Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/3a9021-2959-47e7-a615-81144fd01564/1/N6W4zf0deX2GBmDjS_oaKthf-dk.mft
File: N6W4zf0deX2GBmDjS_oaKthf-dk.mft (raw, json)
Hash identifier: AzMQv9/JXWfxOlKsbFY//DYhP3jjeT6AKU4BVD2mJo0=
Subject key identifier: 9F:B9:65:03:64:56:04:56:F8:DE:13:19:C3:BF:16:19:48:E5:D7:E6
Authority key identifier: 37:A5:B8:CD:FD:1D:79:7D:86:06:60:E3:4B:FA:1A:2A:D8:5F:F9:D9
Certificate issuer: /CN=37a5b8cdfd1d797d860660e34bfa1a2ad85ff9d9
Certificate serial: 019A2AB1603636D45A4FB826C1CD439865A3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/N6W4zf0deX2GBmDjS_oaKthf-dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e9/3a9021-2959-47e7-a615-81144fd01564/1/N6W4zf0deX2GBmDjS_oaKthf-dk.mft
Manifest number: 16FD
Signing time: Tue 28 Oct 2025 12:00:58 +0000
Manifest this update: Tue 28 Oct 2025 12:00:58 +0000
Manifest next update: Wed 29 Oct 2025 12:00:58 +0000
Files and hashes: 1: N6W4zf0deX2GBmDjS_oaKthf-dk.crl (hash: xCm0AFWd3wYtAebLuwQ3cJvFma3254n9b08EJ3SmaoM=)
2: Ofe5y963IBdAewU6cuUJ3GOhnPg.roa (hash: wYPWSR0SRCo8lw+izQyw6mN43vzofM40zE5eYO1oT9w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e9/3a9021-2959-47e7-a615-81144fd01564/1/N6W4zf0deX2GBmDjS_oaKthf-dk.crl
rsync://rpki.ripe.net/repository/DEFAULT/e9/3a9021-2959-47e7-a615-81144fd01564/1/N6W4zf0deX2GBmDjS_oaKthf-dk.mft
rsync://rpki.ripe.net/repository/DEFAULT/N6W4zf0deX2GBmDjS_oaKthf-dk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Oct 2025 12:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:2a:b1:60:36:36:d4:5a:4f:b8:26:c1:cd:43:98:65:a3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=37a5b8cdfd1d797d860660e34bfa1a2ad85ff9d9
Validity
Not Before: Oct 28 12:00:58 2025 GMT
Not After : Oct 29 12:00:58 2025 GMT
Subject: CN=9fb9650364560456f8de1319c3bf161948e5d7e6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:93:42:ea:b2:49:87:1e:69:f5:13:d7:29:83:
0e:bf:6a:e9:f8:83:4f:24:16:b3:22:80:25:ba:52:
cf:c9:52:fd:99:ea:26:43:b1:ee:1e:1d:a8:1e:85:
04:d5:f5:4e:95:e3:e5:bd:12:7d:0d:2d:03:cd:20:
ff:7c:f8:92:68:d8:0a:42:3e:51:01:45:1e:8c:ec:
4e:fc:0c:c4:55:05:e1:76:4e:2b:46:b3:fd:32:44:
22:80:a5:16:88:8f:91:e7:53:d0:3c:3b:cb:c8:d1:
a8:e9:31:86:34:59:99:fd:e1:2d:2b:1c:05:d9:24:
69:c5:66:f2:ee:2c:9b:51:b4:20:d3:b9:c7:74:cb:
c5:72:bb:0f:84:79:20:35:5c:be:12:93:92:5e:1b:
fa:d2:98:96:73:7e:9d:f8:dd:ad:bd:35:3a:44:9d:
6a:07:27:c1:58:e8:9c:04:65:a8:73:93:37:c0:9c:
ae:3a:97:d6:d6:2c:ed:d2:ee:b5:0f:be:83:f9:52:
b1:cf:8f:c5:c9:a5:9d:24:26:ba:f6:8a:56:be:e4:
a0:fb:9b:d6:41:f0:ef:ed:94:56:65:32:b6:12:bd:
aa:9e:48:c7:79:1e:bb:86:aa:e9:2d:63:c9:c3:cb:
4c:e9:e1:11:10:52:2c:ef:3a:5c:75:64:ab:62:25:
d9:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:B9:65:03:64:56:04:56:F8:DE:13:19:C3:BF:16:19:48:E5:D7:E6
X509v3 Authority Key Identifier:
keyid:37:A5:B8:CD:FD:1D:79:7D:86:06:60:E3:4B:FA:1A:2A:D8:5F:F9:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/N6W4zf0deX2GBmDjS_oaKthf-dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/3a9021-2959-47e7-a615-81144fd01564/1/N6W4zf0deX2GBmDjS_oaKthf-dk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/3a9021-2959-47e7-a615-81144fd01564/1/N6W4zf0deX2GBmDjS_oaKthf-dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
17:1c:ff:41:f3:cf:7f:a7:d1:45:58:bc:44:a6:2b:40:f5:59:
5c:9a:94:81:b2:2f:a2:02:26:6f:72:41:ff:cb:74:a9:c7:14:
ca:44:77:76:29:e2:93:6e:44:89:8d:65:fe:29:88:e0:96:8e:
49:5f:78:42:8f:76:0d:cc:d7:93:ac:b2:ee:6f:8c:1a:1c:dc:
c2:49:be:32:da:73:1d:3b:ed:01:67:6a:4c:ca:96:00:87:33:
c1:b9:89:0f:3b:d7:c1:da:f9:49:31:de:fd:f5:b6:b1:6a:44:
94:ed:16:0b:eb:0a:77:4f:24:ec:df:f9:3d:aa:1b:5e:ac:1c:
11:d1:08:fa:86:3d:3e:19:d8:95:88:2a:6b:82:a2:85:eb:79:
61:5c:27:bd:63:4f:f9:71:51:58:70:f7:dd:bb:05:7d:06:e7:
6f:33:97:72:d4:c6:1b:bd:a6:7b:b9:24:73:05:34:32:e4:54:
de:f9:09:96:c6:5a:fd:27:ad:59:be:23:6b:4b:94:da:96:2c:
60:ce:52:48:a4:f6:98:01:ec:bd:ff:82:17:7a:a6:9b:f6:bf:
4f:f2:e8:c1:cd:fb:94:d7:a1:98:b9:bf:47:fe:6a:9e:f4:fe:
22:64:fb:f4:c7:e2:74:46:55:2f:26:da:78:f5:1b:1b:96:54:
70:c2:3b:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 28 20:09:58 2025 by rpki-client