Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ad/b53547-d340-4392-af46-615961312b52/1/N0MfG-n9wkGQmEec3kV7v3lXF1k.mft
File: N0MfG-n9wkGQmEec3kV7v3lXF1k.mft (raw, json)
Hash identifier: h57CwAAYp50caPJuItKi39RhA8btRzc7M2FIkF5s4hw=
Subject key identifier: 7C:9F:BF:0B:E2:36:85:0C:D2:43:4A:C8:9D:66:F6:2D:33:49:D0:CA
Authority key identifier: 37:43:1F:1B:E9:FD:C2:41:90:98:47:9C:DE:45:7B:BF:79:57:17:59
Certificate issuer: /CN=37431f1be9fdc2419098479cde457bbf79571759
Certificate serial: 019895925D6080C40E6FD3E622EF3E358284
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/N0MfG-n9wkGQmEec3kV7v3lXF1k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ad/b53547-d340-4392-af46-615961312b52/1/N0MfG-n9wkGQmEec3kV7v3lXF1k.mft
Manifest number: 08B0
Signing time: Sun 10 Aug 2025 20:00:53 +0000
Manifest this update: Sun 10 Aug 2025 20:00:53 +0000
Manifest next update: Mon 11 Aug 2025 20:00:53 +0000
Files and hashes: 1: A3ey_cAeMANwFWddA6tWalsb_HU.roa (hash: 1QzvBN6h57NIWttaQKkwiJVejIWg/N7/NzIPvbKh3sU=)
2: N0MfG-n9wkGQmEec3kV7v3lXF1k.crl (hash: s33XTzESmnZXgL0M1x2MFeEtLUMwGX8ri0i+1cowZXs=)
3: X2IBg-0ZoG3nzdbOUqoFpfNzTiM.roa (hash: I3L20uWKmG3AN70fPYDWHSKnKdL/hAFebOsi5YIWBck=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ad/b53547-d340-4392-af46-615961312b52/1/N0MfG-n9wkGQmEec3kV7v3lXF1k.crl
rsync://rpki.ripe.net/repository/DEFAULT/ad/b53547-d340-4392-af46-615961312b52/1/N0MfG-n9wkGQmEec3kV7v3lXF1k.mft
rsync://rpki.ripe.net/repository/DEFAULT/N0MfG-n9wkGQmEec3kV7v3lXF1k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 11 Aug 2025 17:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:95:92:5d:60:80:c4:0e:6f:d3:e6:22:ef:3e:35:82:84
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=37431f1be9fdc2419098479cde457bbf79571759
Validity
Not Before: Aug 10 20:00:53 2025 GMT
Not After : Aug 11 20:00:53 2025 GMT
Subject: CN=7c9fbf0be236850cd2434ac89d66f62d3349d0ca
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:e8:46:69:a9:7b:e2:04:13:08:29:50:1c:f3:
e3:d2:76:8e:0e:0e:d8:28:21:34:06:6a:d9:28:1e:
f1:21:3b:74:cb:4c:cb:dc:d1:fe:dc:fc:7c:ba:0e:
b8:5d:0f:7c:db:a9:c5:b0:89:c3:70:86:58:cb:3c:
e9:db:f1:b9:3b:ac:bd:2e:22:fe:2a:2f:a6:5c:a2:
4f:5d:64:ea:82:af:57:5b:5c:f1:8d:ac:e0:19:5a:
e7:53:e7:9b:3d:f6:32:14:92:e1:bc:51:7e:6b:e8:
96:0c:b8:67:1e:10:24:10:e7:0b:bb:04:1d:69:90:
71:7f:2d:53:04:69:e3:82:10:cb:69:db:31:90:09:
a1:05:34:22:4d:58:2b:b0:0b:a9:6d:b7:c4:2f:27:
64:21:72:5d:a6:a0:91:c7:c4:f8:98:12:3b:12:44:
d2:33:bc:be:fe:04:b6:13:3d:fa:d0:60:7e:d9:ea:
08:02:b5:8e:cb:b9:c1:54:d3:c4:75:86:ac:63:60:
74:76:ad:d4:49:5a:a3:14:24:d0:f9:de:10:3d:ce:
54:9d:1d:c3:23:92:15:5f:00:54:13:75:2b:f4:df:
27:a2:21:68:61:e5:f5:a6:94:38:57:09:04:1b:96:
36:48:6c:72:7a:5b:f5:46:19:37:5c:ba:79:1e:90:
80:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:9F:BF:0B:E2:36:85:0C:D2:43:4A:C8:9D:66:F6:2D:33:49:D0:CA
X509v3 Authority Key Identifier:
keyid:37:43:1F:1B:E9:FD:C2:41:90:98:47:9C:DE:45:7B:BF:79:57:17:59
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/N0MfG-n9wkGQmEec3kV7v3lXF1k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/b53547-d340-4392-af46-615961312b52/1/N0MfG-n9wkGQmEec3kV7v3lXF1k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/b53547-d340-4392-af46-615961312b52/1/N0MfG-n9wkGQmEec3kV7v3lXF1k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1f:86:51:fc:5e:01:84:a2:1f:41:2d:1d:5d:06:7f:6c:79:b6:
36:98:8b:04:59:b1:48:98:6f:b4:80:78:17:dd:8b:83:ba:4f:
d5:b4:3f:a3:36:e9:0c:1c:85:36:c4:07:f6:25:30:45:ce:c0:
de:f4:f5:1f:6a:9c:51:7c:01:a6:18:18:a3:44:ef:07:a5:0c:
71:91:e1:a8:99:12:19:92:9c:10:06:fd:cf:20:dd:d0:ca:c8:
9c:66:9d:9a:0d:97:c9:fe:16:77:0a:ba:88:d0:25:9b:11:a3:
12:7d:6b:00:76:e2:c2:c5:25:8f:e6:49:db:c1:4e:26:20:06:
2c:87:97:68:72:ef:dd:10:3c:5b:88:ae:38:8c:ef:50:cd:92:
3b:99:d6:bf:0d:08:3e:22:a5:24:18:58:a5:a0:5f:cd:bd:e6:
f8:89:1a:97:93:a6:3a:5b:c7:81:55:49:f1:46:5b:fa:e4:54:
38:7f:19:8a:9a:14:27:48:ae:18:ba:e1:06:90:da:e5:87:00:
ca:cb:c3:67:f8:48:5c:81:70:06:92:c0:b9:da:af:4a:2b:f5:
99:38:ec:9f:3d:f9:df:6d:67:e4:41:ef:1d:2f:1f:34:55:44:
34:36:d1:b9:ea:1b:5a:f0:bd:c0:2d:73:72:6d:99:8d:fb:89:
ee:49:22:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 11 02:04:46 2025 by rpki-client