Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3e/85a03d-87c3-4401-9a0d-ab2bafa1ae4d/1/N_S5Gj_86fl1Bac8_V5K1ONeBC0.mft
File: N_S5Gj_86fl1Bac8_V5K1ONeBC0.mft (raw, json)
Hash identifier: 4C9gAqbizEVm07a5ePv6xO4LAV7Ma78Sbu/5BNWWcts=
Subject key identifier: F7:FB:26:40:77:2A:65:1B:B4:4C:7C:A6:75:2E:D2:0E:A2:42:7A:7D
Authority key identifier: 37:F4:B9:1A:3F:FC:E9:F9:75:05:A7:3C:FD:5E:4A:D4:E3:5E:04:2D
Certificate issuer: /CN=37f4b91a3ffce9f97505a73cfd5e4ad4e35e042d
Certificate serial: 01988F59EDDC4C95C9A2EAACF4FEA4DDA551
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/N_S5Gj_86fl1Bac8_V5K1ONeBC0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3e/85a03d-87c3-4401-9a0d-ab2bafa1ae4d/1/N_S5Gj_86fl1Bac8_V5K1ONeBC0.mft
Manifest number: 07B8
Signing time: Sat 09 Aug 2025 15:01:32 +0000
Manifest this update: Sat 09 Aug 2025 15:01:32 +0000
Manifest next update: Sun 10 Aug 2025 15:01:32 +0000
Files and hashes: 1: N_S5Gj_86fl1Bac8_V5K1ONeBC0.crl (hash: EjCGETTIuJQHclEQJGViySg/bjMmPWCtBYyTtsfma7M=)
2: hS4qE69cRzq1LeuTH9FbxF7EdCM.roa (hash: CNvb1FlCruFxVWACj7/lI66W2B3Fn96cjXQxKd7K6v8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3e/85a03d-87c3-4401-9a0d-ab2bafa1ae4d/1/N_S5Gj_86fl1Bac8_V5K1ONeBC0.crl
rsync://rpki.ripe.net/repository/DEFAULT/3e/85a03d-87c3-4401-9a0d-ab2bafa1ae4d/1/N_S5Gj_86fl1Bac8_V5K1ONeBC0.mft
rsync://rpki.ripe.net/repository/DEFAULT/N_S5Gj_86fl1Bac8_V5K1ONeBC0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 10 Aug 2025 14:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:8f:59:ed:dc:4c:95:c9:a2:ea:ac:f4:fe:a4:dd:a5:51
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=37f4b91a3ffce9f97505a73cfd5e4ad4e35e042d
Validity
Not Before: Aug 9 15:01:32 2025 GMT
Not After : Aug 10 15:01:32 2025 GMT
Subject: CN=f7fb2640772a651bb44c7ca6752ed20ea2427a7d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:be:24:41:cf:79:57:a9:84:17:2b:e2:e5:aa:
b9:6b:77:80:32:a7:2a:23:23:52:ab:a2:a4:29:cc:
a1:1b:f7:14:a6:c5:b2:00:e5:81:ee:b2:f4:c1:95:
6f:7c:e8:dc:58:51:53:cc:2f:7c:eb:54:ed:0f:ba:
be:ef:8b:44:01:a8:51:e0:c0:bf:7e:ce:a4:ae:13:
47:48:a0:0d:ce:05:35:19:ae:f8:81:f3:e3:9d:d7:
ca:6c:c4:28:0d:db:21:43:cd:bb:fb:54:91:0d:5b:
b4:5b:40:2f:ad:41:80:cb:8d:9b:fe:b5:e4:a3:94:
18:73:84:84:1b:33:54:e7:7e:b9:3d:85:d3:dc:5a:
28:3e:47:2b:5e:a5:f5:4d:6d:d9:78:d9:2b:10:39:
fd:01:5e:63:0d:8d:cc:5e:ff:18:3b:aa:55:40:d1:
28:2c:27:ad:67:43:bf:d7:fc:c7:ed:7b:8a:ef:ef:
f1:82:a4:5c:b5:48:62:0e:f3:6a:92:f6:a0:32:c6:
98:2a:94:66:2f:71:a7:a5:3b:fa:d3:e7:66:46:bc:
cc:8e:05:02:f4:46:62:4d:55:17:12:26:6f:af:75:
d5:e2:a5:f7:46:84:43:e7:52:8a:1b:c6:66:85:5c:
18:c1:97:78:0d:50:e6:73:cb:d1:a2:6a:00:e0:7a:
94:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:FB:26:40:77:2A:65:1B:B4:4C:7C:A6:75:2E:D2:0E:A2:42:7A:7D
X509v3 Authority Key Identifier:
keyid:37:F4:B9:1A:3F:FC:E9:F9:75:05:A7:3C:FD:5E:4A:D4:E3:5E:04:2D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/N_S5Gj_86fl1Bac8_V5K1ONeBC0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/85a03d-87c3-4401-9a0d-ab2bafa1ae4d/1/N_S5Gj_86fl1Bac8_V5K1ONeBC0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/85a03d-87c3-4401-9a0d-ab2bafa1ae4d/1/N_S5Gj_86fl1Bac8_V5K1ONeBC0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
54:36:a0:4f:02:9a:c2:fd:fa:d2:f4:4e:99:69:84:f1:97:f7:
5a:cc:80:bc:e8:eb:18:33:27:be:5e:de:72:d8:09:8b:cb:80:
43:42:22:cc:7a:ab:09:f7:71:af:ec:d3:42:9d:10:5b:1d:04:
63:e5:f3:e8:13:fc:f8:59:06:42:79:77:88:10:6e:5f:3a:2a:
94:38:5c:9e:3c:d6:a1:13:fd:f1:03:16:d3:73:3a:ad:e8:ec:
25:05:c0:e1:bc:7d:f9:d0:ef:d2:c2:a7:cb:ce:2c:a4:e4:33:
58:ca:1d:d8:61:7f:2b:b2:e5:8c:56:ff:4d:f3:ef:04:60:4a:
a1:41:75:35:75:9d:51:e6:61:cf:03:6b:3b:57:8c:e6:2b:f2:
65:e2:22:6b:e6:40:16:ec:69:b2:91:b2:03:8a:a4:fc:6f:29:
78:2e:a7:7e:fe:28:b2:2e:89:86:d9:7f:be:ab:57:85:07:55:
d2:d3:aa:7d:e3:ef:b7:8c:d2:c0:7b:af:ce:32:6a:50:0a:13:
0e:d6:a6:ea:76:4f:05:b7:30:0d:d1:96:32:53:02:41:6a:15:
ad:32:22:41:59:68:63:30:ca:08:f5:06:18:eb:f8:6b:52:ed:
25:45:7a:64:c0:a0:d8:5f:06:16:8e:36:e5:cd:c2:5f:9e:25:
ca:bf:06:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 9 20:34:31 2025 by rpki-client