Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/22/e128e0-00a6-4689-95be-524c2109cb05/1/N4kaRySqxrXaAAUymqOlq-h3edY.mft
File: N4kaRySqxrXaAAUymqOlq-h3edY.mft (raw, json)
Hash identifier: AbNfdHS31Ym9IbJSO2JTxwrqsVupPyw++PQpSUxRv5k=
Subject key identifier: BA:44:09:0D:8C:CD:74:AF:76:8C:28:82:7E:E2:D7:5B:0B:C8:02:D8
Authority key identifier: 37:89:1A:47:24:AA:C6:B5:DA:00:05:32:9A:A3:A5:AB:E8:77:79:D6
Certificate issuer: /CN=37891a4724aac6b5da0005329aa3a5abe87779d6
Certificate serial: 019891B5D9440839D2874519D552890A684C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/N4kaRySqxrXaAAUymqOlq-h3edY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/22/e128e0-00a6-4689-95be-524c2109cb05/1/N4kaRySqxrXaAAUymqOlq-h3edY.mft
Manifest number: 1625
Signing time: Sun 10 Aug 2025 02:01:10 +0000
Manifest this update: Sun 10 Aug 2025 02:01:10 +0000
Manifest next update: Mon 11 Aug 2025 02:01:10 +0000
Files and hashes: 1: N4kaRySqxrXaAAUymqOlq-h3edY.crl (hash: c4yUrzHl9R84c18ZxiR/3Dlc2igHGBPQwmjKEKVq8FA=)
2: mUVCmxlyRHOtQgqO0rU0Vfd_JxM.roa (hash: 4mDmX111g5PLlffQE3BOZIPTW2uYVk7yBC9oTl48FX8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/22/e128e0-00a6-4689-95be-524c2109cb05/1/N4kaRySqxrXaAAUymqOlq-h3edY.crl
rsync://rpki.ripe.net/repository/DEFAULT/22/e128e0-00a6-4689-95be-524c2109cb05/1/N4kaRySqxrXaAAUymqOlq-h3edY.mft
rsync://rpki.ripe.net/repository/DEFAULT/N4kaRySqxrXaAAUymqOlq-h3edY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 10 Aug 2025 18:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:91:b5:d9:44:08:39:d2:87:45:19:d5:52:89:0a:68:4c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=37891a4724aac6b5da0005329aa3a5abe87779d6
Validity
Not Before: Aug 10 02:01:10 2025 GMT
Not After : Aug 11 02:01:10 2025 GMT
Subject: CN=ba44090d8ccd74af768c28827ee2d75b0bc802d8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:06:bb:a5:45:72:0b:3d:8c:c2:05:6f:59:78:
f7:1c:18:64:a2:5d:d3:db:5d:a3:27:20:ca:d1:56:
c1:02:cf:81:71:a3:9a:d1:b5:0e:26:f3:e8:69:65:
3d:c8:56:32:58:e7:02:96:43:cb:1e:48:cb:d4:ae:
03:16:5b:8a:6f:f8:4c:e7:69:2d:36:71:47:7d:34:
49:aa:1b:7d:99:60:be:62:2e:fe:88:2a:34:45:19:
09:19:d2:75:90:c2:3e:0e:41:11:0c:6c:8c:7c:ea:
35:73:46:5a:d8:e6:5c:77:13:3b:00:be:07:a5:70:
cd:65:54:e2:d0:0a:08:22:4a:13:e5:9b:e0:bb:8e:
6e:0f:58:7e:06:68:4c:94:99:bf:65:3e:21:b5:20:
63:b4:03:76:95:82:66:8a:b8:fc:a2:43:44:0c:91:
d4:93:f6:05:21:2c:99:fc:ce:14:61:a4:e5:7f:81:
e6:9d:bb:88:17:34:93:2b:45:f0:d9:37:cd:4a:e7:
a6:83:1f:dd:cc:c0:58:36:80:b2:c2:95:1a:59:02:
5d:c9:c8:6f:15:62:a9:df:f8:46:64:43:da:be:b0:
96:41:d6:19:51:3c:19:4b:c0:85:e5:0d:59:99:0b:
c5:21:90:1a:45:8d:19:8c:8a:cf:31:b0:49:2d:53:
77:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:44:09:0D:8C:CD:74:AF:76:8C:28:82:7E:E2:D7:5B:0B:C8:02:D8
X509v3 Authority Key Identifier:
keyid:37:89:1A:47:24:AA:C6:B5:DA:00:05:32:9A:A3:A5:AB:E8:77:79:D6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/N4kaRySqxrXaAAUymqOlq-h3edY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/e128e0-00a6-4689-95be-524c2109cb05/1/N4kaRySqxrXaAAUymqOlq-h3edY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/22/e128e0-00a6-4689-95be-524c2109cb05/1/N4kaRySqxrXaAAUymqOlq-h3edY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
23:b3:f5:e7:40:f0:0a:83:8a:d7:0c:1f:92:50:dc:33:80:04:
e7:45:10:44:10:a3:25:a9:6d:f0:40:bb:3b:47:91:cd:11:b3:
c8:c1:19:07:b3:8d:74:44:ba:f7:48:6d:f5:ab:97:8a:7c:3f:
7e:05:93:16:2c:6c:ea:07:f6:55:6a:e0:76:43:8f:54:c2:cc:
e6:fa:10:04:f2:47:76:f3:21:f7:38:03:aa:c5:df:53:1c:7d:
e2:d3:b4:63:c1:76:2d:c7:63:b5:38:ec:fc:7a:5e:a1:33:67:
91:6b:1d:f6:64:3c:70:00:4d:e2:e0:ed:dd:f5:70:ee:c3:42:
1e:2d:3f:61:8c:55:73:89:37:58:47:2d:73:1a:55:e6:d8:6d:
cd:65:55:45:82:35:6a:98:92:0f:1a:25:ec:df:b4:1a:37:64:
d9:e0:46:a6:2f:3c:cb:ed:45:d1:d5:2a:72:94:b1:2a:51:76:
e0:b6:b0:7d:9d:cd:9d:c9:85:9b:34:ea:bd:fd:28:05:cd:60:
3f:d2:fd:ee:0a:b2:be:36:ac:ca:27:0f:b8:21:c3:f6:98:0a:
37:5d:18:e6:0c:f6:0a:8c:14:a3:17:59:30:2a:f4:d4:ef:a2:
d5:90:d7:89:61:ae:53:f4:ba:ba:4a:52:3b:97:14:20:f5:23:
24:9f:0b:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 10 03:53:09 2025 by rpki-client