Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/341508-a0aa-40c9-ae0c-0379930f8286/1/N1PbxYKexQCzNCahiNA5k5W4Bqo.mft
File: N1PbxYKexQCzNCahiNA5k5W4Bqo.mft (raw, json)
Hash identifier: qw5jLCA6pQhlmBTQMQv3iM0gTptEuNB9GMDCOQFS9f0=
Subject key identifier: EF:F9:BD:1E:1F:46:FA:88:A9:61:45:8D:4F:3E:3D:FD:5D:0F:9B:A5
Authority key identifier: 37:53:DB:C5:82:9E:C5:00:B3:34:26:A1:88:D0:39:93:95:B8:06:AA
Certificate issuer: /CN=3753dbc5829ec500b33426a188d0399395b806aa
Certificate serial: 019A4A73352D887788A696DC410BD712CE33
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/N1PbxYKexQCzNCahiNA5k5W4Bqo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/341508-a0aa-40c9-ae0c-0379930f8286/1/N1PbxYKexQCzNCahiNA5k5W4Bqo.mft
Manifest number: 0530
Signing time: Mon 03 Nov 2025 16:00:55 +0000
Manifest this update: Mon 03 Nov 2025 16:00:55 +0000
Manifest next update: Tue 04 Nov 2025 16:00:55 +0000
Files and hashes: 1: N1PbxYKexQCzNCahiNA5k5W4Bqo.crl (hash: VpPzcqFcHUmh0YvEnjnYJNNrnV7P82WT+fQ83u4DkOs=)
2: hr1FzTLzhvjdHRGQawXaK0XuGQ4.roa (hash: wRJW1xVVLpDSguuiY7y5qT4f4RgVOBoZp/PuXmFp+qI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fd/341508-a0aa-40c9-ae0c-0379930f8286/1/N1PbxYKexQCzNCahiNA5k5W4Bqo.crl
rsync://rpki.ripe.net/repository/DEFAULT/fd/341508-a0aa-40c9-ae0c-0379930f8286/1/N1PbxYKexQCzNCahiNA5k5W4Bqo.mft
rsync://rpki.ripe.net/repository/DEFAULT/N1PbxYKexQCzNCahiNA5k5W4Bqo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 04 Nov 2025 15:12:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4a:73:35:2d:88:77:88:a6:96:dc:41:0b:d7:12:ce:33
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3753dbc5829ec500b33426a188d0399395b806aa
Validity
Not Before: Nov 3 16:00:55 2025 GMT
Not After : Nov 4 16:00:55 2025 GMT
Subject: CN=eff9bd1e1f46fa88a961458d4f3e3dfd5d0f9ba5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:45:38:1d:63:f1:83:f3:e1:9c:f5:96:43:d3:
80:cd:81:26:23:77:b6:2c:2d:65:db:9b:32:1c:0a:
31:58:6b:c2:79:c4:72:44:09:cb:fe:af:33:d1:55:
88:de:39:bf:81:bb:43:a0:35:0a:22:3f:43:a4:67:
d9:40:76:3d:38:11:67:89:51:9f:d1:4a:0d:6d:84:
3a:37:c7:a5:62:79:d9:ee:e9:53:55:c6:82:a4:bb:
35:2e:97:71:a6:31:d9:0d:a7:87:fb:cf:6e:2e:1d:
97:61:3f:df:b2:ea:68:92:f7:08:bb:6e:bc:d9:dd:
b4:2a:17:0b:29:c5:fe:ba:95:b7:f9:f7:9b:95:79:
e8:26:60:60:55:9e:b9:cd:4c:30:0d:a3:7c:33:29:
88:2b:f2:c1:fb:1b:54:bb:a0:f1:90:2c:3d:f1:37:
d8:b9:cb:02:6d:d4:a3:1d:2e:a8:64:4b:20:60:73:
19:31:ee:7a:2f:32:c2:96:43:f1:69:a5:75:0a:39:
2a:37:73:55:d6:35:38:ae:a3:f7:2b:f8:b2:a2:8e:
47:fc:1b:a2:6b:82:aa:bc:b7:e9:7c:64:db:6e:d3:
7d:21:bf:5b:0d:e8:6f:9b:e8:d8:bf:4a:52:88:7d:
00:bf:00:41:e9:c7:60:8a:2c:65:e9:84:d1:26:84:
bb:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:F9:BD:1E:1F:46:FA:88:A9:61:45:8D:4F:3E:3D:FD:5D:0F:9B:A5
X509v3 Authority Key Identifier:
keyid:37:53:DB:C5:82:9E:C5:00:B3:34:26:A1:88:D0:39:93:95:B8:06:AA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/N1PbxYKexQCzNCahiNA5k5W4Bqo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/341508-a0aa-40c9-ae0c-0379930f8286/1/N1PbxYKexQCzNCahiNA5k5W4Bqo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/341508-a0aa-40c9-ae0c-0379930f8286/1/N1PbxYKexQCzNCahiNA5k5W4Bqo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2b:64:dd:95:d0:00:8f:47:6b:0f:81:b6:94:3b:4d:d2:73:61:
8f:6e:0d:78:00:09:e8:6c:97:ea:d3:34:c0:65:cf:6d:78:b2:
a5:88:82:ee:21:7d:15:bd:e8:a7:59:5f:aa:ad:68:f9:25:c3:
14:02:43:c5:a6:f0:70:41:bc:0f:01:73:a0:cc:21:0e:dc:2a:
22:19:02:ee:fa:25:9d:8f:b0:d5:23:4b:ab:7a:9b:2f:8e:eb:
b8:76:9a:b0:d1:d2:22:03:41:19:f6:c5:c6:64:02:ae:34:dd:
53:a9:09:b9:58:b7:62:57:cb:5d:21:06:3f:fc:80:f9:1f:25:
b6:03:92:8e:03:29:64:f9:5f:0c:43:2e:1b:1e:3b:bc:c7:e8:
25:5d:1f:23:17:40:26:10:29:33:d1:a4:34:7e:17:be:95:a4:
b0:4c:b2:d3:62:a0:e9:1b:b6:b2:69:37:42:7c:18:e6:2c:0e:
24:03:c4:34:0e:e0:a5:bb:20:d5:d3:e6:44:e8:54:01:ed:51:
a0:69:41:60:ba:50:54:e3:2f:08:98:ee:bd:7e:2f:e4:f8:df:
f1:38:fa:7f:47:13:77:bb:e4:86:1b:5e:13:1c:f9:cc:0f:3a:
4c:a2:f4:40:ec:07:b4:6d:61:0a:da:61:e0:de:a4:13:42:90:
09:7b:69:0a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpKczUtiHeIppbcQQvXEs4zMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM3NTNkYmM1ODI5ZWM1MDBiMzM0MjZhMTg4ZDAzOTkzOTVi
ODA2YWEwHhcNMjUxMTAzMTYwMDU1WhcNMjUxMTA0MTYwMDU1WjAzMTEwLwYDVQQD
EyhlZmY5YmQxZTFmNDZmYTg4YTk2MTQ1OGQ0ZjNlM2RmZDVkMGY5YmE1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApEU4HWPxg/PhnPWWQ9OAzYEmI3e2
LC1l25syHAoxWGvCecRyRAnL/q8z0VWI3jm/gbtDoDUKIj9DpGfZQHY9OBFniVGf
0UoNbYQ6N8elYnnZ7ulTVcaCpLs1LpdxpjHZDaeH+89uLh2XYT/fsupokvcIu268
2d20KhcLKcX+upW3+feblXnoJmBgVZ65zUwwDaN8MymIK/LB+xtUu6DxkCw98TfY
ucsCbdSjHS6oZEsgYHMZMe56LzLClkPxaaV1CjkqN3NV1jU4rqP3K/iyoo5H/Bui
a4KqvLfpfGTbbtN9Ib9bDehvm+jYv0pSiH0AvwBB6cdgiixl6YTRJoS7aQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFO/5vR4fRvqIqWFFjU8+Pf1dD5ulMB8GA1UdIwQY
MBaAFDdT28WCnsUAszQmoYjQOZOVuAaqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTjFQYnhZS2V4UUN6TkNhaGlOQTVrNVc0QnFvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZC8zNDE1MDgtYTBhYS00MGM5LWFlMGMt
MDM3OTkzMGY4Mjg2LzEvTjFQYnhZS2V4UUN6TkNhaGlOQTVrNVc0QnFvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mZC8zNDE1MDgtYTBhYS00MGM5LWFlMGMtMDM3OTkzMGY4Mjg2
LzEvTjFQYnhZS2V4UUN6TkNhaGlOQTVrNVc0QnFvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAK2TdldAA
j0drD4G2lDtN0nNhj24NeAAJ6GyX6tM0wGXPbXiypYiC7iF9Fb3op1lfqq1o+SXD
FAJDxabwcEG8DwFzoMwhDtwqIhkC7volnY+w1SNLq3qbL47ruHaasNHSIgNBGfbF
xmQCrjTdU6kJuVi3YlfLXSEGP/yA+R8ltgOSjgMpZPlfDEMuGx47vMfoJV0fIxdA
JhApM9GkNH4XvpWksEyy02Kg6Ru2smk3QnwY5iwOJAPENA7gpbsg1dPmROhUAe1R
oGlBYLpQVOMvCJjuvX4v5Pjf8Tj6f0cTd7vkhhteExz5zA86TKL0QOwHtG1hCtph
4N6kE0KQCXtpCg==
-----END CERTIFICATE-----
Generated at Mon Nov 3 17:52:36 2025 by rpki-client