Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/3a9021-2959-47e7-a615-81144fd01564/1/N6W4zf0deX2GBmDjS_oaKthf-dk.mft
File: N6W4zf0deX2GBmDjS_oaKthf-dk.mft (raw, json)
Hash identifier: aqejVlXDoF3nZ/n5wwoBaW0RVy6744MeGQCxF6T6A4g=
Subject key identifier: 98:1A:F2:C3:F9:5D:4B:00:D0:76:5E:49:AE:FB:D8:71:FE:E4:B6:08
Authority key identifier: 37:A5:B8:CD:FD:1D:79:7D:86:06:60:E3:4B:FA:1A:2A:D8:5F:F9:D9
Certificate issuer: /CN=37a5b8cdfd1d797d860660e34bfa1a2ad85ff9d9
Certificate serial: 019874501A10901EB18E06FE6E94F3DAE7D8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/N6W4zf0deX2GBmDjS_oaKthf-dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e9/3a9021-2959-47e7-a615-81144fd01564/1/N6W4zf0deX2GBmDjS_oaKthf-dk.mft
Manifest number: 161A
Signing time: Mon 04 Aug 2025 09:01:03 +0000
Manifest this update: Mon 04 Aug 2025 09:01:03 +0000
Manifest next update: Tue 05 Aug 2025 09:01:03 +0000
Files and hashes: 1: N6W4zf0deX2GBmDjS_oaKthf-dk.crl (hash: mREIfqE6adI0vfVCGgJnCrRXH2ETuDWxn38URdmrpC4=)
2: Ofe5y963IBdAewU6cuUJ3GOhnPg.roa (hash: wYPWSR0SRCo8lw+izQyw6mN43vzofM40zE5eYO1oT9w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e9/3a9021-2959-47e7-a615-81144fd01564/1/N6W4zf0deX2GBmDjS_oaKthf-dk.crl
rsync://rpki.ripe.net/repository/DEFAULT/e9/3a9021-2959-47e7-a615-81144fd01564/1/N6W4zf0deX2GBmDjS_oaKthf-dk.mft
rsync://rpki.ripe.net/repository/DEFAULT/N6W4zf0deX2GBmDjS_oaKthf-dk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 09:01:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:74:50:1a:10:90:1e:b1:8e:06:fe:6e:94:f3:da:e7:d8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=37a5b8cdfd1d797d860660e34bfa1a2ad85ff9d9
Validity
Not Before: Aug 4 09:01:03 2025 GMT
Not After : Aug 5 09:01:03 2025 GMT
Subject: CN=981af2c3f95d4b00d0765e49aefbd871fee4b608
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:4c:c9:ed:19:67:27:03:b3:b8:52:db:01:b8:
e4:c3:b4:1e:13:86:72:8e:9a:31:45:18:42:57:08:
33:0d:51:7c:af:6f:47:f0:6b:12:b1:44:c4:90:ee:
c1:cc:fd:4c:b7:0a:2d:c1:b1:59:f7:01:42:7d:ec:
8e:90:c7:0c:91:a2:03:2c:7a:c4:a5:6f:9f:5a:72:
74:2e:95:fe:fd:0d:89:98:d3:23:f6:7c:db:31:da:
d3:1c:75:56:1b:8e:b6:53:72:f1:d6:e5:9e:1c:6f:
07:df:5b:07:4a:14:06:d8:8c:9d:a0:4d:81:74:47:
f9:d0:0a:e2:07:50:9c:d0:9e:db:ff:bc:b3:d3:18:
f8:39:94:4d:34:59:08:7b:66:a5:67:06:00:7b:10:
d1:b5:b7:09:7b:89:a9:0e:b3:20:c9:be:d4:2e:b8:
f6:20:fd:37:93:4e:8f:92:72:38:98:2a:ca:1f:f0:
a5:20:ad:08:cf:e5:48:fb:5c:a5:71:db:21:75:0c:
b7:53:df:74:08:b4:51:91:4f:32:3c:65:fd:f1:87:
6d:f1:b6:d7:d4:8e:4e:0a:80:e2:06:74:fa:ff:b2:
62:d5:44:94:93:8d:f2:a4:c3:82:18:3b:42:53:fc:
4b:51:e5:06:7c:4f:fa:6e:fd:6f:45:33:46:90:0d:
dd:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:1A:F2:C3:F9:5D:4B:00:D0:76:5E:49:AE:FB:D8:71:FE:E4:B6:08
X509v3 Authority Key Identifier:
keyid:37:A5:B8:CD:FD:1D:79:7D:86:06:60:E3:4B:FA:1A:2A:D8:5F:F9:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/N6W4zf0deX2GBmDjS_oaKthf-dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/3a9021-2959-47e7-a615-81144fd01564/1/N6W4zf0deX2GBmDjS_oaKthf-dk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/3a9021-2959-47e7-a615-81144fd01564/1/N6W4zf0deX2GBmDjS_oaKthf-dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
03:71:08:89:59:83:33:eb:96:6d:52:2f:b4:30:d0:97:9f:0f:
79:3e:64:16:5f:d3:6c:3d:9b:d7:bf:86:c3:f2:2e:74:1f:45:
e7:0e:3f:45:72:5e:b1:5d:a2:7a:c0:c4:d8:96:fc:c9:e7:8c:
f6:7c:62:f9:99:5c:c8:9a:ce:eb:45:70:de:6c:e9:f1:8d:7e:
40:71:34:2a:76:46:1e:c2:19:b9:74:48:de:22:a7:79:d9:a5:
e0:88:12:14:d7:1b:69:aa:d6:ea:bf:49:f6:52:dd:6b:19:fc:
21:a3:99:2c:91:9d:4e:21:d2:d5:b8:b2:9f:a7:0a:5f:d7:36:
eb:b1:63:e2:3a:43:bb:47:ca:e2:31:9e:fe:1f:8e:b2:f2:6f:
d1:35:e3:1c:4f:4d:43:c2:93:f1:6c:5c:1a:fc:fa:d1:0d:e2:
69:09:2d:e4:e3:ad:cf:5b:ec:ec:a3:b1:3c:a8:dc:97:a1:37:
af:5d:63:85:4d:57:d0:a8:92:fc:0a:5e:0f:48:08:f9:5a:9c:
b3:22:5e:6b:a5:41:0f:01:bd:57:b2:66:0d:7e:a0:32:44:73:
a2:58:d9:50:b2:aa:8c:03:2e:63:fd:f3:75:b7:73:87:46:f7:
51:9f:a6:f1:e5:a8:63:65:2b:4f:09:49:eb:08:a5:3d:4c:a5:
6d:62:a1:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 18:09:12 2025 by rpki-client