
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ad/a977ea-4a93-4618-b7ff-35b21bffad4d/1/N6NS4Xr4fuLl3Bc9FVQ9pjvlVHM.mft
File: N6NS4Xr4fuLl3Bc9FVQ9pjvlVHM.mft (raw, json)
Hash identifier: s+TEHNs1Sc5879IVFhxbxqLbAlPts4k0vv5eE88kP1E=
Subject key identifier: 61:4B:6E:22:CE:ED:45:12:5D:71:6B:7E:4B:7F:F1:A7:9B:4D:6D:BE
Authority key identifier: 37:A3:52:E1:7A:F8:7E:E2:E5:DC:17:3D:15:54:3D:A6:3B:E5:54:73
Certificate issuer: /CN=37a352e17af87ee2e5dc173d15543da63be55473
Certificate serial: 0199FB4598CBE9095E9453D9A3CB88308432
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/N6NS4Xr4fuLl3Bc9FVQ9pjvlVHM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ad/a977ea-4a93-4618-b7ff-35b21bffad4d/1/N6NS4Xr4fuLl3Bc9FVQ9pjvlVHM.mft
Manifest number: 0D86
Signing time: Sun 19 Oct 2025 07:01:06 +0000
Manifest this update: Sun 19 Oct 2025 07:01:06 +0000
Manifest next update: Mon 20 Oct 2025 07:01:06 +0000
Files and hashes: 1: N6NS4Xr4fuLl3Bc9FVQ9pjvlVHM.crl (hash: zFYqi9nOnSbzDzbKB8ymjWsnn2eLS0yTWv9aK5xM5cU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ad/a977ea-4a93-4618-b7ff-35b21bffad4d/1/N6NS4Xr4fuLl3Bc9FVQ9pjvlVHM.crl
rsync://rpki.ripe.net/repository/DEFAULT/ad/a977ea-4a93-4618-b7ff-35b21bffad4d/1/N6NS4Xr4fuLl3Bc9FVQ9pjvlVHM.mft
rsync://rpki.ripe.net/repository/DEFAULT/N6NS4Xr4fuLl3Bc9FVQ9pjvlVHM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:45:98:cb:e9:09:5e:94:53:d9:a3:cb:88:30:84:32
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=37a352e17af87ee2e5dc173d15543da63be55473
Validity
Not Before: Oct 19 07:01:06 2025 GMT
Not After : Oct 20 07:01:06 2025 GMT
Subject: CN=614b6e22ceed45125d716b7e4b7ff1a79b4d6dbe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:b7:ee:c4:ec:e9:0c:93:db:5c:3f:34:c5:f7:
73:47:14:b5:c6:d4:31:84:6e:50:84:16:13:3c:1c:
e1:57:4b:e1:5c:ee:c2:a1:64:12:fc:29:04:7a:8e:
43:0d:1e:3b:e3:ed:c3:ea:00:6c:a5:49:da:a5:14:
6b:bc:00:a2:d3:82:0d:13:4f:eb:ae:46:cf:0b:f1:
1a:04:57:eb:6e:ea:49:22:9f:5a:0b:57:3a:8c:2a:
bb:f5:88:da:d5:c6:ac:8b:9f:c4:db:4d:85:73:e8:
30:f5:d2:8f:fa:0a:5b:02:cb:1a:55:6c:e1:a5:5c:
09:1d:13:d5:fc:b8:4c:28:75:ac:87:15:4d:9e:49:
e3:d1:cb:68:d8:65:93:bf:50:c3:14:8a:5d:bb:d1:
25:77:cd:3b:fc:d1:fc:58:b1:54:30:c2:ad:fe:5b:
63:66:1f:5c:77:30:8d:e5:9e:ae:3d:79:9f:d5:71:
f9:93:cd:9e:ed:88:d3:da:89:0f:c2:98:c7:d6:a8:
58:0c:d3:c4:50:44:3d:05:8d:46:03:18:b8:d8:5d:
b2:02:6b:b1:29:6e:52:e0:e3:d5:56:85:b7:ad:31:
c4:16:f4:a1:6a:05:b9:f2:a7:6b:e8:21:45:d0:88:
ef:64:1a:c0:2c:55:5c:ce:db:1e:2a:a8:57:05:1c:
62:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:4B:6E:22:CE:ED:45:12:5D:71:6B:7E:4B:7F:F1:A7:9B:4D:6D:BE
X509v3 Authority Key Identifier:
keyid:37:A3:52:E1:7A:F8:7E:E2:E5:DC:17:3D:15:54:3D:A6:3B:E5:54:73
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/N6NS4Xr4fuLl3Bc9FVQ9pjvlVHM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/a977ea-4a93-4618-b7ff-35b21bffad4d/1/N6NS4Xr4fuLl3Bc9FVQ9pjvlVHM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/a977ea-4a93-4618-b7ff-35b21bffad4d/1/N6NS4Xr4fuLl3Bc9FVQ9pjvlVHM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
83:2d:fc:67:19:f8:c4:e7:d2:1e:70:7f:e8:38:ec:8a:42:30:
a0:10:bd:18:41:d2:6e:6c:83:35:78:d2:0c:d6:fd:17:66:55:
d6:77:17:08:3b:2a:88:b8:d6:31:4f:10:47:c0:9a:80:4c:cf:
11:42:bf:59:04:fa:6b:80:aa:c9:fd:aa:e8:d7:14:d1:cf:c7:
08:a5:93:9b:a3:44:a9:10:ce:e4:4c:ea:ba:12:55:8e:9c:80:
8f:61:a7:5d:42:84:2e:ef:4d:f9:de:47:ef:26:44:d1:70:fa:
65:06:a7:3a:6d:b7:bb:67:84:b3:d4:3f:db:b3:ad:6d:20:d7:
00:a0:d1:bc:ee:b5:e2:56:e8:c6:e4:5c:ea:76:e8:af:f9:00:
14:61:6f:c1:b3:66:88:75:42:09:8f:db:8c:6d:58:c4:d6:c2:
8e:40:95:27:29:78:f8:65:f1:4a:4a:ec:ba:6c:9b:c5:9c:a4:
36:72:06:d0:8d:dc:e9:9d:cf:29:39:c1:ae:8e:3b:86:a6:35:
fb:18:a4:b2:96:23:d6:38:1b:ca:0e:9c:de:97:d2:10:2f:8e:
fc:b2:1f:d6:d6:6b:a4:46:cf:b0:1d:b2:51:24:24:46:ec:85:
8e:5c:1e:56:0c:56:66:50:a2:5d:b9:cb:f0:91:9d:c4:63:65:
9e:54:d2:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:22:27 2025 by rpki-client