Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/ef9498-44f4-4ffd-844f-5c830fe4bad0/1/N8pQAigo2QG_QrJ5j3hEEEsFQE0.mft
File: N8pQAigo2QG_QrJ5j3hEEEsFQE0.mft (raw, json)
Hash identifier: rvnAuwBQf0xUSMk24INW1zy5RdXdmOtLk1wHUH/fOBQ=
Subject key identifier: 06:AE:7E:73:93:4C:7C:0D:DF:AF:9F:74:DB:DE:35:A9:CD:CB:20:76
Authority key identifier: 37:CA:50:02:28:28:D9:01:BF:42:B2:79:8F:78:44:10:4B:05:40:4D
Certificate issuer: /CN=37ca50022828d901bf42b2798f7844104b05404d
Certificate serial: 019A7225F42BE797F63A945A9FCA664491EA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/N8pQAigo2QG_QrJ5j3hEEEsFQE0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/ef9498-44f4-4ffd-844f-5c830fe4bad0/1/N8pQAigo2QG_QrJ5j3hEEEsFQE0.mft
Manifest number: 0B34
Signing time: Tue 11 Nov 2025 09:01:21 +0000
Manifest this update: Tue 11 Nov 2025 09:01:21 +0000
Manifest next update: Wed 12 Nov 2025 09:01:21 +0000
Files and hashes: 1: N8pQAigo2QG_QrJ5j3hEEEsFQE0.crl (hash: g8xzpWo7La9ic71ulGO1cPj5SzenO8Jo2QiGKXXjSH0=)
2: o5v0Cm5PNAVArL3iEJHw_CFIknA.roa (hash: Sf1IrFfhAHUJ08yJsTL6eR491AGzhJcL2ToeOR5gShQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/65/ef9498-44f4-4ffd-844f-5c830fe4bad0/1/N8pQAigo2QG_QrJ5j3hEEEsFQE0.crl
rsync://rpki.ripe.net/repository/DEFAULT/65/ef9498-44f4-4ffd-844f-5c830fe4bad0/1/N8pQAigo2QG_QrJ5j3hEEEsFQE0.mft
rsync://rpki.ripe.net/repository/DEFAULT/N8pQAigo2QG_QrJ5j3hEEEsFQE0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:25:f4:2b:e7:97:f6:3a:94:5a:9f:ca:66:44:91:ea
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=37ca50022828d901bf42b2798f7844104b05404d
Validity
Not Before: Nov 11 09:01:21 2025 GMT
Not After : Nov 12 09:01:21 2025 GMT
Subject: CN=06ae7e73934c7c0ddfaf9f74dbde35a9cdcb2076
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:b8:59:17:5e:73:47:9c:36:88:61:cc:44:95:
65:4b:1d:ef:9f:47:52:08:c4:a5:33:14:3a:b5:10:
f6:25:9a:32:ec:0d:f5:74:81:6b:ef:f9:48:f4:62:
f6:fe:08:51:fb:63:53:48:67:06:11:16:c7:95:f4:
16:42:db:e9:2f:a2:b1:ca:68:5c:9c:c4:ed:0c:59:
24:c3:08:64:c7:1c:7f:a6:27:d8:68:63:60:5f:3a:
3f:1d:9b:60:72:3b:18:a3:0b:93:42:ad:61:d2:6f:
0f:34:d9:6b:76:1a:63:29:cf:64:62:2c:43:02:07:
18:80:02:54:26:bb:71:cf:2e:ad:cc:fa:4b:d1:1d:
b5:2d:8b:85:e1:68:6a:56:98:1a:5d:73:fc:d9:8a:
fa:0c:69:cc:47:16:46:59:18:db:3e:ad:9c:ed:e8:
7b:5d:2d:3e:58:0b:b9:08:31:22:82:9d:d5:8d:f7:
84:69:c8:07:9e:85:e8:5a:30:70:8f:9f:96:e5:cb:
fc:97:5a:9e:d8:af:63:d8:b9:da:65:97:db:a6:1d:
f6:91:01:5f:f8:dd:73:c4:59:47:14:b0:3c:89:18:
46:c2:56:bf:4a:7e:bd:c9:65:b3:24:5a:4a:f6:93:
83:3b:60:af:b9:df:df:dd:83:99:1c:b1:7b:24:b7:
d4:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:AE:7E:73:93:4C:7C:0D:DF:AF:9F:74:DB:DE:35:A9:CD:CB:20:76
X509v3 Authority Key Identifier:
keyid:37:CA:50:02:28:28:D9:01:BF:42:B2:79:8F:78:44:10:4B:05:40:4D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/N8pQAigo2QG_QrJ5j3hEEEsFQE0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/ef9498-44f4-4ffd-844f-5c830fe4bad0/1/N8pQAigo2QG_QrJ5j3hEEEsFQE0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/65/ef9498-44f4-4ffd-844f-5c830fe4bad0/1/N8pQAigo2QG_QrJ5j3hEEEsFQE0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
d3:73:7b:e8:29:f9:7d:82:e1:aa:cb:ad:24:83:ee:17:51:9b:
2e:4a:81:cc:c2:98:f5:ba:06:02:7e:49:2a:ea:5c:ab:b9:53:
d9:79:98:e4:df:4b:4b:3b:f8:b4:50:f4:21:e7:f7:39:e2:a5:
4c:05:0d:4e:75:9c:03:11:81:d8:48:3b:16:4f:f2:59:62:95:
30:47:61:e3:08:b7:80:b7:c8:15:54:26:69:51:7f:11:e5:be:
89:01:12:d3:30:21:68:92:2a:39:d3:63:bc:d9:f8:bd:c8:4c:
6a:d4:98:00:8f:54:96:3b:e1:48:38:83:6b:b2:7b:ad:0f:5d:
05:06:89:38:7b:b7:4a:d0:b8:10:ec:e8:92:9b:b9:d1:5e:11:
b2:f2:b6:28:cc:f8:ce:c8:33:c2:42:86:97:ad:5a:3f:6a:75:
dd:35:e1:ed:79:8c:37:2c:25:ac:7c:fa:03:ee:60:69:09:2a:
2f:63:83:96:97:9f:02:46:82:11:97:e0:32:49:47:66:ab:2d:
82:59:c1:29:21:11:0f:d2:4d:ed:81:7c:a5:9f:ad:2f:6a:c9:
21:ae:47:0b:84:69:67:e4:60:ad:39:15:ce:72:19:1b:ef:b7:
d4:60:ac:18:91:26:05:31:d5:ad:06:57:9d:1f:81:ea:f2:1b:
1b:3c:7b:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 13:16:14 2025 by rpki-client