Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7c/8a5ee7-b638-4b70-8a8e-f97745d13b8d/1/N1x0Iln_kAhX0TaJ2NSNsg7fRgM.mft
File: N1x0Iln_kAhX0TaJ2NSNsg7fRgM.mft (raw, json)
Hash identifier: c983DZMBE0en4mYcrOs/tTv7DUmVFGd1n1rJU3iTylU=
Subject key identifier: 02:46:4F:D5:B2:6E:22:7A:01:08:9B:CB:6B:D4:BF:96:60:5D:1F:A6
Authority key identifier: 37:5C:74:22:59:FF:90:08:57:D1:36:89:D8:D4:8D:B2:0E:DF:46:03
Certificate issuer: /CN=375c742259ff900857d13689d8d48db20edf4603
Certificate serial: 019A7293E48BD873A61227427382D3EB76D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/N1x0Iln_kAhX0TaJ2NSNsg7fRgM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7c/8a5ee7-b638-4b70-8a8e-f97745d13b8d/1/N1x0Iln_kAhX0TaJ2NSNsg7fRgM.mft
Manifest number: 145D
Signing time: Tue 11 Nov 2025 11:01:26 +0000
Manifest this update: Tue 11 Nov 2025 11:01:26 +0000
Manifest next update: Wed 12 Nov 2025 11:01:26 +0000
Files and hashes: 1: N1x0Iln_kAhX0TaJ2NSNsg7fRgM.crl (hash: x2DgX3R6upV5iKjpEya++OgjdMXB8N1nBDnmi9orvaw=)
2: g_21VS9VjPQrGz2Td7dDraqxWmA.roa (hash: iyA8oXAsAeuHezc22yRIhc2flepygJS+6M+Uvfpnntg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7c/8a5ee7-b638-4b70-8a8e-f97745d13b8d/1/N1x0Iln_kAhX0TaJ2NSNsg7fRgM.crl
rsync://rpki.ripe.net/repository/DEFAULT/7c/8a5ee7-b638-4b70-8a8e-f97745d13b8d/1/N1x0Iln_kAhX0TaJ2NSNsg7fRgM.mft
rsync://rpki.ripe.net/repository/DEFAULT/N1x0Iln_kAhX0TaJ2NSNsg7fRgM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:93:e4:8b:d8:73:a6:12:27:42:73:82:d3:eb:76:d9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=375c742259ff900857d13689d8d48db20edf4603
Validity
Not Before: Nov 11 11:01:26 2025 GMT
Not After : Nov 12 11:01:26 2025 GMT
Subject: CN=02464fd5b26e227a01089bcb6bd4bf96605d1fa6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:93:ae:18:6b:09:99:ce:a5:17:62:0b:12:2b:
ff:28:64:7a:42:b5:66:6f:e3:e3:cb:45:d3:a9:f9:
a0:da:0a:1b:fd:f2:57:46:48:9d:6c:1f:bc:9f:4d:
b1:a5:f6:9f:eb:bf:a3:27:69:5b:4f:f2:e7:82:36:
b1:c1:c4:b0:6d:c7:f7:65:f9:ed:c6:4f:b9:a3:6d:
43:d2:c1:be:84:01:85:4d:72:b8:ea:fd:03:07:67:
74:60:f3:34:07:a6:56:53:d0:a8:90:03:89:01:87:
9a:08:ee:1e:40:a3:a5:23:43:a8:19:cb:5a:d9:65:
37:6b:e2:cd:23:3c:29:07:57:a8:18:63:52:fd:2d:
e8:f0:00:31:4a:3b:51:9a:b7:cb:06:00:d7:db:27:
e0:ab:b6:d5:bf:4b:04:e5:a0:ab:e9:ac:3d:47:fb:
32:64:1e:32:82:13:c8:2c:2a:6a:e8:3e:b4:31:3a:
d6:88:3e:14:84:5f:d6:66:24:59:b8:d4:6d:73:3a:
cb:bb:82:b3:11:7a:a9:7d:9c:3d:b7:48:f1:ed:aa:
7b:29:b9:0f:3f:e9:dd:be:68:25:9c:d6:79:20:c3:
1c:60:62:b4:c4:d6:d4:1d:ea:c1:2d:3e:6c:b9:2b:
06:44:e8:78:c5:45:13:50:b3:bb:e8:d8:1e:b5:fb:
12:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:46:4F:D5:B2:6E:22:7A:01:08:9B:CB:6B:D4:BF:96:60:5D:1F:A6
X509v3 Authority Key Identifier:
keyid:37:5C:74:22:59:FF:90:08:57:D1:36:89:D8:D4:8D:B2:0E:DF:46:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/N1x0Iln_kAhX0TaJ2NSNsg7fRgM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/8a5ee7-b638-4b70-8a8e-f97745d13b8d/1/N1x0Iln_kAhX0TaJ2NSNsg7fRgM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/8a5ee7-b638-4b70-8a8e-f97745d13b8d/1/N1x0Iln_kAhX0TaJ2NSNsg7fRgM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
30:36:4a:e5:18:75:f1:3a:75:2b:c5:d7:76:7a:8e:72:96:ac:
cf:72:4e:97:1c:81:af:a9:9f:09:97:9c:72:16:bd:84:b3:c7:
8d:94:dc:82:17:42:de:ee:88:34:84:6d:7d:58:1d:af:cb:a9:
a7:b7:ac:75:00:e8:62:56:4a:2b:4b:b6:3f:6c:c6:0c:f6:72:
3f:55:87:b7:24:2a:43:9a:57:3f:7f:40:d0:57:d2:4d:26:72:
f1:fa:75:5f:4a:9a:f9:2d:c6:01:90:ab:e4:a4:2f:70:d3:d3:
b7:aa:bf:5d:9c:8f:7d:17:75:c8:62:ec:ed:60:1b:30:b5:7b:
58:5b:c7:69:ba:41:71:f0:93:3f:78:23:e5:a5:7b:88:b1:1a:
59:93:57:ef:9d:6b:e9:2b:93:73:29:c1:98:3e:0a:78:64:0f:
df:78:b7:17:c7:05:b7:12:c2:37:fc:36:e0:08:66:db:dd:14:
bf:8f:95:c0:5b:a7:61:c9:8e:27:7c:7a:4e:77:c7:3b:6f:f4:
ec:e2:c0:69:f4:14:0b:39:51:5c:e4:06:f7:f4:a3:6c:17:72:
7f:1c:fd:08:84:68:ba:7e:85:52:19:6f:2c:de:d7:af:46:9f:
55:d7:e7:c5:d0:dc:0a:2c:74:67:f8:b0:e2:4c:ee:ea:91:19:
7e:e6:cb:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 14:04:54 2025 by rpki-client