Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/af/46c38b-4324-44aa-9bb5-386910dcb903/1/N-DLWK4j1HOuE6c0G3pzvdECig0.mft
File: N-DLWK4j1HOuE6c0G3pzvdECig0.mft (raw, json)
Hash identifier: 5bvDDsdGNy3DsRNLZ1wTlS0JEgZ+SLZP4W5QuakT83Y=
Subject key identifier: 2E:F3:38:E4:02:96:97:BF:3C:33:6C:C2:49:19:71:F7:4A:37:5B:AD
Authority key identifier: 37:E0:CB:58:AE:23:D4:73:AE:13:A7:34:1B:7A:73:BD:D1:02:8A:0D
Certificate issuer: /CN=37e0cb58ae23d473ae13a7341b7a73bdd1028a0d
Certificate serial: 0199FBEC16D15E57F4A9A584D5E032AC3874
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/N-DLWK4j1HOuE6c0G3pzvdECig0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/af/46c38b-4324-44aa-9bb5-386910dcb903/1/N-DLWK4j1HOuE6c0G3pzvdECig0.mft
Manifest number: 10DB
Signing time: Sun 19 Oct 2025 10:02:57 +0000
Manifest this update: Sun 19 Oct 2025 10:02:57 +0000
Manifest next update: Mon 20 Oct 2025 10:02:57 +0000
Files and hashes: 1: N-DLWK4j1HOuE6c0G3pzvdECig0.crl (hash: bbUsnv4m+pzaKWQr3U0Gl+BsO+KQB0WIOROtSUSrBxA=)
2: cxXgE4ze3p5Y_SSxlmeJ4o5QzaU.roa (hash: VnVBSnuyvJSL8u2y/xmozn76q7jfteZhwwoJt7Qqpuc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/af/46c38b-4324-44aa-9bb5-386910dcb903/1/N-DLWK4j1HOuE6c0G3pzvdECig0.crl
rsync://rpki.ripe.net/repository/DEFAULT/af/46c38b-4324-44aa-9bb5-386910dcb903/1/N-DLWK4j1HOuE6c0G3pzvdECig0.mft
rsync://rpki.ripe.net/repository/DEFAULT/N-DLWK4j1HOuE6c0G3pzvdECig0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:ec:16:d1:5e:57:f4:a9:a5:84:d5:e0:32:ac:38:74
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=37e0cb58ae23d473ae13a7341b7a73bdd1028a0d
Validity
Not Before: Oct 19 10:02:57 2025 GMT
Not After : Oct 20 10:02:57 2025 GMT
Subject: CN=2ef338e4029697bf3c336cc2491971f74a375bad
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:75:61:e4:ae:bd:8b:8b:aa:0f:97:32:d5:d1:
36:82:c3:13:66:cf:5d:b0:30:3b:4a:48:5e:f9:ea:
37:f3:a0:08:2a:80:d2:26:1a:74:c0:8e:8d:ca:b9:
73:3a:1e:44:d5:12:f0:71:65:df:bc:7b:fe:34:78:
df:e2:2f:25:42:da:9f:e7:ad:48:16:ac:ad:47:52:
f0:32:71:a0:32:d8:47:2d:25:24:f0:72:80:aa:61:
a6:1c:e2:32:50:91:4f:ab:07:a1:7b:b9:6d:c3:9d:
b0:a9:b6:36:9a:32:13:ec:52:e6:a4:1e:dd:77:42:
c9:f2:8d:91:0f:81:26:76:56:a5:25:1c:c2:2e:8f:
54:be:d5:aa:d4:31:a3:18:e5:8e:f0:dc:0a:55:24:
a0:b8:d1:12:15:75:00:61:cf:90:96:d9:e7:4f:75:
ac:54:7c:b3:1d:ed:fc:1b:9e:4c:89:6d:99:d4:ec:
76:72:65:7c:c7:d1:27:97:92:8a:8d:5b:18:81:3c:
8b:dc:88:25:db:73:14:2a:d5:51:cd:a0:ce:b9:cb:
d8:e9:4c:f6:29:d6:7a:b0:2b:f1:49:e4:fe:7f:f2:
e7:55:93:14:e2:16:c5:df:b1:dc:04:ab:b0:cc:fa:
f2:7a:1e:ac:72:a8:8f:17:6d:f9:3d:49:6a:fe:f5:
d7:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:F3:38:E4:02:96:97:BF:3C:33:6C:C2:49:19:71:F7:4A:37:5B:AD
X509v3 Authority Key Identifier:
keyid:37:E0:CB:58:AE:23:D4:73:AE:13:A7:34:1B:7A:73:BD:D1:02:8A:0D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/N-DLWK4j1HOuE6c0G3pzvdECig0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/46c38b-4324-44aa-9bb5-386910dcb903/1/N-DLWK4j1HOuE6c0G3pzvdECig0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/af/46c38b-4324-44aa-9bb5-386910dcb903/1/N-DLWK4j1HOuE6c0G3pzvdECig0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6e:3b:fd:66:c0:17:64:65:06:dd:62:a0:dc:16:9c:87:3a:93:
38:f2:b9:46:17:7c:63:4c:94:27:b8:3c:a0:a1:a7:55:b1:3c:
2e:2b:d2:77:6b:66:92:cc:3c:bc:6a:da:f3:2c:eb:51:17:fb:
b0:39:f2:fb:bc:6e:a9:b3:71:f9:e9:d7:fe:4b:c5:04:1c:10:
12:2e:2f:2e:99:6b:14:23:59:57:f7:07:6b:eb:dd:a8:b0:6d:
44:40:ca:91:b0:9b:8b:18:cb:d5:08:3f:85:53:1f:a1:12:05:
07:de:36:c0:0a:05:c0:77:f3:ce:a5:19:10:83:e3:cc:a0:71:
d8:14:8b:00:45:83:20:24:8c:fe:53:6c:27:ae:f0:19:fe:28:
85:ef:a4:aa:df:bd:c8:12:82:ed:1d:a4:3c:26:7b:ca:2d:58:
dc:6c:ea:6b:80:15:25:22:6a:a5:6f:f2:f0:fa:04:6a:21:1d:
17:84:0c:b6:0c:67:07:fe:34:c2:51:73:fe:7f:fd:d7:be:2a:
c0:11:fa:6c:3b:ce:a8:aa:01:04:74:fe:a3:91:0d:e0:a7:90:
36:39:4e:17:85:cd:c3:7b:2b:27:6b:29:f7:83:9f:87:bb:b8:
92:fb:c0:07:ce:f6:8c:bc:03:a0:3a:25:65:8b:24:4e:e6:3b:
01:c1:cc:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:20:18 2025 by rpki-client