Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b9/84179d-4c65-44b8-b30b-5dabb4e47abb/1/N2ieqsuvaK810_r7lnTeSKb8CXg.mft
File: N2ieqsuvaK810_r7lnTeSKb8CXg.mft (raw, json)
Hash identifier: JMM/kxgIIR6TYnulWkR09JztSQ+s+xOsXvMvv86I2z8=
Subject key identifier: FA:68:ED:52:E6:7D:38:C7:6C:30:BA:B4:2C:54:6A:F0:DA:48:3B:09
Authority key identifier: 37:68:9E:AA:CB:AF:68:AF:35:D3:FA:FB:96:74:DE:48:A6:FC:09:78
Certificate issuer: /CN=37689eaacbaf68af35d3fafb9674de48a6fc0978
Certificate serial: 0199FC58F9121866CC7DBFBC713BBCBF0E9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/N2ieqsuvaK810_r7lnTeSKb8CXg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b9/84179d-4c65-44b8-b30b-5dabb4e47abb/1/N2ieqsuvaK810_r7lnTeSKb8CXg.mft
Manifest number: 0D8D
Signing time: Sun 19 Oct 2025 12:01:53 +0000
Manifest this update: Sun 19 Oct 2025 12:01:53 +0000
Manifest next update: Mon 20 Oct 2025 12:01:53 +0000
Files and hashes: 1: N2ieqsuvaK810_r7lnTeSKb8CXg.crl (hash: 5qzbfg3sengj9DypeBBEPMxvg7aLjbDlIpM0GJbhW+c=)
2: XD9exolZuPQ40dkfdus25Vf9rII.roa (hash: FmLN+c/lhCwCKONje2+AaEBWa+VnuluALCFAOq2/rro=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b9/84179d-4c65-44b8-b30b-5dabb4e47abb/1/N2ieqsuvaK810_r7lnTeSKb8CXg.crl
rsync://rpki.ripe.net/repository/DEFAULT/b9/84179d-4c65-44b8-b30b-5dabb4e47abb/1/N2ieqsuvaK810_r7lnTeSKb8CXg.mft
rsync://rpki.ripe.net/repository/DEFAULT/N2ieqsuvaK810_r7lnTeSKb8CXg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:58:f9:12:18:66:cc:7d:bf:bc:71:3b:bc:bf:0e:9b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=37689eaacbaf68af35d3fafb9674de48a6fc0978
Validity
Not Before: Oct 19 12:01:53 2025 GMT
Not After : Oct 20 12:01:53 2025 GMT
Subject: CN=fa68ed52e67d38c76c30bab42c546af0da483b09
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:a5:9b:4e:94:da:62:fc:8b:b1:aa:cc:38:97:
ff:d9:07:e3:46:e8:e7:7a:d1:3c:96:f3:6c:4a:30:
45:5b:18:c1:e4:92:08:c7:bf:e0:61:99:a0:06:86:
97:9b:b9:45:ed:6f:d7:f8:3b:56:74:62:2d:52:50:
8e:f5:cd:cd:a3:2e:73:f1:45:47:62:2d:d5:d6:3a:
4c:82:3f:07:1e:8c:13:db:c5:d9:32:ed:59:c5:11:
31:e3:42:a3:df:01:e7:30:53:ba:de:65:1c:ee:98:
b0:5a:38:fd:2f:b6:2d:88:fc:eb:01:d9:c8:dd:65:
5e:07:cb:d8:f8:f8:b6:ba:7b:55:60:85:4c:82:ec:
23:0e:a9:41:3d:ef:af:c9:4f:60:84:83:9c:8f:93:
91:15:06:ac:7a:7e:fb:d8:34:33:2c:ea:fd:80:f2:
23:6a:0b:85:ea:63:cc:ee:d5:cc:1e:12:43:36:8f:
e6:76:d8:12:bf:ce:46:05:71:99:1b:c5:79:bc:60:
6e:b6:3e:7f:fb:c6:6e:2c:46:94:bb:40:92:04:0c:
d9:96:cf:c0:97:3a:a9:fa:f1:02:d8:c1:c4:a2:07:
4e:8f:7d:e8:53:56:a6:21:04:98:27:b9:bb:28:11:
46:d3:6a:29:de:31:05:7e:65:0f:14:81:0c:c1:0c:
b8:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:68:ED:52:E6:7D:38:C7:6C:30:BA:B4:2C:54:6A:F0:DA:48:3B:09
X509v3 Authority Key Identifier:
keyid:37:68:9E:AA:CB:AF:68:AF:35:D3:FA:FB:96:74:DE:48:A6:FC:09:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/N2ieqsuvaK810_r7lnTeSKb8CXg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/84179d-4c65-44b8-b30b-5dabb4e47abb/1/N2ieqsuvaK810_r7lnTeSKb8CXg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/84179d-4c65-44b8-b30b-5dabb4e47abb/1/N2ieqsuvaK810_r7lnTeSKb8CXg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8b:37:08:bf:14:9a:53:af:92:ea:2c:d7:49:ba:bc:c2:1e:d2:
c9:ca:04:5e:aa:e3:7b:3e:77:e1:ea:cb:fc:04:4c:df:fc:da:
2a:4f:f4:d0:31:f6:d4:35:68:db:dd:5c:7c:19:52:cd:1e:c5:
73:e1:c6:39:62:5c:2c:f6:66:25:fd:55:fc:c7:04:9f:c8:db:
3c:0c:bd:49:1c:15:d7:ce:c2:44:82:1d:a3:47:0b:7f:55:56:
0b:b2:2c:bc:b3:0b:0f:71:df:4f:94:68:21:d5:27:e2:0e:0d:
44:7d:e3:86:fa:2d:38:00:87:95:ad:6f:c5:4f:a9:cd:f9:05:
3d:ab:00:9b:2f:ff:04:17:41:ed:d4:ae:12:35:b9:a3:f7:80:
d7:8d:0c:4b:fb:81:20:8b:1d:f9:9e:a1:50:29:a9:b8:da:4a:
f3:83:32:5f:52:88:89:c6:2f:d7:f5:c0:76:0c:13:b9:67:7c:
28:7c:ee:26:e8:7f:1e:62:92:12:ae:29:f8:b5:f1:fe:e6:1c:
83:98:56:3a:89:23:3f:f3:b4:89:78:50:20:c2:6a:5f:97:0a:
07:22:ec:1c:8f:10:44:bc:69:a8:12:92:ed:2d:4a:ac:25:b9:
0c:5e:e1:c3:56:f6:9d:dd:28:23:ca:f9:f9:0f:ed:0c:51:b3:
f7:d4:dd:84
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn8WPkSGGbMfb+8cTu8vw6bMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM3Njg5ZWFhY2JhZjY4YWYzNWQzZmFmYjk2NzRkZTQ4YTZm
YzA5NzgwHhcNMjUxMDE5MTIwMTUzWhcNMjUxMDIwMTIwMTUzWjAzMTEwLwYDVQQD
EyhmYTY4ZWQ1MmU2N2QzOGM3NmMzMGJhYjQyYzU0NmFmMGRhNDgzYjA5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoKWbTpTaYvyLsarMOJf/2QfjRujn
etE8lvNsSjBFWxjB5JIIx7/gYZmgBoaXm7lF7W/X+DtWdGItUlCO9c3Noy5z8UVH
Yi3V1jpMgj8HHowT28XZMu1ZxREx40Kj3wHnMFO63mUc7piwWjj9L7YtiPzrAdnI
3WVeB8vY+Pi2untVYIVMguwjDqlBPe+vyU9ghIOcj5ORFQasen772DQzLOr9gPIj
aguF6mPM7tXMHhJDNo/mdtgSv85GBXGZG8V5vGButj5/+8ZuLEaUu0CSBAzZls/A
lzqp+vEC2MHEogdOj33oU1amIQSYJ7m7KBFG02op3jEFfmUPFIEMwQy4IQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPpo7VLmfTjHbDC6tCxUavDaSDsJMB8GA1UdIwQY
MBaAFDdonqrLr2ivNdP6+5Z03kim/Al4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTjJpZXFzdXZhSzgxMF9yN2xuVGVTS2I4Q1hnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iOS84NDE3OWQtNGM2NS00NGI4LWIzMGIt
NWRhYmI0ZTQ3YWJiLzEvTjJpZXFzdXZhSzgxMF9yN2xuVGVTS2I4Q1hnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iOS84NDE3OWQtNGM2NS00NGI4LWIzMGItNWRhYmI0ZTQ3YWJi
LzEvTjJpZXFzdXZhSzgxMF9yN2xuVGVTS2I4Q1hnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAizcIvxSa
U6+S6izXSbq8wh7SycoEXqrjez534erL/ARM3/zaKk/00DH21DVo291cfBlSzR7F
c+HGOWJcLPZmJf1V/McEn8jbPAy9SRwV187CRIIdo0cLf1VWC7IsvLMLD3HfT5Ro
IdUn4g4NRH3jhvotOACHla1vxU+pzfkFPasAmy//BBdB7dSuEjW5o/eA140MS/uB
IIsd+Z6hUCmpuNpK84MyX1KIicYv1/XAdgwTuWd8KHzuJuh/HmKSEq4p+LXx/uYc
g5hWOokjP/O0iXhQIMJqX5cKByLsHI8QRLxpqBKS7S1KrCW5DF7hw1b2nd0oI8r5
+Q/tDFGz99TdhA==
-----END CERTIFICATE-----
Generated at Sun Oct 19 15:07:54 2025 by rpki-client