Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2f/ad8994-51f1-4b65-aca0-e15a8b70e8d2/1/N86qYmy9iQUvNUUzXf2zGhM4MAQ.mft
File: N86qYmy9iQUvNUUzXf2zGhM4MAQ.mft (raw, json)
Hash identifier: 1mEo74ZP+vkTW0/DPBmedyHmLAUNKKwzAYgfyEijeZo=
Subject key identifier: 44:25:46:32:14:5E:B5:B4:4A:46:BE:DF:08:19:79:F4:7A:C0:CC:F0
Authority key identifier: 37:CE:AA:62:6C:BD:89:05:2F:35:45:33:5D:FD:B3:1A:13:38:30:04
Certificate issuer: /CN=37ceaa626cbd89052f3545335dfdb31a13383004
Certificate serial: 0198D515D9681816056B3004854CB4CE983D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/N86qYmy9iQUvNUUzXf2zGhM4MAQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2f/ad8994-51f1-4b65-aca0-e15a8b70e8d2/1/N86qYmy9iQUvNUUzXf2zGhM4MAQ.mft
Manifest number: 15A4
Signing time: Sat 23 Aug 2025 04:00:35 +0000
Manifest this update: Sat 23 Aug 2025 04:00:35 +0000
Manifest next update: Sun 24 Aug 2025 04:00:35 +0000
Files and hashes: 1: N86qYmy9iQUvNUUzXf2zGhM4MAQ.crl (hash: sKVLlq/GZvZJZVHh3Yn6+1h33bRpZMDQMDy1S7P4M4o=)
2: n9uV52lUlBfny_mibwK9eMiu_og.roa (hash: 54PSRM/jpJmSMS9ihIFUAJNjZSe2qLiVsg1xoZD4Jhk=)
3: spA2D5bFhwjtsAUrsUVWAYuQYCw.roa (hash: G0F7ImWqWoF9HSrIReZ5ZDnra1S9Yg59kPLrgfQKBWo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2f/ad8994-51f1-4b65-aca0-e15a8b70e8d2/1/N86qYmy9iQUvNUUzXf2zGhM4MAQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/2f/ad8994-51f1-4b65-aca0-e15a8b70e8d2/1/N86qYmy9iQUvNUUzXf2zGhM4MAQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/N86qYmy9iQUvNUUzXf2zGhM4MAQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 04:00:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:15:d9:68:18:16:05:6b:30:04:85:4c:b4:ce:98:3d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=37ceaa626cbd89052f3545335dfdb31a13383004
Validity
Not Before: Aug 23 04:00:35 2025 GMT
Not After : Aug 24 04:00:35 2025 GMT
Subject: CN=44254632145eb5b44a46bedf081979f47ac0ccf0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:07:7d:b6:9c:36:2d:3a:9b:74:23:b7:c9:47:
51:e7:5a:85:8e:f5:fa:c9:b2:78:29:c5:2b:3b:2b:
78:ce:61:fc:f7:dd:ea:3f:6e:45:c0:71:af:4c:b5:
ab:d4:a2:91:a4:1d:b9:4c:73:c7:ae:d7:d6:41:69:
08:ac:a1:2a:75:6d:b3:ea:79:17:a6:4b:8f:b2:5b:
d8:2d:0b:a8:14:46:e4:a1:82:85:f1:f7:24:41:54:
54:61:85:21:2c:58:19:65:ad:5d:e7:be:f7:79:ed:
8f:4b:28:d5:e9:80:eb:95:6b:be:4f:33:d2:1d:c6:
ea:23:3e:61:29:91:7e:35:8a:6c:fe:63:a3:0d:0f:
d1:e8:b6:06:a1:ef:a9:8a:c7:25:d0:61:e5:99:ba:
4d:49:fa:e0:79:98:71:60:c5:ed:e4:c8:d4:0a:eb:
1d:62:9c:79:33:18:79:3e:df:cf:fc:e6:40:96:ec:
b8:66:b3:06:b2:82:4a:07:2d:29:0b:49:90:be:79:
f9:81:07:12:3e:5e:b1:d2:cf:d0:02:dc:67:29:15:
cf:71:41:a5:46:b6:76:83:13:0f:4a:19:49:7e:ca:
5c:51:ee:6d:ec:fa:80:94:6d:3d:04:8f:72:48:96:
1e:3e:0b:9b:fe:8e:49:78:50:8c:33:71:ef:d3:cb:
08:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:25:46:32:14:5E:B5:B4:4A:46:BE:DF:08:19:79:F4:7A:C0:CC:F0
X509v3 Authority Key Identifier:
keyid:37:CE:AA:62:6C:BD:89:05:2F:35:45:33:5D:FD:B3:1A:13:38:30:04
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/N86qYmy9iQUvNUUzXf2zGhM4MAQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/ad8994-51f1-4b65-aca0-e15a8b70e8d2/1/N86qYmy9iQUvNUUzXf2zGhM4MAQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/ad8994-51f1-4b65-aca0-e15a8b70e8d2/1/N86qYmy9iQUvNUUzXf2zGhM4MAQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1f:0e:08:8f:b5:53:0f:7e:19:08:9e:87:b0:19:89:f3:34:dd:
d1:9b:b6:ff:b0:2a:f2:b1:47:a1:5c:a4:4e:39:41:5a:80:d7:
68:c6:c0:b6:e3:98:12:c3:f0:af:6b:0e:11:b0:d5:40:52:a9:
e7:25:03:b7:bd:2c:0d:1a:8b:a3:da:ae:00:20:a1:d3:0c:f9:
51:8c:14:bc:68:a5:f0:23:3c:92:7d:62:49:af:60:04:f9:e3:
0f:0d:27:73:3a:05:e4:ae:0e:02:f6:f3:96:25:8e:82:da:18:
e9:8f:de:c6:cb:53:61:15:4a:68:2f:29:c8:25:ac:ea:f4:00:
16:b4:ec:ea:9e:62:17:3f:ce:6f:7b:20:ef:52:5e:ac:97:98:
eb:1e:b5:84:e1:0a:e9:b3:d2:94:59:34:2d:c0:61:19:ec:d1:
58:9d:2b:fc:36:46:1d:df:ca:52:03:e4:86:7b:8c:db:40:44:
e9:9a:59:21:b7:b5:ae:58:d7:7f:69:27:2b:de:36:bf:e4:ca:
58:71:d8:66:e2:16:2f:72:87:c5:14:94:1f:2e:fd:2c:fe:30:
9f:98:b9:d5:27:75:31:a7:ea:e2:42:0d:44:55:43:32:21:47:
f0:c9:1b:94:ff:95:72:e5:85:06:03:b1:c9:ec:72:3d:c2:c3:
46:db:19:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 14:04:41 2025 by rpki-client