Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/3a9021-2959-47e7-a615-81144fd01564/1/N6W4zf0deX2GBmDjS_oaKthf-dk.mft
File: N6W4zf0deX2GBmDjS_oaKthf-dk.mft (raw, json)
Hash identifier: CUG0UJ0+2bKN2Qg8XA35A38vNXYeSUKjLFdbrht38Fk=
Subject key identifier: D5:62:A6:A1:47:A2:FE:D0:DF:C7:A2:AF:64:08:1A:70:69:B6:32:5E
Authority key identifier: 37:A5:B8:CD:FD:1D:79:7D:86:06:60:E3:4B:FA:1A:2A:D8:5F:F9:D9
Certificate issuer: /CN=37a5b8cdfd1d797d860660e34bfa1a2ad85ff9d9
Certificate serial: 019A00350E68794AAEBFF941C55D6090DA26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/N6W4zf0deX2GBmDjS_oaKthf-dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e9/3a9021-2959-47e7-a615-81144fd01564/1/N6W4zf0deX2GBmDjS_oaKthf-dk.mft
Manifest number: 16E7
Signing time: Mon 20 Oct 2025 06:01:08 +0000
Manifest this update: Mon 20 Oct 2025 06:01:08 +0000
Manifest next update: Tue 21 Oct 2025 06:01:08 +0000
Files and hashes: 1: N6W4zf0deX2GBmDjS_oaKthf-dk.crl (hash: tgcN2qWtgn23bB1RvDrfbrAgDMKmDUjYOnjtzKyuVsc=)
2: Ofe5y963IBdAewU6cuUJ3GOhnPg.roa (hash: wYPWSR0SRCo8lw+izQyw6mN43vzofM40zE5eYO1oT9w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e9/3a9021-2959-47e7-a615-81144fd01564/1/N6W4zf0deX2GBmDjS_oaKthf-dk.crl
rsync://rpki.ripe.net/repository/DEFAULT/e9/3a9021-2959-47e7-a615-81144fd01564/1/N6W4zf0deX2GBmDjS_oaKthf-dk.mft
rsync://rpki.ripe.net/repository/DEFAULT/N6W4zf0deX2GBmDjS_oaKthf-dk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 06:01:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:00:35:0e:68:79:4a:ae:bf:f9:41:c5:5d:60:90:da:26
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=37a5b8cdfd1d797d860660e34bfa1a2ad85ff9d9
Validity
Not Before: Oct 20 06:01:08 2025 GMT
Not After : Oct 21 06:01:08 2025 GMT
Subject: CN=d562a6a147a2fed0dfc7a2af64081a7069b6325e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:c0:32:29:48:76:6a:cd:c5:e6:4d:fb:bb:3e:
dd:3d:7d:49:68:f2:a7:1d:a8:88:8c:e3:43:73:46:
33:27:62:e7:3c:59:37:b2:9c:7a:aa:e9:32:03:b0:
3f:e5:b9:01:30:8e:a2:08:3d:9e:ac:74:cf:93:8f:
55:c1:25:69:96:f1:26:85:66:94:fc:44:82:ba:49:
94:b5:1d:7f:47:80:35:d0:1f:5f:cd:ed:ad:28:5a:
25:fa:25:e6:5e:ff:95:08:60:6d:40:48:fa:da:3c:
94:d6:d7:04:b4:d4:49:6c:5e:0a:c1:47:7d:82:27:
df:39:a2:43:1c:94:02:93:63:d2:e1:44:51:6d:92:
5e:9f:74:22:7e:7e:87:cc:30:65:77:05:74:68:b1:
6a:27:a4:9b:8a:9c:3b:0e:b4:07:8d:94:a4:fd:95:
6a:57:8e:e8:16:60:23:ce:f1:a1:6a:3e:df:f5:78:
0b:f3:c0:08:2d:2b:04:0b:49:86:c2:d8:41:5e:a4:
46:fd:1d:9f:bf:16:fc:23:e3:ba:4c:f4:5a:0b:4f:
f8:93:5e:de:09:db:20:77:ad:ce:12:8c:91:18:b9:
31:6f:e2:82:46:7e:02:eb:8a:59:3b:52:da:93:84:
f0:97:b0:d4:66:09:ff:98:6a:dc:a6:c7:ef:3b:65:
58:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:62:A6:A1:47:A2:FE:D0:DF:C7:A2:AF:64:08:1A:70:69:B6:32:5E
X509v3 Authority Key Identifier:
keyid:37:A5:B8:CD:FD:1D:79:7D:86:06:60:E3:4B:FA:1A:2A:D8:5F:F9:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/N6W4zf0deX2GBmDjS_oaKthf-dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/3a9021-2959-47e7-a615-81144fd01564/1/N6W4zf0deX2GBmDjS_oaKthf-dk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/3a9021-2959-47e7-a615-81144fd01564/1/N6W4zf0deX2GBmDjS_oaKthf-dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
62:d5:47:2b:a2:70:85:71:83:72:87:4e:ae:cc:92:7d:92:2b:
32:ee:e8:42:38:fa:6a:4f:46:ce:89:dc:97:f4:fc:63:81:51:
01:79:40:3c:65:d7:d9:51:54:6e:93:d3:07:fb:6a:30:ca:73:
f8:52:79:46:98:38:f1:08:f9:93:db:7a:c8:ce:f4:ea:56:b0:
71:0b:80:1d:e5:9c:e4:a1:4d:64:9a:2f:21:3e:66:72:f9:da:
0b:6f:da:09:e1:83:d8:2b:26:1f:ef:28:c7:c5:16:79:f4:b8:
14:c5:15:00:f7:c0:be:75:ee:e5:ab:fa:6f:df:5c:99:4f:cc:
a4:0c:79:1c:8d:a7:fd:f8:11:10:4a:1e:61:cd:cf:57:07:17:
9f:0c:5d:e0:ad:e6:d9:bc:fa:63:55:03:ee:93:c0:35:c7:3a:
8a:d8:3b:07:76:7b:b8:ee:77:b4:6d:51:e9:be:c3:57:fa:30:
54:6f:dd:39:bb:81:38:a7:fc:d1:25:0a:1f:11:1c:48:43:9d:
dd:3a:6d:eb:f3:49:ee:1b:da:9d:e1:4c:70:96:d7:86:96:b7:
b3:58:69:28:36:d7:6a:7a:ef:8f:5c:2b:d1:61:74:a5:7d:97:
57:cc:4d:9f:04:a9:a4:1c:e3:17:ce:81:e3:47:02:f7:dd:d5:
6e:2b:8f:13
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZoANQ5oeUquv/lBxV1gkNomMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM3YTViOGNkZmQxZDc5N2Q4NjA2NjBlMzRiZmExYTJhZDg1
ZmY5ZDkwHhcNMjUxMDIwMDYwMTA4WhcNMjUxMDIxMDYwMTA4WjAzMTEwLwYDVQQD
EyhkNTYyYTZhMTQ3YTJmZWQwZGZjN2EyYWY2NDA4MWE3MDY5YjYzMjVlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3cAyKUh2as3F5k37uz7dPX1JaPKn
HaiIjONDc0YzJ2LnPFk3spx6qukyA7A/5bkBMI6iCD2erHTPk49VwSVplvEmhWaU
/ESCukmUtR1/R4A10B9fze2tKFol+iXmXv+VCGBtQEj62jyU1tcEtNRJbF4KwUd9
giffOaJDHJQCk2PS4URRbZJen3Qifn6HzDBldwV0aLFqJ6Sbipw7DrQHjZSk/ZVq
V47oFmAjzvGhaj7f9XgL88AILSsEC0mGwthBXqRG/R2fvxb8I+O6TPRaC0/4k17e
Cdsgd63OEoyRGLkxb+KCRn4C64pZO1Lak4Twl7DUZgn/mGrcpsfvO2VYUwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNVipqFHov7Q38eir2QIGnBptjJeMB8GA1UdIwQY
MBaAFDeluM39HXl9hgZg40v6GirYX/nZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTjZXNHpmMGRlWDJHQm1EalNfb2FLdGhmLWRrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lOS8zYTkwMjEtMjk1OS00N2U3LWE2MTUt
ODExNDRmZDAxNTY0LzEvTjZXNHpmMGRlWDJHQm1EalNfb2FLdGhmLWRrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lOS8zYTkwMjEtMjk1OS00N2U3LWE2MTUtODExNDRmZDAxNTY0
LzEvTjZXNHpmMGRlWDJHQm1EalNfb2FLdGhmLWRrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYtVHK6Jw
hXGDcodOrsySfZIrMu7oQjj6ak9Gzoncl/T8Y4FRAXlAPGXX2VFUbpPTB/tqMMpz
+FJ5Rpg48Qj5k9t6yM706lawcQuAHeWc5KFNZJovIT5mcvnaC2/aCeGD2CsmH+8o
x8UWefS4FMUVAPfAvnXu5av6b99cmU/MpAx5HI2n/fgREEoeYc3PVwcXnwxd4K3m
2bz6Y1UD7pPANcc6itg7B3Z7uO53tG1R6b7DV/owVG/dObuBOKf80SUKHxEcSEOd
3Tpt6/NJ7hvaneFMcJbXhpa3s1hpKDbXanrvj1wr0WF0pX2XV8xNnwSppBzjF86B
40cC993VbiuPEw==
-----END CERTIFICATE-----
Generated at Mon Oct 20 12:52:17 2025 by rpki-client