Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ad/b53547-d340-4392-af46-615961312b52/1/N0MfG-n9wkGQmEec3kV7v3lXF1k.mft
File: N0MfG-n9wkGQmEec3kV7v3lXF1k.mft (raw, json)
Hash identifier: YfLWJUGb8FNrTG2JTfsLhjB91cLCw/Ut+cE6wV4k6gk=
Subject key identifier: 8B:70:19:CE:64:CB:F4:D1:36:50:86:70:60:7F:CA:38:0A:5D:49:94
Authority key identifier: 37:43:1F:1B:E9:FD:C2:41:90:98:47:9C:DE:45:7B:BF:79:57:17:59
Certificate issuer: /CN=37431f1be9fdc2419098479cde457bbf79571759
Certificate serial: 01976A3CCFB9B97769F69AF7B73BFF3496E1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/N0MfG-n9wkGQmEec3kV7v3lXF1k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ad/b53547-d340-4392-af46-615961312b52/1/N0MfG-n9wkGQmEec3kV7v3lXF1k.mft
Manifest number: 0815
Signing time: Fri 13 Jun 2025 17:00:59 +0000
Manifest this update: Fri 13 Jun 2025 17:00:59 +0000
Manifest next update: Sat 14 Jun 2025 17:00:59 +0000
Files and hashes: 1: A3ey_cAeMANwFWddA6tWalsb_HU.roa (hash: 1QzvBN6h57NIWttaQKkwiJVejIWg/N7/NzIPvbKh3sU=)
2: N0MfG-n9wkGQmEec3kV7v3lXF1k.crl (hash: yAoMtnxI7iXo0a5/1NhLUtK8B/2oEhifHWnTnZKZX34=)
3: X2IBg-0ZoG3nzdbOUqoFpfNzTiM.roa (hash: I3L20uWKmG3AN70fPYDWHSKnKdL/hAFebOsi5YIWBck=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ad/b53547-d340-4392-af46-615961312b52/1/N0MfG-n9wkGQmEec3kV7v3lXF1k.crl
rsync://rpki.ripe.net/repository/DEFAULT/ad/b53547-d340-4392-af46-615961312b52/1/N0MfG-n9wkGQmEec3kV7v3lXF1k.mft
rsync://rpki.ripe.net/repository/DEFAULT/N0MfG-n9wkGQmEec3kV7v3lXF1k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 14 Jun 2025 13:55:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6a:3c:cf:b9:b9:77:69:f6:9a:f7:b7:3b:ff:34:96:e1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=37431f1be9fdc2419098479cde457bbf79571759
Validity
Not Before: Jun 13 17:00:59 2025 GMT
Not After : Jun 14 17:00:59 2025 GMT
Subject: CN=8b7019ce64cbf4d136508670607fca380a5d4994
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:61:34:3f:3c:e8:ed:7e:1e:10:d8:10:0a:92:
96:02:88:14:0f:33:6f:50:9d:a5:43:91:81:90:eb:
6a:ed:6c:44:05:c8:97:c8:bc:32:6e:00:5e:f0:d2:
e7:ad:8a:11:5b:3c:d4:df:e7:db:fa:e1:9a:01:e0:
a7:19:df:5c:8c:65:c7:55:34:43:3e:ca:ec:a8:ac:
11:9f:c6:38:2d:2f:25:78:45:70:7f:7f:fc:fd:5b:
a7:f8:94:a3:06:4a:94:5a:10:04:f4:e8:2c:17:71:
45:c1:9b:fd:3b:f5:9e:71:bc:30:35:be:76:cd:97:
4f:0f:e2:dc:1f:0b:b6:47:f9:97:9a:6e:96:88:15:
9d:70:bd:d7:3a:c2:95:63:58:43:a8:d6:f7:f0:f0:
70:1d:ee:06:04:5c:a0:5a:e4:02:2e:16:c7:ea:ad:
96:f3:4c:42:83:e5:2a:1b:10:b9:f5:bd:f3:52:ea:
6f:e8:d4:e2:09:6c:a3:46:1d:28:63:09:b3:57:cd:
62:e7:35:80:6f:2c:35:60:ce:cd:22:a2:92:ef:22:
03:48:e6:bc:db:c3:00:d0:89:17:14:7b:43:a0:67:
0c:5c:6b:27:34:3f:3f:18:54:05:26:a2:67:27:e0:
25:6e:42:8e:b8:9c:8d:c1:63:30:83:17:43:18:e6:
be:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:70:19:CE:64:CB:F4:D1:36:50:86:70:60:7F:CA:38:0A:5D:49:94
X509v3 Authority Key Identifier:
keyid:37:43:1F:1B:E9:FD:C2:41:90:98:47:9C:DE:45:7B:BF:79:57:17:59
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/N0MfG-n9wkGQmEec3kV7v3lXF1k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/b53547-d340-4392-af46-615961312b52/1/N0MfG-n9wkGQmEec3kV7v3lXF1k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/b53547-d340-4392-af46-615961312b52/1/N0MfG-n9wkGQmEec3kV7v3lXF1k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
70:02:13:38:17:92:35:5c:e6:da:3c:51:28:64:22:84:90:fd:
be:1a:ee:60:18:21:2f:ec:a9:8d:22:93:ed:51:a6:65:48:0c:
47:c0:de:d8:1e:9d:bc:c5:e7:7b:76:ca:f0:97:b4:36:47:a5:
c4:c4:ea:31:c2:81:a8:1e:ab:83:a2:82:d4:9a:19:6d:ee:e0:
4d:81:60:2b:5f:9a:c7:2e:d6:04:e8:12:f8:1a:f2:7e:bb:57:
2e:33:cb:b1:14:43:88:4a:43:fe:53:05:3d:76:60:dc:be:a4:
93:87:04:0a:59:fc:5d:7d:ea:bc:e3:90:65:9c:25:96:1d:7f:
69:b4:f0:44:a6:93:20:23:e5:75:fb:dc:9a:7d:83:7b:04:2a:
2f:37:20:39:d3:79:8a:90:12:b5:89:22:34:26:08:f3:c9:09:
04:96:01:00:66:7f:90:1f:08:fc:a6:f4:68:29:20:16:3c:3b:
b9:71:fc:78:c9:7f:48:ce:53:54:d1:1f:1a:c6:9f:ee:66:48:
a3:b4:72:a7:ce:eb:2a:c9:ae:ff:59:a1:d3:91:50:2b:91:6a:
ba:8e:d8:b0:d1:0d:d5:bd:b2:41:f5:86:39:61:ae:2e:6a:34:
f9:3d:7b:b2:53:38:b0:da:34:19:cf:e9:0d:4d:31:d2:ec:9c:
17:18:1c:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 13 20:15:46 2025 by rpki-client