Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a6/e0059f-b910-4bb7-9341-7750972265aa/1/N_9VuVdDqRW3k9ct5xrJbOYZipc.mft
File: N_9VuVdDqRW3k9ct5xrJbOYZipc.mft (raw, json)
Hash identifier: Q1YYuwFnFSIe3dfslgKCPblDOQ/gI9+aYeJK3+Qgr6I=
Subject key identifier: DE:28:3D:F4:79:FA:F9:15:B8:19:FA:49:DC:0E:4F:E1:04:B3:98:BE
Authority key identifier: 37:FF:55:B9:57:43:A9:15:B7:93:D7:2D:E7:1A:C9:6C:E6:19:8A:97
Certificate issuer: /CN=37ff55b95743a915b793d72de71ac96ce6198a97
Certificate serial: 019A221B866BBF5BF4117717E1EB354AC201
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/N_9VuVdDqRW3k9ct5xrJbOYZipc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a6/e0059f-b910-4bb7-9341-7750972265aa/1/N_9VuVdDqRW3k9ct5xrJbOYZipc.mft
Manifest number: 1687
Signing time: Sun 26 Oct 2025 20:00:20 +0000
Manifest this update: Sun 26 Oct 2025 20:00:20 +0000
Manifest next update: Mon 27 Oct 2025 20:00:20 +0000
Files and hashes: 1: N_9VuVdDqRW3k9ct5xrJbOYZipc.crl (hash: fGSeyFynd56zTdLU7wFOkMPpqC2/ZSjuGh3jZ2ehVRY=)
2: UOgjlDZ-hlIE51uRVoyR7KP99NE.roa (hash: 1AY5DsB6GoL7krCLNb7v1DdRQDuAlUbr226PuiYccH4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a6/e0059f-b910-4bb7-9341-7750972265aa/1/N_9VuVdDqRW3k9ct5xrJbOYZipc.crl
rsync://rpki.ripe.net/repository/DEFAULT/a6/e0059f-b910-4bb7-9341-7750972265aa/1/N_9VuVdDqRW3k9ct5xrJbOYZipc.mft
rsync://rpki.ripe.net/repository/DEFAULT/N_9VuVdDqRW3k9ct5xrJbOYZipc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 27 Oct 2025 19:48:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:22:1b:86:6b:bf:5b:f4:11:77:17:e1:eb:35:4a:c2:01
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=37ff55b95743a915b793d72de71ac96ce6198a97
Validity
Not Before: Oct 26 20:00:20 2025 GMT
Not After : Oct 27 20:00:20 2025 GMT
Subject: CN=de283df479faf915b819fa49dc0e4fe104b398be
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:44:fe:5d:36:93:34:44:16:ef:e6:16:c3:84:
a6:7f:47:59:cd:17:6f:c5:a2:75:39:4f:40:3e:b4:
13:65:f5:2f:6a:d9:da:04:b4:30:a6:1a:7d:90:eb:
89:3b:8e:b4:8a:9f:b0:51:36:55:cb:50:4d:30:b5:
76:3b:d2:e7:b5:b3:98:96:8f:d7:c1:39:1b:fe:a5:
77:74:f5:40:34:f7:7a:3a:2b:2f:2f:99:54:6e:ce:
9a:ce:f4:da:11:53:88:e2:b2:57:11:3a:f4:c2:85:
7c:2e:89:e5:bc:3c:8b:65:f3:a2:e6:f7:52:04:cd:
59:66:cb:aa:c3:33:52:5d:6a:5e:5b:f6:52:ca:a8:
d5:59:e4:71:70:93:63:c1:ea:83:40:5b:64:94:71:
cc:98:dd:67:37:30:b4:14:4e:63:f3:99:fe:3f:0e:
18:db:81:a4:84:e8:02:e7:ac:27:6e:7e:73:94:0a:
5b:f1:3b:b1:31:1a:5e:35:7e:09:29:fa:ba:b9:13:
e1:ba:7d:3f:6a:89:bb:8b:a9:8b:35:13:5b:7b:44:
92:c0:62:da:e8:83:bd:db:c2:3b:d9:0a:6e:7c:5b:
c6:2d:e4:b6:09:ca:3f:8a:24:3b:48:79:df:ae:d9:
25:2c:fd:9b:b3:f1:b7:c8:6f:79:19:44:b6:ca:bf:
62:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:28:3D:F4:79:FA:F9:15:B8:19:FA:49:DC:0E:4F:E1:04:B3:98:BE
X509v3 Authority Key Identifier:
keyid:37:FF:55:B9:57:43:A9:15:B7:93:D7:2D:E7:1A:C9:6C:E6:19:8A:97
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/N_9VuVdDqRW3k9ct5xrJbOYZipc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/e0059f-b910-4bb7-9341-7750972265aa/1/N_9VuVdDqRW3k9ct5xrJbOYZipc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/e0059f-b910-4bb7-9341-7750972265aa/1/N_9VuVdDqRW3k9ct5xrJbOYZipc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
aa:55:2b:f0:e6:bb:d2:c7:de:30:83:09:f8:11:aa:70:70:28:
77:f8:f1:b9:ee:0e:80:96:df:05:14:ed:96:50:1b:eb:88:27:
42:05:ba:39:3f:f7:99:0c:7f:52:72:8f:7f:ce:a5:5c:48:5a:
db:3a:db:6a:f2:45:56:fa:dc:92:29:f0:d7:a8:a0:e4:af:da:
e5:67:6b:2f:32:89:0d:64:c1:3e:3e:7b:59:44:73:3e:9e:13:
48:15:14:a9:8e:35:b0:8d:7d:2d:82:ef:25:23:a2:2c:4d:07:
38:28:89:db:f5:fb:20:b2:3f:15:bf:fc:2d:2a:1d:42:26:56:
0f:20:7e:e6:d1:4f:33:16:8e:ca:3b:aa:63:41:bc:b8:5f:22:
e7:aa:4c:ca:26:f6:42:a1:7a:67:57:39:b6:00:16:c9:81:06:
49:e8:1e:d8:e0:ca:88:eb:24:b9:8f:cb:39:9c:48:dd:79:ec:
c5:c5:bf:01:10:a9:5e:b7:a7:f4:d7:b9:b4:b6:91:53:f0:ee:
52:0f:85:21:ed:ea:8d:01:31:0d:52:b7:9e:6d:7a:c3:77:6e:
bf:ee:7a:42:54:2a:c1:33:15:e0:c0:dc:fe:d4:9f:bf:eb:df:
d9:28:ed:0b:e5:73:9d:0f:7e:eb:7c:78:66:fd:69:1e:77:97:
28:b8:e6:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 27 01:49:45 2025 by rpki-client