Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2e/742299-f343-4321-b351-b53b64cf0d95/1/N_sATjl93wTn0F82Q6A28hg2_xA.mft
File: N_sATjl93wTn0F82Q6A28hg2_xA.mft (raw, json)
Hash identifier: CNsNqrjT3riTknGjAZjasZ7bhWmq9lcZHmzyv+cX7WM=
Subject key identifier: 89:44:6A:EB:34:29:C0:9C:3B:EF:25:C4:B6:8D:BE:3A:65:6D:0C:DF
Authority key identifier: 37:FB:00:4E:39:7D:DF:04:E7:D0:5F:36:43:A0:36:F2:18:36:FF:10
Certificate issuer: /CN=37fb004e397ddf04e7d05f3643a036f21836ff10
Certificate serial: 0199FF59BF9D2EB2A6D846C2F76B7F5DA4D0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/N_sATjl93wTn0F82Q6A28hg2_xA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2e/742299-f343-4321-b351-b53b64cf0d95/1/N_sATjl93wTn0F82Q6A28hg2_xA.mft
Manifest number: 16EA
Signing time: Mon 20 Oct 2025 02:01:35 +0000
Manifest this update: Mon 20 Oct 2025 02:01:35 +0000
Manifest next update: Tue 21 Oct 2025 02:01:35 +0000
Files and hashes: 1: 3-Pz_ACqotf_1pTiM38rfDDW65c.roa (hash: +6mxaP3CNTwVlIYMhWG+20r4HZR/llgs3lm8STPmGs0=)
2: 9kX4GrtqMRWRvdlXwe-ZIc9Ou2o.roa (hash: 6kYLXGHct4tBz4Kt7RTp0Yq24Dr5ZTh8EftVQx18Anw=)
3: N_sATjl93wTn0F82Q6A28hg2_xA.crl (hash: +1QixjnCbPU/rrpOPMuqpVVvQsveOWBxSOCjzeSRfSA=)
4: PuYFjQeAMPYTJknY4a9xdl9WjmI.roa (hash: E2/hGT1MU9NO8befK4BGLovPtwxuEyai1B8Xt8zA7+A=)
5: QRbrmHMbnacFIghz2vQJ1iEwIPo.roa (hash: gpC7d4/OhCyOZcpUbHREfEufrTPs9FXkeTxWhp4MXlw=)
6: avUi3YjwZnz0yzUPnJu4Y8PDkW0.roa (hash: mWS6jEEzpU5C/mf65CgMVs1ygfIg+nXboKeBb7STrRk=)
7: nTWU5WV73x998fb6pecneWzKHj0.roa (hash: m9Al1FOb5Ruq1WL/BIhpl9I/8AOLD6hHB+5Qi5PqY4A=)
8: tQddqDtQw7NBgLftZFCqhwc_WuA.roa (hash: HvmNQRN7FhEkknx+nTyVHNveazbku60W7ld+fe7MosQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2e/742299-f343-4321-b351-b53b64cf0d95/1/N_sATjl93wTn0F82Q6A28hg2_xA.crl
rsync://rpki.ripe.net/repository/DEFAULT/2e/742299-f343-4321-b351-b53b64cf0d95/1/N_sATjl93wTn0F82Q6A28hg2_xA.mft
rsync://rpki.ripe.net/repository/DEFAULT/N_sATjl93wTn0F82Q6A28hg2_xA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 00:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:ff:59:bf:9d:2e:b2:a6:d8:46:c2:f7:6b:7f:5d:a4:d0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=37fb004e397ddf04e7d05f3643a036f21836ff10
Validity
Not Before: Oct 20 02:01:35 2025 GMT
Not After : Oct 21 02:01:35 2025 GMT
Subject: CN=89446aeb3429c09c3bef25c4b68dbe3a656d0cdf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:f7:68:9b:3d:c7:8d:83:a3:f8:ea:4d:e8:d0:
ab:d7:fc:93:63:1f:a2:68:bd:ad:7a:2a:90:2b:0c:
6a:bd:35:1a:c1:b0:fa:ff:50:8c:f0:55:27:d9:42:
8b:35:6a:ea:ec:20:16:98:9a:03:02:92:2a:ba:78:
85:bf:da:7f:d7:9a:35:35:7d:cf:3c:86:52:f3:4d:
e9:0a:95:f9:86:49:30:c5:58:61:20:8a:bd:ba:08:
42:ef:48:2b:ee:b2:4a:65:cf:e8:fb:92:f5:28:61:
80:3e:aa:06:c3:c7:7d:17:9d:9b:6c:11:1b:9e:bb:
5f:42:31:ec:58:dc:f4:73:66:2f:30:1c:d0:43:42:
08:6b:83:b2:5d:2c:d9:17:aa:ab:2e:4c:55:c0:15:
b9:8b:17:a5:2f:e5:a8:68:9f:63:54:60:9b:4d:19:
32:55:1c:b2:99:6f:87:1c:2c:ca:5f:0d:ea:aa:dd:
30:4b:c3:2b:04:3e:9b:b8:be:d2:93:ce:af:bf:6e:
b1:5c:ae:e8:d5:6c:48:71:51:8c:08:4f:a3:50:c4:
97:ab:c9:08:3c:c4:b2:d0:ed:1b:7a:cd:2d:37:4d:
c0:ef:9c:67:ff:71:dc:3b:23:0d:0e:25:66:97:4f:
ef:f6:65:49:52:1d:0f:aa:6b:83:1a:13:be:b7:7c:
32:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:44:6A:EB:34:29:C0:9C:3B:EF:25:C4:B6:8D:BE:3A:65:6D:0C:DF
X509v3 Authority Key Identifier:
keyid:37:FB:00:4E:39:7D:DF:04:E7:D0:5F:36:43:A0:36:F2:18:36:FF:10
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/N_sATjl93wTn0F82Q6A28hg2_xA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/742299-f343-4321-b351-b53b64cf0d95/1/N_sATjl93wTn0F82Q6A28hg2_xA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/742299-f343-4321-b351-b53b64cf0d95/1/N_sATjl93wTn0F82Q6A28hg2_xA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4e:da:d0:ce:2d:69:46:65:2e:06:14:fe:ca:d5:31:42:aa:38:
f9:74:c9:1f:62:65:24:ad:1a:54:93:ad:f5:f2:3f:54:17:ec:
22:21:79:6b:c1:81:76:9f:63:95:eb:ab:c2:a7:fc:10:17:ae:
ba:db:3b:c2:e4:11:10:03:bc:54:a2:bc:79:a1:5d:02:10:85:
84:59:58:60:70:d4:b3:19:4c:bd:64:4e:5a:fe:b4:ee:b1:ae:
68:aa:e0:6a:34:e1:07:09:4f:1c:34:cc:9e:7f:7b:92:13:59:
76:b7:9d:cd:08:bc:8a:70:e9:4f:9a:f4:ee:3a:2c:22:78:c4:
4a:20:8d:5a:54:5a:e9:b6:e7:89:38:c0:52:32:8c:9a:0c:bf:
8c:d0:39:34:ef:2a:35:39:22:49:65:a6:95:47:fe:52:41:ec:
81:bb:ea:7b:91:28:fd:46:be:0b:80:79:d5:fc:9b:24:24:a6:
6e:8a:b0:96:12:fd:ba:89:d6:dd:64:54:69:a6:b5:85:a8:1b:
90:08:f5:da:4d:50:36:53:08:dd:b1:41:cd:bc:39:48:ed:81:
04:50:14:00:92:20:2a:b1:d4:0e:31:b4:60:07:51:2a:69:0b:
c6:5d:d9:83:64:32:46:c6:c9:c2:f5:bb:4c:a5:5a:a1:da:33:
d6:ba:a8:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 10:36:10 2025 by rpki-client