Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4f/35faed-c2d7-4cb9-97f5-df6f20dcb94b/1/N69IEx7Nnco97yst54jxUGBid1U.mft
File: N69IEx7Nnco97yst54jxUGBid1U.mft (raw, json)
Hash identifier: woTKqY1ADvbOLBKnHD7pJpGmOsdcrVPe2ILa+EM+YWA=
Subject key identifier: AC:C1:9F:24:7C:A9:91:02:97:A2:28:A6:8D:AE:08:72:CC:E8:48:57
Authority key identifier: 37:AF:48:13:1E:CD:9D:CA:3D:EF:2B:2D:E7:88:F1:50:60:62:77:55
Certificate issuer: /CN=37af48131ecd9dca3def2b2de788f15060627755
Certificate serial: 0198D5F18A4BB2DECA2F4745E935A3253752
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/N69IEx7Nnco97yst54jxUGBid1U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4f/35faed-c2d7-4cb9-97f5-df6f20dcb94b/1/N69IEx7Nnco97yst54jxUGBid1U.mft
Manifest number: 1651
Signing time: Sat 23 Aug 2025 08:00:33 +0000
Manifest this update: Sat 23 Aug 2025 08:00:33 +0000
Manifest next update: Sun 24 Aug 2025 08:00:33 +0000
Files and hashes: 1: Lv93kZr3FrSvC5fAGNeod6j_6yM.roa (hash: 37H9uvEBQ9sb3AaWMyi05t5K1mxRb/qz/+D6tmcVRbg=)
2: N69IEx7Nnco97yst54jxUGBid1U.crl (hash: vyJSysKOSnUwvMxQd/k+UGLZpByzxMX35sAZgfXvk24=)
3: nCYRFHxESiPTOP0DiwWAA3vf6pc.roa (hash: n1iHEUmqWKjUYGzT2fByz8YLuqOJY83LkJFmv6uksFE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4f/35faed-c2d7-4cb9-97f5-df6f20dcb94b/1/N69IEx7Nnco97yst54jxUGBid1U.crl
rsync://rpki.ripe.net/repository/DEFAULT/4f/35faed-c2d7-4cb9-97f5-df6f20dcb94b/1/N69IEx7Nnco97yst54jxUGBid1U.mft
rsync://rpki.ripe.net/repository/DEFAULT/N69IEx7Nnco97yst54jxUGBid1U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:f1:8a:4b:b2:de:ca:2f:47:45:e9:35:a3:25:37:52
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=37af48131ecd9dca3def2b2de788f15060627755
Validity
Not Before: Aug 23 08:00:33 2025 GMT
Not After : Aug 24 08:00:33 2025 GMT
Subject: CN=acc19f247ca9910297a228a68dae0872cce84857
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:39:48:3a:a1:4c:60:1b:73:f0:43:16:45:2a:
98:7c:98:26:6c:00:7d:01:73:49:eb:0d:bf:08:45:
e7:3d:2c:54:48:42:fc:99:f7:8a:6c:04:aa:7c:b1:
b8:29:a9:da:3f:4c:e1:10:81:e8:e9:08:bd:97:d2:
1a:79:72:08:65:02:6b:e1:95:e2:83:f3:8a:31:9c:
97:01:52:ca:df:50:81:57:cb:bf:b3:44:9e:8f:cc:
cc:17:4a:3c:fb:21:d4:04:2a:d2:86:32:52:a5:63:
f4:a6:b1:f6:49:82:84:01:f0:66:91:97:33:9a:48:
f3:d3:0f:32:9e:56:54:8c:5b:d3:43:f4:9b:2f:5a:
8a:8a:c9:04:be:9b:bc:a8:63:04:37:62:4c:32:fe:
64:8a:25:41:56:0e:ed:4c:7f:05:2f:8c:25:dd:f7:
c0:22:0b:b7:cc:3e:e7:b5:11:5d:51:f0:f1:8d:f9:
3d:8e:1a:54:68:aa:ee:26:22:83:db:bd:7a:b7:aa:
a5:f6:bf:0e:3c:5b:b5:c3:70:32:96:c8:6d:71:a1:
e9:2f:d2:aa:e9:ff:3c:63:a5:f7:5a:0a:f6:ff:9f:
bb:23:00:fe:d3:6c:bc:1f:d1:ac:3e:6f:d4:90:fd:
72:d2:1b:4b:7a:13:38:47:61:e1:b8:3b:36:53:7b:
d5:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:C1:9F:24:7C:A9:91:02:97:A2:28:A6:8D:AE:08:72:CC:E8:48:57
X509v3 Authority Key Identifier:
keyid:37:AF:48:13:1E:CD:9D:CA:3D:EF:2B:2D:E7:88:F1:50:60:62:77:55
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/N69IEx7Nnco97yst54jxUGBid1U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/35faed-c2d7-4cb9-97f5-df6f20dcb94b/1/N69IEx7Nnco97yst54jxUGBid1U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/35faed-c2d7-4cb9-97f5-df6f20dcb94b/1/N69IEx7Nnco97yst54jxUGBid1U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
01:23:3d:af:4f:9b:11:cd:39:69:b1:d0:25:5f:da:ba:d8:ec:
c3:4e:57:97:6d:d7:17:39:f8:a1:ba:a7:3f:0a:af:df:30:f7:
e7:9e:27:cc:0c:19:d1:cd:a3:06:63:54:6b:02:15:5e:61:41:
42:9e:eb:4b:ea:83:3b:d4:21:88:85:c8:31:60:b4:66:4f:ae:
92:57:08:f4:9f:43:fe:df:3c:1f:87:00:97:39:ff:97:95:9e:
fd:d3:16:ed:72:5c:73:c0:03:e4:6a:96:25:ba:48:22:8f:fb:
a6:d1:ec:77:88:4c:a7:74:85:72:e5:52:ff:9f:87:13:9f:58:
07:a8:16:0b:e3:30:b1:3d:6e:bd:a5:f6:c0:ff:86:6d:ba:d7:
cf:d5:33:88:da:85:ca:f4:ce:83:1f:be:03:24:a6:10:d8:ca:
1f:90:43:92:44:74:a8:b2:a1:18:de:b0:38:99:a3:b0:d9:f3:
0a:c5:30:f1:4c:98:c7:da:cb:f3:b6:c0:e2:9f:4c:21:2c:ed:
97:e9:1a:84:bb:7d:81:e0:9c:6c:83:ed:ac:1f:ce:4b:86:4c:
51:f3:9f:be:c2:54:db:26:88:14:05:75:f5:73:36:36:21:8e:
69:1f:0e:cc:42:55:c1:3b:4e:8a:d8:1c:8e:f8:77:f8:ca:e4:
fa:af:5a:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 13:24:53 2025 by rpki-client