
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/06/24c5a3-2a31-4b85-840e-26806ec35c20/1/N0zC_9dpwY5ebw38mg6nT7P4wQg.mft
File: N0zC_9dpwY5ebw38mg6nT7P4wQg.mft (raw, json)
Hash identifier: HIneVXz9L4G0XAaNlAHhRVyX9MU+TwCk2VRiCEdBUE4=
Subject key identifier: B5:2C:D4:6D:48:0E:CD:05:0F:C3:30:01:9E:08:51:37:3E:36:87:6B
Authority key identifier: 37:4C:C2:FF:D7:69:C1:8E:5E:6F:0D:FC:9A:0E:A7:4F:B3:F8:C1:08
Certificate issuer: /CN=374cc2ffd769c18e5e6f0dfc9a0ea74fb3f8c108
Certificate serial: 019873E30EB5438FE60ECE1BD8AC83882B5D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/N0zC_9dpwY5ebw38mg6nT7P4wQg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/06/24c5a3-2a31-4b85-840e-26806ec35c20/1/N0zC_9dpwY5ebw38mg6nT7P4wQg.mft
Manifest number: 05D7
Signing time: Mon 04 Aug 2025 07:01:56 +0000
Manifest this update: Mon 04 Aug 2025 07:01:56 +0000
Manifest next update: Tue 05 Aug 2025 07:01:56 +0000
Files and hashes: 1: N0zC_9dpwY5ebw38mg6nT7P4wQg.crl (hash: dYrhx+KHz3kxU2KBlK/w3092l0DsZnrNEp1SbtNz/CE=)
2: vhowbyAk5Rh70uoSE00L17bmBWw.roa (hash: BWCvKLZnXJi7kB8pBa3EtqBdHPmAZ8d1B0Q3jz/KOuk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/06/24c5a3-2a31-4b85-840e-26806ec35c20/1/N0zC_9dpwY5ebw38mg6nT7P4wQg.crl
rsync://rpki.ripe.net/repository/DEFAULT/06/24c5a3-2a31-4b85-840e-26806ec35c20/1/N0zC_9dpwY5ebw38mg6nT7P4wQg.mft
rsync://rpki.ripe.net/repository/DEFAULT/N0zC_9dpwY5ebw38mg6nT7P4wQg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 03:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:73:e3:0e:b5:43:8f:e6:0e:ce:1b:d8:ac:83:88:2b:5d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=374cc2ffd769c18e5e6f0dfc9a0ea74fb3f8c108
Validity
Not Before: Aug 4 07:01:56 2025 GMT
Not After : Aug 5 07:01:56 2025 GMT
Subject: CN=b52cd46d480ecd050fc330019e0851373e36876b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:94:99:9e:51:6f:54:1d:df:df:5a:65:ca:a8:
8f:7d:d4:01:3f:ce:42:11:97:68:7d:40:55:fc:e9:
bb:29:e6:f0:05:0e:23:7c:91:89:f7:e5:04:80:e7:
c3:ac:a3:8b:0b:7c:43:8c:86:b9:4f:fe:33:ef:21:
9f:d4:bb:19:46:13:1a:61:71:c7:2b:5a:29:d9:ad:
70:03:99:55:e6:70:fd:2d:91:1b:34:68:9d:e1:8f:
40:cb:d7:a1:16:a5:cd:85:22:0f:b8:83:4a:b5:4d:
10:6f:3b:3d:23:05:e1:0b:f7:fd:5b:96:5a:d0:43:
5c:d7:38:3c:d9:88:a5:93:22:c0:80:2f:ce:ce:33:
03:2f:43:1a:4f:68:7d:39:24:5f:02:ac:4f:c1:84:
6a:b2:8d:f0:34:71:e7:23:77:3c:cf:da:6e:fc:60:
e1:3b:35:1c:d3:a7:25:a9:79:e2:80:01:4c:00:20:
f0:6f:f3:bb:be:1f:c2:13:ea:ea:7e:40:1d:44:0f:
c0:c4:d5:b4:ca:c7:21:82:ee:88:3f:8e:40:48:8d:
30:5b:c8:dd:e8:ab:d6:bb:13:d0:7f:21:da:41:56:
6b:93:70:b0:84:6c:5d:20:ff:85:2e:6d:37:0f:2d:
4a:7d:b5:30:f0:8a:90:1b:73:e2:85:0b:3c:74:80:
40:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:2C:D4:6D:48:0E:CD:05:0F:C3:30:01:9E:08:51:37:3E:36:87:6B
X509v3 Authority Key Identifier:
keyid:37:4C:C2:FF:D7:69:C1:8E:5E:6F:0D:FC:9A:0E:A7:4F:B3:F8:C1:08
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/N0zC_9dpwY5ebw38mg6nT7P4wQg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/06/24c5a3-2a31-4b85-840e-26806ec35c20/1/N0zC_9dpwY5ebw38mg6nT7P4wQg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/06/24c5a3-2a31-4b85-840e-26806ec35c20/1/N0zC_9dpwY5ebw38mg6nT7P4wQg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
71:5d:de:45:24:b0:cf:c6:a2:90:9b:68:19:a5:ee:60:fd:21:
58:b5:e3:f5:15:bd:db:7b:0a:27:2d:75:7d:5f:75:8d:43:6c:
de:99:be:9d:1b:3f:a5:6c:e1:87:c1:73:df:dc:4f:a1:77:83:
53:1b:92:6b:76:be:75:7a:a1:45:de:fb:70:f5:ba:97:42:8f:
55:d3:7f:fa:09:d0:9e:ff:7c:09:a1:1e:01:5d:71:09:b4:f5:
4c:df:b2:45:86:3f:9b:dc:7c:84:da:63:91:89:10:78:f2:31:
b9:46:de:15:e9:f1:52:f8:a8:3a:37:ff:b7:02:cb:32:61:c9:
43:f7:db:f8:cf:2a:91:9a:63:c9:84:8b:77:24:5f:4d:24:36:
4c:03:f2:ab:e5:d6:2b:83:5d:5d:94:5e:d0:29:f2:48:33:f4:
fd:46:7c:b3:5b:42:3f:fb:24:ca:5c:25:94:fb:b0:9d:ed:31:
b7:5c:a4:0f:97:43:7f:00:0e:e1:bb:2f:26:9d:5b:91:8f:e2:
4e:6c:dc:1c:8f:f3:cb:f0:6f:e2:57:50:96:08:be:44:61:33:
72:97:60:63:db:c2:92:9f:fb:3b:ed:63:f3:b8:23:64:e9:c7:
11:12:0b:4b:bb:f2:6b:74:77:c6:60:3e:26:be:8b:b7:d4:6d:
8d:8d:6d:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 11:08:38 2025 by rpki-client