Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9e/4ea4f7-d70e-42a2-afd7-3e3a188f49de/1/N5FWc7KL362ywgGaxo0EZP0htxo.mft
File: N5FWc7KL362ywgGaxo0EZP0htxo.mft (raw, json)
Hash identifier: +ZTnr5/+xFmj4HTAxUxL0cGqM0jhtz/qkDP10cOlq28=
Subject key identifier: 1A:59:BD:45:BB:8C:D2:3D:C7:A1:D1:F7:CB:09:25:EA:1E:DF:32:10
Authority key identifier: 37:91:56:73:B2:8B:DF:AD:B2:C2:01:9A:C6:8D:04:64:FD:21:B7:1A
Certificate issuer: /CN=37915673b28bdfadb2c2019ac68d0464fd21b71a
Certificate serial: 019A2108F6CDEDB31A093BAA47A7AACA6C18
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/N5FWc7KL362ywgGaxo0EZP0htxo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9e/4ea4f7-d70e-42a2-afd7-3e3a188f49de/1/N5FWc7KL362ywgGaxo0EZP0htxo.mft
Manifest number: 1689
Signing time: Sun 26 Oct 2025 15:00:26 +0000
Manifest this update: Sun 26 Oct 2025 15:00:26 +0000
Manifest next update: Mon 27 Oct 2025 15:00:26 +0000
Files and hashes: 1: DH9htlq0hiwldp4q07DNTkVZOf8.roa (hash: J0KU22uieTNYBq4unRpzKgHyqTQbyJRKS4kqQcbzVVo=)
2: N5FWc7KL362ywgGaxo0EZP0htxo.crl (hash: fPGiIa4HYg942mHM9xMRup4LbjtxOigzctmNbwUN61g=)
3: jeU3xqGrcmxdIS4lfaliQojmUd4.roa (hash: WoVvfzkH0PYO9V3NP53Pv15mZRXcsOzFbw+RGpI6V54=)
4: mbXBHvnDkr71szR1uqXUf3o_CNU.roa (hash: gBt+bTGYlOGXiT5DEgI8/fzoH444V5sSGRbb6v+iHAk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9e/4ea4f7-d70e-42a2-afd7-3e3a188f49de/1/N5FWc7KL362ywgGaxo0EZP0htxo.crl
rsync://rpki.ripe.net/repository/DEFAULT/9e/4ea4f7-d70e-42a2-afd7-3e3a188f49de/1/N5FWc7KL362ywgGaxo0EZP0htxo.mft
rsync://rpki.ripe.net/repository/DEFAULT/N5FWc7KL362ywgGaxo0EZP0htxo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 27 Oct 2025 12:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:21:08:f6:cd:ed:b3:1a:09:3b:aa:47:a7:aa:ca:6c:18
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=37915673b28bdfadb2c2019ac68d0464fd21b71a
Validity
Not Before: Oct 26 15:00:26 2025 GMT
Not After : Oct 27 15:00:26 2025 GMT
Subject: CN=1a59bd45bb8cd23dc7a1d1f7cb0925ea1edf3210
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:84:a0:ff:06:a1:c5:85:be:66:5a:3c:76:bd:
c4:63:3d:5a:7f:9d:6e:87:9a:43:51:d4:34:eb:cd:
02:b0:86:b2:a5:4f:d3:7f:c3:d4:cc:88:6f:8f:fa:
af:29:9d:57:26:b3:45:22:ae:3d:c3:10:c5:1f:b1:
6a:ef:f1:df:60:8e:c2:25:4d:20:58:0c:d7:3b:d9:
fe:b2:ce:91:3e:8c:1c:ec:58:b8:c3:f9:9a:9a:86:
a4:95:cc:0d:52:36:9e:3d:3f:cb:e7:9b:8f:68:43:
a8:81:0a:35:4b:a3:f9:e4:f3:96:12:0c:e8:d6:2c:
c6:a6:77:cf:e8:83:60:5c:59:c9:5a:ed:7f:f6:54:
f8:07:e0:f5:c7:41:d3:67:79:9d:46:3b:ba:2a:af:
16:cf:54:36:c1:a6:28:0c:69:be:55:24:50:a6:79:
23:62:f9:e9:7c:a3:d7:fc:39:fc:27:8c:f2:65:82:
17:31:1e:7e:67:35:42:1f:34:2a:9b:7f:3d:8e:3e:
bb:29:f8:4c:11:61:e2:07:d6:a6:91:46:f8:e5:01:
dc:00:23:67:7e:00:37:6a:af:1f:d1:d0:16:9b:52:
6f:08:f0:94:1d:7c:f4:e7:25:5d:0b:60:ee:93:be:
f9:44:9f:69:4e:06:59:17:17:0e:42:09:c0:ab:fe:
7a:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:59:BD:45:BB:8C:D2:3D:C7:A1:D1:F7:CB:09:25:EA:1E:DF:32:10
X509v3 Authority Key Identifier:
keyid:37:91:56:73:B2:8B:DF:AD:B2:C2:01:9A:C6:8D:04:64:FD:21:B7:1A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/N5FWc7KL362ywgGaxo0EZP0htxo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/4ea4f7-d70e-42a2-afd7-3e3a188f49de/1/N5FWc7KL362ywgGaxo0EZP0htxo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/4ea4f7-d70e-42a2-afd7-3e3a188f49de/1/N5FWc7KL362ywgGaxo0EZP0htxo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
03:e0:9c:d8:e8:a2:30:0a:cd:b8:fe:87:3d:4c:20:41:f8:43:
66:88:cd:c5:cb:dc:f9:4c:88:10:b7:6f:de:91:43:7f:a6:e0:
a5:8b:4a:a0:16:cf:2e:e7:9e:cf:f5:93:52:c7:73:09:77:c7:
cb:09:b0:98:63:82:dc:d6:a3:c5:61:05:0f:1e:eb:55:3a:e9:
28:24:2b:9c:bc:75:8a:1f:36:f9:39:43:b1:0c:a1:92:dc:49:
8f:dd:13:ad:5e:29:0e:b9:4c:b7:e0:96:bf:a8:7c:5d:5f:d0:
54:be:c1:58:f9:b2:48:f2:7b:c6:2f:57:f0:37:ca:f7:e5:97:
3c:26:de:ce:d2:9b:0d:71:ab:cf:1f:c1:57:c0:ed:b1:47:b7:
b3:33:e1:c8:cd:ee:6f:4f:56:71:ad:81:f2:4f:06:c0:38:9a:
39:df:97:e3:ef:c3:54:95:b3:39:14:7d:c4:8e:c7:5a:0a:f3:
7c:e5:f9:66:1a:85:8d:49:71:e2:4c:dc:00:fc:e3:d5:1a:88:
b5:c3:05:b6:2e:80:58:95:69:b4:95:49:95:6f:f0:68:e7:93:
f2:15:4f:a8:1c:b9:34:44:78:f2:b1:62:b5:82:a3:47:68:2b:
08:21:a7:84:1b:2e:92:8d:7d:ed:64:a4:ac:bf:e0:6d:b7:07:
b2:72:25:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 26 20:02:33 2025 by rpki-client