
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ff/d8c58d-8d24-4280-91fd-48b1664d40d5/1/N9J_wkRD_N1LG2XPyAeMShQon54.mft
File: N9J_wkRD_N1LG2XPyAeMShQon54.mft (raw, json)
Hash identifier: ns8vqcO/DZOwJjIxP/jxd6/KIewnPqGAN4m4UaH55iM=
Subject key identifier: 4F:6B:EC:63:0E:9E:4D:1C:4E:6C:EF:58:6A:24:B4:2A:18:26:94:3C
Authority key identifier: 37:D2:7F:C2:44:43:FC:DD:4B:1B:65:CF:C8:07:8C:4A:14:28:9F:9E
Certificate issuer: /CN=37d27fc24443fcdd4b1b65cfc8078c4a14289f9e
Certificate serial: 01988AA0798C8AF5101E7B78B948D95CF6A1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/N9J_wkRD_N1LG2XPyAeMShQon54.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ff/d8c58d-8d24-4280-91fd-48b1664d40d5/1/N9J_wkRD_N1LG2XPyAeMShQon54.mft
Manifest number: 1624
Signing time: Fri 08 Aug 2025 17:00:29 +0000
Manifest this update: Fri 08 Aug 2025 17:00:29 +0000
Manifest next update: Sat 09 Aug 2025 17:00:29 +0000
Files and hashes: 1: N9J_wkRD_N1LG2XPyAeMShQon54.crl (hash: qqY4p73fDCIO3hfAe1v45aaiL/mzqQcZDEKqL9q8cBE=)
2: TLZrPYGbv3OSz3l-n9m1uFTtYyY.roa (hash: BAfT0SDdeatk44A0MoM3KqLiELOkYEeVNpqrfHgFPvo=)
3: fTuGHUDbLXIf1K1JGZkDmgp4h30.roa (hash: CE5/seUejdLKBZqDs568ZVcYXPKEXW1OP4zxVz04Gmo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ff/d8c58d-8d24-4280-91fd-48b1664d40d5/1/N9J_wkRD_N1LG2XPyAeMShQon54.crl
rsync://rpki.ripe.net/repository/DEFAULT/ff/d8c58d-8d24-4280-91fd-48b1664d40d5/1/N9J_wkRD_N1LG2XPyAeMShQon54.mft
rsync://rpki.ripe.net/repository/DEFAULT/N9J_wkRD_N1LG2XPyAeMShQon54.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 09 Aug 2025 17:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:8a:a0:79:8c:8a:f5:10:1e:7b:78:b9:48:d9:5c:f6:a1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=37d27fc24443fcdd4b1b65cfc8078c4a14289f9e
Validity
Not Before: Aug 8 17:00:29 2025 GMT
Not After : Aug 9 17:00:29 2025 GMT
Subject: CN=4f6bec630e9e4d1c4e6cef586a24b42a1826943c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:00:e2:3f:15:cf:00:9a:fa:cb:06:59:3b:7d:
43:22:b2:52:81:4b:49:c6:93:3c:39:6a:b8:d9:d3:
a5:81:91:c2:9a:14:d6:57:f6:d1:62:d4:aa:d6:75:
e9:59:0a:db:d6:73:a3:74:c5:c9:44:7f:a2:fa:01:
c1:21:ec:69:f7:d5:64:d3:fa:a7:2d:a5:34:cd:cb:
8b:bb:79:5f:ab:dc:8c:e0:2f:b3:0c:3a:43:f8:39:
0c:eb:f5:28:32:d5:4b:45:b7:af:51:f5:75:dd:6e:
a1:48:83:74:af:e1:f5:c8:31:6d:a4:23:90:e2:ed:
7d:91:c9:f2:42:64:51:ce:36:1c:8c:d9:d8:20:3f:
bf:e9:7c:27:09:12:2b:7a:c6:9f:a1:ce:7c:bf:31:
42:dc:b4:37:1b:e5:dd:12:aa:30:e5:00:11:5a:99:
67:05:8f:bd:1a:69:dc:e7:18:bc:a1:78:56:d9:9b:
5e:91:ef:6f:86:7c:4d:7e:95:ee:e7:ee:8c:64:29:
d8:79:90:91:34:32:aa:27:e8:b2:df:22:d9:7a:03:
7b:d7:30:d5:a3:13:09:f1:5a:51:a4:52:5e:f8:f2:
c3:6d:ea:ee:93:e7:5b:ec:ff:ce:16:76:cf:b3:f3:
27:c6:29:a6:63:a9:c6:52:d6:66:3a:19:4d:50:07:
2d:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:6B:EC:63:0E:9E:4D:1C:4E:6C:EF:58:6A:24:B4:2A:18:26:94:3C
X509v3 Authority Key Identifier:
keyid:37:D2:7F:C2:44:43:FC:DD:4B:1B:65:CF:C8:07:8C:4A:14:28:9F:9E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/N9J_wkRD_N1LG2XPyAeMShQon54.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/d8c58d-8d24-4280-91fd-48b1664d40d5/1/N9J_wkRD_N1LG2XPyAeMShQon54.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/d8c58d-8d24-4280-91fd-48b1664d40d5/1/N9J_wkRD_N1LG2XPyAeMShQon54.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
08:b1:10:cb:3a:45:45:aa:82:9b:cf:5b:a8:c7:00:ea:5f:1d:
87:2f:f6:83:4a:05:7e:4c:cb:a5:c6:39:67:65:c4:ac:cd:8a:
59:1f:ea:c2:39:27:75:c3:9a:16:21:6f:4b:ec:9e:0e:b0:e3:
85:01:74:eb:1a:bb:91:c2:34:9e:2b:ee:c3:f1:1c:ca:0f:70:
3f:59:2e:2b:40:d6:28:68:2e:1a:07:ec:4c:1f:fe:ae:f7:7c:
72:55:76:8e:73:6e:2b:45:a0:11:89:2a:fe:85:b1:99:c0:a3:
19:96:1e:e3:91:3f:8c:33:68:57:c9:32:e8:9d:ba:f8:92:56:
2b:08:96:c7:e2:59:be:06:b6:32:f9:2e:c7:a8:b6:a4:99:79:
93:0e:25:b0:53:f1:b7:c8:3b:7a:af:1d:bd:9b:5c:51:b0:3e:
f7:b8:51:3f:86:18:12:ba:a4:41:05:e1:20:6f:3a:5a:a7:28:
95:dd:ce:86:23:94:66:32:bf:64:e0:4c:ed:67:57:ad:e3:1f:
5b:9a:24:06:43:7f:43:b2:dd:1f:7e:fb:7a:5f:84:b2:98:b2:
b5:66:42:04:e7:4e:13:8a:d6:7c:5a:2e:05:c0:28:06:03:e9:
74:ae:a2:f5:51:d2:63:b6:67:77:35:0a:87:6d:5d:c9:f3:aa:
cd:d7:8e:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 9 01:00:50 2025 by rpki-client