
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/33541a-f9ac-475a-b297-88a0e450a17b/1/N2PHEGpfJkAWLnmAWD6rW9gAjEU.mft
File: N2PHEGpfJkAWLnmAWD6rW9gAjEU.mft (raw, json)
Hash identifier: qcCXkaJHmqM0UiRgBoyoli6gKhCuIlitT+v9D+MwNSI=
Subject key identifier: 74:F8:D5:E0:DF:B8:41:F8:69:9D:1F:08:4E:07:FF:1B:3F:BD:70:D8
Authority key identifier: 37:63:C7:10:6A:5F:26:40:16:2E:79:80:58:3E:AB:5B:D8:00:8C:45
Certificate issuer: /CN=3763c7106a5f2640162e7980583eab5bd8008c45
Certificate serial: 01987C098FCA21EBB4882778F24BA7835AB3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/N2PHEGpfJkAWLnmAWD6rW9gAjEU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/33541a-f9ac-475a-b297-88a0e450a17b/1/N2PHEGpfJkAWLnmAWD6rW9gAjEU.mft
Manifest number: 1170
Signing time: Tue 05 Aug 2025 21:00:57 +0000
Manifest this update: Tue 05 Aug 2025 21:00:57 +0000
Manifest next update: Wed 06 Aug 2025 21:00:57 +0000
Files and hashes: 1: JqPeTKIiSqFLnMuoE0z5MMpECyE.roa (hash: Sm0VFijktfATyc4h+uw4DoW/FSQrn3UdeoSnPalbaPo=)
2: N2PHEGpfJkAWLnmAWD6rW9gAjEU.crl (hash: paz12SsgjiX2o0FL43i3Jy9BuOBYxl3c0lm1S7i7HI4=)
3: VmdUY2uJ9NapTyZJ8UBdjlgGJQQ.roa (hash: 53UxHJyDkYLtFVil6COplJSwSFn/MNxw2tMZPgc57WQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/33541a-f9ac-475a-b297-88a0e450a17b/1/N2PHEGpfJkAWLnmAWD6rW9gAjEU.crl
rsync://rpki.ripe.net/repository/DEFAULT/5a/33541a-f9ac-475a-b297-88a0e450a17b/1/N2PHEGpfJkAWLnmAWD6rW9gAjEU.mft
rsync://rpki.ripe.net/repository/DEFAULT/N2PHEGpfJkAWLnmAWD6rW9gAjEU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 06 Aug 2025 21:00:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:7c:09:8f:ca:21:eb:b4:88:27:78:f2:4b:a7:83:5a:b3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3763c7106a5f2640162e7980583eab5bd8008c45
Validity
Not Before: Aug 5 21:00:57 2025 GMT
Not After : Aug 6 21:00:57 2025 GMT
Subject: CN=74f8d5e0dfb841f8699d1f084e07ff1b3fbd70d8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:d4:c9:90:f4:88:ff:90:e9:bc:8b:b5:41:82:
33:8d:b9:3c:65:27:4b:25:60:92:29:aa:25:e8:5a:
ef:d0:db:91:44:d0:04:36:08:68:f7:14:01:86:d3:
0e:70:1a:08:5e:83:ef:33:d2:c8:fb:9e:ac:c6:5e:
3a:4a:c6:b9:e9:6d:7a:9c:1a:24:cd:eb:04:97:2d:
d4:f4:0e:80:94:75:1e:fe:71:ed:98:48:c1:b1:82:
e1:e0:5d:2f:78:e6:a9:d3:91:6b:c5:56:b0:26:a6:
d9:ea:ed:f1:c7:81:43:8b:ae:e1:ae:5b:e2:fd:f4:
6e:3d:e8:32:bc:32:2c:de:75:f3:1f:fa:5f:f7:55:
ee:2f:f8:52:c8:37:f5:f0:10:72:3c:05:52:f5:20:
d9:53:a4:49:6e:45:fc:05:c4:1d:54:a6:0e:15:48:
c5:d4:c2:bf:ca:5e:be:45:41:d2:e6:e1:f0:ba:80:
c6:a8:c0:54:24:80:10:89:92:e0:13:7b:04:b2:b5:
68:6f:f5:61:b0:78:d3:0d:76:2c:6b:92:6b:f9:f9:
32:1f:15:fd:74:79:45:ae:09:3f:c7:06:eb:00:98:
7b:f8:cc:79:c9:68:0a:bc:d3:a0:6e:36:72:9b:0a:
4e:4b:7b:4d:08:35:42:15:e9:0b:56:7e:90:f0:de:
fe:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:F8:D5:E0:DF:B8:41:F8:69:9D:1F:08:4E:07:FF:1B:3F:BD:70:D8
X509v3 Authority Key Identifier:
keyid:37:63:C7:10:6A:5F:26:40:16:2E:79:80:58:3E:AB:5B:D8:00:8C:45
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/N2PHEGpfJkAWLnmAWD6rW9gAjEU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/33541a-f9ac-475a-b297-88a0e450a17b/1/N2PHEGpfJkAWLnmAWD6rW9gAjEU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/33541a-f9ac-475a-b297-88a0e450a17b/1/N2PHEGpfJkAWLnmAWD6rW9gAjEU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b6:63:47:63:4d:50:e5:04:92:b9:c9:8f:a4:7b:c6:26:b3:98:
25:22:05:86:43:f8:08:7b:0f:6e:e4:be:23:38:84:4c:52:19:
00:b5:90:c3:7f:a5:24:dd:03:bd:55:ea:cf:b2:b0:24:0d:51:
92:93:0c:73:d2:4a:dc:db:66:8d:a1:e8:b4:d7:12:b8:76:cf:
ff:d5:bb:e0:8e:4a:0b:f7:b9:78:08:25:46:24:35:bc:e6:73:
1e:4b:fe:66:37:e1:4a:10:3c:6b:d8:58:cf:68:bb:83:c2:94:
d7:76:e2:ac:f0:c6:33:81:de:be:5e:ca:d8:47:ff:11:d7:63:
97:e4:c2:1d:84:71:27:f1:1d:c9:88:df:d8:c0:11:00:fe:08:
b2:f3:f1:75:4d:ea:12:ef:56:7e:fd:40:0a:41:3a:77:a6:da:
1f:70:76:fa:0a:17:54:38:3f:de:5a:eb:c8:29:80:f9:02:80:
f0:06:90:90:70:6c:00:d1:a7:9a:09:67:be:42:96:66:80:15:
1c:49:3c:df:01:23:95:c2:4d:b4:c8:dd:eb:09:8a:bc:bb:c0:
c8:03:32:1f:66:57:dd:ed:b6:ac:83:52:8c:81:48:cc:b1:0f:
1c:0a:2f:6a:7e:bc:38:b1:71:4d:39:d9:7c:26:9d:fc:b1:e9:
a7:46:c7:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 05:19:31 2025 by rpki-client