Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3e/85a03d-87c3-4401-9a0d-ab2bafa1ae4d/1/N_S5Gj_86fl1Bac8_V5K1ONeBC0.mft
File: N_S5Gj_86fl1Bac8_V5K1ONeBC0.mft (raw, json)
Hash identifier: Zn+NMPESCdTvnk40umlvxpoL0kaZZwMMEI7dzl6n0dU=
Subject key identifier: 99:C9:70:FA:AE:F1:A0:03:AE:80:F5:BC:F8:DD:D2:6C:50:61:8E:57
Authority key identifier: 37:F4:B9:1A:3F:FC:E9:F9:75:05:A7:3C:FD:5E:4A:D4:E3:5E:04:2D
Certificate issuer: /CN=37f4b91a3ffce9f97505a73cfd5e4ad4e35e042d
Certificate serial: 0197B70E89FCDFFC16826EB431D13A101ABE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/N_S5Gj_86fl1Bac8_V5K1ONeBC0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3e/85a03d-87c3-4401-9a0d-ab2bafa1ae4d/1/N_S5Gj_86fl1Bac8_V5K1ONeBC0.mft
Manifest number: 0748
Signing time: Sat 28 Jun 2025 15:01:12 +0000
Manifest this update: Sat 28 Jun 2025 15:01:12 +0000
Manifest next update: Sun 29 Jun 2025 15:01:12 +0000
Files and hashes: 1: N_S5Gj_86fl1Bac8_V5K1ONeBC0.crl (hash: eGr/akK1GLhV8pYoUufRSCb8rAnUUaLS9AT7L1/iw3M=)
2: hS4qE69cRzq1LeuTH9FbxF7EdCM.roa (hash: CNvb1FlCruFxVWACj7/lI66W2B3Fn96cjXQxKd7K6v8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3e/85a03d-87c3-4401-9a0d-ab2bafa1ae4d/1/N_S5Gj_86fl1Bac8_V5K1ONeBC0.crl
rsync://rpki.ripe.net/repository/DEFAULT/3e/85a03d-87c3-4401-9a0d-ab2bafa1ae4d/1/N_S5Gj_86fl1Bac8_V5K1ONeBC0.mft
rsync://rpki.ripe.net/repository/DEFAULT/N_S5Gj_86fl1Bac8_V5K1ONeBC0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:0e:89:fc:df:fc:16:82:6e:b4:31:d1:3a:10:1a:be
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=37f4b91a3ffce9f97505a73cfd5e4ad4e35e042d
Validity
Not Before: Jun 28 15:01:12 2025 GMT
Not After : Jun 29 15:01:12 2025 GMT
Subject: CN=99c970faaef1a003ae80f5bcf8ddd26c50618e57
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:7b:5a:5b:55:47:a4:e0:50:20:11:e3:98:ec:
bf:1d:0e:5b:eb:41:53:26:b7:e1:06:dd:14:b3:af:
59:fc:a3:f2:c2:a9:17:da:84:d2:fc:d6:38:3d:e1:
d0:ad:76:cf:35:3e:3f:10:bd:07:91:35:a0:ad:63:
50:f6:d4:18:1f:65:00:b7:10:2f:51:ec:c5:69:a7:
f1:e1:b3:a0:ca:96:ea:27:c2:c5:84:81:12:a2:28:
cc:89:4e:ae:fb:50:9d:59:7d:36:2d:2c:32:63:12:
a3:d3:5f:13:59:15:13:29:46:46:c2:97:d3:09:10:
49:ae:2a:8b:f2:8d:b3:fb:f4:29:7a:8e:1d:a4:f0:
b0:00:c7:a0:08:45:f8:5b:a1:8c:fa:e4:9d:22:46:
cb:c3:6c:bf:44:8d:1b:4c:c5:2e:c5:f5:87:c8:d5:
0a:d9:f1:f5:33:db:90:ab:eb:e6:e1:de:8a:b1:5c:
16:86:55:16:46:61:a5:5e:0d:de:ef:7c:0f:d4:89:
0b:b2:1c:51:86:9d:0d:2e:52:6b:53:4d:d1:e7:96:
96:4e:41:35:72:7f:4a:8b:00:5f:48:d2:de:df:08:
51:7a:02:65:b5:0e:6f:1d:9b:b1:ed:31:41:c3:85:
49:2a:2f:e1:e2:cf:9b:3f:c0:dc:87:51:77:3e:17:
6d:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:C9:70:FA:AE:F1:A0:03:AE:80:F5:BC:F8:DD:D2:6C:50:61:8E:57
X509v3 Authority Key Identifier:
keyid:37:F4:B9:1A:3F:FC:E9:F9:75:05:A7:3C:FD:5E:4A:D4:E3:5E:04:2D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/N_S5Gj_86fl1Bac8_V5K1ONeBC0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/85a03d-87c3-4401-9a0d-ab2bafa1ae4d/1/N_S5Gj_86fl1Bac8_V5K1ONeBC0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/85a03d-87c3-4401-9a0d-ab2bafa1ae4d/1/N_S5Gj_86fl1Bac8_V5K1ONeBC0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
96:5f:b5:0b:c5:4d:d1:98:49:15:c3:ea:76:e5:a8:a6:2f:70:
88:50:3f:56:37:e3:3a:ab:78:1c:ca:2c:f6:86:ab:9f:29:2a:
f8:84:0e:8b:8a:94:a9:af:4d:15:da:ed:6f:10:67:f5:e8:04:
62:51:60:17:6f:07:2a:61:4e:7c:4a:2b:2f:a0:f1:6f:01:fe:
d1:ef:f9:86:e8:e1:d5:32:92:d6:b1:d8:3c:a3:48:08:1c:09:
a7:1b:39:51:52:00:bc:bd:2a:37:90:77:a5:c5:5c:95:4b:d2:
34:39:0d:8c:37:1e:20:0d:49:95:c8:3c:34:3f:2b:42:17:98:
e9:7d:9c:01:c0:28:bd:9c:b9:cb:7a:30:bf:54:d6:fe:eb:34:
4b:d5:d4:c4:a6:91:a7:00:c8:94:39:7c:eb:41:63:83:fd:1a:
ad:b4:3e:28:44:ef:d5:47:c0:41:f1:f5:60:33:fa:9e:d7:c6:
b6:a7:ac:59:56:b8:78:d4:87:20:90:8d:fc:65:b2:46:9d:a0:
1e:6e:3a:3e:cb:aa:e4:af:d6:7c:ce:04:34:01:37:62:99:d9:
ee:83:9f:d1:46:4c:34:05:24:81:4a:8a:42:3a:aa:1c:fe:1d:
e7:7b:46:c2:0a:12:d6:2c:da:cf:bf:6c:99:e9:4f:0e:63:c6:
93:e0:3a:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 20:11:06 2025 by rpki-client