Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4f/35faed-c2d7-4cb9-97f5-df6f20dcb94b/1/N69IEx7Nnco97yst54jxUGBid1U.mft
File: N69IEx7Nnco97yst54jxUGBid1U.mft (raw, json)
Hash identifier: kdUljHHY1w/sQ9TqHKwyXXnZb1O95pXCtxCYBNacFlw=
Subject key identifier: 33:05:83:8B:E0:EF:BB:AA:DB:56:52:D0:86:3E:9D:5F:C8:C8:97:DB
Authority key identifier: 37:AF:48:13:1E:CD:9D:CA:3D:EF:2B:2D:E7:88:F1:50:60:62:77:55
Certificate issuer: /CN=37af48131ecd9dca3def2b2de788f15060627755
Certificate serial: 01987F0A93A6252F3DF301A9DF718A1F88CA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/N69IEx7Nnco97yst54jxUGBid1U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4f/35faed-c2d7-4cb9-97f5-df6f20dcb94b/1/N69IEx7Nnco97yst54jxUGBid1U.mft
Manifest number: 1624
Signing time: Wed 06 Aug 2025 11:00:56 +0000
Manifest this update: Wed 06 Aug 2025 11:00:56 +0000
Manifest next update: Thu 07 Aug 2025 11:00:56 +0000
Files and hashes: 1: Lv93kZr3FrSvC5fAGNeod6j_6yM.roa (hash: 37H9uvEBQ9sb3AaWMyi05t5K1mxRb/qz/+D6tmcVRbg=)
2: N69IEx7Nnco97yst54jxUGBid1U.crl (hash: 0rBnbsBLmHnijpoDo+F83XHq6RIMravN0VKkJO3T6jA=)
3: nCYRFHxESiPTOP0DiwWAA3vf6pc.roa (hash: n1iHEUmqWKjUYGzT2fByz8YLuqOJY83LkJFmv6uksFE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4f/35faed-c2d7-4cb9-97f5-df6f20dcb94b/1/N69IEx7Nnco97yst54jxUGBid1U.crl
rsync://rpki.ripe.net/repository/DEFAULT/4f/35faed-c2d7-4cb9-97f5-df6f20dcb94b/1/N69IEx7Nnco97yst54jxUGBid1U.mft
rsync://rpki.ripe.net/repository/DEFAULT/N69IEx7Nnco97yst54jxUGBid1U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 07 Aug 2025 08:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:7f:0a:93:a6:25:2f:3d:f3:01:a9:df:71:8a:1f:88:ca
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=37af48131ecd9dca3def2b2de788f15060627755
Validity
Not Before: Aug 6 11:00:56 2025 GMT
Not After : Aug 7 11:00:56 2025 GMT
Subject: CN=3305838be0efbbaadb5652d0863e9d5fc8c897db
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:51:65:d7:56:2e:99:52:43:0f:9e:53:5c:7d:
2a:a5:2b:1e:a4:51:bb:8c:0b:df:33:40:fc:31:e9:
4b:0d:64:a2:a3:ef:e0:65:a7:17:f3:c5:bd:cd:99:
90:73:32:d2:4a:57:7d:75:e8:d0:b0:ad:59:ea:90:
e1:97:bc:a8:24:fe:76:af:51:46:4e:ad:3a:0c:69:
4a:d5:b4:e6:b7:87:2b:57:0c:0a:1b:e8:a1:94:a2:
96:a2:b3:b3:58:1f:a4:56:6b:d0:96:fd:2d:bd:4e:
93:66:07:3a:b2:b0:52:07:9f:62:72:83:53:a1:74:
c9:95:63:d7:59:2b:6b:55:59:40:28:08:27:57:81:
0d:64:58:ff:05:30:c8:75:2c:a3:a4:37:17:fb:58:
d9:83:57:e6:16:b8:17:8a:cf:09:0e:e8:53:19:18:
5f:b4:b4:1a:4c:60:04:47:0d:de:87:1b:9f:00:c4:
13:62:02:5a:31:45:40:8b:c2:87:5f:2f:e1:08:7a:
37:2a:67:bb:a4:43:85:60:13:7f:a6:01:b5:4b:d2:
3d:19:1d:a6:6a:18:66:44:a6:e3:d0:b2:e1:92:11:
dc:30:df:5a:07:85:97:c6:ce:76:cd:98:4d:b4:4c:
86:ab:bf:cd:fa:2e:f7:06:07:62:1f:1b:59:8a:c7:
dc:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:05:83:8B:E0:EF:BB:AA:DB:56:52:D0:86:3E:9D:5F:C8:C8:97:DB
X509v3 Authority Key Identifier:
keyid:37:AF:48:13:1E:CD:9D:CA:3D:EF:2B:2D:E7:88:F1:50:60:62:77:55
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/N69IEx7Nnco97yst54jxUGBid1U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/35faed-c2d7-4cb9-97f5-df6f20dcb94b/1/N69IEx7Nnco97yst54jxUGBid1U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/35faed-c2d7-4cb9-97f5-df6f20dcb94b/1/N69IEx7Nnco97yst54jxUGBid1U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6c:e0:9a:67:e0:12:4d:c3:23:1c:42:05:0e:1e:22:f1:da:ab:
38:c9:f5:3a:90:cf:2f:ab:db:5c:72:a7:66:c3:6e:6d:32:f1:
43:1e:06:e1:5e:21:19:99:b8:9b:e4:9a:94:e5:a2:e9:f5:fa:
6a:ba:5a:31:32:94:3b:52:5d:8b:e8:db:fd:5b:8c:36:d9:c9:
0b:b5:2e:00:c8:4e:f3:a9:58:03:00:72:3a:e4:8c:91:75:06:
3a:c0:0a:44:99:a8:97:a8:21:59:ae:44:20:8f:e9:f7:36:f2:
a7:23:52:7a:6d:4b:a5:a2:ae:26:dd:db:08:40:54:60:77:a2:
ae:d5:fe:7e:55:c5:19:7a:d8:be:06:fd:52:56:84:be:38:81:
86:73:ab:7c:37:cc:00:76:bc:38:a6:13:ef:83:1e:44:6c:36:
2c:86:89:1a:06:0e:83:ee:14:55:60:ae:0e:ac:a8:91:cc:fd:
c4:6a:ae:18:a5:88:60:c3:72:e4:45:e5:b8:3f:07:71:13:a6:
4c:1c:f0:56:b1:c2:6f:1b:cf:72:fa:a6:38:f5:e0:49:81:bc:
bb:b2:a8:31:e1:bd:d8:92:08:f4:f5:b0:f8:8c:6e:d0:4b:86:
c2:f9:8a:17:d2:d3:21:8b:28:e7:07:36:e3:cf:a3:9b:9f:18:
8a:9d:c6:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 12:39:51 2025 by rpki-client