
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4f/8d1167-0c4d-488f-9a83-c0177dfda847/1/N09vPjy5c7rIpD9sC4BrPRHJrcM.mft
File: N09vPjy5c7rIpD9sC4BrPRHJrcM.mft (raw, json)
Hash identifier: bWcCkCfWg7abvc3OmWDb93xPDewAvs4oDdVY5kewBP8=
Subject key identifier: F0:87:A1:4F:0F:87:DF:FC:A6:12:30:85:A2:A8:BF:42:2B:70:E0:41
Authority key identifier: 37:4F:6F:3E:3C:B9:73:BA:C8:A4:3F:6C:0B:80:6B:3D:11:C9:AD:C3
Certificate issuer: /CN=374f6f3e3cb973bac8a43f6c0b806b3d11c9adc3
Certificate serial: 0198857ABC3AC1C7FD275526D2EC1B1D0344
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/N09vPjy5c7rIpD9sC4BrPRHJrcM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4f/8d1167-0c4d-488f-9a83-c0177dfda847/1/N09vPjy5c7rIpD9sC4BrPRHJrcM.mft
Manifest number: 05D6
Signing time: Thu 07 Aug 2025 17:01:09 +0000
Manifest this update: Thu 07 Aug 2025 17:01:09 +0000
Manifest next update: Fri 08 Aug 2025 17:01:09 +0000
Files and hashes: 1: Bj6SKpV4ITZqGObAbt84p9vUVoA.roa (hash: V/kYOBtoMloCvdGVWE8HL6NIMguaprMvqCLFh+ULBMM=)
2: N09vPjy5c7rIpD9sC4BrPRHJrcM.crl (hash: R6J0JbojLQyDGm77wsb2Bea/cVBiRYYPCi3eAYs0rVQ=)
3: kL_nWqD9s8VP0wMvny-2TOGvAdE.roa (hash: 3whyZK+EQb3qxTzyxzs0f1wKwxYwvBzqI24s/5635lU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4f/8d1167-0c4d-488f-9a83-c0177dfda847/1/N09vPjy5c7rIpD9sC4BrPRHJrcM.crl
rsync://rpki.ripe.net/repository/DEFAULT/4f/8d1167-0c4d-488f-9a83-c0177dfda847/1/N09vPjy5c7rIpD9sC4BrPRHJrcM.mft
rsync://rpki.ripe.net/repository/DEFAULT/N09vPjy5c7rIpD9sC4BrPRHJrcM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 08 Aug 2025 16:13:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:85:7a:bc:3a:c1:c7:fd:27:55:26:d2:ec:1b:1d:03:44
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=374f6f3e3cb973bac8a43f6c0b806b3d11c9adc3
Validity
Not Before: Aug 7 17:01:09 2025 GMT
Not After : Aug 8 17:01:09 2025 GMT
Subject: CN=f087a14f0f87dffca6123085a2a8bf422b70e041
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:be:aa:7e:75:49:7e:8b:66:90:91:b7:f9:4f:
51:bc:fe:5b:b4:17:88:27:19:4a:85:8f:37:37:b0:
c2:10:c9:0f:f2:55:fe:a5:99:1e:ff:67:25:39:4b:
32:26:ea:f3:65:c8:d5:22:97:72:08:da:e5:8f:37:
03:ac:c4:85:88:38:d4:7a:ec:39:5c:b0:07:da:70:
a4:b8:15:75:18:36:98:30:0c:5d:6c:2d:3c:eb:9c:
84:c4:9a:bd:2e:7a:e7:e7:e3:c8:6e:c2:fd:2d:63:
ff:2e:bb:da:aa:27:5c:6d:51:22:e8:27:cf:d9:e2:
68:68:ef:9a:eb:4d:e3:6d:ad:8a:6f:ce:67:bd:08:
38:70:fd:4c:cc:9e:d4:68:81:ca:79:d4:4a:a7:86:
ca:61:4a:16:f6:92:5e:77:ee:6a:39:6e:fd:47:bc:
e3:f0:54:1e:d3:87:fb:7a:e7:ff:11:92:ed:6a:61:
9a:f6:fd:69:83:01:7e:b6:bd:f0:f7:26:9e:74:be:
2e:6a:e5:a7:db:86:5c:4e:98:03:9d:74:2f:1a:a6:
c6:52:b3:b9:37:7a:14:8d:8f:20:e9:8d:6f:2f:b2:
ce:77:c5:c5:95:af:4d:81:52:f6:d2:07:53:11:34:
27:8a:d3:21:58:6c:6a:b8:40:67:1d:b5:af:f0:b9:
a1:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:87:A1:4F:0F:87:DF:FC:A6:12:30:85:A2:A8:BF:42:2B:70:E0:41
X509v3 Authority Key Identifier:
keyid:37:4F:6F:3E:3C:B9:73:BA:C8:A4:3F:6C:0B:80:6B:3D:11:C9:AD:C3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/N09vPjy5c7rIpD9sC4BrPRHJrcM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/8d1167-0c4d-488f-9a83-c0177dfda847/1/N09vPjy5c7rIpD9sC4BrPRHJrcM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/8d1167-0c4d-488f-9a83-c0177dfda847/1/N09vPjy5c7rIpD9sC4BrPRHJrcM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0f:86:cb:09:21:75:70:d4:f7:46:7d:90:de:7c:81:d3:38:be:
ad:99:17:6f:6d:b4:8a:14:8f:e7:99:e8:37:70:74:2d:8c:cb:
4b:b2:b9:18:c7:e8:f9:97:5b:79:f1:1a:f4:6e:7b:3a:a0:c0:
93:fc:d0:40:5e:f9:1b:3f:89:bb:b1:01:9a:3c:6e:7b:68:ba:
e0:5a:88:a3:65:52:00:b9:af:9e:36:76:a8:64:7c:9c:68:00:
07:39:de:a7:f4:7b:71:3f:96:36:e0:61:81:8e:3b:8d:dc:dd:
22:c3:26:7c:5a:60:33:a8:7b:e1:b1:27:a7:a1:38:e3:37:d3:
6a:5f:d9:9b:47:9c:10:cb:01:28:f4:8f:0a:60:f7:1d:f5:4f:
c2:a2:d8:63:38:79:f0:92:0c:be:72:32:bf:32:c2:38:9e:3d:
eb:d3:2a:b9:40:d4:3b:fb:e4:0a:7e:bf:9d:7f:ca:50:59:cd:
48:17:9a:ac:e4:ad:d5:c6:5f:29:c2:25:fd:16:e7:6f:3b:00:
e2:94:8d:a0:dd:20:b8:2d:0f:f4:33:ba:4a:3a:6d:8d:f7:ec:
bc:37:2c:e3:a6:f7:77:fc:e6:46:84:f7:c0:b6:2f:5b:77:84:
4b:20:d7:14:43:d6:5e:3f:47:ba:90:a7:9a:d9:ec:08:81:f9:
21:91:63:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 7 20:14:00 2025 by rpki-client