Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3e/85a03d-87c3-4401-9a0d-ab2bafa1ae4d/1/N_S5Gj_86fl1Bac8_V5K1ONeBC0.mft
File: N_S5Gj_86fl1Bac8_V5K1ONeBC0.mft (raw, json)
Hash identifier: 2oWViItBkiSRKqwEMHCWwME9x7TwJNv3TC8nXc2JDaU=
Subject key identifier: 3E:98:02:7C:2E:F1:04:E9:C2:4D:94:C9:87:56:F3:E6:87:87:4B:29
Authority key identifier: 37:F4:B9:1A:3F:FC:E9:F9:75:05:A7:3C:FD:5E:4A:D4:E3:5E:04:2D
Certificate issuer: /CN=37f4b91a3ffce9f97505a73cfd5e4ad4e35e042d
Certificate serial: 0199FC586E613356BB69CC0F3EB6F6A7C104
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/N_S5Gj_86fl1Bac8_V5K1ONeBC0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3e/85a03d-87c3-4401-9a0d-ab2bafa1ae4d/1/N_S5Gj_86fl1Bac8_V5K1ONeBC0.mft
Manifest number: 0875
Signing time: Sun 19 Oct 2025 12:01:17 +0000
Manifest this update: Sun 19 Oct 2025 12:01:17 +0000
Manifest next update: Mon 20 Oct 2025 12:01:17 +0000
Files and hashes: 1: N_S5Gj_86fl1Bac8_V5K1ONeBC0.crl (hash: 2LN0a74yPQEfPmJMCREbN9DyHup8vzHcj02NnsidgFQ=)
2: hS4qE69cRzq1LeuTH9FbxF7EdCM.roa (hash: CNvb1FlCruFxVWACj7/lI66W2B3Fn96cjXQxKd7K6v8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3e/85a03d-87c3-4401-9a0d-ab2bafa1ae4d/1/N_S5Gj_86fl1Bac8_V5K1ONeBC0.crl
rsync://rpki.ripe.net/repository/DEFAULT/3e/85a03d-87c3-4401-9a0d-ab2bafa1ae4d/1/N_S5Gj_86fl1Bac8_V5K1ONeBC0.mft
rsync://rpki.ripe.net/repository/DEFAULT/N_S5Gj_86fl1Bac8_V5K1ONeBC0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:58:6e:61:33:56:bb:69:cc:0f:3e:b6:f6:a7:c1:04
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=37f4b91a3ffce9f97505a73cfd5e4ad4e35e042d
Validity
Not Before: Oct 19 12:01:17 2025 GMT
Not After : Oct 20 12:01:17 2025 GMT
Subject: CN=3e98027c2ef104e9c24d94c98756f3e687874b29
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:cc:83:42:46:f6:5a:6c:52:88:ca:60:49:1f:
55:3c:b9:9d:22:2b:aa:b3:75:b8:14:03:ce:90:73:
c6:64:f2:13:ba:de:64:9c:db:39:43:2b:7d:6a:7b:
fa:41:0b:cb:bb:e2:33:76:14:86:95:55:16:6b:50:
e3:23:fb:1e:e6:49:f8:4c:5f:d2:2d:3e:72:c5:91:
26:1c:9d:b6:c7:39:77:1a:de:09:88:1d:c7:90:d9:
aa:f9:82:4d:7d:61:1c:f8:74:fa:e6:18:52:2c:c0:
4d:31:e7:86:7e:c6:cb:0f:83:11:14:d7:1b:1f:03:
65:18:9e:20:32:18:02:d1:ae:b9:0a:33:e3:a1:55:
6b:66:af:37:44:ba:4c:bc:0e:44:42:c4:ae:42:9b:
2c:45:46:a4:98:2a:31:8a:b8:b7:ed:d0:0a:7d:bf:
89:44:06:29:8c:63:f1:81:64:54:09:e6:1a:8a:45:
4b:45:ff:8c:21:d0:37:18:e3:bc:bb:93:25:82:38:
ea:9a:fa:de:64:c4:da:ad:82:9d:bc:25:76:04:c3:
eb:17:51:03:44:61:e6:21:85:ec:4e:7d:71:96:b8:
3b:15:e8:8f:16:ba:5a:d0:3c:0b:73:ae:87:88:a2:
eb:70:13:f5:3d:67:7c:69:4b:2c:48:12:3f:e8:8d:
7d:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:98:02:7C:2E:F1:04:E9:C2:4D:94:C9:87:56:F3:E6:87:87:4B:29
X509v3 Authority Key Identifier:
keyid:37:F4:B9:1A:3F:FC:E9:F9:75:05:A7:3C:FD:5E:4A:D4:E3:5E:04:2D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/N_S5Gj_86fl1Bac8_V5K1ONeBC0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/85a03d-87c3-4401-9a0d-ab2bafa1ae4d/1/N_S5Gj_86fl1Bac8_V5K1ONeBC0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/85a03d-87c3-4401-9a0d-ab2bafa1ae4d/1/N_S5Gj_86fl1Bac8_V5K1ONeBC0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
99:f1:0d:48:c0:f7:eb:f0:bc:1b:cb:2c:86:19:0e:60:58:72:
e2:37:9f:e0:4b:79:d9:3f:fe:c5:69:5c:fe:29:3a:91:4c:a1:
9c:75:78:85:eb:fd:9b:d2:ef:1c:15:c1:c6:64:eb:89:c0:48:
df:ef:42:6f:bb:02:af:fc:34:23:5a:00:37:ce:27:f2:b0:82:
c8:8a:34:ea:47:6b:ab:ec:2b:44:a4:cd:03:40:ad:fa:78:b1:
83:52:32:ec:ba:97:63:7c:b5:52:69:0e:53:89:ac:85:9c:13:
87:f2:2f:ac:88:e4:17:fb:0d:6b:8a:0f:25:9e:72:40:bd:b8:
0b:d6:83:d2:a5:d6:54:19:11:89:6b:84:69:02:c7:0d:d9:de:
8b:81:18:06:98:ed:01:a1:3b:f5:4b:95:b4:87:d3:0f:3a:4a:
6f:d4:23:69:f8:d1:f3:91:3d:c5:22:fb:ee:fb:b7:9b:bc:7c:
e4:11:7c:60:68:bd:a5:ce:1a:2e:6e:fa:f9:c4:16:9a:cf:c9:
78:f7:58:87:53:d9:bd:f4:98:08:17:d4:10:3a:63:e5:1d:07:
73:7c:47:7a:be:18:61:94:e3:94:bc:15:33:55:d1:29:33:73:
40:45:b7:01:d4:58:cf:a8:b2:34:c6:8e:50:07:f6:e7:41:69:
55:6a:78:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:06:58 2025 by rpki-client