Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/208129-d086-49d4-9dc7-5a9ac7f39023/1/N3vRD32QbBMcjJ4vxzFkFt9K4iQ.mft
File: N3vRD32QbBMcjJ4vxzFkFt9K4iQ.mft (raw, json)
Hash identifier: Plz9INtFJ+aI/r3CcJkIKdy4UoMvxsUoxkMWk1L2+xY=
Subject key identifier: F2:62:4F:09:FF:B9:96:01:B3:1F:70:43:74:36:89:B2:D4:66:61:5A
Authority key identifier: 37:7B:D1:0F:7D:90:6C:13:1C:8C:9E:2F:C7:31:64:16:DF:4A:E2:24
Certificate issuer: /CN=377bd10f7d906c131c8c9e2fc7316416df4ae224
Certificate serial: 0199FD3450C7F2AA5E920BE6B949DFE30ABC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/N3vRD32QbBMcjJ4vxzFkFt9K4iQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/208129-d086-49d4-9dc7-5a9ac7f39023/1/N3vRD32QbBMcjJ4vxzFkFt9K4iQ.mft
Manifest number: 0E69
Signing time: Sun 19 Oct 2025 16:01:28 +0000
Manifest this update: Sun 19 Oct 2025 16:01:28 +0000
Manifest next update: Mon 20 Oct 2025 16:01:28 +0000
Files and hashes: 1: N3vRD32QbBMcjJ4vxzFkFt9K4iQ.crl (hash: TzYvu/HCt/BkinVS06aMj2tP0/Nhm7vz3ErPfhjMqOE=)
2: OMa6gi_iwh1hBu7tbqj9s02UqHs.roa (hash: MtN6hH7mkES8J6BxizWre+aErU3W714/kzoONVlpny4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/17/208129-d086-49d4-9dc7-5a9ac7f39023/1/N3vRD32QbBMcjJ4vxzFkFt9K4iQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/17/208129-d086-49d4-9dc7-5a9ac7f39023/1/N3vRD32QbBMcjJ4vxzFkFt9K4iQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/N3vRD32QbBMcjJ4vxzFkFt9K4iQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fd:34:50:c7:f2:aa:5e:92:0b:e6:b9:49:df:e3:0a:bc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=377bd10f7d906c131c8c9e2fc7316416df4ae224
Validity
Not Before: Oct 19 16:01:28 2025 GMT
Not After : Oct 20 16:01:28 2025 GMT
Subject: CN=f2624f09ffb99601b31f7043743689b2d466615a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:c7:35:fa:99:5e:43:1c:22:8e:10:6f:4e:d4:
f0:8a:72:5b:c0:b6:a6:ab:0d:0f:6c:d9:91:68:c3:
c1:99:22:10:b2:b3:ec:a2:45:8f:ff:e4:01:a6:c8:
00:e8:a1:cd:dc:e9:c8:de:a9:48:ce:af:76:be:8f:
b8:9d:c2:16:76:9e:f0:90:8d:6a:dd:e6:5a:d4:88:
44:ea:4a:a8:74:3d:a5:d3:f1:39:55:e1:57:a2:40:
2a:a4:a6:dc:10:8d:f5:ea:4b:f3:63:5b:71:45:18:
05:e5:71:82:38:b6:f6:ff:4d:71:f0:0d:89:1d:84:
09:30:91:1b:cb:d6:a8:e9:ca:44:95:5a:f5:8b:ae:
5c:f6:d2:d6:fa:ab:a7:04:7e:ca:48:f1:10:19:d1:
52:18:f5:48:fe:4b:54:ee:1b:ff:02:b3:d7:5e:56:
21:87:3e:1f:67:bc:ae:c9:ef:e5:3b:fb:3e:98:d7:
b0:fb:9b:8c:5e:25:7e:70:54:4f:b1:5f:da:50:b0:
20:47:a9:55:58:36:f4:1f:ee:7a:61:3a:a2:49:2a:
85:13:eb:8f:c4:7b:40:b7:71:73:7a:e0:a6:b4:33:
23:eb:64:73:d0:84:59:10:40:a7:bd:09:02:34:88:
cb:74:96:d3:e7:b5:f6:49:0b:a3:58:44:3e:10:cf:
6d:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:62:4F:09:FF:B9:96:01:B3:1F:70:43:74:36:89:B2:D4:66:61:5A
X509v3 Authority Key Identifier:
keyid:37:7B:D1:0F:7D:90:6C:13:1C:8C:9E:2F:C7:31:64:16:DF:4A:E2:24
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/N3vRD32QbBMcjJ4vxzFkFt9K4iQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/208129-d086-49d4-9dc7-5a9ac7f39023/1/N3vRD32QbBMcjJ4vxzFkFt9K4iQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/17/208129-d086-49d4-9dc7-5a9ac7f39023/1/N3vRD32QbBMcjJ4vxzFkFt9K4iQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1d:15:99:00:bc:e2:af:32:71:67:fc:2a:56:76:58:18:0d:16:
fc:57:fb:77:00:a8:65:a5:ae:e3:72:72:53:a9:d9:66:52:1b:
d9:ca:c3:04:1d:14:05:c6:f7:7f:e0:fb:47:06:0d:7d:e2:18:
94:dc:62:1b:6c:78:fc:44:71:2b:71:e5:3d:dc:26:e4:cc:15:
5f:02:17:65:a7:7a:50:ec:e5:8b:8e:34:ff:c3:87:ab:fe:a2:
4f:a5:1a:e4:90:39:7f:c7:ff:f2:4b:42:f8:c0:fd:05:ab:e2:
de:bf:8a:7b:90:5a:5c:8e:cb:b0:bb:74:7b:bf:f9:2b:3c:2d:
3d:f0:17:50:31:f1:16:57:dd:60:f2:43:49:b1:62:de:86:69:
90:1a:5e:f3:1a:98:94:ef:17:28:9f:6a:b3:8e:c1:67:df:a9:
97:ce:0e:ec:93:5c:56:58:77:bb:64:93:50:d1:6a:c7:2f:44:
51:ba:04:c8:3a:22:bc:6a:6d:f8:5c:d9:e6:05:fc:f0:9e:15:
47:05:2c:3e:37:25:f0:5d:d9:00:d8:87:36:5e:4b:cf:79:84:
30:56:36:1c:d1:b7:52:7a:f3:a4:c2:33:b4:26:68:85:89:b7:
82:4f:ab:d9:33:80:d2:5d:a7:4f:ad:e6:48:cb:69:e1:9c:ab:
05:19:bd:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 18:06:45 2025 by rpki-client