Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/341508-a0aa-40c9-ae0c-0379930f8286/1/N1PbxYKexQCzNCahiNA5k5W4Bqo.mft
File: N1PbxYKexQCzNCahiNA5k5W4Bqo.mft (raw, json)
Hash identifier: vwEIYSsynAGfAz4bDFVBnfWrlJEnj4Ctw0jTY70WhV0=
Subject key identifier: C6:85:AE:3F:3C:AE:9B:92:07:A6:17:43:11:54:97:AB:F8:67:0E:0A
Authority key identifier: 37:53:DB:C5:82:9E:C5:00:B3:34:26:A1:88:D0:39:93:95:B8:06:AA
Certificate issuer: /CN=3753dbc5829ec500b33426a188d0399395b806aa
Certificate serial: 019880C295F5341B83C8A86B5C2BE59EC110
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/N1PbxYKexQCzNCahiNA5k5W4Bqo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/341508-a0aa-40c9-ae0c-0379930f8286/1/N1PbxYKexQCzNCahiNA5k5W4Bqo.mft
Manifest number: 0443
Signing time: Wed 06 Aug 2025 19:01:32 +0000
Manifest this update: Wed 06 Aug 2025 19:01:32 +0000
Manifest next update: Thu 07 Aug 2025 19:01:32 +0000
Files and hashes: 1: N1PbxYKexQCzNCahiNA5k5W4Bqo.crl (hash: wSiWHT/PQ+qvybnbCBrgDgCFdnSnVC2NL2AHZ3GO+FY=)
2: hr1FzTLzhvjdHRGQawXaK0XuGQ4.roa (hash: wRJW1xVVLpDSguuiY7y5qT4f4RgVOBoZp/PuXmFp+qI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fd/341508-a0aa-40c9-ae0c-0379930f8286/1/N1PbxYKexQCzNCahiNA5k5W4Bqo.crl
rsync://rpki.ripe.net/repository/DEFAULT/fd/341508-a0aa-40c9-ae0c-0379930f8286/1/N1PbxYKexQCzNCahiNA5k5W4Bqo.mft
rsync://rpki.ripe.net/repository/DEFAULT/N1PbxYKexQCzNCahiNA5k5W4Bqo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 07 Aug 2025 19:01:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:80:c2:95:f5:34:1b:83:c8:a8:6b:5c:2b:e5:9e:c1:10
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3753dbc5829ec500b33426a188d0399395b806aa
Validity
Not Before: Aug 6 19:01:32 2025 GMT
Not After : Aug 7 19:01:32 2025 GMT
Subject: CN=c685ae3f3cae9b9207a61743115497abf8670e0a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:c2:d5:db:b3:5f:39:b5:85:9e:0e:f0:aa:63:
4d:4d:e6:f9:88:74:75:1f:1c:3d:31:d9:6b:aa:97:
89:d9:e9:c4:54:54:57:e8:96:de:97:f1:60:0c:c0:
cd:43:07:eb:5d:79:f3:30:35:b3:a1:77:bc:26:f5:
83:a8:62:df:4c:d5:3e:f0:7b:58:8c:c6:e1:e8:07:
dd:d6:c4:99:58:ac:49:6f:fb:31:8f:11:76:ce:19:
aa:ec:14:41:6c:c4:a0:44:35:72:ee:fc:0e:c7:2f:
21:e7:b3:27:06:a7:97:2d:38:c2:07:be:49:87:59:
2d:f5:71:86:b5:f6:7d:20:ce:8a:f7:02:68:4a:42:
09:b2:ef:0c:bf:0f:46:71:f6:4c:e6:ab:23:b7:94:
1d:9c:1e:5d:f3:8a:60:55:63:5d:02:46:ad:f5:f8:
cb:34:0a:3a:aa:4e:d3:b3:17:c7:8a:5b:76:a0:25:
f7:eb:e4:ed:59:de:39:27:89:c2:0d:56:60:42:4d:
16:ce:f9:97:48:1b:35:05:27:64:e4:c3:3a:6c:07:
9c:0c:06:74:40:13:31:8e:5f:16:56:e3:11:6c:bc:
4a:b9:fc:64:df:4b:19:29:48:07:c6:92:d4:74:12:
d4:6f:c0:a8:a0:ec:d6:ab:0c:2d:5e:e4:d2:c6:a6:
06:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:85:AE:3F:3C:AE:9B:92:07:A6:17:43:11:54:97:AB:F8:67:0E:0A
X509v3 Authority Key Identifier:
keyid:37:53:DB:C5:82:9E:C5:00:B3:34:26:A1:88:D0:39:93:95:B8:06:AA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/N1PbxYKexQCzNCahiNA5k5W4Bqo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/341508-a0aa-40c9-ae0c-0379930f8286/1/N1PbxYKexQCzNCahiNA5k5W4Bqo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/341508-a0aa-40c9-ae0c-0379930f8286/1/N1PbxYKexQCzNCahiNA5k5W4Bqo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
12:96:8c:b2:17:28:71:8d:7f:67:29:b5:5f:87:73:73:ef:ff:
da:0f:18:e3:2d:9c:ca:c2:c4:92:ff:62:0f:5b:ac:c4:87:a1:
2e:bc:2a:ef:71:25:92:d9:c5:2a:2a:5f:7f:c6:79:24:9c:d5:
74:9b:3e:2e:1b:18:5c:e3:d6:02:c9:4a:d8:50:76:64:81:1e:
ae:80:29:70:ac:c7:f8:63:5f:b5:08:74:03:68:7f:df:2a:5d:
7f:6a:7a:62:f1:61:87:1d:88:c9:a3:57:47:c5:d7:a4:ee:28:
a6:db:4f:95:fa:dd:cc:22:85:30:d9:a4:6c:17:fa:fa:19:36:
72:d2:45:6e:b3:19:c4:ef:90:65:99:59:62:17:6a:b6:84:51:
4b:76:be:af:43:6d:99:7f:77:21:24:4a:6e:43:bd:03:9d:44:
97:e3:69:4b:59:e0:d8:0e:a8:b0:f8:68:8c:64:f7:93:d7:9c:
30:63:4c:d4:73:09:2e:ac:fc:36:fd:a9:47:4d:67:a1:12:86:
6a:a0:f2:2a:e2:89:6e:aa:ae:85:f8:ab:d2:7b:ad:7f:50:33:
2b:03:90:9a:d7:01:a4:a0:79:89:70:c8:33:29:54:eb:a2:76:
66:02:f9:6d:22:b3:bd:38:30:48:45:ef:75:32:b2:e1:55:b2:
75:c2:2b:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 7 04:27:30 2025 by rpki-client