Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/341508-a0aa-40c9-ae0c-0379930f8286/1/N1PbxYKexQCzNCahiNA5k5W4Bqo.mft
File: N1PbxYKexQCzNCahiNA5k5W4Bqo.mft (raw, json)
Hash identifier: GoQNalFua0uD9jINBq4l5E5JGd2T2KJ8eYZcmzR2Cck=
Subject key identifier: 41:49:C3:D5:D4:45:77:37:CC:E0:99:CE:6F:0A:2E:DF:1C:1D:D0:17
Authority key identifier: 37:53:DB:C5:82:9E:C5:00:B3:34:26:A1:88:D0:39:93:95:B8:06:AA
Certificate issuer: /CN=3753dbc5829ec500b33426a188d0399395b806aa
Certificate serial: 0199FF22C88C2A6592965CA9DB621F960689
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/N1PbxYKexQCzNCahiNA5k5W4Bqo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/341508-a0aa-40c9-ae0c-0379930f8286/1/N1PbxYKexQCzNCahiNA5k5W4Bqo.mft
Manifest number: 0509
Signing time: Mon 20 Oct 2025 01:01:33 +0000
Manifest this update: Mon 20 Oct 2025 01:01:33 +0000
Manifest next update: Tue 21 Oct 2025 01:01:33 +0000
Files and hashes: 1: N1PbxYKexQCzNCahiNA5k5W4Bqo.crl (hash: 33PYyz8vpBRwXuAjnoWZ/JrhztoIJRJo6XQ1CgOK14U=)
2: hr1FzTLzhvjdHRGQawXaK0XuGQ4.roa (hash: wRJW1xVVLpDSguuiY7y5qT4f4RgVOBoZp/PuXmFp+qI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fd/341508-a0aa-40c9-ae0c-0379930f8286/1/N1PbxYKexQCzNCahiNA5k5W4Bqo.crl
rsync://rpki.ripe.net/repository/DEFAULT/fd/341508-a0aa-40c9-ae0c-0379930f8286/1/N1PbxYKexQCzNCahiNA5k5W4Bqo.mft
rsync://rpki.ripe.net/repository/DEFAULT/N1PbxYKexQCzNCahiNA5k5W4Bqo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 20:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:ff:22:c8:8c:2a:65:92:96:5c:a9:db:62:1f:96:06:89
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3753dbc5829ec500b33426a188d0399395b806aa
Validity
Not Before: Oct 20 01:01:33 2025 GMT
Not After : Oct 21 01:01:33 2025 GMT
Subject: CN=4149c3d5d4457737cce099ce6f0a2edf1c1dd017
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f3:44:58:6e:42:28:b2:5e:c4:ac:f9:67:39:d4:
dd:34:22:ce:3f:51:d1:88:5e:7c:e1:a2:db:0d:83:
ba:b5:e4:9a:55:7f:3d:f3:6a:d8:e9:aa:d8:0b:f5:
ce:30:d2:57:a6:c9:38:36:7f:38:de:85:26:3b:ea:
5e:db:64:6d:17:bf:28:44:47:08:7d:cb:d1:61:41:
d8:9c:ef:b9:e3:a2:73:a4:78:7f:e6:04:94:0e:30:
8d:45:5d:73:20:08:cd:34:3b:d6:ef:81:dc:bf:35:
8f:06:78:bf:41:4d:52:a0:22:66:c3:c7:91:12:a8:
bf:0a:c0:1a:23:aa:90:d2:d3:b1:f1:de:71:42:29:
fd:23:da:c3:ad:d2:6d:13:59:5c:a9:56:8d:9d:f4:
2e:8e:9f:a2:e2:a5:55:c4:58:5a:28:1c:5a:46:65:
3b:af:20:68:e3:e1:7b:77:21:bc:cd:62:81:f4:be:
0e:78:8d:84:34:da:ea:af:c6:d0:30:1a:4f:72:66:
f8:90:38:5e:cd:3f:b5:21:d0:71:a8:58:f7:24:44:
45:74:68:ab:47:4b:24:45:10:8c:90:06:7f:f8:80:
5b:25:c9:d9:af:b2:ab:61:b2:37:6a:59:78:66:c2:
25:24:9f:40:31:cd:70:14:7a:6b:ac:fd:92:5b:14:
cb:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:49:C3:D5:D4:45:77:37:CC:E0:99:CE:6F:0A:2E:DF:1C:1D:D0:17
X509v3 Authority Key Identifier:
keyid:37:53:DB:C5:82:9E:C5:00:B3:34:26:A1:88:D0:39:93:95:B8:06:AA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/N1PbxYKexQCzNCahiNA5k5W4Bqo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/341508-a0aa-40c9-ae0c-0379930f8286/1/N1PbxYKexQCzNCahiNA5k5W4Bqo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/341508-a0aa-40c9-ae0c-0379930f8286/1/N1PbxYKexQCzNCahiNA5k5W4Bqo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1f:39:fd:2a:a0:af:c9:b8:27:85:49:69:cf:5e:ce:4d:2a:73:
f1:7a:55:e8:bd:35:61:c0:33:43:bc:18:8b:45:9d:40:c2:c2:
d5:73:3b:fd:03:d2:31:0a:06:c5:6b:bd:e8:d7:ff:b0:6b:8d:
e6:d0:df:66:7d:75:48:43:87:31:83:96:65:79:9c:1f:38:d5:
7d:67:79:ee:7c:08:19:5f:82:51:f7:fd:6c:bb:3b:35:90:54:
b2:b2:ba:70:a6:a2:74:86:54:19:53:3e:1e:71:1d:b0:b1:a8:
4a:ce:55:9d:7a:d2:86:e9:ee:39:87:8b:98:11:29:b4:d0:88:
ee:0f:78:93:fc:ac:65:c3:cf:6d:a9:b6:c2:87:61:f7:2c:71:
ad:96:70:ce:b0:81:23:86:13:e2:2d:90:ac:68:68:90:4b:c6:
8b:53:e0:76:b1:d1:39:c7:ea:f2:b9:b3:0c:cc:f0:49:5e:c5:
60:b7:c9:9b:a3:97:a0:f3:67:35:77:2f:e8:0c:9e:e0:d8:85:
98:cd:3e:e5:04:9e:11:c8:be:ea:21:f0:58:71:a4:3b:7d:f3:
2a:af:a4:0c:40:37:6b:ef:e9:ae:11:a6:59:58:69:30:fb:ff:
12:85:b2:4d:2b:6e:75:bd:42:cc:98:3f:b4:7e:2a:c3:6e:49:
72:2d:f8:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 03:34:56 2025 by rpki-client