
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/83aa47-c7fb-4e05-9fac-e4ca6b73ac76/1/N0CDrw__F2igfGVfH-OGAJxSLM8.mft
File: N0CDrw__F2igfGVfH-OGAJxSLM8.mft (raw, json)
Hash identifier: 6UXvc57ZaGFK7fbMyG0iaN0XBb4dcwwPmLCPlxk9vnQ=
Subject key identifier: CE:2D:C7:1A:CB:5A:93:64:86:E7:8E:A2:DF:CD:64:00:EB:82:3D:2D
Authority key identifier: 37:40:83:AF:0F:FF:17:68:A0:7C:65:5F:1F:E3:86:00:9C:52:2C:CF
Certificate issuer: /CN=374083af0fff1768a07c655f1fe386009c522ccf
Certificate serial: 0198820C271A647A9C4130F7F29CBB19AC2C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/N0CDrw__F2igfGVfH-OGAJxSLM8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/83aa47-c7fb-4e05-9fac-e4ca6b73ac76/1/N0CDrw__F2igfGVfH-OGAJxSLM8.mft
Manifest number: 1202
Signing time: Thu 07 Aug 2025 01:01:31 +0000
Manifest this update: Thu 07 Aug 2025 01:01:31 +0000
Manifest next update: Fri 08 Aug 2025 01:01:31 +0000
Files and hashes: 1: N0CDrw__F2igfGVfH-OGAJxSLM8.crl (hash: Q7B1WUqsIfxObL89VKJ79PQ2b9iK9ZKe3wyX7WsxrJ8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a7/83aa47-c7fb-4e05-9fac-e4ca6b73ac76/1/N0CDrw__F2igfGVfH-OGAJxSLM8.crl
rsync://rpki.ripe.net/repository/DEFAULT/a7/83aa47-c7fb-4e05-9fac-e4ca6b73ac76/1/N0CDrw__F2igfGVfH-OGAJxSLM8.mft
rsync://rpki.ripe.net/repository/DEFAULT/N0CDrw__F2igfGVfH-OGAJxSLM8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 07 Aug 2025 20:46:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:82:0c:27:1a:64:7a:9c:41:30:f7:f2:9c:bb:19:ac:2c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=374083af0fff1768a07c655f1fe386009c522ccf
Validity
Not Before: Aug 7 01:01:31 2025 GMT
Not After : Aug 8 01:01:31 2025 GMT
Subject: CN=ce2dc71acb5a936486e78ea2dfcd6400eb823d2d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:bc:52:17:aa:25:ca:56:64:64:7f:c8:54:b0:
51:b5:24:76:d5:f1:73:67:9d:84:bf:be:15:8f:13:
0f:79:b4:d6:fc:79:ff:f8:7b:e7:1e:91:d8:a1:bd:
dd:b7:b8:f3:4a:44:92:72:e3:5e:af:ed:6a:8a:e2:
ac:78:33:06:4f:a7:26:96:b4:65:7b:20:0a:7f:85:
28:a2:4b:ea:6e:f7:f4:2b:85:dc:e3:92:d5:b5:f1:
75:06:47:7c:08:25:e4:43:b0:59:95:4a:ed:fc:d0:
51:5b:65:7c:59:f4:0a:99:56:81:a3:1d:05:35:0e:
29:70:e9:2e:c3:c6:3e:1b:a7:81:2f:71:64:a8:fc:
04:a0:26:09:f2:81:1d:26:57:9f:8c:05:2f:bb:a1:
57:c3:ca:af:4d:f9:51:92:a3:9c:82:c6:85:9e:fe:
38:a4:59:4b:e1:95:e1:17:d1:ae:a1:8a:66:f8:10:
1a:8f:35:19:47:6f:6d:81:a4:56:f5:0b:1f:2f:85:
8e:47:9a:c6:c5:75:9b:f7:1e:29:eb:65:e4:6d:0c:
92:7c:ba:2a:7a:5c:25:e8:3c:9a:31:cc:58:95:a4:
d0:57:2e:f9:8d:47:e0:dc:51:24:f2:e5:95:9e:f0:
aa:25:28:0a:eb:4a:70:20:69:e4:f9:e8:fd:a0:9b:
65:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:2D:C7:1A:CB:5A:93:64:86:E7:8E:A2:DF:CD:64:00:EB:82:3D:2D
X509v3 Authority Key Identifier:
keyid:37:40:83:AF:0F:FF:17:68:A0:7C:65:5F:1F:E3:86:00:9C:52:2C:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/N0CDrw__F2igfGVfH-OGAJxSLM8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/83aa47-c7fb-4e05-9fac-e4ca6b73ac76/1/N0CDrw__F2igfGVfH-OGAJxSLM8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/83aa47-c7fb-4e05-9fac-e4ca6b73ac76/1/N0CDrw__F2igfGVfH-OGAJxSLM8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2c:91:15:c6:b4:b5:34:0e:ae:ee:f1:85:ae:9c:8a:97:c7:7c:
80:57:50:60:c1:c5:76:61:f1:0a:22:c4:a1:9b:65:b0:ec:e5:
de:e8:e3:a6:1b:4c:dd:57:e4:15:6d:b6:ea:de:01:a3:cb:20:
9a:03:63:8f:79:95:b1:8e:5a:ef:11:35:aa:86:8b:d2:2f:46:
fa:48:3d:be:31:a6:7f:25:bb:f2:44:ce:a3:e8:da:1f:c9:68:
22:ec:e9:52:89:2c:34:52:00:ed:56:78:00:57:1d:cc:de:be:
2d:8d:a0:8a:ba:05:9c:45:51:ab:0a:27:9c:eb:4b:81:30:e4:
ce:50:cd:90:29:01:bc:1b:f8:54:d1:04:94:de:23:08:b1:b0:
b5:05:85:b7:ac:73:3b:13:7a:2a:10:0a:c7:6c:f8:3d:cd:60:
19:4c:fc:60:74:5c:79:9c:10:01:61:4d:53:e8:18:2e:85:6e:
27:78:b9:e5:d8:cf:7a:9a:10:f7:50:f0:10:75:21:06:a5:99:
4e:dc:bf:67:53:12:a3:0d:35:aa:38:bc:c3:96:d5:f5:9a:21:
2d:e5:04:8a:84:7e:fd:96:9c:e7:aa:77:35:1f:34:fc:b4:2a:
34:71:c6:39:3f:8d:1b:c5:2f:86:7e:ab:c9:2b:79:b7:83:48:
d1:d9:0d:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 7 03:16:39 2025 by rpki-client