpEPT9PPWWKSfYNFCus.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 07:02:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:b8:ba:97:75:e0:f4:1e:69:5f:67:74:f9:89:60:82
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=37949ac84d0b86910f4fd3cf5962927d83450aeb
Validity
Not Before: Nov 11 07:02:03 2025 GMT
Not After : Nov 12 07:02:03 2025 GMT
Subject: CN=4464db2b7929df6b24ce1811c5b495715728f364
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:26:d6:09:f4:64:9d:cb:ef:c5:85:34:78:cb:
b3:b7:87:bf:08:88:cc:de:6a:07:68:03:99:0f:8a:
fa:cf:2e:e3:4e:f8:56:f3:a1:e0:2a:46:76:66:81:
5f:45:5a:be:b6:04:4d:68:e6:f1:ad:98:e1:1b:3e:
c3:09:f5:bc:4e:fc:21:6e:ee:eb:ab:2f:39:0b:da:
a9:ce:6d:7c:a5:08:57:db:2b:b4:c7:05:4a:6a:24:
e9:31:5b:09:d6:39:de:bc:ea:2a:61:50:3b:56:bc:
24:06:7b:1b:66:80:50:a2:85:3d:b4:06:33:53:e6:
3c:d7:b8:4a:a4:fd:7c:18:aa:0a:6e:74:1a:aa:5a:
49:6b:20:a5:bb:1c:da:d7:37:4d:05:7d:ba:85:e1:
fe:d8:41:08:91:46:63:5f:88:f2:11:d4:c0:77:f8:
96:5e:96:f5:8d:3c:60:ef:30:66:47:0a:b2:4f:c1:
d9:d9:8e:cb:60:da:bd:63:ab:7a:e6:75:78:53:24:
00:20:d7:4d:7f:a7:98:5a:c0:ea:09:e5:80:2b:53:
67:84:66:9d:d9:bb:dc:17:6c:e4:d3:ee:1a:85:5d:
03:b4:4d:6e:90:4f:9b:77:7c:a5:46:dd:f5:83:cb:
95:58:51:3c:a7:2e:a5:ae:3e:82:f7:0c:75:69:d7:
f3:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:64:DB:2B:79:29:DF:6B:24:CE:18:11:C5:B4:95:71:57:28:F3:64
X509v3 Authority Key Identifier:
keyid:37:94:9A:C8:4D:0B:86:91:0F:4F:D3:CF:59:62:92:7D:83:45:0A:EB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/N5SayE0LhpEPT9PPWWKSfYNFCus.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/c28ea4-059c-49dd-9278-a4db396c8987/1/N5SayE0LhpEPT9PPWWKSfYNFCus.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/64/c28ea4-059c-49dd-9278-a4db396c8987/1/N5SayE0LhpEPT9PPWWKSfYNFCus.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b4:19:cf:f3:fc:6e:98:70:37:af:76:cc:51:3e:02:53:d7:e3:
0b:8a:01:bf:57:6c:8f:ef:a8:b6:dc:1d:78:d9:a6:75:9d:39:
19:3e:0d:8b:eb:29:46:cb:7a:04:78:64:1f:79:0c:9b:89:b4:
b9:6e:94:68:b7:9f:66:e8:05:6c:4e:25:62:91:9b:38:d6:6f:
8f:dd:7d:73:a4:69:b9:30:fc:a9:ad:8f:c7:5e:21:8b:42:2a:
05:30:b1:70:25:5d:cf:4d:5b:1c:31:3b:da:89:69:c6:78:e2:
ef:75:17:65:4c:50:95:df:21:4b:a2:98:f2:f4:af:ee:6e:82:
b4:05:b8:49:f2:ab:11:83:6e:a7:bb:4c:e4:a6:02:1e:c8:59:
81:e2:f1:e1:e5:39:8d:01:77:85:25:ba:27:ae:8c:b0:9d:05:
68:33:cc:ff:ed:40:b7:a3:92:e9:6c:6b:20:74:f0:bd:9c:34:
8e:9d:e8:63:89:d4:bf:29:d4:ae:0a:c8:db:d0:77:9d:eb:de:
62:76:fd:08:98:4d:dd:44:eb:19:0a:bd:c2:60:b6:52:bc:9f:
e9:26:f1:ce:ba:24:95:fd:8c:18:39:25:5c:7f:72:4e:bf:e7:
7c:ed:ab:03:19:fa:43:a6:4e:f8:80:f4:fd:0a:a5:23:14:5c:
e3:df:01:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 11:47:39 2025 by rpki-client