Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e1/2155f1-976a-4f7e-95a4-076e1d77aebe/1/N2AlOewyw5Gf8cvJWU3cq4FWdMU.mft
File: N2AlOewyw5Gf8cvJWU3cq4FWdMU.mft (raw, json)
Hash identifier: J+rIYyunPvsd8XDHuDrGyc2cZYBQx36KOgDI7gej2GI=
Subject key identifier: 28:56:89:FD:E5:14:DC:71:2E:45:01:9F:99:D1:2B:40:64:86:80:83
Authority key identifier: 37:60:25:39:EC:32:C3:91:9F:F1:CB:C9:59:4D:DC:AB:81:56:74:C5
Certificate issuer: /CN=37602539ec32c3919ff1cbc9594ddcab815674c5
Certificate serial: 01987B2DDB84FF7E960A34F8BC46D3D70C1E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/N2AlOewyw5Gf8cvJWU3cq4FWdMU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e1/2155f1-976a-4f7e-95a4-076e1d77aebe/1/N2AlOewyw5Gf8cvJWU3cq4FWdMU.mft
Manifest number: 0CD1
Signing time: Tue 05 Aug 2025 17:00:59 +0000
Manifest this update: Tue 05 Aug 2025 17:00:59 +0000
Manifest next update: Wed 06 Aug 2025 17:00:59 +0000
Files and hashes: 1: 8OUuy6RxMKAA3VbPAT05z8x14Y0.roa (hash: /S82CRuIWRkEgkIG58XNeFsI8Jv6K3dyodJP/54XncE=)
2: N2AlOewyw5Gf8cvJWU3cq4FWdMU.crl (hash: UzFGI0CdIbgXp2VSWZmW8JNPnkna7WKAqXUiGK1la2w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e1/2155f1-976a-4f7e-95a4-076e1d77aebe/1/N2AlOewyw5Gf8cvJWU3cq4FWdMU.crl
rsync://rpki.ripe.net/repository/DEFAULT/e1/2155f1-976a-4f7e-95a4-076e1d77aebe/1/N2AlOewyw5Gf8cvJWU3cq4FWdMU.mft
rsync://rpki.ripe.net/repository/DEFAULT/N2AlOewyw5Gf8cvJWU3cq4FWdMU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 06 Aug 2025 17:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:7b:2d:db:84:ff:7e:96:0a:34:f8:bc:46:d3:d7:0c:1e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=37602539ec32c3919ff1cbc9594ddcab815674c5
Validity
Not Before: Aug 5 17:00:59 2025 GMT
Not After : Aug 6 17:00:59 2025 GMT
Subject: CN=285689fde514dc712e45019f99d12b4064868083
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:cb:67:07:58:30:70:a0:3b:32:d3:a3:28:0e:
95:4b:e1:3e:aa:d8:f8:8e:f4:a9:24:bc:2a:11:39:
33:9a:a9:8f:fd:a5:62:fc:fe:cb:5d:3e:15:2b:19:
b9:fe:47:e7:e5:d4:69:c0:3f:91:f6:1c:f9:ea:cc:
a4:01:c7:b1:00:c8:22:68:94:4a:02:37:c6:0b:5c:
b1:03:e4:e7:b2:b5:15:d1:2e:57:74:ff:7b:92:64:
2d:e0:36:7a:37:da:ad:fb:fb:72:e1:55:11:d2:47:
55:c1:d1:c0:05:e5:9c:30:c3:12:4a:7a:19:09:d6:
f1:29:58:6d:a5:09:61:22:bd:f9:94:47:56:91:da:
81:0c:c4:ff:be:1d:81:77:59:20:4e:58:64:3f:34:
3f:93:75:16:51:aa:60:0b:42:f1:27:26:05:1c:18:
1b:30:11:e3:d8:ae:17:21:22:14:f0:37:14:c3:9f:
38:60:9f:f3:80:6b:3d:01:3c:03:01:8f:7a:42:5a:
e7:05:46:fc:b7:7d:da:0d:c6:f1:99:1d:d3:ff:90:
ab:c4:48:ff:5e:55:66:c8:a6:6d:5e:74:6d:11:dd:
a8:a7:a6:a5:fb:8e:3d:e3:21:b2:a6:7c:13:f6:49:
49:bb:af:bb:cd:32:47:62:68:96:bf:35:db:fc:80:
fe:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:56:89:FD:E5:14:DC:71:2E:45:01:9F:99:D1:2B:40:64:86:80:83
X509v3 Authority Key Identifier:
keyid:37:60:25:39:EC:32:C3:91:9F:F1:CB:C9:59:4D:DC:AB:81:56:74:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/N2AlOewyw5Gf8cvJWU3cq4FWdMU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/2155f1-976a-4f7e-95a4-076e1d77aebe/1/N2AlOewyw5Gf8cvJWU3cq4FWdMU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/2155f1-976a-4f7e-95a4-076e1d77aebe/1/N2AlOewyw5Gf8cvJWU3cq4FWdMU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
79:ca:16:1b:43:65:df:56:19:4b:7e:a4:8a:6d:77:d9:5a:2e:
90:f3:f1:15:36:80:76:fb:f4:1f:f4:f1:4c:35:32:24:c9:63:
33:29:a2:53:12:c2:88:12:b8:bf:21:f7:c8:98:77:f0:47:62:
c0:a9:6e:87:2d:a5:43:91:5e:d8:f9:a6:80:13:11:da:75:29:
27:3f:dd:d1:bf:43:0e:73:c1:79:8e:1a:cf:ad:16:52:cb:ff:
3f:5b:d6:43:33:d9:62:71:88:b9:88:3b:1a:72:9e:e2:3f:b1:
56:a4:46:e0:61:b7:ae:a4:20:ae:f1:7d:44:e3:d4:ef:cf:37:
81:6e:4c:87:c2:cc:cd:bb:c7:c3:db:44:cc:7b:02:82:5c:8f:
de:77:ab:5e:da:a2:bf:e7:81:ff:c3:26:b1:46:64:3d:e7:8c:
7f:52:79:20:e0:38:c4:d7:f2:e6:8e:29:60:ff:2e:c2:43:69:
12:b4:3a:6a:83:7a:a3:21:fb:a4:f1:81:e9:e5:51:81:02:1d:
2d:0b:32:bd:30:60:06:a8:43:ad:ee:80:0a:cf:b9:d4:5a:6d:
e5:30:85:86:6e:cf:72:9e:a4:9e:7e:f5:a0:e1:08:9c:30:39:
68:a1:45:2b:f1:b1:6f:c2:a5:4e:83:dc:ab:20:d7:e1:16:0c:
df:04:dc:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 00:57:00 2025 by rpki-client