Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d8/020d47-2cc0-436b-b9f9-b73bfccb4e08/1/N97mrLx4K4x2lqQLKOgDOWGdDxs.mft
File: N97mrLx4K4x2lqQLKOgDOWGdDxs.mft (raw, json)
Hash identifier: BRzdsVFvD2bDsWbKSkW1Ev+On7txsSxTn6Sk3iX0Mns=
Subject key identifier: AE:E9:F7:61:61:34:F0:93:5E:AA:35:A2:F5:8F:5A:B2:B0:7A:9F:0B
Authority key identifier: 37:DE:E6:AC:BC:78:2B:8C:76:96:A4:0B:28:E8:03:39:61:9D:0F:1B
Certificate issuer: /CN=37dee6acbc782b8c7696a40b28e80339619d0f1b
Certificate serial: 019897B74F9B42A1B5D177FEE8BDD1DA2D0A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/N97mrLx4K4x2lqQLKOgDOWGdDxs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d8/020d47-2cc0-436b-b9f9-b73bfccb4e08/1/N97mrLx4K4x2lqQLKOgDOWGdDxs.mft
Manifest number: 162D
Signing time: Mon 11 Aug 2025 06:00:29 +0000
Manifest this update: Mon 11 Aug 2025 06:00:29 +0000
Manifest next update: Tue 12 Aug 2025 06:00:29 +0000
Files and hashes: 1: MbrCU5EWrzqFZBAeUe4bUJd8wew.roa (hash: 5Pva3cv3+IYsnuZvSImhrKouYMj9MMRYEIbLj8Bzi98=)
2: N97mrLx4K4x2lqQLKOgDOWGdDxs.crl (hash: pHY6wSDwuyUS96tR3pH67fCFoNzF/YkmVc3SnBz95Tc=)
3: zQEfbksVhhA2S7Y-4p6fScJooW4.roa (hash: wml6Lhyvjtk0nrkWUQQ2ofJbLrbKj1m4u8FJSWuGbD4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d8/020d47-2cc0-436b-b9f9-b73bfccb4e08/1/N97mrLx4K4x2lqQLKOgDOWGdDxs.crl
rsync://rpki.ripe.net/repository/DEFAULT/d8/020d47-2cc0-436b-b9f9-b73bfccb4e08/1/N97mrLx4K4x2lqQLKOgDOWGdDxs.mft
rsync://rpki.ripe.net/repository/DEFAULT/N97mrLx4K4x2lqQLKOgDOWGdDxs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 12 Aug 2025 02:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:97:b7:4f:9b:42:a1:b5:d1:77:fe:e8:bd:d1:da:2d:0a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=37dee6acbc782b8c7696a40b28e80339619d0f1b
Validity
Not Before: Aug 11 06:00:29 2025 GMT
Not After : Aug 12 06:00:29 2025 GMT
Subject: CN=aee9f7616134f0935eaa35a2f58f5ab2b07a9f0b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:77:39:4d:04:7b:ac:cf:f2:2d:0d:98:b6:f3:
50:a6:2e:9c:9c:42:7a:98:e4:e2:f7:df:ab:91:89:
e8:39:fd:91:1c:b3:85:2d:24:f2:27:8f:3d:d3:97:
26:2f:0d:91:b8:27:29:6d:c8:a2:48:81:f0:eb:ad:
09:0c:55:80:e8:67:a6:44:a5:2f:a5:cf:24:6e:0c:
30:83:c8:60:f0:80:35:e6:c7:4e:a9:23:50:a2:c4:
3d:8c:19:8d:61:35:1d:17:f3:14:a3:83:af:e1:78:
d8:ff:51:d1:b3:7e:4b:5e:d7:69:d4:9c:ed:6d:4e:
e6:20:16:da:1b:1d:84:0a:d7:ed:94:9b:a8:1c:5a:
ae:00:b2:ea:c5:38:1c:6c:5e:20:a9:8d:86:09:01:
0a:c2:bf:08:4e:c5:9e:6d:9a:5d:2f:8a:96:0f:55:
28:fb:fe:b9:a4:54:31:99:db:40:ab:c4:86:06:83:
f3:62:a9:a7:59:d9:4d:87:dd:d7:1a:6f:b5:65:83:
bb:73:cc:28:b4:d0:3a:5d:4b:d8:1e:78:ca:43:c0:
0a:41:0e:c3:9c:1d:c6:04:c6:af:56:f3:a4:07:9f:
cd:a6:ab:02:d4:bc:f1:4c:97:2a:2c:d4:d0:b0:b0:
3d:b2:69:c0:33:6b:52:58:66:df:60:a8:2d:32:57:
43:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:E9:F7:61:61:34:F0:93:5E:AA:35:A2:F5:8F:5A:B2:B0:7A:9F:0B
X509v3 Authority Key Identifier:
keyid:37:DE:E6:AC:BC:78:2B:8C:76:96:A4:0B:28:E8:03:39:61:9D:0F:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/N97mrLx4K4x2lqQLKOgDOWGdDxs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/020d47-2cc0-436b-b9f9-b73bfccb4e08/1/N97mrLx4K4x2lqQLKOgDOWGdDxs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/020d47-2cc0-436b-b9f9-b73bfccb4e08/1/N97mrLx4K4x2lqQLKOgDOWGdDxs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
80:d9:3d:08:ea:3a:ab:69:95:d8:71:0d:9e:e2:ce:4d:47:36:
31:fc:72:76:58:04:fd:5d:95:30:98:f1:35:d4:56:2c:df:c1:
c7:45:80:ff:ac:ec:92:6b:52:48:b0:93:d3:1e:db:70:43:59:
ca:29:2a:80:df:ae:14:e5:3d:9e:bf:b1:af:12:00:fc:0b:3a:
df:df:ed:37:c5:0f:9b:18:64:9a:2e:be:d1:f1:72:a2:70:f2:
13:60:9b:32:6e:15:6d:29:1e:ae:9c:3c:97:f2:f9:b6:55:5e:
e2:dd:d2:cc:bd:d4:c0:02:a8:bb:bc:51:65:8a:99:e5:ef:e3:
56:94:4e:73:03:f2:72:2b:d5:13:10:23:03:2b:56:f2:05:c4:
01:95:d0:b2:32:bd:67:dd:dd:45:76:e9:ae:8d:a4:2a:1e:39:
0a:17:12:0c:7d:56:7b:7b:6f:9a:47:0c:ed:a7:57:1d:87:9e:
29:b8:3d:54:5f:a9:fe:13:ff:64:7a:1d:a7:2f:ab:1b:98:e4:
60:c0:f7:cf:5d:53:dd:a1:b5:c3:c7:fe:f3:1a:11:e1:e3:b0:
74:91:51:ae:b7:06:31:a4:f1:2b:3f:cd:b2:b8:e3:b8:e9:3c:
ef:20:77:7f:19:b1:f3:75:58:d5:83:c2:47:7c:8c:35:d5:24:
6e:30:e2:53
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZiXt0+bQqG10Xf+6L3R2i0KMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM3ZGVlNmFjYmM3ODJiOGM3Njk2YTQwYjI4ZTgwMzM5NjE5
ZDBmMWIwHhcNMjUwODExMDYwMDI5WhcNMjUwODEyMDYwMDI5WjAzMTEwLwYDVQQD
EyhhZWU5Zjc2MTYxMzRmMDkzNWVhYTM1YTJmNThmNWFiMmIwN2E5ZjBiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqXc5TQR7rM/yLQ2YtvNQpi6cnEJ6
mOTi99+rkYnoOf2RHLOFLSTyJ48905cmLw2RuCcpbciiSIHw660JDFWA6GemRKUv
pc8kbgwwg8hg8IA15sdOqSNQosQ9jBmNYTUdF/MUo4Ov4XjY/1HRs35LXtdp1Jzt
bU7mIBbaGx2ECtftlJuoHFquALLqxTgcbF4gqY2GCQEKwr8ITsWebZpdL4qWD1Uo
+/65pFQxmdtAq8SGBoPzYqmnWdlNh93XGm+1ZYO7c8wotNA6XUvYHnjKQ8AKQQ7D
nB3GBMavVvOkB5/NpqsC1LzxTJcqLNTQsLA9smnAM2tSWGbfYKgtMldD9QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFK7p92FhNPCTXqo1ovWPWrKwep8LMB8GA1UdIwQY
MBaAFDfe5qy8eCuMdpakCyjoAzlhnQ8bMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTjk3bXJMeDRLNHgybHFRTEtPZ0RPV0dkRHhzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kOC8wMjBkNDctMmNjMC00MzZiLWI5Zjkt
YjczYmZjY2I0ZTA4LzEvTjk3bXJMeDRLNHgybHFRTEtPZ0RPV0dkRHhzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kOC8wMjBkNDctMmNjMC00MzZiLWI5ZjktYjczYmZjY2I0ZTA4
LzEvTjk3bXJMeDRLNHgybHFRTEtPZ0RPV0dkRHhzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAgNk9COo6
q2mV2HENnuLOTUc2MfxydlgE/V2VMJjxNdRWLN/Bx0WA/6zskmtSSLCT0x7bcENZ
yikqgN+uFOU9nr+xrxIA/As639/tN8UPmxhkmi6+0fFyonDyE2CbMm4VbSkerpw8
l/L5tlVe4t3SzL3UwAKou7xRZYqZ5e/jVpROcwPycivVExAjAytW8gXEAZXQsjK9
Z93dRXbpro2kKh45ChcSDH1We3tvmkcM7adXHYeeKbg9VF+p/hP/ZHodpy+rG5jk
YMD3z11T3aG1w8f+8xoR4eOwdJFRrrcGMaTxKz/NsrjjuOk87yB3fxmx83VY1YPC
R3yMNdUkbjDiUw==
-----END CERTIFICATE-----
Generated at Mon Aug 11 10:31:44 2025 by rpki-client