Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e1/2155f1-976a-4f7e-95a4-076e1d77aebe/1/N2AlOewyw5Gf8cvJWU3cq4FWdMU.mft
File: N2AlOewyw5Gf8cvJWU3cq4FWdMU.mft (raw, json)
Hash identifier: WlsZ7THrSiHyOox2+4pDz56iN3RSCy5NbblBcfUqsJc=
Subject key identifier: E5:C3:D9:2A:CA:FF:AC:C2:2F:C7:46:51:93:EE:1D:8E:8D:A3:12:0A
Authority key identifier: 37:60:25:39:EC:32:C3:91:9F:F1:CB:C9:59:4D:DC:AB:81:56:74:C5
Certificate issuer: /CN=37602539ec32c3919ff1cbc9594ddcab815674c5
Certificate serial: 019A1496963D7017F1748064E1D999828966
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/N2AlOewyw5Gf8cvJWU3cq4FWdMU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e1/2155f1-976a-4f7e-95a4-076e1d77aebe/1/N2AlOewyw5Gf8cvJWU3cq4FWdMU.mft
Manifest number: 0DA5
Signing time: Fri 24 Oct 2025 05:00:04 +0000
Manifest this update: Fri 24 Oct 2025 05:00:04 +0000
Manifest next update: Sat 25 Oct 2025 05:00:04 +0000
Files and hashes: 1: 8OUuy6RxMKAA3VbPAT05z8x14Y0.roa (hash: /S82CRuIWRkEgkIG58XNeFsI8Jv6K3dyodJP/54XncE=)
2: N2AlOewyw5Gf8cvJWU3cq4FWdMU.crl (hash: qcuPAUPZQNEHJNKg3JTrJu3ceC0otF7S3bYJ6g5ytps=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e1/2155f1-976a-4f7e-95a4-076e1d77aebe/1/N2AlOewyw5Gf8cvJWU3cq4FWdMU.crl
rsync://rpki.ripe.net/repository/DEFAULT/e1/2155f1-976a-4f7e-95a4-076e1d77aebe/1/N2AlOewyw5Gf8cvJWU3cq4FWdMU.mft
rsync://rpki.ripe.net/repository/DEFAULT/N2AlOewyw5Gf8cvJWU3cq4FWdMU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Oct 2025 05:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:14:96:96:3d:70:17:f1:74:80:64:e1:d9:99:82:89:66
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=37602539ec32c3919ff1cbc9594ddcab815674c5
Validity
Not Before: Oct 24 05:00:04 2025 GMT
Not After : Oct 25 05:00:04 2025 GMT
Subject: CN=e5c3d92acaffacc22fc7465193ee1d8e8da3120a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:42:d9:b3:e2:9c:16:9d:c3:cd:1e:cc:ff:33:
ab:a5:7f:c9:5f:e6:00:d0:13:2b:fd:47:6a:87:fb:
8d:ad:db:39:3c:9b:72:9f:f0:6b:ff:bb:20:22:1f:
a3:91:88:27:7b:07:47:39:ef:2b:a5:b2:42:eb:c3:
83:c2:11:11:36:5d:bd:30:d9:9d:b0:6b:c2:7e:b6:
6c:ff:0a:79:fa:08:59:23:f7:00:78:49:c5:79:c3:
1b:bc:c9:f8:77:cc:4f:03:8a:88:b7:ba:4c:05:ad:
d1:7d:1d:91:3d:a9:ac:89:e2:02:bb:14:2d:2d:77:
e8:0d:25:4e:41:88:ea:c2:74:c4:8a:39:1e:52:e3:
3f:f0:b0:38:28:74:74:e8:9d:fc:e3:18:b2:e0:4a:
6e:3d:03:5c:84:e1:67:1b:c5:88:16:ce:33:ed:65:
ad:a1:8a:2d:ed:7f:56:aa:80:c8:38:04:1f:a2:e1:
58:ee:ec:03:5f:83:49:b7:6e:9e:dd:f0:d3:63:28:
bd:69:56:e6:45:e5:f5:f2:27:40:b8:61:5e:0c:5c:
41:75:1b:ec:28:a4:cd:4a:5f:e8:2c:3e:87:6e:e2:
72:61:50:da:1a:d2:05:e3:5a:cc:85:ef:a1:9a:e2:
41:5f:cc:c0:53:df:c8:8d:c4:90:65:71:bc:7e:f5:
b2:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:C3:D9:2A:CA:FF:AC:C2:2F:C7:46:51:93:EE:1D:8E:8D:A3:12:0A
X509v3 Authority Key Identifier:
keyid:37:60:25:39:EC:32:C3:91:9F:F1:CB:C9:59:4D:DC:AB:81:56:74:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/N2AlOewyw5Gf8cvJWU3cq4FWdMU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/2155f1-976a-4f7e-95a4-076e1d77aebe/1/N2AlOewyw5Gf8cvJWU3cq4FWdMU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/2155f1-976a-4f7e-95a4-076e1d77aebe/1/N2AlOewyw5Gf8cvJWU3cq4FWdMU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1e:a9:09:54:db:3f:75:e8:df:66:00:86:a3:5a:5f:d5:3a:1e:
cd:be:1c:4a:a4:17:2d:37:f5:32:fd:fb:91:3a:97:6f:5a:22:
55:16:bc:e6:43:a6:51:54:0d:52:5a:48:2d:e4:6c:75:7c:97:
85:b1:f5:2c:9d:a9:21:19:7f:85:95:8b:56:1d:2a:51:27:a5:
0d:2d:37:08:fe:5e:fd:df:ca:e9:f5:d6:df:8a:39:77:20:dd:
23:58:38:98:19:fd:9f:29:78:d5:39:3f:2d:85:c3:cc:41:2b:
5c:6f:ce:ea:dd:19:47:bf:01:e8:b0:75:76:11:e6:34:74:16:
52:56:4d:2b:8e:58:81:27:10:b7:93:66:cf:8f:78:d1:0c:06:
4d:85:fb:35:8e:cc:e5:53:cd:6b:df:0c:f2:76:93:a8:9f:f6:
72:9b:5b:07:47:98:e4:c2:eb:47:ad:6a:d4:88:a5:28:d0:0f:
3e:7d:25:54:10:5b:8a:ad:d5:6e:4e:28:2f:68:b5:0c:c1:6d:
4e:e5:ec:0d:89:e7:c0:97:3d:57:be:ec:9a:93:dc:32:aa:fb:
87:10:2d:42:e1:a9:35:38:de:2d:29:0b:b3:18:12:c7:8c:9c:
a9:fb:86:33:b7:df:ca:ef:2f:6d:e9:10:ba:5f:c8:2a:b3:99:
9c:0e:4b:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 24 11:43:08 2025 by rpki-client