Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d8/020d47-2cc0-436b-b9f9-b73bfccb4e08/1/N97mrLx4K4x2lqQLKOgDOWGdDxs.mft
File: N97mrLx4K4x2lqQLKOgDOWGdDxs.mft (raw, json)
Hash identifier: ZA5SXDWUWO72j8QBu2h0qQ1mLf5G5DF4FBc6NiO8+zI=
Subject key identifier: 49:47:F8:37:39:79:47:B3:C4:B0:A4:A8:E6:F8:07:58:D5:F4:9D:76
Authority key identifier: 37:DE:E6:AC:BC:78:2B:8C:76:96:A4:0B:28:E8:03:39:61:9D:0F:1B
Certificate issuer: /CN=37dee6acbc782b8c7696a40b28e80339619d0f1b
Certificate serial: 0199FCFD31F94CEFD0E3B2F4DF15E2D533DA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/N97mrLx4K4x2lqQLKOgDOWGdDxs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d8/020d47-2cc0-436b-b9f9-b73bfccb4e08/1/N97mrLx4K4x2lqQLKOgDOWGdDxs.mft
Manifest number: 16E6
Signing time: Sun 19 Oct 2025 15:01:15 +0000
Manifest this update: Sun 19 Oct 2025 15:01:15 +0000
Manifest next update: Mon 20 Oct 2025 15:01:15 +0000
Files and hashes: 1: MbrCU5EWrzqFZBAeUe4bUJd8wew.roa (hash: 5Pva3cv3+IYsnuZvSImhrKouYMj9MMRYEIbLj8Bzi98=)
2: N97mrLx4K4x2lqQLKOgDOWGdDxs.crl (hash: CgG5f2DYdQbW2wgT8WLW3uVhuTTp/x6PCcJHAWeNx40=)
3: zQEfbksVhhA2S7Y-4p6fScJooW4.roa (hash: wml6Lhyvjtk0nrkWUQQ2ofJbLrbKj1m4u8FJSWuGbD4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d8/020d47-2cc0-436b-b9f9-b73bfccb4e08/1/N97mrLx4K4x2lqQLKOgDOWGdDxs.crl
rsync://rpki.ripe.net/repository/DEFAULT/d8/020d47-2cc0-436b-b9f9-b73bfccb4e08/1/N97mrLx4K4x2lqQLKOgDOWGdDxs.mft
rsync://rpki.ripe.net/repository/DEFAULT/N97mrLx4K4x2lqQLKOgDOWGdDxs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 15:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:fd:31:f9:4c:ef:d0:e3:b2:f4:df:15:e2:d5:33:da
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=37dee6acbc782b8c7696a40b28e80339619d0f1b
Validity
Not Before: Oct 19 15:01:15 2025 GMT
Not After : Oct 20 15:01:15 2025 GMT
Subject: CN=4947f837397947b3c4b0a4a8e6f80758d5f49d76
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:0e:f7:bf:c3:c0:86:8f:66:07:01:6a:bf:db:
35:41:c4:62:d9:96:f0:cd:e3:7d:d5:70:ee:be:38:
29:d6:d1:de:4c:c8:3a:6f:67:b0:57:b1:68:ab:7e:
c5:06:0e:86:29:42:5c:f6:f2:82:e6:e1:94:2b:b8:
9c:a9:5c:a9:a0:b7:56:f1:f1:d3:27:7e:78:de:47:
d1:d5:f1:46:f6:b7:48:c0:da:ae:cb:01:52:93:45:
c2:4e:e3:5b:61:e3:6f:f8:c0:88:cd:5a:a2:7a:fa:
5a:3e:f1:1c:70:61:25:04:86:9d:ed:c7:01:d2:95:
e9:a5:6b:df:4a:db:bb:7d:e4:29:e6:5e:48:d1:8b:
2a:e9:e5:14:82:0f:ca:bf:86:4e:da:bc:e2:ef:d4:
2d:ec:23:71:f8:2a:fd:9b:de:85:89:05:26:1b:40:
25:c8:06:76:41:97:15:90:4e:29:7c:ce:56:d1:c0:
87:cb:00:cf:69:6e:95:62:95:83:18:3c:21:2e:b1:
cc:cc:86:19:83:ff:bd:3c:d5:55:07:c9:90:10:c0:
10:f2:66:62:31:dc:12:92:64:8e:94:a3:81:d4:42:
98:22:f1:c3:dd:65:fa:40:57:b3:2d:8c:34:fd:59:
96:c1:1b:3f:25:3f:29:ce:0f:ca:6e:d6:d7:db:7a:
e3:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:47:F8:37:39:79:47:B3:C4:B0:A4:A8:E6:F8:07:58:D5:F4:9D:76
X509v3 Authority Key Identifier:
keyid:37:DE:E6:AC:BC:78:2B:8C:76:96:A4:0B:28:E8:03:39:61:9D:0F:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/N97mrLx4K4x2lqQLKOgDOWGdDxs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/020d47-2cc0-436b-b9f9-b73bfccb4e08/1/N97mrLx4K4x2lqQLKOgDOWGdDxs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/020d47-2cc0-436b-b9f9-b73bfccb4e08/1/N97mrLx4K4x2lqQLKOgDOWGdDxs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
03:9f:a2:5f:fd:ac:dd:86:ef:07:7d:de:d0:b3:5c:09:31:af:
a1:64:5d:e0:10:34:e3:7e:27:2c:e2:ba:35:9b:f5:52:f5:7b:
73:d3:d1:9b:3d:db:ad:8d:b2:fc:e0:8c:e5:65:19:a9:c2:e1:
cb:8c:a0:b9:20:c8:c6:f2:6f:ce:7b:fc:b6:f5:b6:20:e4:a7:
cd:d7:8c:67:1f:3f:0a:cb:7a:d1:e2:05:f8:17:ae:00:15:3e:
a5:bb:05:e9:a5:78:10:e1:07:f1:c4:22:a3:d4:ab:29:6e:c6:
bb:84:31:3d:9a:b4:47:a1:bd:ec:d1:03:8c:80:88:4e:b3:55:
ae:78:67:33:7c:38:cd:35:d1:61:62:ed:44:94:de:3c:7e:1e:
14:2f:41:f6:13:f8:cd:cd:97:19:41:7b:74:72:66:d4:5e:db:
6f:69:3d:7c:d0:90:ca:0e:67:4b:46:3b:b5:5b:9e:7c:12:bb:
05:75:c4:56:3f:c3:e3:28:33:10:fa:30:73:61:43:f0:5d:1f:
45:e7:1c:95:dd:01:f6:e4:c0:63:60:fd:1c:77:6c:ba:ca:b8:
28:82:8f:ca:8e:69:a5:fe:d5:3a:bb:86:a5:b9:0e:65:31:ab:
43:6c:66:17:1f:f9:9a:c9:e2:ba:30:0d:ff:d9:88:49:71:19:
5e:62:78:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 00:00:54 2025 by rpki-client