Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/3252a9-2e42-4228-b540-e6064efce2ac/1/N3wmTTiDM9NCNykxqg0ZKw-6YsE.mft
File: N3wmTTiDM9NCNykxqg0ZKw-6YsE.mft (raw, json)
Hash identifier: CEE3mlkyTnp/CcOhqayd0ZCsDN0x532ze9dQAcAmiqM=
Subject key identifier: CF:E4:3A:DB:8D:BC:3E:00:5B:F0:0F:77:E1:92:C8:5D:8D:E3:C6:D3
Authority key identifier: 37:7C:26:4D:38:83:33:D3:42:37:29:31:AA:0D:19:2B:0F:BA:62:C1
Certificate issuer: /CN=377c264d388333d342372931aa0d192b0fba62c1
Certificate serial: 0199FC8F3BF66FB67782B6C4E6160376A2FA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/N3wmTTiDM9NCNykxqg0ZKw-6YsE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/3252a9-2e42-4228-b540-e6064efce2ac/1/N3wmTTiDM9NCNykxqg0ZKw-6YsE.mft
Manifest number: 16E0
Signing time: Sun 19 Oct 2025 13:01:09 +0000
Manifest this update: Sun 19 Oct 2025 13:01:09 +0000
Manifest next update: Mon 20 Oct 2025 13:01:09 +0000
Files and hashes: 1: N3wmTTiDM9NCNykxqg0ZKw-6YsE.crl (hash: 4R4OVuyYu8UaBhCHWEpS//fTlrBZ1R4P6A2K111L9vE=)
2: kDvrCZDJUN6ltTbVicwTRbgkORo.roa (hash: ZU7fz2rjwPLJnVqFmW3M/TsgnCWukDOaodixRDMDm4E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/eb/3252a9-2e42-4228-b540-e6064efce2ac/1/N3wmTTiDM9NCNykxqg0ZKw-6YsE.crl
rsync://rpki.ripe.net/repository/DEFAULT/eb/3252a9-2e42-4228-b540-e6064efce2ac/1/N3wmTTiDM9NCNykxqg0ZKw-6YsE.mft
rsync://rpki.ripe.net/repository/DEFAULT/N3wmTTiDM9NCNykxqg0ZKw-6YsE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:8f:3b:f6:6f:b6:77:82:b6:c4:e6:16:03:76:a2:fa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=377c264d388333d342372931aa0d192b0fba62c1
Validity
Not Before: Oct 19 13:01:09 2025 GMT
Not After : Oct 20 13:01:09 2025 GMT
Subject: CN=cfe43adb8dbc3e005bf00f77e192c85d8de3c6d3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:6e:9a:49:e4:c7:ce:1c:29:f9:c8:cc:eb:e3:
f3:8d:a1:4d:77:d3:65:5c:4e:31:b2:0a:f5:9a:71:
32:49:5b:c1:54:86:0f:21:c0:75:69:d3:f7:ba:21:
1e:d9:df:67:03:ef:95:fd:d3:68:d4:79:29:92:45:
a3:eb:98:05:ff:d7:70:5e:68:03:9a:2a:7e:cd:00:
cb:db:df:f8:a6:79:4d:02:4c:83:47:26:4e:79:97:
21:ce:74:d8:d1:d6:2a:df:48:50:e0:34:dd:2a:1a:
84:cf:93:39:79:bd:b0:4c:5a:9f:fd:f2:4d:93:b8:
75:f2:f9:6d:fa:c4:a8:0f:44:db:10:2e:08:55:9c:
dd:b8:39:92:38:ee:86:ec:fb:59:4e:e0:03:5d:cc:
21:fb:75:c2:45:7a:0e:cf:e1:3b:1b:e4:ca:cd:8a:
ff:57:ad:47:3e:72:a3:ab:9b:61:63:a0:02:fc:18:
d8:85:25:37:09:3c:67:02:10:bf:fa:44:00:24:cc:
cc:6d:50:e3:71:63:71:6c:44:9c:0a:1f:8f:08:20:
5e:e8:0b:e4:60:86:23:65:0b:40:90:75:c0:c8:ec:
80:a8:98:20:6d:02:80:d0:1b:ac:a5:80:4e:46:c7:
5d:86:b9:83:ca:5c:2e:1a:f4:6e:d1:bb:b4:e9:98:
01:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:E4:3A:DB:8D:BC:3E:00:5B:F0:0F:77:E1:92:C8:5D:8D:E3:C6:D3
X509v3 Authority Key Identifier:
keyid:37:7C:26:4D:38:83:33:D3:42:37:29:31:AA:0D:19:2B:0F:BA:62:C1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/N3wmTTiDM9NCNykxqg0ZKw-6YsE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/3252a9-2e42-4228-b540-e6064efce2ac/1/N3wmTTiDM9NCNykxqg0ZKw-6YsE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/3252a9-2e42-4228-b540-e6064efce2ac/1/N3wmTTiDM9NCNykxqg0ZKw-6YsE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
28:08:19:2d:d6:29:72:2d:4a:4f:2f:27:11:bf:d6:4d:13:b2:
4f:59:c5:61:29:31:65:a1:83:da:f5:34:44:9c:10:88:f1:60:
4b:7c:97:e7:5c:d4:1e:0e:96:e5:27:fa:44:8a:25:99:e2:d0:
92:be:c9:68:f0:e3:d6:6a:54:85:e7:79:ae:58:01:6d:16:8b:
b8:4a:b9:e9:c5:12:27:17:7f:6b:cf:12:d2:ed:57:c2:3b:fe:
53:9c:dd:69:65:46:2b:5e:01:03:a9:60:8d:6c:de:4a:c8:8a:
a4:0e:b0:a7:3a:68:61:67:04:30:c5:74:b7:53:89:4c:9e:90:
ae:72:6a:25:0b:9c:b0:dd:54:73:6c:6f:89:fb:de:81:d3:a0:
6e:18:d7:16:2f:e1:57:fa:20:80:1e:e8:31:ad:5a:72:c9:d3:
45:7d:5a:4a:fa:71:58:ab:b4:9f:3d:9a:ae:9f:fc:72:8d:9c:
49:86:e2:07:87:64:27:8b:ae:7b:ee:01:2f:1f:5f:e7:1f:2e:
b6:4d:70:1c:4a:4b:03:62:65:71:b6:7c:1a:e8:8b:c2:55:23:
f0:99:c2:4e:9f:ae:b3:d0:77:6c:81:31:2e:88:d3:23:cb:f7:
e3:a2:62:d2:fc:c1:36:77:fd:a5:5c:f2:bb:ed:5d:20:1a:30:
ed:80:85:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:33:47 2025 by rpki-client