Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/341508-a0aa-40c9-ae0c-0379930f8286/1/N1PbxYKexQCzNCahiNA5k5W4Bqo.mft
File: N1PbxYKexQCzNCahiNA5k5W4Bqo.mft (raw, json)
Hash identifier: dqkMxS81j35ho+scqc5d8opSdfmXt7Y5mCQkBBzyHKw=
Subject key identifier: 2C:AF:DE:6D:F2:8A:26:4C:23:9F:43:0C:67:C8:26:C1:91:8D:B0:4C
Authority key identifier: 37:53:DB:C5:82:9E:C5:00:B3:34:26:A1:88:D0:39:93:95:B8:06:AA
Certificate issuer: /CN=3753dbc5829ec500b33426a188d0399395b806aa
Certificate serial: 0199345BE3DF557FE6E3EB4483E60EA36AF1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/N1PbxYKexQCzNCahiNA5k5W4Bqo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/341508-a0aa-40c9-ae0c-0379930f8286/1/N1PbxYKexQCzNCahiNA5k5W4Bqo.mft
Manifest number: 04A0
Signing time: Wed 10 Sep 2025 16:01:01 +0000
Manifest this update: Wed 10 Sep 2025 16:01:01 +0000
Manifest next update: Thu 11 Sep 2025 16:01:01 +0000
Files and hashes: 1: N1PbxYKexQCzNCahiNA5k5W4Bqo.crl (hash: g9YYbJi4k/kEeytw+1PwGVfK59rFjt6Mqt5EDYLumto=)
2: hr1FzTLzhvjdHRGQawXaK0XuGQ4.roa (hash: wRJW1xVVLpDSguuiY7y5qT4f4RgVOBoZp/PuXmFp+qI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fd/341508-a0aa-40c9-ae0c-0379930f8286/1/N1PbxYKexQCzNCahiNA5k5W4Bqo.crl
rsync://rpki.ripe.net/repository/DEFAULT/fd/341508-a0aa-40c9-ae0c-0379930f8286/1/N1PbxYKexQCzNCahiNA5k5W4Bqo.mft
rsync://rpki.ripe.net/repository/DEFAULT/N1PbxYKexQCzNCahiNA5k5W4Bqo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 11 Sep 2025 11:00:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:34:5b:e3:df:55:7f:e6:e3:eb:44:83:e6:0e:a3:6a:f1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3753dbc5829ec500b33426a188d0399395b806aa
Validity
Not Before: Sep 10 16:01:01 2025 GMT
Not After : Sep 11 16:01:01 2025 GMT
Subject: CN=2cafde6df28a264c239f430c67c826c1918db04c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:bd:d5:ba:9b:1f:16:8e:d8:c0:f7:34:d2:33:
ab:8e:bf:a9:56:c5:85:d2:94:1b:91:47:4d:43:6d:
ad:48:4a:82:14:3f:25:2f:d6:66:e0:2e:5f:6c:08:
d9:da:2f:09:77:11:5f:8a:29:d1:3d:a4:4a:fe:b7:
c5:97:9c:01:3b:bb:b2:d3:88:da:6e:63:a7:bf:63:
2b:06:45:d1:2a:03:aa:f6:d7:b2:e8:b4:c6:29:8a:
80:29:00:16:94:c2:bd:9f:6a:76:0e:5b:3f:7e:a7:
90:c6:7d:a9:da:f6:dc:8d:14:ff:7f:88:16:78:cb:
25:f6:57:52:da:c0:00:4f:d2:8f:0c:1b:6c:5a:13:
2f:59:6a:70:ef:a7:d7:62:95:6d:a8:cf:8c:48:95:
13:cb:4c:51:cd:47:79:af:d2:ee:a2:db:bd:f9:18:
78:66:f4:23:f1:33:f9:71:db:47:b5:cd:de:76:bf:
79:94:c1:c4:04:5f:e8:97:ef:b6:6e:a0:d0:1b:96:
90:52:3d:b0:af:9e:bd:56:e2:11:61:da:b1:72:a5:
e0:6d:1a:21:7c:ec:b8:6f:27:c4:66:e5:36:1a:bf:
1d:c0:04:6a:44:11:84:90:4f:75:f3:9f:25:ea:4d:
63:24:74:a2:1e:e6:85:57:d3:f3:74:62:f2:e1:27:
9e:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:AF:DE:6D:F2:8A:26:4C:23:9F:43:0C:67:C8:26:C1:91:8D:B0:4C
X509v3 Authority Key Identifier:
keyid:37:53:DB:C5:82:9E:C5:00:B3:34:26:A1:88:D0:39:93:95:B8:06:AA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/N1PbxYKexQCzNCahiNA5k5W4Bqo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/341508-a0aa-40c9-ae0c-0379930f8286/1/N1PbxYKexQCzNCahiNA5k5W4Bqo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/341508-a0aa-40c9-ae0c-0379930f8286/1/N1PbxYKexQCzNCahiNA5k5W4Bqo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
75:05:93:4a:e3:67:31:dc:9b:32:45:02:b1:bf:e8:8f:51:75:
96:fd:6a:0f:1f:9b:ac:3f:15:55:5e:57:f6:be:b1:83:cf:d2:
88:bb:ed:76:44:53:06:c9:ee:53:27:c8:c8:18:51:de:23:ef:
10:e6:e0:a1:27:e5:63:56:29:eb:fd:25:6a:c8:c6:e0:69:22:
24:e0:9c:c6:3f:b2:bc:2f:a1:c5:6f:3f:66:04:d4:79:3f:8b:
ea:f1:40:62:f6:bd:6d:d0:98:f9:68:67:86:4d:3a:49:cd:58:
fb:5d:5d:ec:8f:39:84:89:b6:9a:5f:12:c2:be:fe:a1:dd:ab:
95:c0:99:39:37:9d:9a:9f:fe:ec:ec:92:f4:a0:1a:55:6b:7e:
1e:75:bc:10:9b:54:38:47:c2:19:41:49:67:3c:04:64:15:46:
67:9e:95:f7:d4:1a:bb:1a:37:cb:2c:6b:4f:55:d1:e5:7c:66:
99:1a:02:2c:46:32:bd:e7:3d:cd:57:c9:ee:25:04:dc:1e:f6:
7c:c5:a8:8b:7c:de:2b:47:19:53:be:f6:f0:fd:b9:c7:3a:12:
ba:15:78:09:b4:87:fc:f2:f0:84:d6:21:f4:1e:e4:ad:43:42:
96:63:74:09:43:f0:5c:d8:29:8e:49:f0:91:7a:6e:9e:87:88:
46:d2:e5:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 10 19:58:29 2025 by rpki-client