Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2b/523c7d-3917-4137-9df3-abea625868a8/1/N8ZRc24kPV6mzsymOv20oDEtdzA.mft
File: N8ZRc24kPV6mzsymOv20oDEtdzA.mft (raw, json)
Hash identifier: 2i34g5LaAAxn0XL5EKNEq3vPJ7fpPtLAEcPCHBGUFDc=
Subject key identifier: A3:08:3D:E8:CF:96:EF:58:DE:B0:60:37:D8:6C:91:4E:3B:EA:35:5F
Authority key identifier: 37:C6:51:73:6E:24:3D:5E:A6:CE:CC:A6:3A:FD:B4:A0:31:2D:77:30
Certificate issuer: /CN=37c651736e243d5ea6cecca63afdb4a0312d7730
Certificate serial: 019885B22BE5DCA7506455596BC63797DD68
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/N8ZRc24kPV6mzsymOv20oDEtdzA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2b/523c7d-3917-4137-9df3-abea625868a8/1/N8ZRc24kPV6mzsymOv20oDEtdzA.mft
Manifest number: 1621
Signing time: Thu 07 Aug 2025 18:01:42 +0000
Manifest this update: Thu 07 Aug 2025 18:01:42 +0000
Manifest next update: Fri 08 Aug 2025 18:01:42 +0000
Files and hashes: 1: N8ZRc24kPV6mzsymOv20oDEtdzA.crl (hash: 4l37S/lb/KdX4VgCEjhzlxyBM/Vefq6ULORNeRSY7Pg=)
2: ZRv7bLa28b8tf6OWanURzCF5xRg.roa (hash: oK8tGS8JdWtsRZmm08fTUJdRLOafRX6MArGF8Pv/FL0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2b/523c7d-3917-4137-9df3-abea625868a8/1/N8ZRc24kPV6mzsymOv20oDEtdzA.crl
rsync://rpki.ripe.net/repository/DEFAULT/2b/523c7d-3917-4137-9df3-abea625868a8/1/N8ZRc24kPV6mzsymOv20oDEtdzA.mft
rsync://rpki.ripe.net/repository/DEFAULT/N8ZRc24kPV6mzsymOv20oDEtdzA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 08 Aug 2025 17:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:85:b2:2b:e5:dc:a7:50:64:55:59:6b:c6:37:97:dd:68
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=37c651736e243d5ea6cecca63afdb4a0312d7730
Validity
Not Before: Aug 7 18:01:42 2025 GMT
Not After : Aug 8 18:01:42 2025 GMT
Subject: CN=a3083de8cf96ef58deb06037d86c914e3bea355f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:48:48:60:3f:56:7c:5d:46:f6:a9:54:c6:75:
2e:50:85:a1:5c:d8:a6:d2:be:6a:4c:84:a2:25:ea:
2a:e6:40:c5:e3:1f:ad:69:86:35:1b:9a:b1:20:0a:
53:78:20:b9:50:e9:33:46:d4:4f:00:2f:ae:16:d0:
c5:6e:05:74:92:42:97:b7:12:b1:46:98:4b:1e:e4:
e5:fc:fa:cd:5c:89:b7:9a:89:f3:34:f9:81:27:6d:
2f:d1:1f:f5:7d:60:ef:67:3a:da:61:e3:8b:b2:8e:
b3:e4:ed:1a:29:7a:b8:5a:7f:f3:ca:63:5f:ff:a6:
8a:fa:68:f9:fd:34:33:f3:ce:f6:17:06:0b:80:1a:
97:f5:ec:2f:e4:b8:c6:8a:6c:91:2f:3b:5b:7f:ed:
2f:10:b9:41:ce:46:e2:dc:4c:f6:45:06:14:a7:d8:
6c:6f:cd:f0:63:b1:c9:7d:7d:2c:05:bf:d2:b9:9c:
83:a0:01:ab:b5:58:fe:e3:b9:e2:c3:a8:21:51:89:
99:ef:39:e6:ee:47:35:aa:28:3b:c2:ea:4f:05:ad:
21:e3:b6:c6:04:55:e9:be:89:44:09:a8:bb:ab:8e:
68:2a:54:41:02:15:84:06:b1:81:f2:4f:fb:ed:e1:
91:df:97:ee:78:78:8a:e1:f3:a2:e0:2a:d6:81:ef:
f5:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:08:3D:E8:CF:96:EF:58:DE:B0:60:37:D8:6C:91:4E:3B:EA:35:5F
X509v3 Authority Key Identifier:
keyid:37:C6:51:73:6E:24:3D:5E:A6:CE:CC:A6:3A:FD:B4:A0:31:2D:77:30
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/N8ZRc24kPV6mzsymOv20oDEtdzA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/523c7d-3917-4137-9df3-abea625868a8/1/N8ZRc24kPV6mzsymOv20oDEtdzA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/523c7d-3917-4137-9df3-abea625868a8/1/N8ZRc24kPV6mzsymOv20oDEtdzA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
09:ec:f2:52:f7:82:58:0e:1a:82:06:68:42:42:46:5f:b4:73:
f9:9f:22:29:20:44:bc:03:f0:5d:73:d6:ea:e8:b0:e0:6f:62:
4b:ec:6e:45:c4:dd:d7:8a:da:07:d8:5f:6b:d5:d9:ca:13:c6:
91:43:01:b2:6d:cc:96:46:22:62:d3:bf:ea:ad:91:6d:08:9f:
b3:b8:4c:a2:61:e2:c5:71:56:d9:26:45:8d:13:7d:23:81:f8:
bf:68:88:58:b3:de:b7:a2:ce:d1:43:4c:fb:ab:e1:7e:7f:f8:
bc:5a:6f:d4:9f:65:7f:88:b3:c8:1e:bb:43:02:b2:cf:00:29:
17:4b:a6:96:64:b3:8e:c2:e6:ab:a7:9e:3f:61:2f:8f:f0:97:
f3:fe:7d:6c:53:35:24:8c:cd:b1:b9:e6:63:5f:6c:7f:85:63:
34:93:b9:c4:60:cc:02:9d:64:53:ab:5f:eb:d6:47:6c:60:88:
0f:c1:26:e7:60:14:f7:b8:dd:b4:db:8e:e6:bf:5d:2b:a6:9c:
b7:93:c5:0f:34:43:7e:9a:87:59:d9:46:14:b2:40:ab:05:e4:
3c:80:59:e6:28:f0:81:1d:5f:48:95:fa:0e:3f:03:f2:45:ea:
83:af:0d:fa:3c:22:19:80:52:50:a4:14:03:dc:25:6e:59:cb:
32:47:cf:b0
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZiFsivl3KdQZFVZa8Y3l91oMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM3YzY1MTczNmUyNDNkNWVhNmNlY2NhNjNhZmRiNGEwMzEy
ZDc3MzAwHhcNMjUwODA3MTgwMTQyWhcNMjUwODA4MTgwMTQyWjAzMTEwLwYDVQQD
EyhhMzA4M2RlOGNmOTZlZjU4ZGViMDYwMzdkODZjOTE0ZTNiZWEzNTVmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnkhIYD9WfF1G9qlUxnUuUIWhXNim
0r5qTISiJeoq5kDF4x+taYY1G5qxIApTeCC5UOkzRtRPAC+uFtDFbgV0kkKXtxKx
RphLHuTl/PrNXIm3monzNPmBJ20v0R/1fWDvZzraYeOLso6z5O0aKXq4Wn/zymNf
/6aK+mj5/TQz8872FwYLgBqX9ewv5LjGimyRLztbf+0vELlBzkbi3Ez2RQYUp9hs
b83wY7HJfX0sBb/SuZyDoAGrtVj+47niw6ghUYmZ7znm7kc1qig7wupPBa0h47bG
BFXpvolECai7q45oKlRBAhWEBrGB8k/77eGR35fueHiK4fOi4CrWge/1CQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKMIPejPlu9Y3rBgN9hskU476jVfMB8GA1UdIwQY
MBaAFDfGUXNuJD1eps7Mpjr9tKAxLXcwMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTjhaUmMyNGtQVjZtenN5bU92MjBvREV0ZHpBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yYi81MjNjN2QtMzkxNy00MTM3LTlkZjMt
YWJlYTYyNTg2OGE4LzEvTjhaUmMyNGtQVjZtenN5bU92MjBvREV0ZHpBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yYi81MjNjN2QtMzkxNy00MTM3LTlkZjMtYWJlYTYyNTg2OGE4
LzEvTjhaUmMyNGtQVjZtenN5bU92MjBvREV0ZHpBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEACezyUveC
WA4aggZoQkJGX7Rz+Z8iKSBEvAPwXXPW6uiw4G9iS+xuRcTd14raB9hfa9XZyhPG
kUMBsm3MlkYiYtO/6q2RbQifs7hMomHixXFW2SZFjRN9I4H4v2iIWLPet6LO0UNM
+6vhfn/4vFpv1J9lf4izyB67QwKyzwApF0umlmSzjsLmq6eeP2Evj/CX8/59bFM1
JIzNsbnmY19sf4VjNJO5xGDMAp1kU6tf69ZHbGCID8Em52AU97jdtNuO5r9dK6ac
t5PFDzRDfpqHWdlGFLJAqwXkPIBZ5ijwgR1fSJX6Dj8D8kXqg68N+jwiGYBSUKQU
A9wlblnLMkfPsA==
-----END CERTIFICATE-----
Generated at Fri Aug 8 00:37:18 2025 by rpki-client