Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/83aa47-c7fb-4e05-9fac-e4ca6b73ac76/1/N0CDrw__F2igfGVfH-OGAJxSLM8.mft
File: N0CDrw__F2igfGVfH-OGAJxSLM8.mft (raw, json)
Hash identifier: VTdF4Hm7o+VxQ72DDr7lBQUz0Za3TOI82/HBU+N6in8=
Subject key identifier: FD:6B:56:1F:27:CD:C2:67:9F:D5:6F:06:A9:F0:BC:C8:52:50:06:7E
Authority key identifier: 37:40:83:AF:0F:FF:17:68:A0:7C:65:5F:1F:E3:86:00:9C:52:2C:CF
Certificate issuer: /CN=374083af0fff1768a07c655f1fe386009c522ccf
Certificate serial: 0199FC8F31A9CEB6EED33BE024CE76E4E0DD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/N0CDrw__F2igfGVfH-OGAJxSLM8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/83aa47-c7fb-4e05-9fac-e4ca6b73ac76/1/N0CDrw__F2igfGVfH-OGAJxSLM8.mft
Manifest number: 12C6
Signing time: Sun 19 Oct 2025 13:01:06 +0000
Manifest this update: Sun 19 Oct 2025 13:01:06 +0000
Manifest next update: Mon 20 Oct 2025 13:01:06 +0000
Files and hashes: 1: N0CDrw__F2igfGVfH-OGAJxSLM8.crl (hash: QcJ4DtxpNfb1PcflKFvfy039gkopX9rrHFTssrQM3Qg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a7/83aa47-c7fb-4e05-9fac-e4ca6b73ac76/1/N0CDrw__F2igfGVfH-OGAJxSLM8.crl
rsync://rpki.ripe.net/repository/DEFAULT/a7/83aa47-c7fb-4e05-9fac-e4ca6b73ac76/1/N0CDrw__F2igfGVfH-OGAJxSLM8.mft
rsync://rpki.ripe.net/repository/DEFAULT/N0CDrw__F2igfGVfH-OGAJxSLM8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:8f:31:a9:ce:b6:ee:d3:3b:e0:24:ce:76:e4:e0:dd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=374083af0fff1768a07c655f1fe386009c522ccf
Validity
Not Before: Oct 19 13:01:06 2025 GMT
Not After : Oct 20 13:01:06 2025 GMT
Subject: CN=fd6b561f27cdc2679fd56f06a9f0bcc85250067e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:0a:42:5a:2c:1c:7f:29:4b:51:72:6c:2f:ff:
8a:6e:4a:cb:71:7f:35:07:80:4b:25:f9:9b:4a:ae:
16:7e:e6:2c:c3:d4:80:6a:2d:b6:5e:c3:57:c9:2b:
ea:44:cc:9b:17:ad:a6:ce:14:bc:53:99:fa:c9:87:
07:57:55:b4:4d:13:41:90:63:6c:dc:97:37:5d:40:
7e:08:c9:04:04:ec:71:0b:f6:25:74:a0:b4:4e:73:
9e:58:42:ef:6a:53:27:b1:5d:87:ad:6b:da:b2:03:
31:c3:d6:0f:1c:52:4d:89:c8:bd:c0:ac:a4:18:b4:
8b:17:3e:ba:62:cc:9a:55:d2:95:86:b5:a5:8e:f2:
80:f2:d0:03:01:05:7a:b5:f3:30:75:4c:f9:cc:41:
a0:5e:8c:25:0a:9c:e8:01:ef:d4:f9:8a:fd:86:78:
20:e7:ee:66:fc:12:e6:da:23:47:c7:cb:6d:b8:35:
ed:ae:f5:38:b5:16:b9:ec:6f:bd:82:4f:5a:18:e2:
c6:29:73:ac:60:2b:ed:b7:53:3c:75:11:38:63:d4:
4e:16:7a:de:2a:79:78:3e:94:d2:2a:c5:b7:ae:8e:
b5:9e:2c:e1:ed:eb:ed:b8:0b:ff:c0:31:05:29:2d:
53:7d:c1:e9:b1:7f:7a:9f:5d:d6:d9:57:57:34:48:
92:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:6B:56:1F:27:CD:C2:67:9F:D5:6F:06:A9:F0:BC:C8:52:50:06:7E
X509v3 Authority Key Identifier:
keyid:37:40:83:AF:0F:FF:17:68:A0:7C:65:5F:1F:E3:86:00:9C:52:2C:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/N0CDrw__F2igfGVfH-OGAJxSLM8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/83aa47-c7fb-4e05-9fac-e4ca6b73ac76/1/N0CDrw__F2igfGVfH-OGAJxSLM8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/83aa47-c7fb-4e05-9fac-e4ca6b73ac76/1/N0CDrw__F2igfGVfH-OGAJxSLM8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
11:48:34:fc:2e:61:d3:99:cc:5e:ea:91:83:a6:79:f3:73:29:
85:1d:e4:6d:f4:38:76:fc:8d:13:7b:d7:3c:c8:33:0c:9d:69:
80:0e:f3:49:c0:f5:86:b5:2e:8e:a0:84:e0:c4:5d:c5:ee:26:
49:75:10:3c:1d:8a:e8:52:c1:24:27:4f:c1:a1:4c:cd:2c:19:
a4:4a:27:23:8b:e3:41:30:a0:79:f1:22:a4:b4:e9:85:30:7d:
e6:be:8f:d8:31:a2:dd:3d:83:53:3d:11:32:77:03:71:ba:2e:
2d:08:66:5c:ee:f7:ab:1c:d6:0d:9b:71:0c:cf:9a:fb:15:84:
a8:32:22:7d:6c:b5:74:19:e6:37:a4:1f:4b:71:9f:ac:dd:9d:
f1:ca:5a:93:71:8f:61:c7:e4:01:04:14:33:33:3e:ed:fb:2c:
89:f1:3a:88:48:10:43:c0:45:19:82:74:c4:d7:e6:8e:21:d6:
2d:fc:9a:5d:ce:32:0a:79:65:9c:58:e2:78:58:7e:db:99:c2:
d6:55:dd:11:0e:c5:40:1d:52:d4:59:a7:5c:89:5f:12:28:98:
1d:ef:fd:ce:80:84:4d:23:64:e6:8b:a1:eb:39:29:39:1f:d0:
7f:00:45:fb:a8:e5:94:d1:0f:83:cd:aa:9c:a4:cb:9a:60:e9:
da:c0:8a:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 17:23:27 2025 by rpki-client