Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/75baf6-724f-4c0b-be89-2fd63a12d66c/1/N6VPsHvqPfVW41k0VNMg5PAO7yw.mft
File: N6VPsHvqPfVW41k0VNMg5PAO7yw.mft (raw, json)
Hash identifier: WvlTyGSr2u6Peup6T38/SKO7x3gxy9Ap3vrDQHMcg8M=
Subject key identifier: FD:B0:43:EF:DD:B7:4E:7A:15:F9:86:C4:8E:A0:F8:14:41:E0:BB:F4
Authority key identifier: 37:A5:4F:B0:7B:EA:3D:F5:56:E3:59:34:54:D3:20:E4:F0:0E:EF:2C
Certificate issuer: /CN=37a54fb07bea3df556e3593454d320e4f00eef2c
Certificate serial: 019A7112E20BBBD6FA7E58B6FB084112D2A4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/N6VPsHvqPfVW41k0VNMg5PAO7yw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f6/75baf6-724f-4c0b-be89-2fd63a12d66c/1/N6VPsHvqPfVW41k0VNMg5PAO7yw.mft
Manifest number: 0536
Signing time: Tue 11 Nov 2025 04:00:54 +0000
Manifest this update: Tue 11 Nov 2025 04:00:54 +0000
Manifest next update: Wed 12 Nov 2025 04:00:54 +0000
Files and hashes: 1: N6VPsHvqPfVW41k0VNMg5PAO7yw.crl (hash: e5Yx/t6unY8zAWxQPjLcjo2IANiTdW8UQ2KMGtA7KDE=)
2: Z9jKPG-aJrl0Zezz0qMB35u4yX4.roa (hash: 2A8HZxxRaB1bgoi8TMjFDPNN3FGgJuX9XCmcDH5eYKg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f6/75baf6-724f-4c0b-be89-2fd63a12d66c/1/N6VPsHvqPfVW41k0VNMg5PAO7yw.crl
rsync://rpki.ripe.net/repository/DEFAULT/f6/75baf6-724f-4c0b-be89-2fd63a12d66c/1/N6VPsHvqPfVW41k0VNMg5PAO7yw.mft
rsync://rpki.ripe.net/repository/DEFAULT/N6VPsHvqPfVW41k0VNMg5PAO7yw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 04:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:12:e2:0b:bb:d6:fa:7e:58:b6:fb:08:41:12:d2:a4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=37a54fb07bea3df556e3593454d320e4f00eef2c
Validity
Not Before: Nov 11 04:00:54 2025 GMT
Not After : Nov 12 04:00:54 2025 GMT
Subject: CN=fdb043efddb74e7a15f986c48ea0f81441e0bbf4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:e6:47:9a:c0:29:e9:4d:04:aa:06:a8:7a:d9:
d4:b5:f6:47:5a:c3:2c:ff:b8:3f:39:f9:a2:7e:72:
3e:cd:68:69:f3:ac:e0:c7:89:55:80:44:8a:59:dc:
5e:87:70:82:e9:d0:e1:80:08:05:55:29:7d:04:a4:
0a:18:57:e6:a5:3f:83:d7:98:fd:91:11:37:bc:4b:
2b:2d:4b:71:e6:c8:9c:05:4e:d9:0f:6e:cf:10:5d:
0a:70:a2:7f:a6:61:ef:0c:00:af:b0:e9:e9:57:1a:
e9:4a:d2:1b:a5:d9:05:4b:cd:08:72:4b:ec:fe:d7:
4a:8a:7d:1a:d8:0e:82:fb:69:d8:7d:d1:c8:62:c8:
55:43:60:c5:d7:69:d6:a9:84:e9:de:30:a7:72:ff:
cc:a7:5d:53:9b:20:b8:bc:79:e7:04:61:52:54:a9:
e9:46:c1:df:9c:03:0d:40:b6:8f:e5:2c:03:a9:6a:
1d:1e:67:c6:79:c0:b6:b4:8b:7f:24:40:ec:3b:04:
d3:62:a2:6c:42:97:a9:7c:41:3f:f9:49:5d:a5:df:
2f:96:95:63:8d:76:63:18:4d:90:ca:92:ab:f7:6a:
68:98:80:6a:44:46:ab:c6:0d:4c:a2:60:9c:03:05:
37:7f:e2:00:55:84:f7:83:59:4f:6d:2b:7b:b3:5b:
1a:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:B0:43:EF:DD:B7:4E:7A:15:F9:86:C4:8E:A0:F8:14:41:E0:BB:F4
X509v3 Authority Key Identifier:
keyid:37:A5:4F:B0:7B:EA:3D:F5:56:E3:59:34:54:D3:20:E4:F0:0E:EF:2C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/N6VPsHvqPfVW41k0VNMg5PAO7yw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/75baf6-724f-4c0b-be89-2fd63a12d66c/1/N6VPsHvqPfVW41k0VNMg5PAO7yw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/75baf6-724f-4c0b-be89-2fd63a12d66c/1/N6VPsHvqPfVW41k0VNMg5PAO7yw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3c:37:f9:06:43:0c:9f:9c:8a:ab:ff:f3:b0:10:e0:0d:9f:62:
68:9a:c3:4b:c8:a5:16:0b:58:5b:0b:8e:08:15:e6:d7:71:8f:
13:5d:19:f2:18:b2:01:d4:63:4e:8b:bf:10:af:90:fd:60:a8:
e4:55:cd:d5:fa:ad:03:53:8b:3a:6a:af:5d:da:e7:10:80:cc:
31:45:69:3a:32:48:b3:fe:b0:dc:9b:29:2f:6e:9b:a3:ee:8e:
26:af:00:03:aa:d1:db:75:b9:50:42:7d:76:82:f7:2c:13:32:
ad:e7:c6:00:0f:38:ca:d9:56:7a:ac:29:3f:c5:9f:82:ae:72:
d8:96:96:09:3f:b7:20:b0:75:11:25:49:e3:77:08:78:2f:15:
62:9a:dd:c6:7c:76:9b:0f:22:0e:c3:ea:5c:66:8d:db:cc:af:
33:42:83:0a:1d:5b:c0:cd:bd:0a:08:d2:99:21:c8:2c:22:98:
97:59:7b:95:2a:e7:8c:a3:8f:62:10:76:2d:52:d1:c5:aa:9c:
38:63:59:d4:ca:50:11:ec:02:83:59:91:6d:47:87:2d:ba:ec:
87:98:7e:74:d9:e4:3e:5e:68:0c:32:45:2f:ff:12:22:cf:83:
e4:d3:f3:c2:b1:e0:12:61:49:9f:49:ac:34:ec:80:0f:1b:e6:
6a:51:63:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 12:39:01 2025 by rpki-client