Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/6b0344-8229-4d25-b498-8ce7c4fc5e0b/1/N-dRoRwaeIj6WNv8MsiVm8lGMD4.mft
File: N-dRoRwaeIj6WNv8MsiVm8lGMD4.mft (raw, json)
Hash identifier: kXZ8GkV3EcSPaih5RUyC2K5OHDgy5tPH09eikgzPgdo=
Subject key identifier: 1A:06:36:7A:98:5A:5D:A5:F4:2B:AE:64:AC:F1:9B:95:F7:F0:9D:BD
Authority key identifier: 37:E7:51:A1:1C:1A:78:88:FA:58:DB:FC:32:C8:95:9B:C9:46:30:3E
Certificate issuer: /CN=37e751a11c1a7888fa58dbfc32c8959bc946303e
Certificate serial: 019A0035351CB9E87275C4D0DC2A5276A1CE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/N-dRoRwaeIj6WNv8MsiVm8lGMD4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/6b0344-8229-4d25-b498-8ce7c4fc5e0b/1/N-dRoRwaeIj6WNv8MsiVm8lGMD4.mft
Manifest number: 1430
Signing time: Mon 20 Oct 2025 06:01:18 +0000
Manifest this update: Mon 20 Oct 2025 06:01:18 +0000
Manifest next update: Tue 21 Oct 2025 06:01:18 +0000
Files and hashes: 1: 1iavcJFqwR6rzZKxM06ahcbF1Us.roa (hash: AJ47Zqj/T7JKUetOVwikynuHEcJu1eg9YDS731mpe6I=)
2: N-dRoRwaeIj6WNv8MsiVm8lGMD4.crl (hash: nQHFwI4I42GM3Y8J0PCqUgK3yrJieN28CYKvj3MDjGY=)
3: dqEoxI3WEV2rOPAYE8C4EEj1ebI.roa (hash: nVo4yJxw9EhxkUipVljpw16vPXrVAlAiSw+4KWPaovY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/45/6b0344-8229-4d25-b498-8ce7c4fc5e0b/1/N-dRoRwaeIj6WNv8MsiVm8lGMD4.crl
rsync://rpki.ripe.net/repository/DEFAULT/45/6b0344-8229-4d25-b498-8ce7c4fc5e0b/1/N-dRoRwaeIj6WNv8MsiVm8lGMD4.mft
rsync://rpki.ripe.net/repository/DEFAULT/N-dRoRwaeIj6WNv8MsiVm8lGMD4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 00:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:00:35:35:1c:b9:e8:72:75:c4:d0:dc:2a:52:76:a1:ce
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=37e751a11c1a7888fa58dbfc32c8959bc946303e
Validity
Not Before: Oct 20 06:01:18 2025 GMT
Not After : Oct 21 06:01:18 2025 GMT
Subject: CN=1a06367a985a5da5f42bae64acf19b95f7f09dbd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:5d:31:46:bc:d1:0d:ea:d7:82:79:f6:0a:b4:
e4:8a:c5:57:9f:fc:0a:ed:46:5f:76:15:96:4f:b6:
38:5e:27:1a:76:b8:94:11:b2:05:52:28:a8:ee:53:
d8:18:56:bf:b2:59:63:8b:9a:31:9b:bf:88:f5:bd:
32:3a:54:fd:65:12:4b:69:8c:8a:20:d7:7f:0e:fa:
c4:b1:c8:8d:e2:59:bd:5b:d1:2a:1b:67:89:86:40:
dc:3a:b7:83:3f:56:b9:27:2e:fb:f9:9f:b5:c2:a1:
34:08:b5:b2:01:5c:dc:14:ba:a9:2f:8f:b8:f7:c7:
08:8e:6f:9f:69:d8:80:be:11:09:fb:bd:e7:b2:3e:
f4:e0:9d:77:fd:35:2c:97:dd:03:c6:3f:79:b3:c0:
4c:a7:fd:4d:45:ea:fb:95:2b:eb:68:87:7e:b9:9d:
3d:62:25:14:39:32:3d:c5:b1:72:cf:15:d3:d9:17:
c0:97:69:cb:58:6f:53:ef:11:04:0a:7c:45:67:fe:
73:ac:fa:3f:16:0f:21:86:ed:b6:b9:2b:74:1f:d3:
bc:cd:53:a5:c6:de:5b:fb:69:be:50:5a:47:91:37:
4d:8e:05:11:f5:21:db:5d:7a:63:b4:97:03:57:8a:
e7:8c:29:db:14:8f:a5:9e:32:90:0d:e5:80:a9:18:
a9:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:06:36:7A:98:5A:5D:A5:F4:2B:AE:64:AC:F1:9B:95:F7:F0:9D:BD
X509v3 Authority Key Identifier:
keyid:37:E7:51:A1:1C:1A:78:88:FA:58:DB:FC:32:C8:95:9B:C9:46:30:3E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/N-dRoRwaeIj6WNv8MsiVm8lGMD4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/6b0344-8229-4d25-b498-8ce7c4fc5e0b/1/N-dRoRwaeIj6WNv8MsiVm8lGMD4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/45/6b0344-8229-4d25-b498-8ce7c4fc5e0b/1/N-dRoRwaeIj6WNv8MsiVm8lGMD4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5b:29:aa:82:2c:a4:35:0f:c3:6b:2e:20:77:27:88:a8:22:d6:
69:1a:05:62:14:6c:04:23:a7:77:03:7e:b7:5c:20:d8:ec:7f:
be:67:24:3f:49:dc:f9:ff:22:56:f9:6e:5e:c5:cf:cd:9e:49:
51:17:6e:ad:f7:35:ec:11:67:f1:22:08:26:60:d2:e8:b3:ca:
c4:1d:69:ec:2e:15:21:91:62:f5:b9:78:11:42:9c:8b:9b:6e:
e3:fa:ce:ed:e2:16:21:64:fa:3a:d8:26:7d:20:cc:cd:25:4b:
f9:a0:81:f6:99:4d:69:3b:22:f4:e6:1c:9d:a6:6f:a1:46:a4:
8e:9f:6f:7d:df:f6:f5:5b:ed:5d:d6:3f:6f:eb:24:f4:29:9c:
62:d1:fd:40:3b:da:54:cf:f2:31:7e:a3:fe:1f:86:cd:bd:d2:
3d:ce:02:1e:9d:7c:28:5a:2c:00:e7:15:00:bb:c1:60:4b:2d:
be:ba:64:c7:a8:4a:63:66:a8:c6:d8:25:22:ca:f4:41:28:27:
db:b5:81:a9:2e:da:d0:0b:5f:b0:50:af:a5:ae:75:93:b1:03:
d4:67:70:ad:ef:d8:fe:b6:e8:04:42:58:be:03:93:be:e1:69:
4a:50:d1:57:1a:7e:6d:c6:ab:9d:d7:cf:0e:f5:04:7f:6b:38:
5f:c6:0c:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 08:46:01 2025 by rpki-client