Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/de956f-e55b-437e-85d9-686f836cbcad/1/N7giEJlIajsTPgE540uTQmTN1wA.mft
File: N7giEJlIajsTPgE540uTQmTN1wA.mft (raw, json)
Hash identifier: lGAjspZAIr8UT/8QVEC2C2h7Z8UcAI2rcJpH2UwKHMA=
Subject key identifier: 44:51:56:65:95:5E:81:C8:24:23:E0:FD:E2:E8:30:D2:CE:7F:13:76
Authority key identifier: 37:B8:22:10:99:48:6A:3B:13:3E:01:39:E3:4B:93:42:64:CD:D7:00
Certificate issuer: /CN=37b8221099486a3b133e0139e34b934264cdd700
Certificate serial: 019A7225C8B95150C7CC28865E1AB6335A6D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/N7giEJlIajsTPgE540uTQmTN1wA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fe/de956f-e55b-437e-85d9-686f836cbcad/1/N7giEJlIajsTPgE540uTQmTN1wA.mft
Manifest number: 1094
Signing time: Tue 11 Nov 2025 09:01:10 +0000
Manifest this update: Tue 11 Nov 2025 09:01:10 +0000
Manifest next update: Wed 12 Nov 2025 09:01:10 +0000
Files and hashes: 1: N7giEJlIajsTPgE540uTQmTN1wA.crl (hash: IxFpnDbBSz/zxGMwk+7OBVriS+FofTryDOt8hXfrn4s=)
2: Vldb1Pv9SKH1pSEjNm1gf_bg3_M.roa (hash: Ox3xcaNfkxGbMXT71Q5JDbePmqXmxZEbJ+Iew6AAo/E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fe/de956f-e55b-437e-85d9-686f836cbcad/1/N7giEJlIajsTPgE540uTQmTN1wA.crl
rsync://rpki.ripe.net/repository/DEFAULT/fe/de956f-e55b-437e-85d9-686f836cbcad/1/N7giEJlIajsTPgE540uTQmTN1wA.mft
rsync://rpki.ripe.net/repository/DEFAULT/N7giEJlIajsTPgE540uTQmTN1wA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:25:c8:b9:51:50:c7:cc:28:86:5e:1a:b6:33:5a:6d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=37b8221099486a3b133e0139e34b934264cdd700
Validity
Not Before: Nov 11 09:01:10 2025 GMT
Not After : Nov 12 09:01:10 2025 GMT
Subject: CN=44515665955e81c82423e0fde2e830d2ce7f1376
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:32:a9:6d:ad:0b:f4:eb:49:84:42:ac:5e:65:
93:23:5b:9b:04:de:44:48:04:af:9e:fb:24:44:6c:
0d:16:41:60:b8:9b:8e:2a:2a:d7:a7:fe:6a:82:55:
fa:d6:54:b4:5d:50:36:7c:28:ff:e3:00:b1:35:e7:
5c:53:7e:a7:00:f2:8d:43:ba:c8:ec:78:d6:41:30:
ab:72:ce:ed:41:b8:76:19:43:74:03:6a:d7:16:95:
9d:20:f1:36:6b:08:b3:0c:fc:69:78:0b:36:ec:38:
ca:4e:04:73:8a:3d:d3:63:62:1f:e9:7b:1f:60:cc:
66:a6:63:ad:6f:71:2f:ba:c5:fb:0d:33:28:98:8d:
89:c9:38:8e:82:b5:8b:26:cd:60:3c:b1:f6:b6:bc:
51:a3:a7:9e:f7:c7:44:9a:ae:0c:cc:d0:4e:50:f9:
9a:db:aa:ae:4b:a5:16:fb:fe:dc:33:fe:ed:c3:6f:
c5:80:b8:40:3b:72:8b:4f:f4:a3:f0:cd:26:ce:52:
26:b7:e6:a9:bf:b7:c2:9e:d2:4b:5a:7b:2e:36:27:
c7:f3:20:b7:e4:37:76:27:11:cf:b5:51:1f:05:ab:
00:20:49:bd:f2:a0:3b:04:fe:0d:b3:29:c2:93:52:
36:b0:66:c0:db:be:bb:c6:f3:8c:bb:a4:69:bb:be:
44:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:51:56:65:95:5E:81:C8:24:23:E0:FD:E2:E8:30:D2:CE:7F:13:76
X509v3 Authority Key Identifier:
keyid:37:B8:22:10:99:48:6A:3B:13:3E:01:39:E3:4B:93:42:64:CD:D7:00
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/N7giEJlIajsTPgE540uTQmTN1wA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/de956f-e55b-437e-85d9-686f836cbcad/1/N7giEJlIajsTPgE540uTQmTN1wA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/de956f-e55b-437e-85d9-686f836cbcad/1/N7giEJlIajsTPgE540uTQmTN1wA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9a:10:59:b2:cd:b1:3f:11:09:61:3f:70:28:48:5d:6b:92:b1:
20:c6:c5:07:f7:2d:65:2b:aa:59:64:5e:0f:1d:13:f5:ae:51:
73:67:70:40:28:3c:84:cf:66:ee:cd:76:eb:a1:90:9a:98:ca:
53:be:e5:c9:77:dd:da:23:a2:a1:e4:53:e8:fb:8a:5c:92:56:
c8:a5:8b:b2:7b:76:0b:fa:31:72:44:05:6e:b0:47:38:73:8b:
f9:b6:1e:cf:49:a2:84:80:63:c1:c2:1a:54:32:e7:40:e6:a9:
26:e9:92:0c:e9:cd:64:bf:12:22:28:b5:d6:ee:9a:01:24:0a:
cf:46:76:8a:4c:83:72:e8:5d:5d:7e:3b:52:70:ed:58:c2:3e:
74:80:33:0a:d2:8f:26:cd:79:28:e4:2e:88:98:a0:31:da:cf:
19:99:34:03:95:86:72:41:05:b7:e4:a9:3e:54:67:f4:be:8e:
e6:25:de:4e:33:c0:9d:78:84:6b:19:cf:c5:96:6b:a6:ab:21:
65:e9:67:5b:c0:18:e8:64:28:e3:6a:50:fa:2c:4b:54:dd:8d:
60:5f:e1:d8:a0:cf:82:b1:ed:26:48:97:06:8b:01:d2:9e:03:
80:e0:de:f9:bc:51:22:1c:75:be:84:37:ec:6b:72:7f:30:35:
6c:5f:25:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 15:56:43 2025 by rpki-client