Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/0abb8a-9798-4bf8-bae1-c1c05cdb7841/1/N5fgOfAlolqm6ZI5HZJCYGmbpns.mft
File: N5fgOfAlolqm6ZI5HZJCYGmbpns.mft (raw, json)
Hash identifier: 6Vgabj3hNQJOupS1I37MFK2dGhNK5dyvzBjEt89jpWY=
Subject key identifier: 1A:B5:C5:29:16:0C:92:5B:4D:5E:FA:EF:A9:CC:6E:34:39:8A:99:45
Authority key identifier: 37:97:E0:39:F0:25:A2:5A:A6:E9:92:39:1D:92:42:60:69:9B:A6:7B
Certificate issuer: /CN=3797e039f025a25aa6e992391d924260699ba67b
Certificate serial: 0199FD34213ED2E250FCDFB6E0A0260580EA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/N5fgOfAlolqm6ZI5HZJCYGmbpns.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/61/0abb8a-9798-4bf8-bae1-c1c05cdb7841/1/N5fgOfAlolqm6ZI5HZJCYGmbpns.mft
Manifest number: 105D
Signing time: Sun 19 Oct 2025 16:01:15 +0000
Manifest this update: Sun 19 Oct 2025 16:01:15 +0000
Manifest next update: Mon 20 Oct 2025 16:01:15 +0000
Files and hashes: 1: N5fgOfAlolqm6ZI5HZJCYGmbpns.crl (hash: pQx3GlgqMXkWyG1gILog5xdol7i0qvMMyk+g+ixl4I8=)
2: sVzqlUVXrHqVsVw4yhzSu1oYIjM.roa (hash: HaD8do3X9duYtx96VIyzNjLwjQlO2MrTlBSjfqbB5ec=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/61/0abb8a-9798-4bf8-bae1-c1c05cdb7841/1/N5fgOfAlolqm6ZI5HZJCYGmbpns.crl
rsync://rpki.ripe.net/repository/DEFAULT/61/0abb8a-9798-4bf8-bae1-c1c05cdb7841/1/N5fgOfAlolqm6ZI5HZJCYGmbpns.mft
rsync://rpki.ripe.net/repository/DEFAULT/N5fgOfAlolqm6ZI5HZJCYGmbpns.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fd:34:21:3e:d2:e2:50:fc:df:b6:e0:a0:26:05:80:ea
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3797e039f025a25aa6e992391d924260699ba67b
Validity
Not Before: Oct 19 16:01:15 2025 GMT
Not After : Oct 20 16:01:15 2025 GMT
Subject: CN=1ab5c529160c925b4d5efaefa9cc6e34398a9945
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:9d:83:9a:bd:bf:c1:3d:4f:1b:2f:7e:76:04:
ba:cf:af:75:e2:ff:75:01:23:e8:ac:22:1f:39:18:
78:52:4c:7f:65:ab:aa:28:75:1f:83:aa:d7:dd:84:
ae:aa:38:9b:bf:c7:36:ec:7c:03:cf:01:3c:70:a9:
ea:06:c9:53:43:27:13:16:49:74:d7:5c:f4:ed:0b:
6b:15:8c:dd:82:8b:95:61:6f:e1:d9:f4:8b:72:fb:
6a:75:42:53:36:21:4d:c0:3c:2c:90:0c:94:f6:57:
f7:50:ca:96:13:3d:96:f1:31:28:15:6c:54:e1:06:
2f:43:85:88:0b:65:01:08:fd:03:0f:22:c0:c0:15:
03:48:ad:78:a7:be:08:2f:3f:ea:65:7c:e3:f6:39:
17:4b:07:88:f2:3d:ef:90:80:af:71:9d:ac:7f:46:
7c:34:a5:c9:4d:df:b0:73:20:0b:f8:bb:10:b6:1f:
79:fc:87:70:2f:a7:dc:7d:23:89:ad:ec:97:16:e7:
78:74:9f:71:75:54:b1:3f:7c:6f:b4:93:ca:28:49:
ff:0f:e3:f4:0c:37:8b:21:01:f5:be:fc:9c:90:69:
d4:86:b0:a8:c2:ea:66:40:28:07:10:f7:eb:46:2e:
0f:6a:8c:d3:ff:bd:80:a5:1c:66:73:f6:5f:9b:d4:
b6:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:B5:C5:29:16:0C:92:5B:4D:5E:FA:EF:A9:CC:6E:34:39:8A:99:45
X509v3 Authority Key Identifier:
keyid:37:97:E0:39:F0:25:A2:5A:A6:E9:92:39:1D:92:42:60:69:9B:A6:7B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/N5fgOfAlolqm6ZI5HZJCYGmbpns.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/0abb8a-9798-4bf8-bae1-c1c05cdb7841/1/N5fgOfAlolqm6ZI5HZJCYGmbpns.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/61/0abb8a-9798-4bf8-bae1-c1c05cdb7841/1/N5fgOfAlolqm6ZI5HZJCYGmbpns.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
15:cb:b4:43:22:ec:19:2b:89:d1:f1:6b:32:34:c2:55:52:ca:
7a:35:15:c9:46:1d:de:4e:84:e5:1e:02:6f:1c:37:00:f4:9a:
46:21:72:61:9d:c3:6e:1a:f0:91:20:8c:10:02:1e:c6:17:05:
a5:14:2e:b5:8d:9e:af:3b:17:e5:2e:db:f5:7e:0f:13:10:6d:
a5:01:46:01:d8:b8:7f:b7:dd:6c:fe:35:ca:bf:d1:9f:82:9b:
ca:12:89:f9:ed:2b:2b:47:a0:d2:d7:6a:ca:48:15:10:2a:09:
ca:e6:57:10:a3:3c:c5:66:b5:a4:35:bf:e2:00:af:8d:2a:d6:
8a:9e:3f:c0:b6:c9:81:3e:f0:43:da:89:a8:13:18:5c:87:e0:
f7:2e:dc:b8:33:91:02:51:d1:83:5b:f9:61:e5:47:2e:ab:7a:
87:f5:06:52:73:ce:64:aa:78:07:ce:44:d1:79:a0:73:ed:11:
14:8b:40:22:53:be:fc:a5:e9:b1:71:ca:e8:dd:04:57:b4:12:
90:77:74:db:62:71:40:6b:5e:d1:77:cc:d4:27:5e:6f:f6:c4:
30:11:a8:42:a0:9a:4a:fc:32:c7:3f:0c:0b:33:0f:49:99:6a:
d8:ad:33:1f:ae:ce:2e:67:c6:44:ef:c1:9a:ab:ec:b0:59:29:
12:e8:ea:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 20:45:12 2025 by rpki-client