Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/83aa47-c7fb-4e05-9fac-e4ca6b73ac76/1/N0CDrw__F2igfGVfH-OGAJxSLM8.mft
File: N0CDrw__F2igfGVfH-OGAJxSLM8.mft (raw, json)
Hash identifier: 3Y+aBTWXKF/B5cfCiSoXLBCx0bACh2eH+8ooibzWBd4=
Subject key identifier: 1E:1D:E1:C7:5D:E7:96:72:62:6C:85:CC:3E:FB:BE:85:9C:0B:30:15
Authority key identifier: 37:40:83:AF:0F:FF:17:68:A0:7C:65:5F:1F:E3:86:00:9C:52:2C:CF
Certificate issuer: /CN=374083af0fff1768a07c655f1fe386009c522ccf
Certificate serial: 019A706DFBE0243760A56BFC895ED067D654
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/N0CDrw__F2igfGVfH-OGAJxSLM8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/83aa47-c7fb-4e05-9fac-e4ca6b73ac76/1/N0CDrw__F2igfGVfH-OGAJxSLM8.mft
Manifest number: 1302
Signing time: Tue 11 Nov 2025 01:00:47 +0000
Manifest this update: Tue 11 Nov 2025 01:00:47 +0000
Manifest next update: Wed 12 Nov 2025 01:00:47 +0000
Files and hashes: 1: N0CDrw__F2igfGVfH-OGAJxSLM8.crl (hash: K+Q2IoTvGIBqKyM6JIyWawivEUKqAAYAq0TOs8ynH0A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a7/83aa47-c7fb-4e05-9fac-e4ca6b73ac76/1/N0CDrw__F2igfGVfH-OGAJxSLM8.crl
rsync://rpki.ripe.net/repository/DEFAULT/a7/83aa47-c7fb-4e05-9fac-e4ca6b73ac76/1/N0CDrw__F2igfGVfH-OGAJxSLM8.mft
rsync://rpki.ripe.net/repository/DEFAULT/N0CDrw__F2igfGVfH-OGAJxSLM8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 01:00:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:70:6d:fb:e0:24:37:60:a5:6b:fc:89:5e:d0:67:d6:54
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=374083af0fff1768a07c655f1fe386009c522ccf
Validity
Not Before: Nov 11 01:00:47 2025 GMT
Not After : Nov 12 01:00:47 2025 GMT
Subject: CN=1e1de1c75de79672626c85cc3efbbe859c0b3015
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:44:20:7c:97:d1:b5:d8:c7:51:df:26:38:a8:
c0:51:ab:5e:1e:e5:5e:1a:61:ab:8d:a7:ed:4c:f6:
72:31:48:e2:91:e2:64:51:d7:2b:02:68:0e:37:9b:
f2:9c:70:43:11:46:1f:68:05:b7:62:65:c0:df:51:
18:3d:17:97:90:e1:ad:17:8d:55:7f:e0:a3:96:c1:
8c:a7:05:9d:81:fe:00:00:79:40:5f:f9:f8:50:ab:
e4:6d:c7:81:a1:d4:40:b2:24:8a:4e:10:26:37:20:
94:25:8b:34:7c:fa:b4:c6:ee:2b:4e:1e:65:f1:b1:
1e:ec:0a:fe:7f:fa:4e:4f:f9:01:fe:75:f5:7c:b9:
f7:5d:c2:f5:27:05:4b:89:06:81:eb:d9:cd:7b:c5:
f5:49:f0:8e:70:2a:c3:fb:68:4d:5a:c1:1a:a5:0b:
48:09:3c:33:d1:26:23:3e:10:4f:05:2d:e8:db:6f:
65:94:bc:37:69:4d:07:e8:34:90:a6:94:a5:cd:e5:
01:d0:53:3b:b3:95:79:93:ca:6a:ca:7d:57:38:68:
2e:6b:18:30:25:d1:8f:e2:9b:55:e0:93:d9:15:7b:
b2:dd:22:b4:13:94:e0:e4:84:f7:45:45:f2:1e:b8:
ab:07:37:6b:6d:76:22:5d:ba:2b:e1:76:cb:52:a3:
a5:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:1D:E1:C7:5D:E7:96:72:62:6C:85:CC:3E:FB:BE:85:9C:0B:30:15
X509v3 Authority Key Identifier:
keyid:37:40:83:AF:0F:FF:17:68:A0:7C:65:5F:1F:E3:86:00:9C:52:2C:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/N0CDrw__F2igfGVfH-OGAJxSLM8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/83aa47-c7fb-4e05-9fac-e4ca6b73ac76/1/N0CDrw__F2igfGVfH-OGAJxSLM8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/83aa47-c7fb-4e05-9fac-e4ca6b73ac76/1/N0CDrw__F2igfGVfH-OGAJxSLM8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a6:5d:d9:66:79:0e:d4:75:22:c8:ea:2e:90:47:ae:aa:1d:6c:
02:17:97:aa:0f:37:6b:b6:91:8c:95:64:41:22:b5:d8:ee:10:
01:d7:3c:4a:d1:74:96:d1:48:e6:b6:8b:60:ff:c8:2d:50:e3:
b4:17:a4:42:ec:4d:29:67:36:3f:86:ef:95:e5:ae:32:42:c3:
38:81:ba:2c:86:fa:eb:5b:26:c5:6d:99:70:fd:e0:67:7b:a0:
35:46:7d:4d:9b:c9:bb:0b:d6:12:b9:d3:f5:49:b6:8b:f6:af:
8d:a7:2f:b7:6e:1a:d3:51:52:80:59:15:12:73:f1:0e:9b:e6:
15:58:20:26:eb:aa:86:0c:ea:73:ea:b9:c2:ee:bf:3b:4b:e7:
4d:72:fb:c7:14:f2:f3:fe:55:8d:7f:03:09:a7:55:90:80:d6:
6f:0a:fe:35:44:e4:9b:65:94:11:9e:52:c2:e8:d2:04:1a:58:
05:7a:98:08:38:aa:da:2b:df:81:9b:50:9b:fc:89:a1:9b:d9:
b0:8a:33:d9:d7:91:b2:1b:9e:38:fb:6a:1f:f8:24:b3:6b:cc:
28:7a:0f:b7:8a:9e:f1:8b:24:c4:9c:7a:ef:e8:45:d5:82:6b:
d8:db:f7:78:7d:9e:bd:65:3e:57:6b:1f:ab:bf:c7:ef:3d:f8:
1c:3b:3f:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 11:38:18 2025 by rpki-client