Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/de956f-e55b-437e-85d9-686f836cbcad/1/N7giEJlIajsTPgE540uTQmTN1wA.mft
File: N7giEJlIajsTPgE540uTQmTN1wA.mft (raw, json)
Hash identifier: o2Esmlx/S+N1AnXBwPSiqtjtMJ5VZ22+oj0vAaj9Sss=
Subject key identifier: 31:1E:2D:D8:39:78:71:2E:DD:56:A2:F1:DC:3F:4B:9A:91:A1:6A:14
Authority key identifier: 37:B8:22:10:99:48:6A:3B:13:3E:01:39:E3:4B:93:42:64:CD:D7:00
Certificate issuer: /CN=37b8221099486a3b133e0139e34b934264cdd700
Certificate serial: 0199FC58AA3DA813D927151D4A4AECE80374
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/N7giEJlIajsTPgE540uTQmTN1wA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fe/de956f-e55b-437e-85d9-686f836cbcad/1/N7giEJlIajsTPgE540uTQmTN1wA.mft
Manifest number: 1057
Signing time: Sun 19 Oct 2025 12:01:32 +0000
Manifest this update: Sun 19 Oct 2025 12:01:32 +0000
Manifest next update: Mon 20 Oct 2025 12:01:32 +0000
Files and hashes: 1: N7giEJlIajsTPgE540uTQmTN1wA.crl (hash: 8t/Bd9XGHKVCflLCSNJ77Rl84NhBE8DDP9kc1ODSXRE=)
2: Vldb1Pv9SKH1pSEjNm1gf_bg3_M.roa (hash: Ox3xcaNfkxGbMXT71Q5JDbePmqXmxZEbJ+Iew6AAo/E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fe/de956f-e55b-437e-85d9-686f836cbcad/1/N7giEJlIajsTPgE540uTQmTN1wA.crl
rsync://rpki.ripe.net/repository/DEFAULT/fe/de956f-e55b-437e-85d9-686f836cbcad/1/N7giEJlIajsTPgE540uTQmTN1wA.mft
rsync://rpki.ripe.net/repository/DEFAULT/N7giEJlIajsTPgE540uTQmTN1wA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:58:aa:3d:a8:13:d9:27:15:1d:4a:4a:ec:e8:03:74
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=37b8221099486a3b133e0139e34b934264cdd700
Validity
Not Before: Oct 19 12:01:32 2025 GMT
Not After : Oct 20 12:01:32 2025 GMT
Subject: CN=311e2dd83978712edd56a2f1dc3f4b9a91a16a14
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:51:10:d3:71:8b:a1:60:15:b4:cd:18:3a:e0:
49:b3:ed:41:b7:0f:ff:30:f0:0b:7e:fe:5c:fd:08:
b0:8c:5c:62:e1:17:8e:c6:05:ff:9e:03:a1:eb:35:
96:0a:c2:c9:33:aa:61:91:69:f1:b7:3f:00:60:d8:
19:be:0b:74:cc:37:7c:c9:48:36:c5:c2:a0:df:92:
ee:02:f8:7f:24:54:70:68:de:14:b5:a2:a9:da:e4:
0b:29:e8:ef:65:a7:a0:2c:97:ad:9f:af:2f:aa:82:
97:94:07:11:f9:88:6b:30:73:9f:e9:fb:2d:c2:b4:
83:df:dd:09:d5:78:19:b1:88:93:73:e0:c1:20:c2:
ba:f0:c7:c2:62:49:36:c9:48:d6:1c:87:e4:c9:3c:
bc:87:4d:b8:81:58:49:2b:10:09:c9:17:e2:f1:d0:
5a:25:da:cf:a8:77:36:f9:14:0b:50:2a:fb:a7:39:
f3:16:bc:8f:15:c4:a3:69:03:59:7f:ce:2e:2e:1c:
5c:66:87:ba:83:6a:3a:48:8b:20:9d:22:f3:7d:ab:
e2:e6:fb:50:2d:e8:b8:95:61:48:38:95:c3:92:ab:
cd:f6:c5:8f:a5:23:b5:76:3a:77:25:5d:00:0a:2c:
3b:dd:d6:d3:93:59:86:ed:dc:0f:ab:76:49:3c:07:
b4:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:1E:2D:D8:39:78:71:2E:DD:56:A2:F1:DC:3F:4B:9A:91:A1:6A:14
X509v3 Authority Key Identifier:
keyid:37:B8:22:10:99:48:6A:3B:13:3E:01:39:E3:4B:93:42:64:CD:D7:00
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/N7giEJlIajsTPgE540uTQmTN1wA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/de956f-e55b-437e-85d9-686f836cbcad/1/N7giEJlIajsTPgE540uTQmTN1wA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/de956f-e55b-437e-85d9-686f836cbcad/1/N7giEJlIajsTPgE540uTQmTN1wA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a8:06:6a:10:37:3c:83:38:5a:e4:11:fb:3d:7c:fc:3c:2d:69:
fa:d1:4a:3d:c8:a8:8c:fd:7f:f8:23:1d:b6:9a:ec:1d:38:78:
48:14:66:3e:62:9a:c5:21:c9:26:1e:fe:fe:47:0c:e7:09:3f:
7e:4b:c0:67:b7:9f:34:45:dc:e5:2b:a7:6c:34:f1:ca:60:e3:
95:ef:6b:ff:d2:8e:05:94:70:f1:aa:b6:b0:48:2d:d4:d3:30:
33:67:c4:cc:73:a0:dd:27:fe:05:57:5d:ce:41:03:b8:8e:c3:
41:44:35:8b:75:ec:4b:43:5c:41:de:ea:98:a5:fb:1e:91:b4:
6a:b6:c4:13:2a:e9:b4:25:a3:ba:bd:12:34:34:e7:c1:a4:7b:
11:94:20:3a:bb:70:42:89:5c:36:dc:0d:35:c7:53:78:b4:1a:
c0:1a:28:0f:65:ac:e6:22:48:62:0b:27:46:f0:03:21:b1:64:
eb:a5:63:cb:d9:96:12:50:ad:40:13:bb:42:1d:42:2d:73:04:
a6:a1:f4:3e:a2:56:d5:59:a6:c3:b8:83:bc:ca:c4:66:3a:d7:
8e:86:7a:82:92:53:3a:74:1f:1d:f9:9d:8e:68:e0:d1:c5:3c:
31:f0:30:d8:ee:6c:f9:eb:32:78:75:9c:fb:cc:32:be:3a:14:
4a:f1:ee:00
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn8WKo9qBPZJxUdSkrs6AN0MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM3YjgyMjEwOTk0ODZhM2IxMzNlMDEzOWUzNGI5MzQyNjRj
ZGQ3MDAwHhcNMjUxMDE5MTIwMTMyWhcNMjUxMDIwMTIwMTMyWjAzMTEwLwYDVQQD
EygzMTFlMmRkODM5Nzg3MTJlZGQ1NmEyZjFkYzNmNGI5YTkxYTE2YTE0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqFEQ03GLoWAVtM0YOuBJs+1Btw//
MPALfv5c/QiwjFxi4ReOxgX/ngOh6zWWCsLJM6phkWnxtz8AYNgZvgt0zDd8yUg2
xcKg35LuAvh/JFRwaN4UtaKp2uQLKejvZaegLJetn68vqoKXlAcR+YhrMHOf6fst
wrSD390J1XgZsYiTc+DBIMK68MfCYkk2yUjWHIfkyTy8h024gVhJKxAJyRfi8dBa
JdrPqHc2+RQLUCr7pznzFryPFcSjaQNZf84uLhxcZoe6g2o6SIsgnSLzfavi5vtQ
Lei4lWFIOJXDkqvN9sWPpSO1djp3JV0ACiw73dbTk1mG7dwPq3ZJPAe0nwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDEeLdg5eHEu3Vai8dw/S5qRoWoUMB8GA1UdIwQY
MBaAFDe4IhCZSGo7Ez4BOeNLk0JkzdcAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTjdnaUVKbElhanNUUGdFNTQwdVRRbVROMXdBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZS9kZTk1NmYtZTU1Yi00MzdlLTg1ZDkt
Njg2ZjgzNmNiY2FkLzEvTjdnaUVKbElhanNUUGdFNTQwdVRRbVROMXdBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mZS9kZTk1NmYtZTU1Yi00MzdlLTg1ZDktNjg2ZjgzNmNiY2Fk
LzEvTjdnaUVKbElhanNUUGdFNTQwdVRRbVROMXdBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAqAZqEDc8
gzha5BH7PXz8PC1p+tFKPciojP1/+CMdtprsHTh4SBRmPmKaxSHJJh7+/kcM5wk/
fkvAZ7efNEXc5SunbDTxymDjle9r/9KOBZRw8aq2sEgt1NMwM2fEzHOg3Sf+BVdd
zkEDuI7DQUQ1i3XsS0NcQd7qmKX7HpG0arbEEyrptCWjur0SNDTnwaR7EZQgOrtw
QolcNtwNNcdTeLQawBooD2Ws5iJIYgsnRvADIbFk66Vjy9mWElCtQBO7Qh1CLXME
pqH0PqJW1Vmmw7iDvMrEZjrXjoZ6gpJTOnQfHfmdjmjg0cU8MfAw2O5s+esyeHWc
+8wyvjoUSvHuAA==
-----END CERTIFICATE-----
Generated at Sun Oct 19 20:49:00 2025 by rpki-client