Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/ef9498-44f4-4ffd-844f-5c830fe4bad0/1/N8pQAigo2QG_QrJ5j3hEEEsFQE0.mft
File: N8pQAigo2QG_QrJ5j3hEEEsFQE0.mft (raw, json)
Hash identifier: KrUVjR70061Nh27164R9qa6jOvIkKUG7dHJaGo/s078=
Subject key identifier: D7:9B:1E:64:47:16:C3:77:F0:75:D7:CC:3F:D2:C4:0D:5A:04:A8:F1
Authority key identifier: 37:CA:50:02:28:28:D9:01:BF:42:B2:79:8F:78:44:10:4B:05:40:4D
Certificate issuer: /CN=37ca50022828d901bf42b2798f7844104b05404d
Certificate serial: 0199FE46993AE6C5A43C1F5F0D47E1C3450F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/N8pQAigo2QG_QrJ5j3hEEEsFQE0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/ef9498-44f4-4ffd-844f-5c830fe4bad0/1/N8pQAigo2QG_QrJ5j3hEEEsFQE0.mft
Manifest number: 0AF8
Signing time: Sun 19 Oct 2025 21:01:03 +0000
Manifest this update: Sun 19 Oct 2025 21:01:03 +0000
Manifest next update: Mon 20 Oct 2025 21:01:03 +0000
Files and hashes: 1: N8pQAigo2QG_QrJ5j3hEEEsFQE0.crl (hash: xIheZu8p3+021+5liCtgYY6EEcNLeIbu0NjmN0J5tWk=)
2: o5v0Cm5PNAVArL3iEJHw_CFIknA.roa (hash: Sf1IrFfhAHUJ08yJsTL6eR491AGzhJcL2ToeOR5gShQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/65/ef9498-44f4-4ffd-844f-5c830fe4bad0/1/N8pQAigo2QG_QrJ5j3hEEEsFQE0.crl
rsync://rpki.ripe.net/repository/DEFAULT/65/ef9498-44f4-4ffd-844f-5c830fe4bad0/1/N8pQAigo2QG_QrJ5j3hEEEsFQE0.mft
rsync://rpki.ripe.net/repository/DEFAULT/N8pQAigo2QG_QrJ5j3hEEEsFQE0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 20:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fe:46:99:3a:e6:c5:a4:3c:1f:5f:0d:47:e1:c3:45:0f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=37ca50022828d901bf42b2798f7844104b05404d
Validity
Not Before: Oct 19 21:01:03 2025 GMT
Not After : Oct 20 21:01:03 2025 GMT
Subject: CN=d79b1e644716c377f075d7cc3fd2c40d5a04a8f1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:26:29:5c:b8:4a:7f:08:fc:d1:e4:0e:02:92:
f6:bf:09:7f:49:62:a5:b2:fc:64:02:16:b5:f8:9d:
1c:78:49:3c:59:a5:57:21:94:2b:11:48:be:d4:75:
44:2a:ef:4a:0d:2f:8a:bf:fd:28:db:42:23:85:2b:
98:20:31:ab:1f:40:c3:b2:57:b5:c2:4b:2d:d9:f3:
20:24:56:85:d5:bb:49:5a:7e:71:14:a3:8c:6b:0f:
a4:97:0b:d3:bd:1f:47:67:98:9f:22:32:6a:3c:07:
a3:95:04:48:58:fd:5a:01:25:44:d0:23:52:03:87:
28:18:96:5e:d4:67:10:9f:86:2d:07:7c:9b:59:65:
77:c9:47:1d:10:6c:b7:20:93:1b:34:8c:20:a7:28:
0d:0e:80:88:b2:03:81:d4:86:7e:37:ea:00:cf:cd:
74:f1:bd:e8:25:ee:17:b0:fe:72:25:19:7e:c1:c5:
85:12:93:65:00:ca:f3:f2:37:ca:0a:3a:da:83:46:
e6:59:00:7a:f5:84:00:b8:80:19:9f:48:e4:06:2c:
7a:00:11:d5:5b:0d:f0:be:8d:70:95:7c:8c:cc:41:
33:17:47:0a:6d:0d:19:01:ff:11:74:f5:58:32:3e:
60:4c:6f:55:cd:37:39:9b:8e:95:97:cd:ed:df:4e:
28:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:9B:1E:64:47:16:C3:77:F0:75:D7:CC:3F:D2:C4:0D:5A:04:A8:F1
X509v3 Authority Key Identifier:
keyid:37:CA:50:02:28:28:D9:01:BF:42:B2:79:8F:78:44:10:4B:05:40:4D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/N8pQAigo2QG_QrJ5j3hEEEsFQE0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/ef9498-44f4-4ffd-844f-5c830fe4bad0/1/N8pQAigo2QG_QrJ5j3hEEEsFQE0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/65/ef9498-44f4-4ffd-844f-5c830fe4bad0/1/N8pQAigo2QG_QrJ5j3hEEEsFQE0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
d8:06:37:bb:77:09:d2:ca:e7:ca:c9:6e:26:f7:fb:db:0f:07:
31:8a:c2:c8:87:ca:7b:c5:23:c5:ed:d6:8d:c6:18:52:6b:7b:
20:b4:ff:41:09:cf:33:a5:df:be:45:9a:8a:6f:b0:85:8f:29:
6a:9a:c6:9a:ab:db:e5:f2:bd:42:60:2d:50:36:0e:af:1d:b2:
5a:ef:da:cf:ff:64:66:84:99:94:74:f8:31:d8:a0:36:3e:dd:
6b:e8:43:f8:7a:7d:1d:a4:64:c8:27:29:1c:b6:d4:e7:02:22:
d9:76:12:a8:18:18:2e:2a:af:b3:8a:ce:18:47:7b:f4:fe:94:
37:08:28:ef:71:23:1e:72:ae:47:75:4e:1d:d6:a0:47:11:a6:
11:b6:79:6f:0c:1b:59:28:a6:8e:60:a1:31:d8:f2:f6:19:4a:
28:b7:8e:fd:5a:f3:ba:e7:c5:29:fe:0d:86:6d:fb:e8:fb:c2:
32:ac:f9:ee:f4:ea:77:84:bf:3d:57:6b:77:47:42:7f:dd:a5:
1e:ab:1b:51:47:b1:9e:f1:cb:67:93:b0:59:b0:90:e0:0d:44:
bf:aa:4e:4f:48:b1:4b:82:63:45:68:c9:ef:1e:fd:b7:c7:25:
85:6a:b3:87:a6:1f:62:77:b8:ed:3d:f7:e6:01:22:16:ad:77:
e7:25:66:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 04:47:33 2025 by rpki-client