Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ad/a977ea-4a93-4618-b7ff-35b21bffad4d/1/N6NS4Xr4fuLl3Bc9FVQ9pjvlVHM.mft
File: N6NS4Xr4fuLl3Bc9FVQ9pjvlVHM.mft (raw, json)
Hash identifier: D02mUox+CvaJegozOU4o9h8Ga4rVE3CPn44MdhLzHUA=
Subject key identifier: 38:3C:EC:65:54:5E:E8:E6:E8:89:01:0D:5F:00:57:4B:4E:60:48:6A
Authority key identifier: 37:A3:52:E1:7A:F8:7E:E2:E5:DC:17:3D:15:54:3D:A6:3B:E5:54:73
Certificate issuer: /CN=37a352e17af87ee2e5dc173d15543da63be55473
Certificate serial: 019A7293E07CA53B224253B93CCA26E1F571
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/N6NS4Xr4fuLl3Bc9FVQ9pjvlVHM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ad/a977ea-4a93-4618-b7ff-35b21bffad4d/1/N6NS4Xr4fuLl3Bc9FVQ9pjvlVHM.mft
Manifest number: 0DCD
Signing time: Tue 11 Nov 2025 11:01:24 +0000
Manifest this update: Tue 11 Nov 2025 11:01:24 +0000
Manifest next update: Wed 12 Nov 2025 11:01:24 +0000
Files and hashes: 1: N6NS4Xr4fuLl3Bc9FVQ9pjvlVHM.crl (hash: z0JYQNZ3mx4rEEH+eiM+muqaMxL7j8jOCsdcByi8ajs=)
2: w7ZlxQ56cvfd-unUwhZZ7Ey414Y.roa (hash: Sw49Q+rxJAup0a+X2SL/Sh4sYdS3S/9cJU8WjYNncf8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ad/a977ea-4a93-4618-b7ff-35b21bffad4d/1/N6NS4Xr4fuLl3Bc9FVQ9pjvlVHM.crl
rsync://rpki.ripe.net/repository/DEFAULT/ad/a977ea-4a93-4618-b7ff-35b21bffad4d/1/N6NS4Xr4fuLl3Bc9FVQ9pjvlVHM.mft
rsync://rpki.ripe.net/repository/DEFAULT/N6NS4Xr4fuLl3Bc9FVQ9pjvlVHM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:93:e0:7c:a5:3b:22:42:53:b9:3c:ca:26:e1:f5:71
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=37a352e17af87ee2e5dc173d15543da63be55473
Validity
Not Before: Nov 11 11:01:24 2025 GMT
Not After : Nov 12 11:01:24 2025 GMT
Subject: CN=383cec65545ee8e6e889010d5f00574b4e60486a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:21:49:2a:4a:60:a4:89:74:6b:ef:e4:93:3a:
3c:64:32:42:2b:ef:a6:d3:15:ff:af:4b:26:79:f2:
52:2b:c8:10:ad:14:97:07:09:79:e8:6a:4a:15:4e:
8c:b5:79:19:f2:bc:f9:c1:78:a6:1a:fb:c1:f1:eb:
9b:8f:20:33:e8:f6:76:63:8d:54:fe:ec:a0:6c:b8:
81:c1:85:8b:12:1f:82:56:26:d3:b4:14:57:14:b4:
c0:42:b0:5d:e3:6b:0e:f4:9b:a1:70:38:fa:fb:71:
b5:f0:2d:95:19:4d:f3:ba:4a:57:d6:02:2d:46:66:
f6:cd:2a:aa:86:7f:f2:ae:48:e9:50:af:2d:f1:1c:
3f:5a:ec:fc:e0:b5:1a:62:33:2e:36:e5:af:e8:44:
38:ea:f1:e0:7b:7d:35:51:27:27:f2:84:53:a8:08:
9f:f2:dd:4f:69:3a:2f:c6:b5:e4:e1:b2:0e:dc:ed:
0a:cf:33:65:0e:9b:c2:0e:81:ed:e4:0e:61:07:23:
75:b1:3c:50:d0:26:7f:b5:12:5f:e7:42:3f:86:bc:
51:c2:6c:7d:7d:c4:7d:07:6a:77:2d:cd:2d:0b:00:
84:4c:66:7f:27:79:3d:53:2f:2e:07:3b:5f:09:40:
ef:f6:06:35:0b:9e:1f:7a:2f:fc:b0:4f:5f:75:70:
93:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:3C:EC:65:54:5E:E8:E6:E8:89:01:0D:5F:00:57:4B:4E:60:48:6A
X509v3 Authority Key Identifier:
keyid:37:A3:52:E1:7A:F8:7E:E2:E5:DC:17:3D:15:54:3D:A6:3B:E5:54:73
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/N6NS4Xr4fuLl3Bc9FVQ9pjvlVHM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/a977ea-4a93-4618-b7ff-35b21bffad4d/1/N6NS4Xr4fuLl3Bc9FVQ9pjvlVHM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/a977ea-4a93-4618-b7ff-35b21bffad4d/1/N6NS4Xr4fuLl3Bc9FVQ9pjvlVHM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
00:3e:60:5f:ef:f0:ec:8b:a7:10:f9:84:0e:4c:7c:0b:4d:1e:
cc:ca:ea:ab:61:19:8b:6e:a0:b6:15:42:e1:98:97:d4:fc:11:
b3:f1:ee:3d:30:8e:11:53:03:f5:01:5e:3e:71:a3:94:2c:ba:
80:29:f6:48:46:61:c0:26:82:eb:fa:61:6e:a3:e1:1e:65:a3:
6d:1b:b1:ea:fe:e7:63:cc:ca:4e:1e:d7:d4:54:b5:76:41:77:
bb:28:63:62:96:e4:62:10:a3:66:67:7a:31:43:a5:af:df:ed:
89:c8:19:e1:4b:c4:8f:2e:28:ba:0a:2d:7a:15:ff:b5:64:85:
db:4b:c5:30:e8:3a:5f:c3:12:bf:58:fc:76:6e:79:40:66:99:
ff:6e:f3:91:01:1f:1b:e1:47:e6:b6:63:03:f3:b0:67:bb:a4:
be:d3:4f:a8:f8:3a:3e:cf:4b:25:8c:9b:9a:6e:41:4b:2b:3e:
fa:25:13:3d:e3:e5:16:28:c1:29:80:6c:74:59:2d:9e:a5:21:
76:94:4c:e6:95:ab:b4:a7:58:c7:d4:d4:52:64:5e:cb:23:4a:
78:95:90:f1:5b:2d:a6:5e:fa:62:11:7c:4b:06:c0:1e:36:a8:
47:08:ae:40:aa:b0:b4:c5:93:44:b0:09:22:c4:99:f8:cc:f3:
90:45:0e:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 12:42:51 2025 by rpki-client