Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/dc76ff-2b35-42be-ab56-5df2de08b695/1/N9Zwai4nDLSGu0ckNGPMu_n01co.mft
File: N9Zwai4nDLSGu0ckNGPMu_n01co.mft (raw, json)
Hash identifier: mXMFCpg8DR+QS5TfuyeZx/rWzsyaNB5JihxJp4OMp64=
Subject key identifier: 5B:2A:9E:7F:96:50:AA:C4:57:7E:68:F6:91:CF:EF:60:FA:E7:1E:BC
Authority key identifier: 37:D6:70:6A:2E:27:0C:B4:86:BB:47:24:34:63:CC:BB:F9:F4:D5:CA
Certificate issuer: /CN=37d6706a2e270cb486bb47243463ccbbf9f4d5ca
Certificate serial: 0199FB7CDC7B17F9E3CAF9414FE390449548
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/N9Zwai4nDLSGu0ckNGPMu_n01co.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f6/dc76ff-2b35-42be-ab56-5df2de08b695/1/N9Zwai4nDLSGu0ckNGPMu_n01co.mft
Manifest number: 13E6
Signing time: Sun 19 Oct 2025 08:01:28 +0000
Manifest this update: Sun 19 Oct 2025 08:01:28 +0000
Manifest next update: Mon 20 Oct 2025 08:01:28 +0000
Files and hashes: 1: 7YrGIJ8Lq47CmtHh_aA30VmkPjo.roa (hash: hoLOmqh1vosQ/NxuWEBoizkiy56HJ0MD/vugBLaASkY=)
2: N9Zwai4nDLSGu0ckNGPMu_n01co.crl (hash: dh0JqhLzFmYG8NN+KZ+j9LJ+ZfmJveKqpJ6FV8y1LRI=)
3: bWi2Mkf_arohbIgqpZEaCaewlho.roa (hash: o4YIfYScSNSPxx9rfmbXoBu7Bh9velBEqxyrfd2MDmI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f6/dc76ff-2b35-42be-ab56-5df2de08b695/1/N9Zwai4nDLSGu0ckNGPMu_n01co.crl
rsync://rpki.ripe.net/repository/DEFAULT/f6/dc76ff-2b35-42be-ab56-5df2de08b695/1/N9Zwai4nDLSGu0ckNGPMu_n01co.mft
rsync://rpki.ripe.net/repository/DEFAULT/N9Zwai4nDLSGu0ckNGPMu_n01co.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:7c:dc:7b:17:f9:e3:ca:f9:41:4f:e3:90:44:95:48
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=37d6706a2e270cb486bb47243463ccbbf9f4d5ca
Validity
Not Before: Oct 19 08:01:28 2025 GMT
Not After : Oct 20 08:01:28 2025 GMT
Subject: CN=5b2a9e7f9650aac4577e68f691cfef60fae71ebc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:f0:79:b6:d3:99:96:da:c8:67:30:3b:2c:4a:
1b:6a:9d:cd:b2:01:65:81:6c:07:ee:7d:28:cb:c2:
19:7f:7a:9e:4a:33:89:56:a0:6b:a9:4a:9c:6c:b3:
7f:64:e3:65:fe:ca:43:5b:ed:94:77:f5:67:40:ac:
4d:6c:dd:79:0d:3a:64:16:e8:56:69:b0:58:6d:63:
b8:6a:2d:3c:af:a7:41:f7:af:e8:dd:b7:bd:4e:dd:
75:5e:23:77:41:0b:a3:e9:d8:5e:1d:bc:ac:d3:f5:
0f:83:6d:5a:7f:5c:32:c8:80:15:ba:c5:de:e5:45:
f3:48:90:c2:49:0d:f5:a6:fe:6e:60:3a:3a:16:16:
02:2b:30:07:b1:15:5c:88:67:47:d8:27:3a:5a:17:
17:6c:48:f6:cd:69:36:4e:3a:96:69:85:5c:6f:99:
41:db:fb:99:9e:a6:64:1a:2a:53:9d:95:a9:a0:78:
71:fa:05:10:30:16:18:06:72:f8:81:49:17:ad:d4:
34:3f:c3:c2:e3:7b:33:1c:4e:2e:06:68:43:ba:bd:
09:54:46:24:46:79:b2:37:51:87:9c:80:19:8c:59:
5b:f4:fc:44:42:7a:3d:22:43:c5:f8:74:84:e5:90:
1a:38:db:90:63:25:db:ad:37:4a:3d:41:e1:55:4c:
cc:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:2A:9E:7F:96:50:AA:C4:57:7E:68:F6:91:CF:EF:60:FA:E7:1E:BC
X509v3 Authority Key Identifier:
keyid:37:D6:70:6A:2E:27:0C:B4:86:BB:47:24:34:63:CC:BB:F9:F4:D5:CA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/N9Zwai4nDLSGu0ckNGPMu_n01co.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/dc76ff-2b35-42be-ab56-5df2de08b695/1/N9Zwai4nDLSGu0ckNGPMu_n01co.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/dc76ff-2b35-42be-ab56-5df2de08b695/1/N9Zwai4nDLSGu0ckNGPMu_n01co.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
02:d8:a9:ee:f9:c3:5a:6d:85:3c:15:7b:71:8e:ee:1b:4b:01:
55:25:1d:5e:c6:fc:56:75:8e:cc:56:11:a1:ef:b8:70:2d:dd:
f9:3f:c2:fc:c6:d7:de:7d:6f:e4:e4:f9:cc:19:f3:80:fc:e2:
76:d7:43:d5:39:88:ef:af:e5:d4:67:b2:20:7b:5d:89:3a:07:
50:85:c1:ce:d8:0a:9d:b0:52:3e:9c:73:e6:1a:be:75:5c:18:
97:d3:93:28:32:b3:2e:89:81:22:d8:84:30:aa:c3:16:b9:0a:
33:8c:8d:49:bd:31:a2:75:48:91:10:33:9c:e0:29:d1:06:59:
dd:a1:38:24:37:14:70:60:11:b8:83:40:58:0c:6f:5a:5d:6a:
92:cc:8d:78:6f:03:9e:26:5f:69:19:97:a3:3d:03:8e:0a:27:
74:7c:c8:c6:4b:10:9c:9b:20:0c:59:8b:61:c1:fa:92:18:6e:
95:b7:9e:66:da:1e:c0:4c:d1:5e:fc:17:8e:31:df:da:b2:8a:
93:71:19:b1:17:7d:e3:43:d8:a4:ec:d2:a3:ac:f9:fc:4c:0e:
a0:74:29:e4:ee:23:93:53:eb:76:cd:b7:d3:86:93:65:26:c9:
89:54:f7:64:9b:5b:d3:e4:e8:47:7d:21:01:46:0b:6e:5d:03:
1b:ff:f9:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:42:52 2025 by rpki-client