Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2b/523c7d-3917-4137-9df3-abea625868a8/1/N8ZRc24kPV6mzsymOv20oDEtdzA.mft
File: N8ZRc24kPV6mzsymOv20oDEtdzA.mft (raw, json)
Hash identifier: HszULfV0AQfp7KwBNjuWAAgDHikoN2pGgvvMyTsgTeI=
Subject key identifier: 68:8C:AA:20:2F:B5:BB:91:26:F6:72:C3:E0:D2:BD:6E:A5:5C:1B:ED
Authority key identifier: 37:C6:51:73:6E:24:3D:5E:A6:CE:CC:A6:3A:FD:B4:A0:31:2D:77:30
Certificate issuer: /CN=37c651736e243d5ea6cecca63afdb4a0312d7730
Certificate serial: 0199FC58C14685A61D99CAD11AE6964D232A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/N8ZRc24kPV6mzsymOv20oDEtdzA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2b/523c7d-3917-4137-9df3-abea625868a8/1/N8ZRc24kPV6mzsymOv20oDEtdzA.mft
Manifest number: 16E3
Signing time: Sun 19 Oct 2025 12:01:39 +0000
Manifest this update: Sun 19 Oct 2025 12:01:39 +0000
Manifest next update: Mon 20 Oct 2025 12:01:39 +0000
Files and hashes: 1: N8ZRc24kPV6mzsymOv20oDEtdzA.crl (hash: TpksWU2ZVV9ytvJlYhGfH9YNDOYOjuikJa7fNViT8TE=)
2: ZRv7bLa28b8tf6OWanURzCF5xRg.roa (hash: oK8tGS8JdWtsRZmm08fTUJdRLOafRX6MArGF8Pv/FL0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2b/523c7d-3917-4137-9df3-abea625868a8/1/N8ZRc24kPV6mzsymOv20oDEtdzA.crl
rsync://rpki.ripe.net/repository/DEFAULT/2b/523c7d-3917-4137-9df3-abea625868a8/1/N8ZRc24kPV6mzsymOv20oDEtdzA.mft
rsync://rpki.ripe.net/repository/DEFAULT/N8ZRc24kPV6mzsymOv20oDEtdzA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:58:c1:46:85:a6:1d:99:ca:d1:1a:e6:96:4d:23:2a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=37c651736e243d5ea6cecca63afdb4a0312d7730
Validity
Not Before: Oct 19 12:01:39 2025 GMT
Not After : Oct 20 12:01:39 2025 GMT
Subject: CN=688caa202fb5bb9126f672c3e0d2bd6ea55c1bed
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:b2:43:ab:30:5e:fe:90:88:56:2b:58:b7:86:
81:b6:c0:e1:d2:f3:59:89:f5:9a:06:47:3c:62:b6:
f1:5f:c9:35:12:51:2e:e7:30:13:10:fa:2c:35:7e:
8b:06:b2:44:94:8a:8d:c4:b2:12:c1:4b:d7:25:c6:
6e:4d:59:55:09:92:ce:0d:61:d5:7c:12:40:79:2c:
06:ab:5c:2e:c5:70:c8:c5:51:f9:92:0b:31:7f:b2:
36:66:16:4f:27:92:e4:f9:5c:88:b9:b8:23:e8:a5:
89:63:5d:2b:c7:3e:b5:f2:bc:d5:d3:ba:72:4a:aa:
4d:f0:17:95:bc:07:54:20:87:ef:f1:4e:e0:5b:54:
90:b2:14:47:67:d5:f1:c4:23:cb:7d:e5:a8:a7:a3:
f0:d0:d8:e6:54:49:30:8a:5b:6a:e6:c5:28:c0:fe:
a7:ce:0b:5f:fc:a1:b1:90:23:69:dc:48:62:e3:e3:
46:55:1c:61:cc:bb:e0:7a:9c:bc:72:46:48:6c:bf:
41:fe:f6:00:87:f8:1e:48:d4:2d:ea:bb:32:43:bf:
b9:6e:50:1e:3f:d0:d2:ec:2a:98:31:d5:36:7a:95:
c0:6c:fc:01:18:07:62:0c:48:3b:89:27:ae:bb:c2:
6a:13:01:57:7d:55:66:49:2f:c3:f8:68:97:81:e2:
8b:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:8C:AA:20:2F:B5:BB:91:26:F6:72:C3:E0:D2:BD:6E:A5:5C:1B:ED
X509v3 Authority Key Identifier:
keyid:37:C6:51:73:6E:24:3D:5E:A6:CE:CC:A6:3A:FD:B4:A0:31:2D:77:30
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/N8ZRc24kPV6mzsymOv20oDEtdzA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/523c7d-3917-4137-9df3-abea625868a8/1/N8ZRc24kPV6mzsymOv20oDEtdzA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/523c7d-3917-4137-9df3-abea625868a8/1/N8ZRc24kPV6mzsymOv20oDEtdzA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9a:b2:18:cb:0b:0a:68:f4:1e:03:3f:8f:19:67:17:0b:d7:b1:
38:87:b7:84:af:29:61:2a:23:98:12:e7:d7:d2:b7:6b:3a:e3:
ef:e3:1f:9c:bd:e9:83:1a:42:a0:7c:2e:95:f4:9d:5f:02:27:
78:3d:38:00:d4:b4:16:79:02:6e:3a:c1:e7:24:0f:aa:8f:7c:
35:23:87:f5:d8:a3:d8:43:fb:ed:19:b9:0d:ae:ef:fc:67:4b:
c6:1d:12:96:5c:ac:42:29:32:9f:ab:0b:fe:d1:15:ad:06:57:
76:16:8e:26:3e:d5:92:aa:96:22:8f:e3:cd:7c:11:39:c0:44:
91:ac:07:8e:21:ae:00:c6:c4:ba:f2:58:a7:79:89:f8:04:df:
69:9e:46:97:a6:a7:c2:f1:94:72:d8:00:a1:c2:04:8a:b6:ba:
15:83:31:2a:09:44:80:20:db:a1:31:6d:f0:f3:1d:3f:40:c0:
8a:9b:5b:de:17:65:20:5e:ba:4a:11:47:f6:c2:ec:eb:f5:62:
42:74:25:3b:db:99:56:f7:c9:5f:35:ed:56:fe:90:aa:a9:cd:
d2:bf:14:d8:68:ef:1d:32:19:39:be:cf:47:4c:03:20:c0:8c:
dc:e4:f4:37:22:92:c2:12:9e:c0:8c:b8:40:48:df:2d:61:b2:
6a:f7:1e:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 17:39:43 2025 by rpki-client