Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2f/ad8994-51f1-4b65-aca0-e15a8b70e8d2/1/N86qYmy9iQUvNUUzXf2zGhM4MAQ.mft
File: N86qYmy9iQUvNUUzXf2zGhM4MAQ.mft (raw, json)
Hash identifier: ZvbK5EAVB6Z31NIG6aj+2Xa3lUqSuOoWeG5b53INCrs=
Subject key identifier: 4F:CF:35:8B:74:97:21:E4:AB:4B:EC:C4:87:39:E8:11:9E:6B:99:3C
Authority key identifier: 37:CE:AA:62:6C:BD:89:05:2F:35:45:33:5D:FD:B3:1A:13:38:30:04
Certificate issuer: /CN=37ceaa626cbd89052f3545335dfdb31a13383004
Certificate serial: 0197C0ED5C6FAF17E9BC0E1A0B4B001B8CD3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/N86qYmy9iQUvNUUzXf2zGhM4MAQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2f/ad8994-51f1-4b65-aca0-e15a8b70e8d2/1/N86qYmy9iQUvNUUzXf2zGhM4MAQ.mft
Manifest number: 1515
Signing time: Mon 30 Jun 2025 13:01:10 +0000
Manifest this update: Mon 30 Jun 2025 13:01:10 +0000
Manifest next update: Tue 01 Jul 2025 13:01:10 +0000
Files and hashes: 1: N86qYmy9iQUvNUUzXf2zGhM4MAQ.crl (hash: dxk3AzfhSceumPZ/+FE1wIhXUhUh+1PbLbYlu5ztAis=)
2: n9uV52lUlBfny_mibwK9eMiu_og.roa (hash: 54PSRM/jpJmSMS9ihIFUAJNjZSe2qLiVsg1xoZD4Jhk=)
3: spA2D5bFhwjtsAUrsUVWAYuQYCw.roa (hash: G0F7ImWqWoF9HSrIReZ5ZDnra1S9Yg59kPLrgfQKBWo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2f/ad8994-51f1-4b65-aca0-e15a8b70e8d2/1/N86qYmy9iQUvNUUzXf2zGhM4MAQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/2f/ad8994-51f1-4b65-aca0-e15a8b70e8d2/1/N86qYmy9iQUvNUUzXf2zGhM4MAQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/N86qYmy9iQUvNUUzXf2zGhM4MAQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 01 Jul 2025 13:01:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:c0:ed:5c:6f:af:17:e9:bc:0e:1a:0b:4b:00:1b:8c:d3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=37ceaa626cbd89052f3545335dfdb31a13383004
Validity
Not Before: Jun 30 13:01:10 2025 GMT
Not After : Jul 1 13:01:10 2025 GMT
Subject: CN=4fcf358b749721e4ab4becc48739e8119e6b993c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:a4:8c:0e:e4:3a:89:7a:5d:cb:95:f5:5a:6c:
fd:75:1c:3e:36:22:01:68:ad:1f:88:e5:51:48:ad:
55:0e:63:9d:e5:4b:ac:08:9d:8a:4f:5c:12:ec:fd:
74:04:75:b5:63:85:15:14:1f:8d:44:16:c5:03:61:
01:4f:63:86:d0:46:a9:41:ed:56:1b:e7:b8:59:49:
d1:a6:8e:49:c0:43:c2:b5:a3:8f:b8:c5:19:67:8f:
d4:5c:67:1e:5e:f8:e6:fd:0f:ef:fb:f6:41:d9:fd:
94:b8:d2:b9:38:e8:00:b4:17:95:46:4c:4a:60:0d:
24:0a:de:8e:f0:ef:32:39:ca:fd:dd:07:12:bd:f4:
7d:d4:a6:50:8a:2a:9f:f8:26:ea:c2:b0:46:f8:d9:
14:34:77:1d:c6:9e:4c:cd:e6:36:56:f8:1e:80:c1:
c6:c9:f9:07:12:09:46:cc:aa:e3:ec:71:ef:2e:bd:
fc:ae:4a:4a:43:b0:4a:3d:39:15:86:1e:58:47:4b:
14:97:ee:0e:27:98:08:82:6b:50:03:fe:8c:d8:94:
0e:93:fe:43:7f:7e:e6:5b:df:b7:d2:99:ca:70:f0:
02:1c:bb:6d:1c:f9:88:67:4c:69:60:70:36:10:42:
16:77:28:d6:49:39:9c:91:69:c8:71:67:5b:50:4a:
31:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:CF:35:8B:74:97:21:E4:AB:4B:EC:C4:87:39:E8:11:9E:6B:99:3C
X509v3 Authority Key Identifier:
keyid:37:CE:AA:62:6C:BD:89:05:2F:35:45:33:5D:FD:B3:1A:13:38:30:04
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/N86qYmy9iQUvNUUzXf2zGhM4MAQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/ad8994-51f1-4b65-aca0-e15a8b70e8d2/1/N86qYmy9iQUvNUUzXf2zGhM4MAQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/ad8994-51f1-4b65-aca0-e15a8b70e8d2/1/N86qYmy9iQUvNUUzXf2zGhM4MAQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a8:98:82:e0:3e:e4:36:06:c3:18:51:0a:9a:35:21:cd:cc:48:
75:03:bd:d1:d8:d5:60:8e:bd:6a:50:a4:bc:c1:fa:e6:15:b1:
7e:99:12:69:13:d0:2a:2e:32:a3:8a:6c:bc:30:ad:cc:da:c9:
4b:48:ab:dd:bb:f4:c4:12:aa:a9:62:e8:b2:46:ac:f8:55:8f:
e5:aa:df:97:2e:5b:b3:7f:e5:67:34:90:ec:4c:e3:a1:6e:ac:
cf:ad:d2:4f:f7:37:b1:2b:5b:fa:6b:02:f8:88:f3:31:76:10:
b8:98:11:96:e8:e3:9c:93:ee:ca:38:b3:72:fa:bd:c1:78:a5:
9b:9b:b5:19:e6:49:3b:fb:f5:08:20:c6:a6:52:3b:58:6a:f5:
27:9d:69:e8:7b:b4:d5:1b:a4:7e:2d:a5:30:bc:58:56:c1:f8:
f7:ac:61:a1:25:bc:c0:90:75:f7:4f:bd:c8:3f:cc:d9:e4:c0:
ba:c5:5e:be:17:e1:e6:84:13:26:c4:a5:78:07:0f:9b:bb:5a:
7f:37:82:94:24:60:38:62:c7:2e:8a:ee:4a:83:b4:9b:7f:43:
9f:3c:7f:f8:24:22:b7:8d:20:1e:45:9c:62:ef:11:8f:ea:b8:
0a:31:87:88:b3:3c:5b:a6:be:bc:52:22:be:91:cc:d8:ee:2b:
ac:1a:a3:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 30 17:12:52 2025 by rpki-client