Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/b5dfcc-cd35-4837-b892-f226b144a89a/1/N0u2qfskWk-vy41iHRx19Z1uyhk.mft
File: N0u2qfskWk-vy41iHRx19Z1uyhk.mft (raw, json)
Hash identifier: /qTrvcl1hs6JaWb89NFd08V/xyV27qgJK6E8+AdjkfU=
Subject key identifier: 1C:63:F4:36:23:39:5C:34:41:F9:CF:A4:3B:80:31:1F:5C:C7:8A:29
Authority key identifier: 37:4B:B6:A9:FB:24:5A:4F:AF:CB:8D:62:1D:1C:75:F5:9D:6E:CA:19
Certificate issuer: /CN=374bb6a9fb245a4fafcb8d621d1c75f59d6eca19
Certificate serial: 0198D660158D6E5D23445459767AF7BCDE06
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/N0u2qfskWk-vy41iHRx19Z1uyhk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2a/b5dfcc-cd35-4837-b892-f226b144a89a/1/N0u2qfskWk-vy41iHRx19Z1uyhk.mft
Manifest number: 04CF
Signing time: Sat 23 Aug 2025 10:01:17 +0000
Manifest this update: Sat 23 Aug 2025 10:01:17 +0000
Manifest next update: Sun 24 Aug 2025 10:01:17 +0000
Files and hashes: 1: N0u2qfskWk-vy41iHRx19Z1uyhk.crl (hash: pm5IwqW46f7KI8t8xJ0buZG4uwgGrgPTI3gCeiGoZ34=)
2: W09Hs7YV_rlCMmFfP5OjxUCv0DQ.roa (hash: zUsXUKlv5KVQErO/W3pmAzbRpm0hLO9n4LhnJ2Df8ps=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2a/b5dfcc-cd35-4837-b892-f226b144a89a/1/N0u2qfskWk-vy41iHRx19Z1uyhk.crl
rsync://rpki.ripe.net/repository/DEFAULT/2a/b5dfcc-cd35-4837-b892-f226b144a89a/1/N0u2qfskWk-vy41iHRx19Z1uyhk.mft
rsync://rpki.ripe.net/repository/DEFAULT/N0u2qfskWk-vy41iHRx19Z1uyhk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 10:01:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:60:15:8d:6e:5d:23:44:54:59:76:7a:f7:bc:de:06
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=374bb6a9fb245a4fafcb8d621d1c75f59d6eca19
Validity
Not Before: Aug 23 10:01:17 2025 GMT
Not After : Aug 24 10:01:17 2025 GMT
Subject: CN=1c63f43623395c3441f9cfa43b80311f5cc78a29
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:fe:a2:f2:8a:96:ed:47:5e:5c:04:d3:72:6b:ff:
00:16:67:f8:b6:bc:d0:47:95:6d:dd:2e:e6:b3:2b:
d9:d1:94:87:89:ce:b6:cc:a4:9b:cb:91:e3:32:ab:
5d:77:9a:b6:59:11:75:f1:26:f4:6f:36:ca:44:6f:
97:6c:62:50:6e:52:d6:b3:3a:d7:ae:3e:37:96:85:
ea:32:8b:8d:50:e8:52:25:07:02:85:f8:8b:2b:54:
24:dd:01:fb:b7:28:09:97:12:3b:af:84:41:b0:bc:
42:c0:09:3b:dd:3d:f6:52:2f:08:d7:c0:a1:db:3a:
c1:6a:3c:6a:2e:ca:28:a4:c7:3e:5c:d1:45:ba:e5:
de:82:7c:5d:05:47:0e:51:c0:9c:a1:7e:59:2c:6d:
95:a8:3b:3c:c3:02:e6:17:4c:71:8d:5a:f7:ec:f2:
f6:69:d8:f7:8f:bd:cc:3e:61:08:15:8f:72:ae:66:
59:72:48:aa:92:bf:6c:60:25:26:6d:94:4e:7d:67:
1f:96:e0:ef:cc:34:da:8b:30:b3:ba:6f:76:12:ad:
ed:2d:fd:7f:84:8e:33:f6:2c:c5:19:2c:1c:65:11:
69:96:75:d2:3d:08:63:0a:69:a0:d3:ea:ad:23:71:
42:4e:8c:78:96:cb:4b:3a:53:aa:46:a8:bb:41:39:
f1:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:63:F4:36:23:39:5C:34:41:F9:CF:A4:3B:80:31:1F:5C:C7:8A:29
X509v3 Authority Key Identifier:
keyid:37:4B:B6:A9:FB:24:5A:4F:AF:CB:8D:62:1D:1C:75:F5:9D:6E:CA:19
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/N0u2qfskWk-vy41iHRx19Z1uyhk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/b5dfcc-cd35-4837-b892-f226b144a89a/1/N0u2qfskWk-vy41iHRx19Z1uyhk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/b5dfcc-cd35-4837-b892-f226b144a89a/1/N0u2qfskWk-vy41iHRx19Z1uyhk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
66:14:87:af:5b:5b:7b:62:a7:1c:c6:5e:cd:d8:02:e8:d9:3e:
23:18:21:8c:19:7b:a2:e9:d1:6a:19:a9:91:f9:d8:4c:e9:54:
e1:e2:3b:78:9c:e5:db:c8:f0:02:88:a4:91:60:2f:6c:75:ed:
a5:8e:06:0d:e1:64:0d:2d:51:70:2b:65:3e:bf:ef:93:42:94:
b6:92:bf:73:a3:b4:c9:52:2a:f4:db:e7:be:65:ef:19:a2:ef:
62:4e:0a:42:83:ec:2b:e2:dd:94:2e:37:bb:06:3a:6b:90:99:
ca:bd:ef:7a:7e:56:27:e1:7c:79:2a:d3:88:c7:26:71:2c:67:
b1:18:43:8e:66:65:14:fe:1f:96:9d:a5:e9:70:e4:0f:4e:a2:
b6:7d:82:a1:de:bf:cd:ba:2d:8a:75:43:2b:81:cd:87:81:8e:
47:12:8b:ed:47:75:cc:e8:a4:10:48:05:be:d9:14:ae:24:c4:
03:cc:81:a8:ef:d6:99:ff:40:49:e2:30:e7:66:96:d4:8e:3f:
ea:36:58:6d:a1:f6:f8:b5:79:6d:c3:43:ed:10:53:e3:7a:63:
9e:92:07:14:23:1e:16:73:fb:79:2f:fa:87:e8:e9:89:5b:bb:
11:58:38:cf:5b:83:94:ed:c0:ae:24:0d:68:5e:bb:33:f9:71:
10:78:38:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 17:13:04 2025 by rpki-client