Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/9b1928-9929-4ee8-9f35-077b29730ce6/1/N5D3H6pDya9aDc9gP9Cyp4wiSpM.mft
File: N5D3H6pDya9aDc9gP9Cyp4wiSpM.mft (raw, json)
Hash identifier: X1EDmbcr8qxkidhM3bSTTVgw+WfhTucnu5Un6rNZVYM=
Subject key identifier: 47:38:06:D8:2F:7F:F7:C2:5B:1D:4D:A6:07:BF:64:3C:1A:22:4D:74
Authority key identifier: 37:90:F7:1F:AA:43:C9:AF:5A:0D:CF:60:3F:D0:B2:A7:8C:22:4A:93
Certificate issuer: /CN=3790f71faa43c9af5a0dcf603fd0b2a78c224a93
Certificate serial: 0199FAD7E4598A9314B3B5A7CE5BC75DED4C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/N5D3H6pDya9aDc9gP9Cyp4wiSpM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/62/9b1928-9929-4ee8-9f35-077b29730ce6/1/N5D3H6pDya9aDc9gP9Cyp4wiSpM.mft
Manifest number: 0C6C
Signing time: Sun 19 Oct 2025 05:01:16 +0000
Manifest this update: Sun 19 Oct 2025 05:01:16 +0000
Manifest next update: Mon 20 Oct 2025 05:01:16 +0000
Files and hashes: 1: N5D3H6pDya9aDc9gP9Cyp4wiSpM.crl (hash: 3zC9p3G64BReM/bftp8UfQIPw1GpwxCo2feMAu4Q5RY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/62/9b1928-9929-4ee8-9f35-077b29730ce6/1/N5D3H6pDya9aDc9gP9Cyp4wiSpM.crl
rsync://rpki.ripe.net/repository/DEFAULT/62/9b1928-9929-4ee8-9f35-077b29730ce6/1/N5D3H6pDya9aDc9gP9Cyp4wiSpM.mft
rsync://rpki.ripe.net/repository/DEFAULT/N5D3H6pDya9aDc9gP9Cyp4wiSpM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 05:01:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fa:d7:e4:59:8a:93:14:b3:b5:a7:ce:5b:c7:5d:ed:4c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3790f71faa43c9af5a0dcf603fd0b2a78c224a93
Validity
Not Before: Oct 19 05:01:16 2025 GMT
Not After : Oct 20 05:01:16 2025 GMT
Subject: CN=473806d82f7ff7c25b1d4da607bf643c1a224d74
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:82:c0:49:38:cd:08:a1:86:53:f2:16:09:7f:
87:ee:51:4b:ab:ea:7f:24:6a:b5:67:5e:5e:59:3d:
03:3c:c3:ab:c8:aa:11:03:be:9c:e7:14:72:b7:89:
1b:6f:46:45:12:d4:5b:7f:dd:cc:dc:26:0b:de:4f:
99:60:f6:de:0b:d3:ff:78:3f:81:3e:f9:e6:25:72:
b2:c5:fb:20:6f:82:cc:a8:34:89:48:a8:25:7f:1f:
24:56:23:44:40:fb:22:ce:d3:6c:b2:4d:8c:f5:0f:
97:94:ba:51:f6:0b:f7:bf:11:6d:6b:a4:e7:1c:a2:
f7:94:e2:af:70:dc:51:b8:0c:dc:65:30:25:ff:68:
5d:ac:03:80:7e:53:45:70:b7:60:fe:df:a3:ac:12:
74:7e:4c:c9:5c:51:c8:19:c4:d1:a5:24:96:f0:3e:
07:4e:52:29:44:d2:4a:8b:f8:17:a4:f1:31:31:70:
28:7f:14:07:61:b9:6a:cf:ce:cb:0f:e9:9f:5a:dd:
9f:c8:58:1d:28:74:67:b2:1b:6c:30:bc:32:dd:55:
f7:ff:9f:90:5c:ba:92:f8:21:d8:76:58:95:95:09:
2a:5e:9b:a7:59:50:f5:9f:1f:73:85:de:cb:72:78:
fd:5b:86:6c:a3:ad:ec:a4:3b:56:9e:0a:99:fe:0d:
28:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:38:06:D8:2F:7F:F7:C2:5B:1D:4D:A6:07:BF:64:3C:1A:22:4D:74
X509v3 Authority Key Identifier:
keyid:37:90:F7:1F:AA:43:C9:AF:5A:0D:CF:60:3F:D0:B2:A7:8C:22:4A:93
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/N5D3H6pDya9aDc9gP9Cyp4wiSpM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/9b1928-9929-4ee8-9f35-077b29730ce6/1/N5D3H6pDya9aDc9gP9Cyp4wiSpM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/62/9b1928-9929-4ee8-9f35-077b29730ce6/1/N5D3H6pDya9aDc9gP9Cyp4wiSpM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6f:21:73:4d:75:f9:40:fa:8b:15:7f:ae:f7:a9:e2:4d:84:a6:
21:17:7f:9c:5c:29:a4:be:45:ce:81:d7:02:7d:9f:e7:35:32:
0b:fe:21:8d:5d:c0:6c:4d:d5:bd:36:3f:43:ca:49:2b:ce:be:
07:9b:75:29:ea:80:86:d6:9f:17:40:83:5a:8b:98:9b:a4:42:
c0:30:87:97:52:db:2b:15:4d:66:2b:a4:c3:0b:7a:56:93:5c:
2d:ff:ba:ed:4d:b0:4d:79:ad:18:57:b9:5e:dc:4f:67:fc:b6:
9c:43:f2:a4:8a:21:d7:d7:19:79:c1:bd:1b:08:5c:b9:85:6d:
af:35:f4:28:75:38:0e:cb:91:5b:b3:c7:da:46:4c:d8:71:e6:
93:a6:c0:01:e8:82:cc:ec:7a:6c:4f:d7:e9:4a:8a:03:e2:a0:
6e:c9:0a:9c:9a:27:87:59:43:dd:84:66:62:19:dd:09:53:6f:
a1:12:7b:49:86:45:de:0e:6d:7e:94:c5:66:f8:ef:16:5e:3d:
9b:91:eb:02:68:9b:c4:2a:24:ef:6a:95:15:85:ad:70:ed:5e:
64:38:c2:37:52:82:75:32:d3:04:4a:7b:4b:e3:a1:b3:66:de:
70:e2:cc:36:c1:8d:08:23:4c:51:d2:37:5f:ff:c4:8b:44:8b:
0f:76:35:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:21:38 2025 by rpki-client