Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3e/85a03d-87c3-4401-9a0d-ab2bafa1ae4d/1/N_S5Gj_86fl1Bac8_V5K1ONeBC0.mft
File: N_S5Gj_86fl1Bac8_V5K1ONeBC0.mft (raw, json)
Hash identifier: oYp8Ka6xqfIOhw3z6xaZP/5YOZD1YVmvYwjpj5snFUI=
Subject key identifier: 44:1B:FC:54:18:1F:D3:68:73:19:B8:3A:9D:3E:E2:31:86:7C:36:69
Authority key identifier: 37:F4:B9:1A:3F:FC:E9:F9:75:05:A7:3C:FD:5E:4A:D4:E3:5E:04:2D
Certificate issuer: /CN=37f4b91a3ffce9f97505a73cfd5e4ad4e35e042d
Certificate serial: 019769CEBB2168DFC6BDCE471C5A3FDEEFDA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/N_S5Gj_86fl1Bac8_V5K1ONeBC0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3e/85a03d-87c3-4401-9a0d-ab2bafa1ae4d/1/N_S5Gj_86fl1Bac8_V5K1ONeBC0.mft
Manifest number: 0720
Signing time: Fri 13 Jun 2025 15:00:45 +0000
Manifest this update: Fri 13 Jun 2025 15:00:45 +0000
Manifest next update: Sat 14 Jun 2025 15:00:45 +0000
Files and hashes: 1: N_S5Gj_86fl1Bac8_V5K1ONeBC0.crl (hash: NfKZ410+ztCd2dNMC8DTtE+vjmEeT0OQC5B4khc0BZU=)
2: hS4qE69cRzq1LeuTH9FbxF7EdCM.roa (hash: CNvb1FlCruFxVWACj7/lI66W2B3Fn96cjXQxKd7K6v8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3e/85a03d-87c3-4401-9a0d-ab2bafa1ae4d/1/N_S5Gj_86fl1Bac8_V5K1ONeBC0.crl
rsync://rpki.ripe.net/repository/DEFAULT/3e/85a03d-87c3-4401-9a0d-ab2bafa1ae4d/1/N_S5Gj_86fl1Bac8_V5K1ONeBC0.mft
rsync://rpki.ripe.net/repository/DEFAULT/N_S5Gj_86fl1Bac8_V5K1ONeBC0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 14 Jun 2025 13:55:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:69:ce:bb:21:68:df:c6:bd:ce:47:1c:5a:3f:de:ef:da
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=37f4b91a3ffce9f97505a73cfd5e4ad4e35e042d
Validity
Not Before: Jun 13 15:00:45 2025 GMT
Not After : Jun 14 15:00:45 2025 GMT
Subject: CN=441bfc54181fd3687319b83a9d3ee231867c3669
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:b4:3b:af:bd:96:04:7d:9f:77:a7:e9:35:94:
0b:46:eb:cd:08:de:8a:52:3f:8d:7a:78:c7:44:6e:
8b:61:f8:ea:ed:86:e2:18:14:04:97:cb:76:c3:fa:
1b:51:df:66:3c:b0:7e:06:32:ec:5f:f4:ec:06:c0:
8c:33:7a:56:9f:4a:9d:87:2e:db:31:e0:a7:29:8e:
a7:91:20:00:c4:7d:16:42:ca:18:84:27:1f:0a:d0:
2d:4a:74:df:06:4b:66:d7:15:1e:3e:49:0e:06:04:
00:96:54:21:20:ab:8c:4f:e5:42:65:40:98:07:8d:
06:be:e9:b9:a0:a3:36:da:21:23:de:35:b4:da:6d:
74:f8:42:28:3a:0b:5f:40:56:fb:f1:18:d7:0f:88:
27:37:40:9d:76:a8:80:74:92:35:2d:7e:29:30:f2:
c4:49:9a:9f:a8:63:b2:75:94:d4:4d:d4:41:37:db:
0f:3a:bd:c0:8a:65:cf:13:d2:22:1a:8e:d7:67:7a:
5a:93:42:17:34:4e:ac:e6:36:ee:6a:23:d6:1d:7b:
6d:14:20:97:c2:26:cc:f8:d2:0e:91:4e:a9:89:ee:
85:d0:9c:8f:6b:55:ab:00:cc:1d:d3:29:82:24:d6:
d2:99:47:26:3f:b5:9e:42:04:ef:27:41:8d:55:fc:
55:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:1B:FC:54:18:1F:D3:68:73:19:B8:3A:9D:3E:E2:31:86:7C:36:69
X509v3 Authority Key Identifier:
keyid:37:F4:B9:1A:3F:FC:E9:F9:75:05:A7:3C:FD:5E:4A:D4:E3:5E:04:2D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/N_S5Gj_86fl1Bac8_V5K1ONeBC0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/85a03d-87c3-4401-9a0d-ab2bafa1ae4d/1/N_S5Gj_86fl1Bac8_V5K1ONeBC0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/85a03d-87c3-4401-9a0d-ab2bafa1ae4d/1/N_S5Gj_86fl1Bac8_V5K1ONeBC0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
87:9b:78:49:74:f5:d2:27:fb:e0:cd:64:41:a1:7b:66:4a:3b:
75:e9:5a:2c:9d:46:4d:39:fa:68:02:70:2e:17:80:73:3f:7a:
2a:6b:51:85:58:c8:83:2a:89:61:2c:54:68:bc:07:27:90:5a:
22:c8:da:b3:28:9b:a6:0f:21:33:3d:17:86:c5:ed:d8:42:bb:
da:2e:a6:59:bb:69:d7:cc:9d:8c:2b:fd:21:1f:89:96:78:42:
3f:f2:da:ea:64:db:71:a1:4b:90:e6:63:99:1e:ea:1e:71:20:
c4:a4:13:99:ca:cd:48:d9:f0:2e:25:ed:d3:3f:7b:92:5f:db:
14:10:cb:eb:7a:0f:bf:59:75:ce:b1:ff:4d:d5:81:60:81:bc:
ad:14:72:bb:cb:bd:db:0b:2d:6b:9f:cd:d4:08:f4:e1:d3:8c:
b3:20:e3:47:b3:01:2e:79:22:e1:9f:07:5e:ac:3f:b6:93:b1:
b3:12:b4:47:a5:20:2c:10:1d:45:20:05:34:aa:3f:da:c5:96:
d1:ed:51:70:23:cd:b6:4d:05:e8:d9:74:a9:de:b1:44:35:e0:
af:2f:ac:cb:23:59:fa:61:99:68:f6:6e:18:0a:9e:45:01:44:
e5:f5:27:75:61:95:b5:c3:2f:21:39:73:af:06:26:2a:66:2c:
6e:ab:f9:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 13 19:23:20 2025 by rpki-client