Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/af/46c38b-4324-44aa-9bb5-386910dcb903/1/N-DLWK4j1HOuE6c0G3pzvdECig0.mft
File: N-DLWK4j1HOuE6c0G3pzvdECig0.mft (raw, json)
Hash identifier: 9/cQxU/CXW4pfxBKmvMEbWEa5H7UVxlNCG+owIwQg54=
Subject key identifier: 59:24:52:52:0B:2D:BD:67:34:67:DC:C8:00:0D:FB:24:47:24:31:F2
Authority key identifier: 37:E0:CB:58:AE:23:D4:73:AE:13:A7:34:1B:7A:73:BD:D1:02:8A:0D
Certificate issuer: /CN=37e0cb58ae23d473ae13a7341b7a73bdd1028a0d
Certificate serial: 019770E38A3B4A41B5C61776CAD45D6934E7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/N-DLWK4j1HOuE6c0G3pzvdECig0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/af/46c38b-4324-44aa-9bb5-386910dcb903/1/N-DLWK4j1HOuE6c0G3pzvdECig0.mft
Manifest number: 0F8A
Signing time: Sun 15 Jun 2025 00:00:49 +0000
Manifest this update: Sun 15 Jun 2025 00:00:49 +0000
Manifest next update: Mon 16 Jun 2025 00:00:49 +0000
Files and hashes: 1: N-DLWK4j1HOuE6c0G3pzvdECig0.crl (hash: EZJ+uvDSmOXx+/r/NBPtdoJMO023yeBtmHAzIbzmMOc=)
2: cxXgE4ze3p5Y_SSxlmeJ4o5QzaU.roa (hash: VnVBSnuyvJSL8u2y/xmozn76q7jfteZhwwoJt7Qqpuc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/af/46c38b-4324-44aa-9bb5-386910dcb903/1/N-DLWK4j1HOuE6c0G3pzvdECig0.crl
rsync://rpki.ripe.net/repository/DEFAULT/af/46c38b-4324-44aa-9bb5-386910dcb903/1/N-DLWK4j1HOuE6c0G3pzvdECig0.mft
rsync://rpki.ripe.net/repository/DEFAULT/N-DLWK4j1HOuE6c0G3pzvdECig0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 22:19:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:70:e3:8a:3b:4a:41:b5:c6:17:76:ca:d4:5d:69:34:e7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=37e0cb58ae23d473ae13a7341b7a73bdd1028a0d
Validity
Not Before: Jun 15 00:00:49 2025 GMT
Not After : Jun 16 00:00:49 2025 GMT
Subject: CN=592452520b2dbd673467dcc8000dfb24472431f2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:d2:fe:9c:49:2e:52:24:16:30:f7:26:1d:92:
d7:41:05:68:99:98:bb:9f:4a:1f:f8:4e:7a:dd:3c:
f6:6a:8f:01:f1:57:df:c6:00:26:da:ff:c0:0c:05:
2c:78:be:ea:6c:83:31:62:1f:02:84:74:be:c2:ed:
bc:77:61:71:86:e0:65:95:3d:c9:ad:0e:1c:64:12:
13:a6:e1:e9:be:d0:42:92:6b:9e:d3:ae:6c:0a:b3:
94:9e:7f:14:54:11:26:a6:63:72:92:f4:e9:84:e0:
ed:7d:8e:d9:df:7e:22:a7:e3:9d:ff:bf:13:8d:da:
73:f1:d8:09:62:89:42:5b:fa:4a:59:dd:27:e1:e1:
43:b3:53:86:e9:d9:54:e2:44:d4:97:81:3a:67:9a:
30:1f:d0:82:1b:4b:1c:96:c7:3e:83:e4:db:c0:9f:
c4:fd:4c:c9:07:21:78:39:cf:95:5a:1e:10:58:3e:
c3:d3:ff:87:a4:8b:5c:96:3e:0a:6b:40:8b:85:2e:
96:b6:6d:65:c5:71:0f:46:22:16:80:a0:f1:60:aa:
a4:c4:c4:16:7a:00:a4:56:e6:23:ad:d7:3f:8f:b9:
36:3e:0e:8d:b8:49:4b:99:8c:c2:3c:22:cc:73:ef:
d6:3a:c9:6b:2b:24:2c:2b:ef:a8:a7:73:93:8a:a9:
22:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:24:52:52:0B:2D:BD:67:34:67:DC:C8:00:0D:FB:24:47:24:31:F2
X509v3 Authority Key Identifier:
keyid:37:E0:CB:58:AE:23:D4:73:AE:13:A7:34:1B:7A:73:BD:D1:02:8A:0D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/N-DLWK4j1HOuE6c0G3pzvdECig0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/46c38b-4324-44aa-9bb5-386910dcb903/1/N-DLWK4j1HOuE6c0G3pzvdECig0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/af/46c38b-4324-44aa-9bb5-386910dcb903/1/N-DLWK4j1HOuE6c0G3pzvdECig0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7e:81:6e:ff:3a:d6:2d:ad:96:e3:86:c2:d6:71:37:7e:a0:6d:
90:58:a5:c1:f5:cd:37:0f:9d:7f:89:9c:66:01:b3:75:f1:47:
23:b3:6b:2b:01:75:f8:90:29:cd:85:42:d6:02:a3:a6:e9:d1:
69:d2:8f:82:78:f6:30:6c:60:0a:08:32:17:d7:43:26:0c:25:
3e:0a:09:3f:97:37:71:52:96:47:09:ad:a4:e3:51:88:11:75:
f0:98:50:22:0f:65:63:07:f4:4b:ba:81:dc:64:43:a9:e2:d5:
a8:cb:ca:49:f2:09:c7:e8:ae:8e:da:d4:6c:12:ac:8e:0b:4a:
7e:cb:e9:10:2f:b7:4d:b3:8a:22:a6:22:02:85:21:51:6b:3a:
f6:81:b1:22:d6:47:34:d9:f4:0e:69:33:3d:1e:19:14:32:86:
8d:a1:60:22:3c:ea:52:07:e4:99:11:24:5d:45:ac:89:40:01:
ae:10:01:62:a8:b3:39:e5:f8:d3:71:0b:69:9e:cf:7e:3f:19:
94:0d:e4:8e:ae:a8:3f:e0:6c:a4:97:75:da:7d:d5:72:3f:00:
86:6e:f0:95:47:71:37:cc:e3:24:b0:6f:a5:c6:3f:8f:44:73:
93:58:c4:c3:ef:7c:2a:f9:75:e7:3a:ba:8a:ff:b3:fc:90:31:
ee:4e:59:da
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdw44o7SkG1xhd2ytRdaTTnMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM3ZTBjYjU4YWUyM2Q0NzNhZTEzYTczNDFiN2E3M2JkZDEw
MjhhMGQwHhcNMjUwNjE1MDAwMDQ5WhcNMjUwNjE2MDAwMDQ5WjAzMTEwLwYDVQQD
Eyg1OTI0NTI1MjBiMmRiZDY3MzQ2N2RjYzgwMDBkZmIyNDQ3MjQzMWYyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzNL+nEkuUiQWMPcmHZLXQQVomZi7
n0of+E563Tz2ao8B8VffxgAm2v/ADAUseL7qbIMxYh8ChHS+wu28d2FxhuBllT3J
rQ4cZBITpuHpvtBCkmue065sCrOUnn8UVBEmpmNykvTphODtfY7Z334ip+Od/78T
jdpz8dgJYolCW/pKWd0n4eFDs1OG6dlU4kTUl4E6Z5owH9CCG0sclsc+g+TbwJ/E
/UzJByF4Oc+VWh4QWD7D0/+HpItclj4Ka0CLhS6Wtm1lxXEPRiIWgKDxYKqkxMQW
egCkVuYjrdc/j7k2Pg6NuElLmYzCPCLMc+/WOslrKyQsK++op3OTiqkiAQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFkkUlILLb1nNGfcyAAN+yRHJDHyMB8GA1UdIwQY
MBaAFDfgy1iuI9RzrhOnNBt6c73RAooNMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTi1ETFdLNGoxSE91RTZjMEczcHp2ZEVDaWcwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hZi80NmMzOGItNDMyNC00NGFhLTliYjUt
Mzg2OTEwZGNiOTAzLzEvTi1ETFdLNGoxSE91RTZjMEczcHp2ZEVDaWcwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hZi80NmMzOGItNDMyNC00NGFhLTliYjUtMzg2OTEwZGNiOTAz
LzEvTi1ETFdLNGoxSE91RTZjMEczcHp2ZEVDaWcwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAfoFu/zrW
La2W44bC1nE3fqBtkFilwfXNNw+df4mcZgGzdfFHI7NrKwF1+JApzYVC1gKjpunR
adKPgnj2MGxgCggyF9dDJgwlPgoJP5c3cVKWRwmtpONRiBF18JhQIg9lYwf0S7qB
3GRDqeLVqMvKSfIJx+iujtrUbBKsjgtKfsvpEC+3TbOKIqYiAoUhUWs69oGxItZH
NNn0DmkzPR4ZFDKGjaFgIjzqUgfkmREkXUWsiUABrhABYqizOeX403ELaZ7Pfj8Z
lA3kjq6oP+BspJd12n3Vcj8Ahm7wlUdxN8zjJLBvpcY/j0Rzk1jEw+98Kvl15zq6
iv+z/JAx7k5Z2g==
-----END CERTIFICATE-----
Generated at Sun Jun 15 07:46:15 2025 by rpki-client