Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e1/a60c29-74aa-4b2b-9066-99bbbafe9c4b/1/N5zWfAwYlZI5NYVTIp6R9UPMWl8.mft
File: N5zWfAwYlZI5NYVTIp6R9UPMWl8.mft (raw, json)
Hash identifier: FNagdndChrbwuQ6K1IqyFRtzhjLLO2POP0CDA6lYQ9s=
Subject key identifier: 6C:9B:90:80:7F:E8:AF:D1:16:8E:8E:C7:A5:01:55:5E:FD:95:9F:91
Authority key identifier: 37:9C:D6:7C:0C:18:95:92:39:35:85:53:22:9E:91:F5:43:CC:5A:5F
Certificate issuer: /CN=379cd67c0c18959239358553229e91f543cc5a5f
Certificate serial: 019961D93CA7037EB7DD0D530EF31CCAB267
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/N5zWfAwYlZI5NYVTIp6R9UPMWl8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e1/a60c29-74aa-4b2b-9066-99bbbafe9c4b/1/N5zWfAwYlZI5NYVTIp6R9UPMWl8.mft
Manifest number: 1675
Signing time: Fri 19 Sep 2025 12:00:50 +0000
Manifest this update: Fri 19 Sep 2025 12:00:50 +0000
Manifest next update: Sat 20 Sep 2025 12:00:50 +0000
Files and hashes: 1: 4I-6pUBuhpnNk_pbMH3X7d2ARgw.roa (hash: sibDBbjHGj/0cV6Q2SgY8FXb2d2DZJUAVvA8r4si5j0=)
2: N5zWfAwYlZI5NYVTIp6R9UPMWl8.crl (hash: wmL74+2De2W8AaDCl0cMJURQ5Mp5Sv+iPH9OD2Sitek=)
3: rWytEJ3FiAYVl_Gh2eAbgXCpgnc.roa (hash: N2Jpj3ow/5rvsnHjtA7tEJKRTrNoSnYmSjGqItrSpc0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e1/a60c29-74aa-4b2b-9066-99bbbafe9c4b/1/N5zWfAwYlZI5NYVTIp6R9UPMWl8.crl
rsync://rpki.ripe.net/repository/DEFAULT/e1/a60c29-74aa-4b2b-9066-99bbbafe9c4b/1/N5zWfAwYlZI5NYVTIp6R9UPMWl8.mft
rsync://rpki.ripe.net/repository/DEFAULT/N5zWfAwYlZI5NYVTIp6R9UPMWl8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 20 Sep 2025 07:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:61:d9:3c:a7:03:7e:b7:dd:0d:53:0e:f3:1c:ca:b2:67
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=379cd67c0c18959239358553229e91f543cc5a5f
Validity
Not Before: Sep 19 12:00:50 2025 GMT
Not After : Sep 20 12:00:50 2025 GMT
Subject: CN=6c9b90807fe8afd1168e8ec7a501555efd959f91
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:a0:33:76:1c:6a:56:b4:15:ea:db:a8:31:a2:
4f:14:b2:90:bd:ca:ba:71:35:bc:3d:f4:33:33:26:
10:e0:19:88:22:9a:f1:99:a4:e5:62:3e:b2:29:ee:
56:b1:f7:54:6d:97:14:6c:e0:8d:3f:f2:a4:2f:50:
ea:01:56:01:78:6a:3a:fe:d0:93:a8:cf:87:bc:37:
e6:18:f4:de:b5:03:11:fc:56:fa:47:ee:09:7d:ee:
a4:73:48:6c:b3:9a:12:4f:58:33:19:54:56:7e:70:
a7:7f:5e:98:5b:21:24:c5:a9:9f:6d:f0:6b:c7:a7:
dd:b8:cf:4a:9e:11:ad:f5:f9:d8:0d:db:c0:84:0a:
99:3e:77:e8:66:28:f6:d3:47:06:80:0b:e9:f8:8b:
e2:35:96:aa:6d:1b:00:33:1b:b3:a3:51:df:02:38:
d0:13:de:1b:64:54:a8:d8:26:50:d5:57:6d:d5:19:
8b:a2:ab:67:68:a7:53:25:0b:60:38:49:69:2f:57:
3d:e2:d1:f3:96:62:2a:da:a7:47:0f:b7:cd:37:62:
e8:23:a3:ff:37:e0:61:fe:77:4f:5b:53:6b:4d:59:
e4:54:ed:4c:6d:d9:1c:3c:b3:8d:e6:4c:de:d4:49:
d1:18:ef:94:e2:93:f0:5d:22:90:79:11:d2:8d:cd:
10:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:9B:90:80:7F:E8:AF:D1:16:8E:8E:C7:A5:01:55:5E:FD:95:9F:91
X509v3 Authority Key Identifier:
keyid:37:9C:D6:7C:0C:18:95:92:39:35:85:53:22:9E:91:F5:43:CC:5A:5F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/N5zWfAwYlZI5NYVTIp6R9UPMWl8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/a60c29-74aa-4b2b-9066-99bbbafe9c4b/1/N5zWfAwYlZI5NYVTIp6R9UPMWl8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/a60c29-74aa-4b2b-9066-99bbbafe9c4b/1/N5zWfAwYlZI5NYVTIp6R9UPMWl8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
00:25:b4:cf:0d:f7:9d:31:03:2b:cd:f9:aa:ab:cd:cf:b0:25:
6a:32:18:98:c1:49:dd:91:82:76:e1:c6:bd:e7:32:91:03:0d:
34:f8:e2:54:58:de:09:74:d3:b2:ff:79:bf:91:92:22:e7:a4:
88:ee:eb:b3:bf:88:7b:7b:5c:66:99:54:22:b3:fe:76:3b:f5:
f5:cf:53:0a:64:b9:f7:b5:ad:a4:ec:03:b3:f1:1a:de:3b:3b:
b2:61:67:fe:40:38:a0:a6:7f:cd:d5:de:05:29:71:fd:70:ca:
6f:4a:c7:ee:25:71:df:ac:ad:1d:70:f4:76:06:b6:fa:b4:20:
e0:0a:bf:2e:35:50:21:37:37:f5:ec:c9:2a:2e:07:ea:e4:78:
e2:4e:c8:93:e1:36:07:da:1c:ee:20:84:90:7d:ab:55:87:9d:
aa:80:00:98:17:06:5a:08:f5:0f:d6:49:39:92:ca:f7:c9:e9:
50:53:cb:85:7d:fd:95:d4:04:18:81:b7:58:43:bb:4f:49:1e:
d0:b0:c0:10:a6:93:02:f2:63:56:78:06:7e:1c:ec:f3:41:56:
a5:18:87:cf:bf:91:7a:50:47:1e:c5:60:54:42:de:47:a2:5b:
7c:aa:aa:c1:48:ba:4f:00:a8:bc:b9:99:a7:54:48:7b:7c:d5:
b5:53:35:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 19 14:05:17 2025 by rpki-client