Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/dc5881-3632-45af-bf59-f44a57ced73d/1/N1oGTzAQJrw8-HZm1qggEoISqBE.mft
File: N1oGTzAQJrw8-HZm1qggEoISqBE.mft (raw, json)
Hash identifier: LT5Gsj6enGHFbhRYJqutK1bZIqSOyycravyFD057MVs=
Subject key identifier: 3C:38:7C:82:AC:5F:AC:E2:92:FA:A3:8C:EE:DB:0F:69:61:FE:12:A2
Authority key identifier: 37:5A:06:4F:30:10:26:BC:3C:F8:76:66:D6:A8:20:12:82:12:A8:11
Certificate issuer: /CN=375a064f301026bc3cf87666d6a820128212a811
Certificate serial: 01989290E325415DCFC55FB8F7C29BD45D24
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/N1oGTzAQJrw8-HZm1qggEoISqBE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0e/dc5881-3632-45af-bf59-f44a57ced73d/1/N1oGTzAQJrw8-HZm1qggEoISqBE.mft
Manifest number: 166E
Signing time: Sun 10 Aug 2025 06:00:25 +0000
Manifest this update: Sun 10 Aug 2025 06:00:25 +0000
Manifest next update: Mon 11 Aug 2025 06:00:25 +0000
Files and hashes: 1: IX5R2XsrF811pCyYXDNZoJSyFRA.roa (hash: /gZBIGQCMYCl4cQjL9WjQOfClbjeyQFk5ObTpmqIsLs=)
2: N1oGTzAQJrw8-HZm1qggEoISqBE.crl (hash: jrSCZca2QsBHAVyJUmbH5vBx7WllGizvfJCb+/r4Yvc=)
3: Np1AqOGsTVm4b7PU4q2Ym4AhTQ4.roa (hash: gOor81zffrAZ51A4wHFBhBWmMuS0TeHsEmFrT2SiKO8=)
4: QAdKL3RVpDPiT27zpj5LjKKW5fA.roa (hash: 9Pi2E/uo6R+xbakiyhvLFkyoh9HvQ2++jmc2fWO9TEQ=)
5: Tbof-4aZ0VQUdZsgIoMBC5FBick.roa (hash: QIa6RV95cu9pHdFNYbOKsVEQPNGhX431Y5yIZA5T6KM=)
6: iyS2JnXtsNdJf5e1S9ojUsd5BNY.roa (hash: aFnwamQ2oQPi/IvrrPt/RGBWO8+ZWgyDLcYhIaUPHek=)
7: lbz_04eUBmkCrsObDIi_l3hQ9kE.roa (hash: 9b+KSYQE0O1uMcRhVoqK3mtyhTf347ICutm/lJE1J/Q=)
8: yp2315R2ufQovlLYyqvF4L6qpic.roa (hash: 38mTLXaspclVGWUyPHzLZfab7SdFQNnMV+B1NXi8FuU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0e/dc5881-3632-45af-bf59-f44a57ced73d/1/N1oGTzAQJrw8-HZm1qggEoISqBE.crl
rsync://rpki.ripe.net/repository/DEFAULT/0e/dc5881-3632-45af-bf59-f44a57ced73d/1/N1oGTzAQJrw8-HZm1qggEoISqBE.mft
rsync://rpki.ripe.net/repository/DEFAULT/N1oGTzAQJrw8-HZm1qggEoISqBE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 11 Aug 2025 06:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:92:90:e3:25:41:5d:cf:c5:5f:b8:f7:c2:9b:d4:5d:24
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=375a064f301026bc3cf87666d6a820128212a811
Validity
Not Before: Aug 10 06:00:25 2025 GMT
Not After : Aug 11 06:00:25 2025 GMT
Subject: CN=3c387c82ac5face292faa38ceedb0f6961fe12a2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:e6:dc:fd:4d:41:f6:9b:a8:ce:77:3f:e5:a2:
97:6c:6d:f6:4a:69:36:c3:cd:a2:79:35:97:06:68:
3f:0f:5f:3c:da:9e:e0:86:91:0d:09:92:71:d2:70:
40:e4:55:80:c4:a4:bd:44:be:84:b2:71:4a:cf:10:
6c:8f:a7:e8:85:f9:d6:6f:c4:46:16:96:15:41:d5:
f2:c8:9b:09:55:9f:7b:e7:a5:91:ab:ca:3d:41:8b:
19:9f:b3:39:a7:ca:52:12:a2:e7:34:d5:a9:d2:5d:
93:e7:94:da:91:47:30:93:3d:c2:e0:09:16:7e:0f:
43:49:b0:1b:fe:b8:5a:79:2c:bd:2a:ff:16:23:5c:
0a:a7:0a:63:b2:c0:8d:6d:bb:0d:4e:77:6a:ac:04:
3d:0a:53:45:7c:54:47:07:61:ee:22:fe:c9:6c:ec:
e3:cd:be:2c:05:7f:6b:a1:1f:c6:f0:3b:11:b8:3b:
b8:a0:7d:bb:98:92:a7:86:2c:1f:81:25:47:90:40:
71:b6:46:99:a8:cc:be:e2:1a:10:d2:2d:d2:b3:2c:
53:8c:02:c1:25:24:69:5a:db:f9:8e:92:f5:92:42:
6b:b8:d4:8f:c7:f0:12:04:84:e9:d6:f3:e2:b3:90:
d9:76:39:2d:c1:cb:41:e3:bc:f7:e0:01:cf:b7:79:
5c:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:38:7C:82:AC:5F:AC:E2:92:FA:A3:8C:EE:DB:0F:69:61:FE:12:A2
X509v3 Authority Key Identifier:
keyid:37:5A:06:4F:30:10:26:BC:3C:F8:76:66:D6:A8:20:12:82:12:A8:11
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/N1oGTzAQJrw8-HZm1qggEoISqBE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/dc5881-3632-45af-bf59-f44a57ced73d/1/N1oGTzAQJrw8-HZm1qggEoISqBE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/dc5881-3632-45af-bf59-f44a57ced73d/1/N1oGTzAQJrw8-HZm1qggEoISqBE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
13:33:28:11:27:08:87:21:31:28:d7:e0:f3:03:bd:df:c6:3e:
35:07:9a:90:dd:06:bb:11:83:63:d7:be:4b:19:94:50:3e:cb:
5d:5d:49:16:68:d0:b8:3f:4e:b7:c7:31:b1:14:36:3b:2a:72:
70:1c:47:39:47:e1:b6:a3:6b:02:4c:15:95:f7:86:0c:6e:81:
e2:4e:4a:ae:aa:b6:91:7f:48:8c:e0:ea:3e:c0:df:f2:42:77:
64:e0:9a:49:4f:10:a1:7c:04:35:ce:e7:a7:2a:c3:08:64:f9:
ae:22:da:82:9e:2d:f6:54:49:1a:bb:e4:3e:99:e2:4f:37:6d:
23:d2:08:b5:1f:23:13:6f:26:ab:60:c5:e4:4b:e8:cf:78:90:
8b:d7:bd:33:50:28:12:93:1a:d2:c0:b9:29:f8:4d:78:3e:3b:
b7:12:74:c4:fc:27:77:ee:31:7c:49:e4:cc:81:6d:e8:f2:42:
f8:87:46:36:66:de:69:51:9c:c0:2e:1b:3d:25:58:b8:a6:5c:
d5:ea:26:36:f7:e5:0d:fe:6d:fe:d8:c6:11:48:61:53:16:0a:
31:53:99:30:60:67:a0:06:05:06:54:ca:9e:05:6e:bf:04:45:
28:51:d9:1f:0a:ba:99:7e:39:b7:04:2c:12:cf:7a:ab:d5:30:
30:77:6a:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 10 16:04:02 2025 by rpki-client