Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/b5dfcc-cd35-4837-b892-f226b144a89a/1/N0u2qfskWk-vy41iHRx19Z1uyhk.mft
File: N0u2qfskWk-vy41iHRx19Z1uyhk.mft (raw, json)
Hash identifier: 3isPourNyrtXQIo46NB+FlpvCketc3aHGT8CQzGQiu0=
Subject key identifier: D2:9F:99:F9:39:13:D8:4F:CD:3E:3B:CE:87:55:88:59:13:32:BD:1B
Authority key identifier: 37:4B:B6:A9:FB:24:5A:4F:AF:CB:8D:62:1D:1C:75:F5:9D:6E:CA:19
Certificate issuer: /CN=374bb6a9fb245a4fafcb8d621d1c75f59d6eca19
Certificate serial: 0199FBEAAB24FAC3E182350CD7BAB63D8D34
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/N0u2qfskWk-vy41iHRx19Z1uyhk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2a/b5dfcc-cd35-4837-b892-f226b144a89a/1/N0u2qfskWk-vy41iHRx19Z1uyhk.mft
Manifest number: 0567
Signing time: Sun 19 Oct 2025 10:01:24 +0000
Manifest this update: Sun 19 Oct 2025 10:01:24 +0000
Manifest next update: Mon 20 Oct 2025 10:01:24 +0000
Files and hashes: 1: N0u2qfskWk-vy41iHRx19Z1uyhk.crl (hash: xnpDrB0iXNmdF1Iw+s12H/7kFHSbe7vr3qgLKb3SVpQ=)
2: W09Hs7YV_rlCMmFfP5OjxUCv0DQ.roa (hash: zUsXUKlv5KVQErO/W3pmAzbRpm0hLO9n4LhnJ2Df8ps=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2a/b5dfcc-cd35-4837-b892-f226b144a89a/1/N0u2qfskWk-vy41iHRx19Z1uyhk.crl
rsync://rpki.ripe.net/repository/DEFAULT/2a/b5dfcc-cd35-4837-b892-f226b144a89a/1/N0u2qfskWk-vy41iHRx19Z1uyhk.mft
rsync://rpki.ripe.net/repository/DEFAULT/N0u2qfskWk-vy41iHRx19Z1uyhk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 10:01:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:ea:ab:24:fa:c3:e1:82:35:0c:d7:ba:b6:3d:8d:34
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=374bb6a9fb245a4fafcb8d621d1c75f59d6eca19
Validity
Not Before: Oct 19 10:01:24 2025 GMT
Not After : Oct 20 10:01:24 2025 GMT
Subject: CN=d29f99f93913d84fcd3e3bce875588591332bd1b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:5e:cd:b8:3f:ad:38:76:38:db:47:8f:46:a0:
dc:27:87:91:97:da:a0:ed:11:3d:bc:fd:a0:64:a6:
2e:49:9a:f2:3f:4b:57:30:7a:0a:aa:44:c2:40:5d:
41:09:74:8c:78:b9:7c:62:47:ae:15:96:c5:1e:3d:
90:df:78:f9:df:b2:7a:8d:01:ae:3f:0b:c2:ca:58:
c9:f1:9d:08:7f:b7:2f:71:cd:9b:f9:a9:cb:9c:06:
13:8b:b6:16:55:84:89:d7:d1:39:f5:f2:24:ec:0d:
50:27:05:c4:39:25:08:94:37:83:67:35:1f:a1:9d:
b5:8c:e1:a4:80:9b:25:5d:1a:d6:63:ce:51:81:c9:
39:94:03:ca:c4:cd:0f:15:a9:0e:e1:ce:22:83:03:
86:62:db:13:03:f6:1e:75:eb:3e:87:12:54:be:16:
5e:a9:f5:14:4e:fe:f2:04:42:be:9c:13:39:95:73:
5c:07:ca:04:ff:7b:19:11:16:c5:71:7c:43:e0:af:
8a:d2:2e:1e:17:8b:2f:2b:ff:80:a0:b4:18:cb:8d:
04:45:5d:96:b3:24:c7:f8:6f:ff:9e:5f:56:b0:d6:
df:c0:63:ad:e8:a5:eb:65:36:8c:a1:60:d8:8f:49:
3d:2a:2a:b0:c2:0a:d6:20:84:b5:4b:bb:ae:e2:93:
b5:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:9F:99:F9:39:13:D8:4F:CD:3E:3B:CE:87:55:88:59:13:32:BD:1B
X509v3 Authority Key Identifier:
keyid:37:4B:B6:A9:FB:24:5A:4F:AF:CB:8D:62:1D:1C:75:F5:9D:6E:CA:19
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/N0u2qfskWk-vy41iHRx19Z1uyhk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/b5dfcc-cd35-4837-b892-f226b144a89a/1/N0u2qfskWk-vy41iHRx19Z1uyhk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/b5dfcc-cd35-4837-b892-f226b144a89a/1/N0u2qfskWk-vy41iHRx19Z1uyhk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
04:22:ad:9c:e5:60:dc:de:b4:15:53:2f:99:d0:fc:be:c0:c5:
81:81:f1:79:e5:da:e6:57:7d:78:54:cf:7f:6a:3d:5b:69:fc:
16:e8:06:c0:14:7d:9b:4a:91:e4:7a:f9:93:1d:f7:50:d4:db:
2e:9b:56:7a:71:80:40:ab:8b:84:70:67:23:9a:2a:51:ca:8f:
5d:88:b5:7e:2b:e4:f3:f4:e8:d4:e8:48:93:e9:27:bd:ce:c1:
e0:9a:ed:41:ad:76:a9:82:b8:c0:6b:e0:ee:87:c7:9a:3e:f5:
67:d3:f5:84:9c:d9:c2:d6:e4:76:74:39:2e:16:dc:f1:54:b5:
d1:6d:92:5e:1a:c0:71:d4:a6:8d:80:9e:e2:b0:1f:6b:3c:a2:
4a:42:3e:34:be:21:25:e8:e2:1c:8d:aa:0d:94:91:37:0c:10:
4b:c2:f2:6d:4f:02:39:3d:16:2d:88:2a:5c:36:4e:0f:54:5e:
2e:c3:cc:69:02:01:4c:59:5c:85:02:b1:f5:22:04:ca:72:e7:
fa:04:13:3b:c9:00:ca:9c:9d:b0:63:09:f8:d2:a3:a7:5c:12:
38:e0:57:a0:b2:10:1d:c7:fc:2d:61:6d:31:f8:e9:1b:52:4b:
03:bf:71:6c:a3:2c:a2:9a:a5:2e:bd:2c:84:e4:5d:87:43:04:
e6:33:b3:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 18:19:13 2025 by rpki-client