Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/6b0344-8229-4d25-b498-8ce7c4fc5e0b/1/N-dRoRwaeIj6WNv8MsiVm8lGMD4.mft
File: N-dRoRwaeIj6WNv8MsiVm8lGMD4.mft (raw, json)
Hash identifier: zJSnnikUR3vEnrYxzryld8jcZvz4S6GKOsD3bEnEqbE=
Subject key identifier: 43:6A:07:5B:01:13:D9:EB:AD:DE:EC:32:7C:0B:D5:F8:61:9E:4E:2D
Authority key identifier: 37:E7:51:A1:1C:1A:78:88:FA:58:DB:FC:32:C8:95:9B:C9:46:30:3E
Certificate issuer: /CN=37e751a11c1a7888fa58dbfc32c8959bc946303e
Certificate serial: 0198D4E0E4F7478CE9DDFDB98C78B45FED61
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/N-dRoRwaeIj6WNv8MsiVm8lGMD4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/6b0344-8229-4d25-b498-8ce7c4fc5e0b/1/N-dRoRwaeIj6WNv8MsiVm8lGMD4.mft
Manifest number: 1395
Signing time: Sat 23 Aug 2025 03:02:44 +0000
Manifest this update: Sat 23 Aug 2025 03:02:44 +0000
Manifest next update: Sun 24 Aug 2025 03:02:44 +0000
Files and hashes: 1: 1iavcJFqwR6rzZKxM06ahcbF1Us.roa (hash: AJ47Zqj/T7JKUetOVwikynuHEcJu1eg9YDS731mpe6I=)
2: N-dRoRwaeIj6WNv8MsiVm8lGMD4.crl (hash: jxnDIvenQTtyzvfFaW3kSXK4WuKxWhU//nfGbK10rGM=)
3: dqEoxI3WEV2rOPAYE8C4EEj1ebI.roa (hash: nVo4yJxw9EhxkUipVljpw16vPXrVAlAiSw+4KWPaovY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/45/6b0344-8229-4d25-b498-8ce7c4fc5e0b/1/N-dRoRwaeIj6WNv8MsiVm8lGMD4.crl
rsync://rpki.ripe.net/repository/DEFAULT/45/6b0344-8229-4d25-b498-8ce7c4fc5e0b/1/N-dRoRwaeIj6WNv8MsiVm8lGMD4.mft
rsync://rpki.ripe.net/repository/DEFAULT/N-dRoRwaeIj6WNv8MsiVm8lGMD4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 00:37:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:e0:e4:f7:47:8c:e9:dd:fd:b9:8c:78:b4:5f:ed:61
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=37e751a11c1a7888fa58dbfc32c8959bc946303e
Validity
Not Before: Aug 23 03:02:44 2025 GMT
Not After : Aug 24 03:02:44 2025 GMT
Subject: CN=436a075b0113d9ebaddeec327c0bd5f8619e4e2d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:59:e6:4d:04:94:ce:d9:34:4a:9f:8e:d3:bf:
c0:ec:4f:e1:4e:ab:d1:b6:80:2d:b8:0e:fd:29:2f:
6f:18:af:9d:71:4c:bf:f5:7f:8d:9c:db:00:43:ae:
ae:46:d9:0d:e6:58:c7:9c:d6:ae:dc:32:13:d5:a7:
da:b0:79:ed:f9:b0:26:f9:eb:a7:5a:e7:fe:41:98:
3b:bf:df:12:2c:61:fc:92:f5:fa:24:9f:fd:3e:b3:
1e:62:5a:a2:de:b9:10:67:a9:ea:19:7c:6f:7c:c4:
b1:d1:9c:a3:42:43:39:10:9d:c1:d2:07:51:4c:23:
58:2d:e4:08:70:6f:45:86:b1:b8:e1:e2:64:e0:0d:
33:7c:4f:a4:ee:07:0e:fc:ad:1e:d4:65:2a:58:a6:
e4:9b:ed:87:11:b4:dd:77:26:d1:33:e3:e9:70:62:
a4:71:bd:25:ec:c6:55:d0:14:26:e7:c1:f0:95:2a:
c0:b2:07:47:86:e9:95:3a:83:fb:c0:8a:94:52:08:
d3:0b:f7:bf:e7:15:5d:ee:ce:63:02:c8:8a:75:1b:
2b:b3:54:81:2f:d3:8c:94:ba:67:1c:8a:41:9e:47:
ce:38:3e:c1:37:83:89:01:59:19:dc:2e:0a:b3:92:
49:fe:9e:bc:54:4b:62:b6:05:4b:09:78:e8:91:90:
77:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:6A:07:5B:01:13:D9:EB:AD:DE:EC:32:7C:0B:D5:F8:61:9E:4E:2D
X509v3 Authority Key Identifier:
keyid:37:E7:51:A1:1C:1A:78:88:FA:58:DB:FC:32:C8:95:9B:C9:46:30:3E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/N-dRoRwaeIj6WNv8MsiVm8lGMD4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/6b0344-8229-4d25-b498-8ce7c4fc5e0b/1/N-dRoRwaeIj6WNv8MsiVm8lGMD4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/45/6b0344-8229-4d25-b498-8ce7c4fc5e0b/1/N-dRoRwaeIj6WNv8MsiVm8lGMD4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
54:6c:91:98:5a:db:a9:f3:e1:8e:b2:78:6e:85:9e:2c:57:b4:
2a:f1:62:69:35:f3:c0:0e:69:f5:05:d0:0e:d2:4b:96:ef:76:
de:e6:ef:fc:aa:5a:af:99:be:9e:d0:84:4b:06:f7:66:c7:f0:
3e:50:e6:c1:73:23:48:59:30:ae:28:d2:d4:bd:29:fb:e4:7e:
a0:44:27:b9:ab:fd:22:12:f0:a7:83:f1:24:a4:55:2e:b6:4e:
25:5f:b1:53:fc:4d:fd:d0:41:76:18:f0:ab:82:cd:21:4d:6d:
69:dc:a0:94:f2:4f:be:b4:db:37:87:ca:de:e3:88:d8:fa:42:
4a:29:a0:85:ff:6c:34:46:7a:51:ef:97:28:47:b4:bf:96:4b:
86:47:a3:e9:e9:a9:42:d4:ea:8b:73:33:3e:a7:ae:d3:1d:eb:
c5:40:a3:8c:ff:e7:4d:ba:f4:8d:dc:7f:f7:3f:a4:93:2c:0a:
f8:c8:3d:d1:2a:7c:cd:15:49:e0:78:4c:b3:ee:af:11:77:89:
45:16:b0:81:61:df:5b:c0:85:e6:03:55:e1:ee:7d:e3:24:b9:
fa:fe:95:d6:09:3f:06:80:55:f6:b7:da:c2:e6:0e:15:3c:09:
f0:c2:bd:bc:a1:d2:d9:79:33:f4:10:2d:a5:c6:78:6d:e6:e4:
7c:4f:11:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 09:48:56 2025 by rpki-client