Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3e/85a03d-87c3-4401-9a0d-ab2bafa1ae4d/1/N_S5Gj_86fl1Bac8_V5K1ONeBC0.mft
File: N_S5Gj_86fl1Bac8_V5K1ONeBC0.mft (raw, json)
Hash identifier: zfvgs0Xa6sEQUlU2fUuQUQYGqg/OyZy8BvEnVZ8Ar4s=
Subject key identifier: C1:4A:33:5A:65:DA:07:D8:0A:90:1D:4E:CF:88:0E:77:C3:5B:6F:81
Authority key identifier: 37:F4:B9:1A:3F:FC:E9:F9:75:05:A7:3C:FD:5E:4A:D4:E3:5E:04:2D
Certificate issuer: /CN=37f4b91a3ffce9f97505a73cfd5e4ad4e35e042d
Certificate serial: 0198D4E007B159AB58E492616D5560C50EAF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/N_S5Gj_86fl1Bac8_V5K1ONeBC0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3e/85a03d-87c3-4401-9a0d-ab2bafa1ae4d/1/N_S5Gj_86fl1Bac8_V5K1ONeBC0.mft
Manifest number: 07DC
Signing time: Sat 23 Aug 2025 03:01:48 +0000
Manifest this update: Sat 23 Aug 2025 03:01:48 +0000
Manifest next update: Sun 24 Aug 2025 03:01:48 +0000
Files and hashes: 1: N_S5Gj_86fl1Bac8_V5K1ONeBC0.crl (hash: lw4EH3GkKyF0Jgu5prjuJVBsTNa8oKLCqHODdOCdwXE=)
2: hS4qE69cRzq1LeuTH9FbxF7EdCM.roa (hash: CNvb1FlCruFxVWACj7/lI66W2B3Fn96cjXQxKd7K6v8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3e/85a03d-87c3-4401-9a0d-ab2bafa1ae4d/1/N_S5Gj_86fl1Bac8_V5K1ONeBC0.crl
rsync://rpki.ripe.net/repository/DEFAULT/3e/85a03d-87c3-4401-9a0d-ab2bafa1ae4d/1/N_S5Gj_86fl1Bac8_V5K1ONeBC0.mft
rsync://rpki.ripe.net/repository/DEFAULT/N_S5Gj_86fl1Bac8_V5K1ONeBC0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 03:01:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:e0:07:b1:59:ab:58:e4:92:61:6d:55:60:c5:0e:af
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=37f4b91a3ffce9f97505a73cfd5e4ad4e35e042d
Validity
Not Before: Aug 23 03:01:48 2025 GMT
Not After : Aug 24 03:01:48 2025 GMT
Subject: CN=c14a335a65da07d80a901d4ecf880e77c35b6f81
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:11:66:9b:c9:79:6b:f5:e5:c5:e6:6a:51:2c:
ad:6c:bf:e9:04:24:27:b8:be:f1:a9:52:14:26:ef:
01:44:1d:e8:b7:a3:cd:aa:18:06:31:94:60:32:8e:
c1:87:63:7e:ea:1d:d9:dd:ab:5b:69:f5:d3:ef:70:
d5:2d:99:4b:cc:a1:1d:9a:f4:0f:f3:0f:ba:d2:c6:
f4:91:99:b2:d0:f8:84:3b:52:06:68:59:28:1c:ce:
c5:88:e4:f3:a3:78:30:32:8c:f4:90:66:89:4d:a4:
79:27:74:c6:92:8d:64:ab:4e:7a:33:e1:20:a2:3e:
06:6f:26:82:a5:13:ce:1a:05:a1:b1:d7:df:0a:15:
e6:d8:c5:b6:ec:2e:2c:14:06:79:f4:cb:9b:18:d1:
93:e3:e5:4a:46:a1:d0:01:78:71:1f:ee:ee:91:0b:
47:9c:e1:49:39:be:6d:80:fe:90:08:c3:5b:1a:7c:
d3:64:27:c5:7d:b4:b0:ab:75:c9:a8:31:80:61:51:
54:2d:20:e9:52:5c:2e:56:96:70:9b:67:ad:31:54:
6f:49:f5:86:1b:c3:5f:5f:72:0e:29:07:84:d0:30:
62:2c:ea:84:25:91:8d:f7:0e:e6:88:9e:d3:a8:84:
ae:7f:7b:a3:7c:a5:7b:15:1a:d9:4a:d1:7a:65:e1:
80:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:4A:33:5A:65:DA:07:D8:0A:90:1D:4E:CF:88:0E:77:C3:5B:6F:81
X509v3 Authority Key Identifier:
keyid:37:F4:B9:1A:3F:FC:E9:F9:75:05:A7:3C:FD:5E:4A:D4:E3:5E:04:2D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/N_S5Gj_86fl1Bac8_V5K1ONeBC0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/85a03d-87c3-4401-9a0d-ab2bafa1ae4d/1/N_S5Gj_86fl1Bac8_V5K1ONeBC0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/85a03d-87c3-4401-9a0d-ab2bafa1ae4d/1/N_S5Gj_86fl1Bac8_V5K1ONeBC0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7e:5e:2d:01:af:37:6e:43:26:4f:b7:f8:b8:77:83:b9:aa:da:
9b:1b:6b:e6:9c:e7:83:a9:dc:47:19:ed:cf:cd:a3:73:22:6f:
4f:fc:a3:38:85:73:e0:be:52:1d:cf:60:a1:a0:fd:84:84:76:
6c:c3:b7:66:55:98:00:68:33:2e:e8:ba:f1:a3:7e:7b:32:ea:
e2:54:a2:d1:41:28:3d:e6:3e:72:38:7c:0e:e6:8c:05:31:40:
3d:8d:cb:f1:c0:15:29:6d:e1:de:fd:71:df:3d:0f:96:8f:d9:
85:a5:d3:a4:fd:5f:53:5e:81:a5:d9:02:d2:83:58:b5:14:94:
60:16:2f:ab:3e:e9:34:86:b4:fd:a8:be:32:1c:2e:8a:7c:2a:
0b:93:89:68:ae:46:81:54:8a:28:73:21:d8:90:e0:ee:cc:4b:
f8:e5:71:17:8e:40:53:14:e7:d9:d9:cb:5a:6f:f5:b4:b2:cb:
87:ee:6c:d0:c3:e6:59:b0:4f:8d:20:3b:9c:1e:63:4b:aa:62:
2e:fa:71:d8:4a:01:c8:8b:83:6f:37:b7:d3:ee:cc:1c:7b:94:
2a:c3:8d:cc:7f:31:1c:70:c1:fe:ab:ea:57:1a:d9:70:49:c7:
64:91:40:bd:4a:ed:1e:41:43:a3:0c:61:8b:59:f8:39:a5:c4:
84:93:b6:39
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjU4AexWatY5JJhbVVgxQ6vMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM3ZjRiOTFhM2ZmY2U5Zjk3NTA1YTczY2ZkNWU0YWQ0ZTM1
ZTA0MmQwHhcNMjUwODIzMDMwMTQ4WhcNMjUwODI0MDMwMTQ4WjAzMTEwLwYDVQQD
EyhjMTRhMzM1YTY1ZGEwN2Q4MGE5MDFkNGVjZjg4MGU3N2MzNWI2ZjgxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyRFmm8l5a/XlxeZqUSytbL/pBCQn
uL7xqVIUJu8BRB3ot6PNqhgGMZRgMo7Bh2N+6h3Z3atbafXT73DVLZlLzKEdmvQP
8w+60sb0kZmy0PiEO1IGaFkoHM7FiOTzo3gwMoz0kGaJTaR5J3TGko1kq056M+Eg
oj4GbyaCpRPOGgWhsdffChXm2MW27C4sFAZ59MubGNGT4+VKRqHQAXhxH+7ukQtH
nOFJOb5tgP6QCMNbGnzTZCfFfbSwq3XJqDGAYVFULSDpUlwuVpZwm2etMVRvSfWG
G8NfX3IOKQeE0DBiLOqEJZGN9w7miJ7TqISuf3ujfKV7FRrZStF6ZeGAlwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMFKM1pl2gfYCpAdTs+IDnfDW2+BMB8GA1UdIwQY
MBaAFDf0uRo//On5dQWnPP1eStTjXgQtMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTl9TNUdqXzg2ZmwxQmFjOF9WNUsxT05lQkMwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zZS84NWEwM2QtODdjMy00NDAxLTlhMGQt
YWIyYmFmYTFhZTRkLzEvTl9TNUdqXzg2ZmwxQmFjOF9WNUsxT05lQkMwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zZS84NWEwM2QtODdjMy00NDAxLTlhMGQtYWIyYmFmYTFhZTRk
LzEvTl9TNUdqXzg2ZmwxQmFjOF9WNUsxT05lQkMwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAfl4tAa83
bkMmT7f4uHeDuaramxtr5pzng6ncRxntz82jcyJvT/yjOIVz4L5SHc9goaD9hIR2
bMO3ZlWYAGgzLui68aN+ezLq4lSi0UEoPeY+cjh8DuaMBTFAPY3L8cAVKW3h3v1x
3z0Plo/ZhaXTpP1fU16BpdkC0oNYtRSUYBYvqz7pNIa0/ai+MhwuinwqC5OJaK5G
gVSKKHMh2JDg7sxL+OVxF45AUxTn2dnLWm/1tLLLh+5s0MPmWbBPjSA7nB5jS6pi
Lvpx2EoByIuDbze30+7MHHuUKsONzH8xHHDB/qvqVxrZcEnHZJFAvUrtHkFDowxh
i1n4OaXEhJO2OQ==
-----END CERTIFICATE-----
Generated at Sat Aug 23 12:19:32 2025 by rpki-client