Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/22/e128e0-00a6-4689-95be-524c2109cb05/1/N4kaRySqxrXaAAUymqOlq-h3edY.mft
File: N4kaRySqxrXaAAUymqOlq-h3edY.mft (raw, json)
Hash identifier: 7gisXCiQHeuIv/l8LWb0YabrzJY6luYpiU+plu3Zm9U=
Subject key identifier: 95:78:A1:1C:B1:0B:C1:E7:63:C0:0C:ED:3B:8B:9F:4E:25:BD:DC:53
Authority key identifier: 37:89:1A:47:24:AA:C6:B5:DA:00:05:32:9A:A3:A5:AB:E8:77:79:D6
Certificate issuer: /CN=37891a4724aac6b5da0005329aa3a5abe87779d6
Certificate serial: 0199FAD7F369A478B942490CAC6B2BEBF0C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/N4kaRySqxrXaAAUymqOlq-h3edY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/22/e128e0-00a6-4689-95be-524c2109cb05/1/N4kaRySqxrXaAAUymqOlq-h3edY.mft
Manifest number: 16E0
Signing time: Sun 19 Oct 2025 05:01:20 +0000
Manifest this update: Sun 19 Oct 2025 05:01:20 +0000
Manifest next update: Mon 20 Oct 2025 05:01:20 +0000
Files and hashes: 1: N4kaRySqxrXaAAUymqOlq-h3edY.crl (hash: UQcC2uV6ea7A4v3bRYMP+alTK0F+ju8yD7bNDGxYfBg=)
2: mUVCmxlyRHOtQgqO0rU0Vfd_JxM.roa (hash: 4mDmX111g5PLlffQE3BOZIPTW2uYVk7yBC9oTl48FX8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/22/e128e0-00a6-4689-95be-524c2109cb05/1/N4kaRySqxrXaAAUymqOlq-h3edY.crl
rsync://rpki.ripe.net/repository/DEFAULT/22/e128e0-00a6-4689-95be-524c2109cb05/1/N4kaRySqxrXaAAUymqOlq-h3edY.mft
rsync://rpki.ripe.net/repository/DEFAULT/N4kaRySqxrXaAAUymqOlq-h3edY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 05:01:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fa:d7:f3:69:a4:78:b9:42:49:0c:ac:6b:2b:eb:f0:c5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=37891a4724aac6b5da0005329aa3a5abe87779d6
Validity
Not Before: Oct 19 05:01:20 2025 GMT
Not After : Oct 20 05:01:20 2025 GMT
Subject: CN=9578a11cb10bc1e763c00ced3b8b9f4e25bddc53
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:93:a1:73:5a:9e:8b:f9:af:30:e4:04:a2:dc:
3e:87:ab:5c:cc:bf:37:fe:c2:2b:47:15:03:f2:34:
75:bc:ac:be:36:7a:d5:41:8a:20:3d:28:53:8a:ea:
f3:ff:22:d6:46:04:a4:36:f6:01:61:36:f1:77:de:
df:a2:b8:82:7d:16:e3:bb:f2:d3:b4:60:4d:b4:27:
31:9d:1c:19:39:75:05:34:ea:cc:a6:08:8c:a1:86:
e0:d9:8c:0f:04:8f:44:dd:ee:bd:8c:3d:bc:98:3d:
20:db:20:18:6f:af:2e:be:ed:3f:db:2b:cf:55:e8:
87:2c:ab:e0:39:76:c4:65:7c:2f:c6:a1:db:b1:5a:
10:59:22:db:63:f9:4c:a8:f6:72:d7:2d:5c:b7:9e:
b0:61:b7:de:49:1f:7c:e8:2d:12:1c:d4:3a:c6:71:
62:6f:73:3e:31:cf:ce:4b:13:93:f2:5b:f1:73:39:
41:ff:6b:ff:04:d0:12:93:23:3b:4b:e0:cb:2a:ae:
86:6c:12:52:27:7b:65:91:db:1d:a2:5e:91:f2:d2:
33:d8:33:25:d5:6f:4c:46:a3:19:84:5c:aa:9a:21:
51:c5:88:13:77:a7:79:00:c1:1d:93:74:de:73:0c:
63:4b:57:f6:39:6f:25:62:be:ba:ca:9a:09:e5:83:
b6:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:78:A1:1C:B1:0B:C1:E7:63:C0:0C:ED:3B:8B:9F:4E:25:BD:DC:53
X509v3 Authority Key Identifier:
keyid:37:89:1A:47:24:AA:C6:B5:DA:00:05:32:9A:A3:A5:AB:E8:77:79:D6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/N4kaRySqxrXaAAUymqOlq-h3edY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/e128e0-00a6-4689-95be-524c2109cb05/1/N4kaRySqxrXaAAUymqOlq-h3edY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/22/e128e0-00a6-4689-95be-524c2109cb05/1/N4kaRySqxrXaAAUymqOlq-h3edY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0c:20:b1:a5:c3:47:c7:74:da:89:ab:2f:38:12:3a:4a:43:c7:
1f:a1:ba:b6:b5:1b:4d:c8:98:71:fb:ab:9c:8a:f5:52:87:c8:
6a:82:6a:17:bc:13:53:0a:57:eb:27:01:4a:0e:5c:d1:9b:a5:
96:b6:d9:d8:d8:a5:a4:cd:3a:aa:2e:87:1f:2c:cc:ef:67:d5:
f7:0b:8b:75:b3:7f:1b:1e:7f:35:72:1c:73:e4:f9:11:cc:48:
a2:a2:fa:60:fb:37:95:8f:dd:46:aa:ba:d3:11:57:a3:3f:c6:
1d:f6:bb:e5:b8:69:1b:fe:72:6e:86:b8:a5:46:fd:23:47:2a:
fe:1c:6d:2a:c5:43:62:10:d7:42:42:96:ef:f8:d5:e5:f4:e6:
5c:08:51:88:ff:cb:c9:02:a8:d9:19:17:04:2b:8f:53:33:3d:
8e:4c:f6:08:2e:29:51:73:49:01:8b:15:6e:14:9c:58:07:2c:
44:42:42:e9:93:bb:dc:6c:08:8a:2f:68:a8:0b:4a:3a:7d:da:
1b:9b:bf:5e:1a:34:8a:fe:89:e0:98:1e:59:d5:88:78:ef:70:
a8:fa:3a:73:ba:54:4c:87:16:e1:b9:3a:62:b7:99:f5:8d:7f:
6e:5c:10:10:99:b0:c4:fc:4b:33:9c:95:3e:85:8e:73:16:9b:
40:0c:c0:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 13:01:09 2025 by rpki-client