Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4f/8d1167-0c4d-488f-9a83-c0177dfda847/1/N09vPjy5c7rIpD9sC4BrPRHJrcM.mft
File: N09vPjy5c7rIpD9sC4BrPRHJrcM.mft (raw, json)
Hash identifier: 4KgVM16dcyZA+kjHxtsKjnNnCwV+lWu8+Utu1g8neTM=
Subject key identifier: 86:1A:04:F8:17:71:89:30:DF:E0:1A:9A:BC:C2:8B:E5:47:52:38:D0
Authority key identifier: 37:4F:6F:3E:3C:B9:73:BA:C8:A4:3F:6C:0B:80:6B:3D:11:C9:AD:C3
Certificate issuer: /CN=374f6f3e3cb973bac8a43f6c0b806b3d11c9adc3
Certificate serial: 0198D698012FC45A6211E1D2E521CD98EEAB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/N09vPjy5c7rIpD9sC4BrPRHJrcM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4f/8d1167-0c4d-488f-9a83-c0177dfda847/1/N09vPjy5c7rIpD9sC4BrPRHJrcM.mft
Manifest number: 0600
Signing time: Sat 23 Aug 2025 11:02:22 +0000
Manifest this update: Sat 23 Aug 2025 11:02:22 +0000
Manifest next update: Sun 24 Aug 2025 11:02:22 +0000
Files and hashes: 1: Bj6SKpV4ITZqGObAbt84p9vUVoA.roa (hash: V/kYOBtoMloCvdGVWE8HL6NIMguaprMvqCLFh+ULBMM=)
2: N09vPjy5c7rIpD9sC4BrPRHJrcM.crl (hash: eqlRZw+t6sGz/+Me6WEUWnJahUD+UPDhyG+IQY8jMDI=)
3: kL_nWqD9s8VP0wMvny-2TOGvAdE.roa (hash: 3whyZK+EQb3qxTzyxzs0f1wKwxYwvBzqI24s/5635lU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4f/8d1167-0c4d-488f-9a83-c0177dfda847/1/N09vPjy5c7rIpD9sC4BrPRHJrcM.crl
rsync://rpki.ripe.net/repository/DEFAULT/4f/8d1167-0c4d-488f-9a83-c0177dfda847/1/N09vPjy5c7rIpD9sC4BrPRHJrcM.mft
rsync://rpki.ripe.net/repository/DEFAULT/N09vPjy5c7rIpD9sC4BrPRHJrcM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:98:01:2f:c4:5a:62:11:e1:d2:e5:21:cd:98:ee:ab
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=374f6f3e3cb973bac8a43f6c0b806b3d11c9adc3
Validity
Not Before: Aug 23 11:02:22 2025 GMT
Not After : Aug 24 11:02:22 2025 GMT
Subject: CN=861a04f817718930dfe01a9abcc28be5475238d0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:c6:58:8e:bf:dc:c2:5b:47:33:7f:42:90:49:
6d:bd:a9:85:71:0c:c3:7d:30:f0:8f:e6:e5:77:97:
9e:9e:c7:7a:95:bb:b9:cc:02:44:1f:1b:d6:44:fa:
18:d0:87:d3:7e:f3:ce:34:a6:81:9a:34:a5:24:8a:
5f:24:3c:e3:df:07:78:6f:fe:6e:e9:c3:cc:e2:d9:
da:51:ef:55:18:cb:5b:e1:93:2e:52:17:87:d8:29:
5d:aa:ff:03:90:f8:7a:06:b9:3d:40:35:a5:34:75:
0d:91:3d:41:ad:b6:0a:64:38:3b:e6:67:7f:86:57:
35:f1:58:c6:f8:b9:7c:de:41:67:7b:55:01:c4:81:
0c:7c:4e:e4:ef:9a:a5:f9:d3:61:8e:36:a0:49:75:
c5:9e:7c:1d:57:af:64:b2:48:38:d6:77:20:e0:88:
c5:2a:fa:49:09:f5:26:07:7a:dd:b8:49:96:39:63:
e6:8b:89:c0:e2:b1:6d:14:49:9b:36:92:28:25:3a:
13:55:f9:6b:89:a5:34:e3:86:71:c5:ee:ed:79:64:
08:57:29:b3:b4:71:46:26:9b:f2:81:ff:92:51:50:
d0:30:01:b8:ab:4f:31:37:80:30:63:14:c1:3d:cf:
3f:95:ab:f5:90:9d:53:6f:f5:27:7b:bd:02:cf:08:
1e:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:1A:04:F8:17:71:89:30:DF:E0:1A:9A:BC:C2:8B:E5:47:52:38:D0
X509v3 Authority Key Identifier:
keyid:37:4F:6F:3E:3C:B9:73:BA:C8:A4:3F:6C:0B:80:6B:3D:11:C9:AD:C3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/N09vPjy5c7rIpD9sC4BrPRHJrcM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/8d1167-0c4d-488f-9a83-c0177dfda847/1/N09vPjy5c7rIpD9sC4BrPRHJrcM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/8d1167-0c4d-488f-9a83-c0177dfda847/1/N09vPjy5c7rIpD9sC4BrPRHJrcM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
24:e3:e7:28:c2:84:96:68:8a:9a:1b:ba:1f:4a:4e:1b:01:00:
9a:81:c3:14:7c:8d:a6:40:9e:e8:17:77:29:48:a1:da:2c:b8:
9f:6f:84:67:0c:b7:fc:93:cc:dc:d3:38:ee:97:f4:c8:dc:81:
3c:3a:b7:fa:58:46:c6:d3:7e:5d:fb:aa:e5:7d:29:5c:3f:8b:
40:32:e4:08:99:94:48:d0:d3:40:d1:c1:c4:bc:f3:cb:e9:83:
cc:b6:32:3c:9e:ca:5b:a6:e6:16:fa:96:c5:fe:47:f2:6b:f0:
b9:0f:88:7e:91:bc:ba:d5:9b:9f:4d:f3:63:0f:bd:bc:69:cb:
f0:ee:8b:89:c9:70:0c:22:e9:67:2a:9f:22:bc:4d:be:1b:48:
c6:9a:a5:78:da:44:9a:53:25:02:6a:c2:8b:00:69:2e:a5:22:
04:df:95:74:79:4d:b8:1a:b0:3b:69:d0:78:44:35:e3:04:f5:
fe:81:6c:01:7b:f2:9a:dd:f7:67:29:d9:19:24:59:2d:45:88:
4f:85:82:f0:93:82:29:f4:3a:c5:d3:6a:23:e6:bb:76:8e:85:
e2:80:f8:ca:c0:79:8b:f6:f7:46:a7:9d:e2:99:88:42:ca:f9:
56:ea:59:83:75:e2:d0:da:76:47:aa:1e:96:23:45:54:80:32:
7e:c1:a6:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 14:12:11 2025 by rpki-client