Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/1336c7-a33f-4ec6-82d7-f44166bb2db0/1/N_vfL1-FXl4cpI53w73TO9R7RDg.mft
File: N_vfL1-FXl4cpI53w73TO9R7RDg.mft (raw, json)
Hash identifier: rifGY/2QB4hKBmwRUtUwt9ExafXk4kXIiLbcPUncSao=
Subject key identifier: EF:54:B8:4B:3F:43:5A:88:C1:79:0E:CC:C6:3B:1A:AC:A4:52:60:93
Authority key identifier: 37:FB:DF:2F:5F:85:5E:5E:1C:A4:8E:77:C3:BD:D3:3B:D4:7B:44:38
Certificate issuer: /CN=37fbdf2f5f855e5e1ca48e77c3bdd33bd47b4438
Certificate serial: 019A0223221475190C9F55F011A34F441557
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/N_vfL1-FXl4cpI53w73TO9R7RDg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/1336c7-a33f-4ec6-82d7-f44166bb2db0/1/N_vfL1-FXl4cpI53w73TO9R7RDg.mft
Manifest number: 16E8
Signing time: Mon 20 Oct 2025 15:00:48 +0000
Manifest this update: Mon 20 Oct 2025 15:00:48 +0000
Manifest next update: Tue 21 Oct 2025 15:00:48 +0000
Files and hashes: 1: N_vfL1-FXl4cpI53w73TO9R7RDg.crl (hash: i0n6/IEQKf+ObFUhZdxqIF6Bn8K5h9Ki6b6tJxH6yD4=)
2: PSL2OSxsoutF8sVX_uvIaiWUApI.roa (hash: IoDHAxb+U2Gaz8HUwj/mdMtnodnlu8iYqMMfCwQw35I=)
3: t0FWDnJPs6XvZokHfTcCnjKRaeE.roa (hash: Aou1i/O3zguK2P9WdtUpbw8G9iRuYff1/7SNrw+Pohw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8a/1336c7-a33f-4ec6-82d7-f44166bb2db0/1/N_vfL1-FXl4cpI53w73TO9R7RDg.crl
rsync://rpki.ripe.net/repository/DEFAULT/8a/1336c7-a33f-4ec6-82d7-f44166bb2db0/1/N_vfL1-FXl4cpI53w73TO9R7RDg.mft
rsync://rpki.ripe.net/repository/DEFAULT/N_vfL1-FXl4cpI53w73TO9R7RDg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 13:42:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:02:23:22:14:75:19:0c:9f:55:f0:11:a3:4f:44:15:57
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=37fbdf2f5f855e5e1ca48e77c3bdd33bd47b4438
Validity
Not Before: Oct 20 15:00:48 2025 GMT
Not After : Oct 21 15:00:48 2025 GMT
Subject: CN=ef54b84b3f435a88c1790eccc63b1aaca4526093
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:1b:43:3c:7a:06:35:5d:51:96:dc:3b:5e:05:
32:1b:a0:42:8d:2f:02:b2:92:b9:18:6f:02:56:52:
0c:7e:c5:86:6d:cb:55:9d:2b:4a:43:c6:43:63:da:
12:da:82:02:c9:f7:c6:cd:ed:68:fc:0d:d3:01:c9:
02:fb:db:c4:bd:3b:09:8c:87:de:3d:e2:16:a5:2f:
e2:3f:53:1f:f9:a7:15:8d:b2:47:81:d6:d5:13:0e:
69:97:75:05:39:3f:16:8d:fc:f1:8b:db:d7:e6:80:
d9:e0:43:55:d2:d9:35:aa:5d:bd:ab:e8:26:ff:fa:
75:69:84:09:ad:28:2f:02:68:1f:a7:08:ff:83:73:
dc:80:b6:3a:58:e3:87:7a:82:19:a8:b1:c3:d2:a3:
57:77:b0:e7:31:5c:0c:98:64:51:30:cf:04:20:36:
8b:87:de:af:88:34:c6:2e:02:00:78:66:57:9d:d1:
cf:b1:28:dc:7a:7d:81:35:6f:73:28:3b:5a:9d:d1:
f4:5f:fc:d5:3c:f6:27:77:30:fd:a3:93:5d:93:be:
56:32:ba:18:93:50:6d:80:23:8f:20:ff:24:17:98:
2c:41:aa:1b:e0:4d:26:3a:59:cf:ae:af:ca:65:c7:
db:82:4e:89:ea:37:8e:f2:13:de:f2:0b:d2:b9:5b:
e0:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:54:B8:4B:3F:43:5A:88:C1:79:0E:CC:C6:3B:1A:AC:A4:52:60:93
X509v3 Authority Key Identifier:
keyid:37:FB:DF:2F:5F:85:5E:5E:1C:A4:8E:77:C3:BD:D3:3B:D4:7B:44:38
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/N_vfL1-FXl4cpI53w73TO9R7RDg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/1336c7-a33f-4ec6-82d7-f44166bb2db0/1/N_vfL1-FXl4cpI53w73TO9R7RDg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/1336c7-a33f-4ec6-82d7-f44166bb2db0/1/N_vfL1-FXl4cpI53w73TO9R7RDg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3c:25:29:6f:8a:08:3e:4d:cd:47:f9:ce:cf:3a:8e:72:b3:94:
e8:11:2e:ca:99:c4:c2:aa:54:08:7e:ae:8a:89:fb:89:3c:0d:
3a:80:a0:6f:8e:aa:f6:c6:37:3c:75:26:ff:b9:88:04:ac:0f:
38:75:e2:74:70:68:2f:19:16:72:e4:53:c4:36:71:55:59:c2:
65:91:0d:97:f6:00:77:09:a1:c8:83:0d:78:0b:44:3c:53:65:
eb:33:f7:ab:a0:5e:18:e6:5b:cb:c9:46:55:26:5d:a5:69:49:
62:80:8c:77:95:28:6d:80:c7:14:91:8d:28:b8:a3:36:61:2c:
f4:64:81:d3:da:8e:e7:6c:a9:ae:75:87:d2:56:8d:70:13:55:
86:26:16:3e:3d:f5:c1:d5:69:cb:f0:8f:36:c6:06:3d:ea:76:
87:a8:42:56:77:b6:ac:4f:88:2e:d2:88:93:74:89:a7:34:3e:
0d:ba:2e:5d:20:8e:f2:0f:c0:f4:51:42:7e:0e:18:e5:09:48:
5b:23:75:e4:2e:9c:15:73:47:83:8c:b8:ac:a5:04:25:52:f0:
10:7a:bc:49:be:3a:dd:16:f6:d2:54:3c:2f:99:24:27:0d:32:
5c:9a:9c:4e:49:69:63:36:1a:2b:b6:99:e6:9f:01:f9:29:a9:
b9:67:09:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 19:41:30 2025 by rpki-client