Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/1336c7-a33f-4ec6-82d7-f44166bb2db0/1/N_vfL1-FXl4cpI53w73TO9R7RDg.mft
File: N_vfL1-FXl4cpI53w73TO9R7RDg.mft (raw, json)
Hash identifier: o0f+dT9YM8aLu+0tzm0CqubIra5Nh9gKZqh31iww+RI=
Subject key identifier: A6:E2:C1:5D:42:17:F6:A1:38:0C:7F:50:88:95:4C:46:95:BC:F8:03
Authority key identifier: 37:FB:DF:2F:5F:85:5E:5E:1C:A4:8E:77:C3:BD:D3:3B:D4:7B:44:38
Certificate issuer: /CN=37fbdf2f5f855e5e1ca48e77c3bdd33bd47b4438
Certificate serial: 01987450392EE7E7DD368DFFBA1DD7D5755C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/N_vfL1-FXl4cpI53w73TO9R7RDg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/1336c7-a33f-4ec6-82d7-f44166bb2db0/1/N_vfL1-FXl4cpI53w73TO9R7RDg.mft
Manifest number: 161A
Signing time: Mon 04 Aug 2025 09:01:11 +0000
Manifest this update: Mon 04 Aug 2025 09:01:11 +0000
Manifest next update: Tue 05 Aug 2025 09:01:11 +0000
Files and hashes: 1: N_vfL1-FXl4cpI53w73TO9R7RDg.crl (hash: 2sty77rDxIy14MMbtji4cDRgLUOGuNSWPu8ds5cvjmA=)
2: PSL2OSxsoutF8sVX_uvIaiWUApI.roa (hash: IoDHAxb+U2Gaz8HUwj/mdMtnodnlu8iYqMMfCwQw35I=)
3: t0FWDnJPs6XvZokHfTcCnjKRaeE.roa (hash: Aou1i/O3zguK2P9WdtUpbw8G9iRuYff1/7SNrw+Pohw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8a/1336c7-a33f-4ec6-82d7-f44166bb2db0/1/N_vfL1-FXl4cpI53w73TO9R7RDg.crl
rsync://rpki.ripe.net/repository/DEFAULT/8a/1336c7-a33f-4ec6-82d7-f44166bb2db0/1/N_vfL1-FXl4cpI53w73TO9R7RDg.mft
rsync://rpki.ripe.net/repository/DEFAULT/N_vfL1-FXl4cpI53w73TO9R7RDg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 03:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:74:50:39:2e:e7:e7:dd:36:8d:ff:ba:1d:d7:d5:75:5c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=37fbdf2f5f855e5e1ca48e77c3bdd33bd47b4438
Validity
Not Before: Aug 4 09:01:11 2025 GMT
Not After : Aug 5 09:01:11 2025 GMT
Subject: CN=a6e2c15d4217f6a1380c7f5088954c4695bcf803
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:75:01:04:37:dd:81:cb:b4:90:af:89:c4:7d:
67:86:65:90:76:01:b8:24:81:4b:dc:e3:4c:2a:f4:
f4:43:ea:78:ff:8a:13:d4:0d:70:d2:d3:73:0a:d9:
47:d2:5a:ab:bb:31:fa:43:70:28:32:43:88:f2:71:
17:f1:1d:f8:d5:90:c7:96:6a:f6:dc:0b:74:d5:e1:
57:f6:04:06:35:c8:43:2b:a4:b9:72:61:3e:22:1e:
ea:fc:26:33:61:7e:7b:a9:be:0e:9b:04:4a:76:b8:
43:33:e1:61:09:a2:2c:19:1a:81:ab:b6:63:62:c6:
53:e0:bf:74:82:c2:ad:97:e1:5c:69:f0:20:34:dd:
47:f0:b2:62:41:29:f4:0e:08:3b:ad:29:4a:0c:3a:
9c:f3:d0:08:53:8a:08:0e:de:ce:d1:d2:61:de:a8:
6c:a2:a5:20:62:3a:02:e9:13:c8:2e:5d:52:8f:16:
75:be:5e:da:5c:96:05:49:46:06:ca:29:13:61:f8:
dc:f0:4f:ef:43:70:eb:45:fd:a8:de:21:26:c3:2c:
5e:f4:8f:93:89:fe:41:3b:ea:c0:96:3a:c2:a9:17:
1c:3f:94:c2:da:93:80:b8:c6:b4:9d:a5:4e:bc:b8:
cc:bb:bf:78:2e:74:85:2d:29:2d:6b:54:51:0b:13:
2d:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:E2:C1:5D:42:17:F6:A1:38:0C:7F:50:88:95:4C:46:95:BC:F8:03
X509v3 Authority Key Identifier:
keyid:37:FB:DF:2F:5F:85:5E:5E:1C:A4:8E:77:C3:BD:D3:3B:D4:7B:44:38
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/N_vfL1-FXl4cpI53w73TO9R7RDg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/1336c7-a33f-4ec6-82d7-f44166bb2db0/1/N_vfL1-FXl4cpI53w73TO9R7RDg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/1336c7-a33f-4ec6-82d7-f44166bb2db0/1/N_vfL1-FXl4cpI53w73TO9R7RDg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b3:9f:7b:6a:dc:34:90:bb:74:a8:cb:96:ab:65:bf:bb:85:02:
80:96:6e:c3:bf:89:87:17:b6:90:e0:01:7d:8f:90:d3:93:54:
0e:f3:5c:0e:dc:c6:c4:c1:c0:93:a2:71:36:36:76:6a:9b:a4:
8d:f1:54:a3:a0:bf:4a:cf:2c:17:f4:7e:b9:42:32:26:cf:54:
56:26:2c:55:30:2f:a2:9b:5c:e2:23:63:ba:eb:6f:7d:3f:2b:
49:ed:6a:5d:31:b4:40:2c:4c:bb:06:6c:a4:10:94:f1:fc:5e:
b2:10:1b:62:fa:35:8d:9e:41:1e:ea:73:06:5e:06:71:e8:f1:
9a:a0:8e:b7:67:b2:54:2a:a4:7b:86:0f:41:23:51:3d:4d:fd:
67:2d:f5:6d:b3:12:50:96:ba:53:ab:81:6e:06:9d:fd:d0:75:
e5:5d:7e:c7:dc:21:dc:f5:43:87:01:f8:ce:a7:b4:5a:a1:2d:
0e:b1:af:07:e3:35:98:24:05:18:28:e3:16:da:73:8f:04:de:
eb:78:ab:54:12:27:a5:72:e8:c9:78:e6:2c:a4:f6:7b:fd:ea:
23:a4:23:e2:42:23:2c:b3:0e:0c:05:b0:22:b2:63:56:ff:74:
f8:2a:39:a5:06:a0:56:da:e6:3e:6b:98:bd:6a:25:93:1c:4c:
9e:6d:b9:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 11:27:55 2025 by rpki-client