Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e0/dc43fb-4656-4af9-aad2-ee28a65c8a22/1/N1UunJZN5v9U4JnHEVXBod7IpzA.mft
File: N1UunJZN5v9U4JnHEVXBod7IpzA.mft (raw, json)
Hash identifier: aP0yX1e8ZO/medeAxWWl9RAq5q9j0mzik6gMvcT6+QQ=
Subject key identifier: 11:13:4E:72:76:8D:BD:1C:CD:C1:57:CD:B1:E5:DF:59:36:9A:6A:29
Authority key identifier: 37:55:2E:9C:96:4D:E6:FF:54:E0:99:C7:11:55:C1:A1:DE:C8:A7:30
Certificate issuer: /CN=37552e9c964de6ff54e099c71155c1a1dec8a730
Certificate serial: 019894EDC667F1EFC1B8049B24C4C247D4A4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/N1UunJZN5v9U4JnHEVXBod7IpzA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e0/dc43fb-4656-4af9-aad2-ee28a65c8a22/1/N1UunJZN5v9U4JnHEVXBod7IpzA.mft
Manifest number: 1628
Signing time: Sun 10 Aug 2025 17:01:07 +0000
Manifest this update: Sun 10 Aug 2025 17:01:07 +0000
Manifest next update: Mon 11 Aug 2025 17:01:07 +0000
Files and hashes: 1: N1UunJZN5v9U4JnHEVXBod7IpzA.crl (hash: J01IAe3Vc/ghpA18T5Lux/LXGrcYPoo+J+gvuPMS384=)
2: erhlDHo6u2N8SbRRVUL49trJG0Q.roa (hash: 3V4uI/Y1go20Ur/8ybcFLPuVLcruMM7J3PxGXh059Vg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e0/dc43fb-4656-4af9-aad2-ee28a65c8a22/1/N1UunJZN5v9U4JnHEVXBod7IpzA.crl
rsync://rpki.ripe.net/repository/DEFAULT/e0/dc43fb-4656-4af9-aad2-ee28a65c8a22/1/N1UunJZN5v9U4JnHEVXBod7IpzA.mft
rsync://rpki.ripe.net/repository/DEFAULT/N1UunJZN5v9U4JnHEVXBod7IpzA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 11 Aug 2025 17:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:94:ed:c6:67:f1:ef:c1:b8:04:9b:24:c4:c2:47:d4:a4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=37552e9c964de6ff54e099c71155c1a1dec8a730
Validity
Not Before: Aug 10 17:01:07 2025 GMT
Not After : Aug 11 17:01:07 2025 GMT
Subject: CN=11134e72768dbd1ccdc157cdb1e5df59369a6a29
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:76:fc:0b:c0:42:50:4f:08:00:36:99:da:78:
f0:94:ad:cd:35:d2:dc:7f:10:d3:89:68:61:c4:7f:
c8:ae:88:d7:95:0e:91:58:ea:86:99:5d:9c:d4:6e:
82:1c:b5:73:45:d4:27:77:c7:74:d7:35:ab:55:f9:
34:21:d6:50:25:e5:63:d4:cd:aa:b4:b5:d8:03:3a:
78:42:92:36:f6:3a:a1:6f:87:47:30:26:dd:d2:c6:
9e:38:e6:5e:4c:41:e3:1f:cd:87:80:f0:c1:2a:83:
fe:c3:c2:be:a6:94:55:ea:03:62:b0:de:0b:1d:d3:
de:e9:0c:0e:97:30:a6:37:27:62:03:1b:fc:6e:7b:
56:7c:eb:c2:59:cd:4a:ba:4f:af:d8:14:bf:d2:91:
37:4d:66:4b:fb:e1:2e:d2:fa:53:36:ab:94:1e:09:
37:02:de:d3:54:08:4d:90:2f:e7:09:9a:5c:62:d0:
29:8b:9f:ba:aa:df:48:2c:05:d3:42:16:ba:7d:10:
ca:9e:11:d6:ac:3f:d6:fa:2d:62:80:b0:c1:70:e8:
e7:12:ee:dc:3a:99:fa:06:16:6a:46:1b:af:ac:d3:
8c:6c:72:30:07:6d:bf:09:0a:19:8a:3d:c5:11:ef:
a6:ff:05:c9:69:f5:c8:42:8a:53:5f:51:6b:47:18:
64:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:13:4E:72:76:8D:BD:1C:CD:C1:57:CD:B1:E5:DF:59:36:9A:6A:29
X509v3 Authority Key Identifier:
keyid:37:55:2E:9C:96:4D:E6:FF:54:E0:99:C7:11:55:C1:A1:DE:C8:A7:30
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/N1UunJZN5v9U4JnHEVXBod7IpzA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/dc43fb-4656-4af9-aad2-ee28a65c8a22/1/N1UunJZN5v9U4JnHEVXBod7IpzA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/dc43fb-4656-4af9-aad2-ee28a65c8a22/1/N1UunJZN5v9U4JnHEVXBod7IpzA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
77:ec:49:16:eb:6b:c7:a7:dd:85:e8:6d:48:27:31:99:86:1a:
6f:36:11:c5:85:0c:5f:5c:85:c5:78:e8:4c:a9:a5:70:16:cf:
a1:9d:24:cf:4b:1c:36:05:f4:7a:c2:c2:12:57:5a:bd:1b:e6:
22:15:ec:ae:c3:f8:1e:0c:c5:00:63:c6:ca:04:be:88:2f:46:
90:e4:17:8a:29:e3:c7:56:52:b6:ea:c5:aa:de:14:2f:83:54:
b8:11:91:1a:48:e1:4b:f3:fe:da:10:8b:af:36:9f:49:f6:62:
c2:47:e5:89:4d:a2:82:8e:46:7a:86:f2:53:3a:7b:91:71:b0:
41:7b:ed:ae:ac:0e:3c:8f:6c:ae:14:7b:e3:d7:31:e2:7d:74:
4f:bf:f3:b9:b8:2d:14:a7:6c:d4:9a:6d:f7:02:a2:55:7d:69:
a1:de:a0:19:08:71:3c:41:82:31:32:3c:50:27:28:12:12:ff:
ba:11:cf:33:77:bc:8e:d3:f9:55:88:89:da:a1:db:2d:63:cd:
99:e4:ad:d0:19:ec:97:30:74:3d:c2:fd:46:ee:c0:df:ac:e8:
53:4e:bf:2d:25:da:be:d2:81:8e:c2:c5:c6:3d:5f:3d:79:7b:
b5:14:29:59:af:84:4c:c6:b5:64:9b:4a:7f:a2:eb:ed:b2:f2:
71:03:e5:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 11 01:43:10 2025 by rpki-client