Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6e/3fc4e0-eb5f-42d3-98e1-be00a65103ad/1/N0mXVDn-T_qTECYqy91fcjzuIiM.mft
File: N0mXVDn-T_qTECYqy91fcjzuIiM.mft (raw, json)
Hash identifier: /sExvFzft78BUMZlyjmZm24mNEpRPbAKuqJYmIPPo8Q=
Subject key identifier: 2B:42:50:02:EF:21:D8:35:31:62:D0:04:99:8E:65:1B:9F:43:38:CF
Authority key identifier: 37:49:97:54:39:FE:4F:FA:93:10:26:2A:CB:DD:5F:72:3C:EE:22:23
Certificate issuer: /CN=3749975439fe4ffa9310262acbdd5f723cee2223
Certificate serial: 0199FC2191950D0E4FA4B057BCAB97456AE4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/N0mXVDn-T_qTECYqy91fcjzuIiM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6e/3fc4e0-eb5f-42d3-98e1-be00a65103ad/1/N0mXVDn-T_qTECYqy91fcjzuIiM.mft
Manifest number: 16D7
Signing time: Sun 19 Oct 2025 11:01:22 +0000
Manifest this update: Sun 19 Oct 2025 11:01:22 +0000
Manifest next update: Mon 20 Oct 2025 11:01:22 +0000
Files and hashes: 1: N0mXVDn-T_qTECYqy91fcjzuIiM.crl (hash: Q5+RwHSjTi8AloR0F0frtSOYj7+uBDYzMaMvQJMX5GA=)
2: kzwjfq1uCpgiTAUnk5qhqKOqoaU.roa (hash: MJDFWuspOJe8rc6Woxt8ScoRrsfkLnrA6WpK9920n7A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6e/3fc4e0-eb5f-42d3-98e1-be00a65103ad/1/N0mXVDn-T_qTECYqy91fcjzuIiM.crl
rsync://rpki.ripe.net/repository/DEFAULT/6e/3fc4e0-eb5f-42d3-98e1-be00a65103ad/1/N0mXVDn-T_qTECYqy91fcjzuIiM.mft
rsync://rpki.ripe.net/repository/DEFAULT/N0mXVDn-T_qTECYqy91fcjzuIiM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:01:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:21:91:95:0d:0e:4f:a4:b0:57:bc:ab:97:45:6a:e4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3749975439fe4ffa9310262acbdd5f723cee2223
Validity
Not Before: Oct 19 11:01:22 2025 GMT
Not After : Oct 20 11:01:22 2025 GMT
Subject: CN=2b425002ef21d8353162d004998e651b9f4338cf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:69:21:b0:c3:e6:71:02:32:62:3f:69:23:b8:
94:5c:e7:e4:ac:14:33:81:11:8e:0c:cb:23:bf:43:
76:c7:b4:b5:bd:78:ae:3d:a4:9c:0d:a1:c1:e8:bb:
b1:42:20:77:11:de:a8:e0:f2:a9:0d:37:d2:4e:cb:
33:88:f3:eb:bd:80:0e:77:b4:2d:32:de:57:2f:da:
7a:f9:72:6b:49:3a:ef:cb:8b:3e:33:45:8e:69:99:
ba:49:b7:ce:a6:81:b0:90:21:fc:b7:cc:55:75:06:
46:fc:04:59:77:7b:c0:2e:2c:2d:36:de:50:89:12:
f7:20:8b:4b:e7:ed:1a:44:6c:ae:7b:72:f6:26:9c:
3c:5f:fd:4e:c2:b7:07:fa:fd:6e:4b:71:8d:bf:a4:
38:75:5d:f9:5d:b6:58:99:f3:72:57:75:bf:24:3b:
e6:ec:a4:39:fe:45:20:e4:42:98:09:6b:42:23:fb:
4d:6b:c6:93:b3:a2:42:48:07:8a:d2:a9:df:08:c3:
e3:0c:e1:14:9e:0c:b0:10:24:66:94:90:3a:8d:25:
a2:0a:3f:a2:72:45:c7:3f:1d:2b:14:e1:82:38:9c:
b8:c9:b1:cf:dc:65:2a:93:ae:ef:54:89:2c:5f:12:
49:cc:ef:79:05:b8:2a:a4:d2:bb:e9:65:52:69:42:
05:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:42:50:02:EF:21:D8:35:31:62:D0:04:99:8E:65:1B:9F:43:38:CF
X509v3 Authority Key Identifier:
keyid:37:49:97:54:39:FE:4F:FA:93:10:26:2A:CB:DD:5F:72:3C:EE:22:23
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/N0mXVDn-T_qTECYqy91fcjzuIiM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/3fc4e0-eb5f-42d3-98e1-be00a65103ad/1/N0mXVDn-T_qTECYqy91fcjzuIiM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/3fc4e0-eb5f-42d3-98e1-be00a65103ad/1/N0mXVDn-T_qTECYqy91fcjzuIiM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
69:96:8d:aa:ab:c0:1d:21:1b:25:66:af:20:b7:8e:14:e0:d3:
7d:e9:ef:93:34:8d:d7:69:e0:25:97:c7:9d:3f:59:34:c5:ef:
60:47:74:01:f0:01:36:c3:47:49:74:87:08:42:99:b5:b1:50:
7c:f5:10:42:74:60:e8:89:18:a0:43:0d:10:34:c3:f1:ca:a4:
02:12:af:13:b8:40:51:82:d1:d4:63:fc:24:71:f3:b7:a5:84:
54:c3:95:4f:b9:83:00:48:34:ea:bf:a6:cd:63:9d:23:d2:4c:
42:96:19:b3:f9:c7:c0:d7:4b:9d:a8:0a:a1:6c:91:f2:38:7d:
05:86:2b:ed:06:92:4a:73:75:9d:48:b6:d7:4f:22:53:7f:89:
dd:2c:3f:30:57:f3:40:8f:48:de:29:1c:e1:77:2e:b9:12:84:
34:fb:bd:96:92:c8:65:61:1a:dd:e9:ea:c3:7e:65:4c:db:b5:
eb:5a:bf:3d:dc:44:bc:61:b8:db:6a:dd:a3:f4:8a:f1:28:b2:
fd:69:77:7d:5e:61:08:be:61:25:55:0c:bd:13:b4:4a:a0:27:
31:32:d1:4c:d2:ce:48:e7:b3:6f:d5:74:be:a7:d0:83:eb:ce:
bb:05:71:aa:21:6d:43:d4:0d:ac:ca:25:db:08:e0:7a:e9:08:
58:a7:47:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 17:32:04 2025 by rpki-client