Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7c/8a5ee7-b638-4b70-8a8e-f97745d13b8d/1/N1x0Iln_kAhX0TaJ2NSNsg7fRgM.mft
File: N1x0Iln_kAhX0TaJ2NSNsg7fRgM.mft (raw, json)
Hash identifier: 2vtaKbISrXdDP/d34e0lOazlhCoyJ7W+TkSKz8NS3iA=
Subject key identifier: AB:57:D2:E2:7B:22:C2:03:5A:6D:33:62:0C:D2:AE:DE:F5:6C:92:FE
Authority key identifier: 37:5C:74:22:59:FF:90:08:57:D1:36:89:D8:D4:8D:B2:0E:DF:46:03
Certificate issuer: /CN=375c742259ff900857d13689d8d48db20edf4603
Certificate serial: 0199FCC630A59DD98402046716F75287D802
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/N1x0Iln_kAhX0TaJ2NSNsg7fRgM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7c/8a5ee7-b638-4b70-8a8e-f97745d13b8d/1/N1x0Iln_kAhX0TaJ2NSNsg7fRgM.mft
Manifest number: 1420
Signing time: Sun 19 Oct 2025 14:01:10 +0000
Manifest this update: Sun 19 Oct 2025 14:01:10 +0000
Manifest next update: Mon 20 Oct 2025 14:01:10 +0000
Files and hashes: 1: N1x0Iln_kAhX0TaJ2NSNsg7fRgM.crl (hash: duRb7c+kF1XT21QTzM/GQ+8lutzzV98xjGQMx7jfix8=)
2: g_21VS9VjPQrGz2Td7dDraqxWmA.roa (hash: iyA8oXAsAeuHezc22yRIhc2flepygJS+6M+Uvfpnntg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7c/8a5ee7-b638-4b70-8a8e-f97745d13b8d/1/N1x0Iln_kAhX0TaJ2NSNsg7fRgM.crl
rsync://rpki.ripe.net/repository/DEFAULT/7c/8a5ee7-b638-4b70-8a8e-f97745d13b8d/1/N1x0Iln_kAhX0TaJ2NSNsg7fRgM.mft
rsync://rpki.ripe.net/repository/DEFAULT/N1x0Iln_kAhX0TaJ2NSNsg7fRgM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:c6:30:a5:9d:d9:84:02:04:67:16:f7:52:87:d8:02
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=375c742259ff900857d13689d8d48db20edf4603
Validity
Not Before: Oct 19 14:01:10 2025 GMT
Not After : Oct 20 14:01:10 2025 GMT
Subject: CN=ab57d2e27b22c2035a6d33620cd2aedef56c92fe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:75:8f:ad:eb:c6:c7:54:61:75:80:3d:5b:be:
44:cb:d1:34:28:be:09:a0:b5:34:d0:84:82:cf:b4:
57:31:da:f4:93:47:89:46:94:06:20:47:7c:ee:28:
75:10:85:f4:91:db:e7:9e:73:c6:be:6d:ca:ef:51:
fd:8e:73:69:cc:a1:db:4a:14:b2:8b:74:d0:bc:4c:
d4:79:23:03:27:82:44:44:0b:40:93:cc:ee:6f:15:
31:58:18:9d:60:98:71:19:ea:68:68:e7:68:45:34:
d4:f4:0b:66:c3:35:d6:4c:58:cd:95:51:12:83:05:
8f:0f:d1:f9:e3:ae:a1:39:8d:11:69:99:6e:3b:2f:
5e:fe:e6:44:35:5a:35:d9:67:e9:c4:b6:ea:7c:4e:
ad:b2:0a:fa:08:de:d7:24:f3:91:bd:12:22:1f:9b:
12:56:2c:13:20:f7:3f:67:a8:11:32:73:a5:e6:07:
a0:d3:5c:35:29:24:92:02:af:9e:bc:39:f3:07:c8:
6d:9a:d9:b4:c5:d2:31:15:9b:f5:e5:c5:0d:fd:f1:
5a:5f:d1:01:b2:16:3f:ac:03:18:a7:5c:40:2a:0d:
41:e8:31:7d:c3:40:72:59:89:43:b4:a5:96:99:40:
69:74:b6:90:bd:d5:36:5c:dc:f0:a4:5a:36:56:e7:
75:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:57:D2:E2:7B:22:C2:03:5A:6D:33:62:0C:D2:AE:DE:F5:6C:92:FE
X509v3 Authority Key Identifier:
keyid:37:5C:74:22:59:FF:90:08:57:D1:36:89:D8:D4:8D:B2:0E:DF:46:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/N1x0Iln_kAhX0TaJ2NSNsg7fRgM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/8a5ee7-b638-4b70-8a8e-f97745d13b8d/1/N1x0Iln_kAhX0TaJ2NSNsg7fRgM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/8a5ee7-b638-4b70-8a8e-f97745d13b8d/1/N1x0Iln_kAhX0TaJ2NSNsg7fRgM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2f:69:48:15:a6:ff:f1:9c:d7:a8:2d:04:07:33:4c:72:ef:55:
19:c3:d5:eb:8e:63:fa:48:b2:c7:08:86:91:a7:9f:44:d3:60:
a8:6a:37:36:8a:ad:32:a4:2a:d5:0c:5b:6b:d4:e5:52:64:3b:
43:bf:c4:fe:a1:be:d2:98:4f:01:e2:22:bb:8d:a6:99:7e:9d:
7a:3a:6d:78:2a:a0:4e:3a:6e:8f:dd:09:4f:16:bb:5e:ab:44:
ce:ab:bd:f8:8b:cf:d7:80:81:21:6a:c4:82:91:1f:1a:71:b5:
37:61:c0:e8:d3:87:53:11:83:ed:0a:b4:2d:f8:f2:ff:0f:fa:
e1:54:62:e1:07:04:5c:21:04:17:8b:00:0d:34:60:5b:6b:c7:
5f:fe:b1:7a:77:fa:2e:10:61:47:65:f6:ad:ae:c5:bc:d0:ef:
d4:cd:05:db:3c:71:4d:8c:27:38:9c:06:53:a2:93:69:c4:55:
5c:1a:c9:5c:da:7a:d2:92:9e:4b:f1:b2:09:f6:7a:15:62:7d:
47:64:37:8d:ab:67:78:9f:36:26:cb:92:ac:2f:17:7e:7a:88:
6e:05:00:09:08:a0:40:2d:15:76:bf:8f:7d:99:79:c9:1a:a9:
7c:8c:3b:99:25:6d:a7:5b:7b:56:5a:b4:9e:ed:45:90:ad:a8:
64:1e:2e:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 20:35:44 2025 by rpki-client