Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9e/4ea4f7-d70e-42a2-afd7-3e3a188f49de/1/N5FWc7KL362ywgGaxo0EZP0htxo.mft
File: N5FWc7KL362ywgGaxo0EZP0htxo.mft (raw, json)
Hash identifier: YnHFxeBlBdugrB1SW+zVXcc7of5CLV3ykNRLRyTDc/E=
Subject key identifier: 1B:E9:83:15:D6:B1:87:5B:63:AC:35:55:9F:B3:E1:63:D4:ED:0F:C0
Authority key identifier: 37:91:56:73:B2:8B:DF:AD:B2:C2:01:9A:C6:8D:04:64:FD:21:B7:1A
Certificate issuer: /CN=37915673b28bdfadb2c2019ac68d0464fd21b71a
Certificate serial: 019A00351308C8EA77C5550A3BCF83C08EC8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/N5FWc7KL362ywgGaxo0EZP0htxo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9e/4ea4f7-d70e-42a2-afd7-3e3a188f49de/1/N5FWc7KL362ywgGaxo0EZP0htxo.mft
Manifest number: 1678
Signing time: Mon 20 Oct 2025 06:01:09 +0000
Manifest this update: Mon 20 Oct 2025 06:01:09 +0000
Manifest next update: Tue 21 Oct 2025 06:01:09 +0000
Files and hashes: 1: DH9htlq0hiwldp4q07DNTkVZOf8.roa (hash: J0KU22uieTNYBq4unRpzKgHyqTQbyJRKS4kqQcbzVVo=)
2: N5FWc7KL362ywgGaxo0EZP0htxo.crl (hash: YJBsDEe1c+GJwM0ht8jtvBbMYpPrbAD7kAYi6/OnjZg=)
3: jeU3xqGrcmxdIS4lfaliQojmUd4.roa (hash: WoVvfzkH0PYO9V3NP53Pv15mZRXcsOzFbw+RGpI6V54=)
4: mbXBHvnDkr71szR1uqXUf3o_CNU.roa (hash: gBt+bTGYlOGXiT5DEgI8/fzoH444V5sSGRbb6v+iHAk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9e/4ea4f7-d70e-42a2-afd7-3e3a188f49de/1/N5FWc7KL362ywgGaxo0EZP0htxo.crl
rsync://rpki.ripe.net/repository/DEFAULT/9e/4ea4f7-d70e-42a2-afd7-3e3a188f49de/1/N5FWc7KL362ywgGaxo0EZP0htxo.mft
rsync://rpki.ripe.net/repository/DEFAULT/N5FWc7KL362ywgGaxo0EZP0htxo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 00:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:00:35:13:08:c8:ea:77:c5:55:0a:3b:cf:83:c0:8e:c8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=37915673b28bdfadb2c2019ac68d0464fd21b71a
Validity
Not Before: Oct 20 06:01:09 2025 GMT
Not After : Oct 21 06:01:09 2025 GMT
Subject: CN=1be98315d6b1875b63ac35559fb3e163d4ed0fc0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:3b:44:48:51:cb:14:ed:d6:3c:26:52:35:39:
2e:7d:1c:bb:23:58:32:1c:f0:ad:8e:74:86:71:1e:
a5:44:29:74:7e:1b:ad:92:e3:9a:31:21:e1:6f:6a:
25:e0:9c:d1:40:cc:8f:da:a3:af:58:c4:13:d4:9f:
4b:ea:55:87:6b:92:fa:77:17:58:17:2d:3a:5f:85:
ea:77:92:e0:fe:58:86:64:bc:a8:80:4b:db:51:f7:
6b:87:f8:99:8b:a7:48:b9:d1:b9:51:2d:26:7a:e1:
31:0b:e3:cc:90:65:e6:da:46:0e:4e:1a:64:ff:45:
11:4b:87:c1:1b:17:d0:43:7b:db:9c:71:10:4d:25:
07:74:16:bc:70:16:74:51:30:31:5a:70:a8:42:59:
ec:e2:a6:67:63:e4:33:ba:cc:4e:c9:3b:6e:48:d8:
2c:93:72:47:d2:10:9c:22:68:ed:f7:f3:65:c5:7f:
01:20:db:c3:95:dd:c6:6f:96:7e:2a:96:d0:c2:29:
c0:19:7d:ba:62:79:54:a5:e5:0e:75:61:f0:16:db:
7a:81:71:1b:f2:9a:5b:ac:02:b7:5d:18:e3:cf:eb:
b1:35:07:37:a6:ae:1f:72:e5:ce:2b:2c:68:c5:51:
35:1c:49:25:4e:d6:c8:09:7e:9c:7c:0d:19:fe:95:
66:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:E9:83:15:D6:B1:87:5B:63:AC:35:55:9F:B3:E1:63:D4:ED:0F:C0
X509v3 Authority Key Identifier:
keyid:37:91:56:73:B2:8B:DF:AD:B2:C2:01:9A:C6:8D:04:64:FD:21:B7:1A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/N5FWc7KL362ywgGaxo0EZP0htxo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/4ea4f7-d70e-42a2-afd7-3e3a188f49de/1/N5FWc7KL362ywgGaxo0EZP0htxo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/4ea4f7-d70e-42a2-afd7-3e3a188f49de/1/N5FWc7KL362ywgGaxo0EZP0htxo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
49:f6:44:1f:35:78:e8:1a:ff:74:5c:b3:ff:de:70:75:ff:fb:
c3:ff:5d:18:4b:80:c1:f0:2b:42:63:c9:dd:c2:cf:ea:f4:01:
dc:52:6f:11:1f:38:1c:4f:1f:7c:0d:79:fa:6d:e6:34:3f:84:
ac:f3:9f:a9:3b:71:39:7d:be:98:f8:bf:88:c7:9e:fb:e6:d9:
ec:9d:c5:ea:c0:8b:8f:e0:e9:cc:82:b5:19:e9:c6:7d:34:73:
67:f1:6e:3f:74:d9:96:b9:e7:ee:a0:b8:49:70:91:57:1c:91:
de:76:3b:31:1c:62:07:e1:6c:00:17:41:75:38:98:56:b8:56:
fb:8f:bb:62:89:b4:f4:32:67:24:9d:5c:ef:4f:3e:79:b3:7e:
8c:a1:c1:95:dc:20:b2:46:ca:0f:91:4c:07:84:c3:f7:df:3c:
af:72:18:05:3d:a5:ec:af:4e:d4:d5:17:34:54:6e:83:d5:a1:
75:f0:c4:11:2a:2c:a8:fd:52:80:d5:60:89:55:e4:74:3c:a1:
21:da:1c:62:3e:4d:27:cb:80:73:a0:81:68:b0:bb:80:48:9a:
fe:b7:3c:b5:4f:3a:ee:19:59:08:2e:b9:18:61:e9:7f:09:b4:
22:ad:3f:c5:16:97:c8:4e:3d:30:70:3a:97:e1:21:84:b4:0c:
49:32:46:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 08:39:42 2025 by rpki-client