Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6f/399d34-e4d0-4b80-8ecd-b7892f76e8c5/1/N28vTtsjIwxkt5O0GVfvSjI-PFM.mft
File: N28vTtsjIwxkt5O0GVfvSjI-PFM.mft (raw, json)
Hash identifier: 1wh7qf8rTBb4GZBIAXHrn08cUWCqizJ8tstMsFgCSOY=
Subject key identifier: 0F:9E:F5:54:8D:9F:96:5D:0E:58:D8:F6:C8:A5:24:80:49:D9:E9:D2
Authority key identifier: 37:6F:2F:4E:DB:23:23:0C:64:B7:93:B4:19:57:EF:4A:32:3E:3C:53
Certificate issuer: /CN=376f2f4edb23230c64b793b41957ef4a323e3c53
Certificate serial: 0199FD3469EF8007D0A8826F15D317AF44FB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/N28vTtsjIwxkt5O0GVfvSjI-PFM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6f/399d34-e4d0-4b80-8ecd-b7892f76e8c5/1/N28vTtsjIwxkt5O0GVfvSjI-PFM.mft
Manifest number: 118E
Signing time: Sun 19 Oct 2025 16:01:34 +0000
Manifest this update: Sun 19 Oct 2025 16:01:34 +0000
Manifest next update: Mon 20 Oct 2025 16:01:34 +0000
Files and hashes: 1: N28vTtsjIwxkt5O0GVfvSjI-PFM.crl (hash: tGGM79PK1IyBGAn45sxt52/fNYCV/LQ9iBV3xyAzl3Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6f/399d34-e4d0-4b80-8ecd-b7892f76e8c5/1/N28vTtsjIwxkt5O0GVfvSjI-PFM.crl
rsync://rpki.ripe.net/repository/DEFAULT/6f/399d34-e4d0-4b80-8ecd-b7892f76e8c5/1/N28vTtsjIwxkt5O0GVfvSjI-PFM.mft
rsync://rpki.ripe.net/repository/DEFAULT/N28vTtsjIwxkt5O0GVfvSjI-PFM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fd:34:69:ef:80:07:d0:a8:82:6f:15:d3:17:af:44:fb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=376f2f4edb23230c64b793b41957ef4a323e3c53
Validity
Not Before: Oct 19 16:01:34 2025 GMT
Not After : Oct 20 16:01:34 2025 GMT
Subject: CN=0f9ef5548d9f965d0e58d8f6c8a5248049d9e9d2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:75:08:66:f3:8c:fe:8f:26:b4:b7:c2:28:c2:
62:da:8a:85:77:b1:07:d3:83:89:02:bf:16:18:b1:
48:18:1b:4a:09:93:b1:3e:3f:58:68:68:67:81:5a:
fe:69:da:ec:9e:b5:db:00:a5:5b:0c:d0:db:28:57:
8d:8a:3c:55:a3:bb:84:e9:0f:3e:22:5e:d6:83:4d:
5c:82:14:11:76:01:07:57:c3:04:f8:a8:cb:54:96:
5d:9e:1b:0e:0c:25:7c:17:7e:f8:ce:dc:79:66:af:
0f:62:43:e7:e2:13:4e:4e:0d:56:2a:17:a0:05:8f:
e5:9c:b6:e1:a8:ef:8e:e8:eb:4b:3a:90:d0:70:19:
c8:c1:ac:84:1e:f4:a5:ef:2f:49:85:12:a1:3c:d7:
5d:b3:75:17:e8:73:b2:e4:d9:cd:d5:8d:ed:c9:09:
e7:fe:ed:53:ad:30:4f:b6:be:d1:e8:94:76:5a:9f:
f8:bc:95:83:5a:87:9e:0a:b1:ff:55:a8:76:60:9c:
e7:3b:5e:05:1a:15:09:6c:8b:68:13:8f:bb:6a:01:
7b:20:05:1d:8f:72:a8:77:b9:b1:dc:a3:00:a4:a7:
33:b7:2c:68:59:88:a7:2c:1a:ae:59:f6:95:3c:44:
ed:6f:13:90:d8:52:2a:55:58:a2:39:3c:0f:9b:01:
1e:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:9E:F5:54:8D:9F:96:5D:0E:58:D8:F6:C8:A5:24:80:49:D9:E9:D2
X509v3 Authority Key Identifier:
keyid:37:6F:2F:4E:DB:23:23:0C:64:B7:93:B4:19:57:EF:4A:32:3E:3C:53
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/N28vTtsjIwxkt5O0GVfvSjI-PFM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/399d34-e4d0-4b80-8ecd-b7892f76e8c5/1/N28vTtsjIwxkt5O0GVfvSjI-PFM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/399d34-e4d0-4b80-8ecd-b7892f76e8c5/1/N28vTtsjIwxkt5O0GVfvSjI-PFM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
01:10:cf:e4:a6:af:c7:00:9b:fd:51:16:36:7c:e8:ee:27:d4:
c5:ad:f8:ee:99:be:99:25:45:e9:ed:6b:bb:68:5e:69:45:f8:
a6:4f:d8:06:ef:aa:26:59:c6:44:ea:20:62:2d:09:73:64:c4:
4b:4b:b7:3f:14:00:90:50:ae:cd:f4:0c:a1:50:d5:49:2a:af:
5b:d4:96:22:73:9e:f5:46:1f:25:a5:c6:2f:8f:85:50:da:1a:
86:eb:48:e0:f8:8c:a8:e2:45:85:3d:97:bf:e1:ae:48:ca:a9:
49:22:e9:b6:a2:6e:a0:15:ff:01:0c:01:b2:1b:1a:67:2d:2f:
b6:71:52:13:60:a7:34:17:ec:60:64:65:f2:1c:59:ee:3b:20:
ae:fd:32:ab:b2:bf:96:5d:d7:fb:b1:1b:f9:d6:3f:ef:64:9b:
97:29:b8:5a:c3:7f:a8:d3:d0:c0:66:02:0f:e5:9c:82:8c:5d:
32:c6:4a:51:45:0d:bf:b9:c9:cb:37:5c:79:98:6e:ff:d2:d4:
a1:93:c7:76:27:9b:c5:90:9d:a5:1a:3f:44:eb:91:a6:31:e0:
75:41:75:92:c6:54:ce:7a:12:0a:25:32:34:35:cc:68:24:d2:
cf:57:2f:de:70:b2:4a:ff:44:68:84:ad:bf:0f:6a:b6:8e:79:
5e:da:26:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 18:37:52 2025 by rpki-client