Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/56/1d575d-7b22-47c7-a17e-8a136cb0dd5c/1/N8SLeJzH_-e-CURGQ_24a9tXP30.mft
File: N8SLeJzH_-e-CURGQ_24a9tXP30.mft (raw, json)
Hash identifier: rLu6Cgi7Qy1dK8mddLYUXDDsphjKG1Z30Y/SgTuNQzw=
Subject key identifier: 25:7D:CA:F4:C8:1C:DF:21:B0:5C:21:81:C9:5D:5A:F0:84:F6:C0:41
Authority key identifier: 37:C4:8B:78:9C:C7:FF:E7:BE:09:44:46:43:FD:B8:6B:DB:57:3F:7D
Certificate issuer: /CN=37c48b789cc7ffe7be09444643fdb86bdb573f7d
Certificate serial: 0197B74584A1187DAA5787AC907B45D2F55C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/N8SLeJzH_-e-CURGQ_24a9tXP30.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/56/1d575d-7b22-47c7-a17e-8a136cb0dd5c/1/N8SLeJzH_-e-CURGQ_24a9tXP30.mft
Manifest number: 0A4D
Signing time: Sat 28 Jun 2025 16:01:15 +0000
Manifest this update: Sat 28 Jun 2025 16:01:15 +0000
Manifest next update: Sun 29 Jun 2025 16:01:15 +0000
Files and hashes: 1: N8SLeJzH_-e-CURGQ_24a9tXP30.crl (hash: IbvWIv0I+E5dBZt3XKZxw4alE6mVWLn5r+ReoG/iArQ=)
2: zElW9nBSEefX0nViIsarFQPCkZs.roa (hash: CmIv1btIhlBvo+yXBuSYJkAIeImv5p3pKaVYvxzuwhU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/56/1d575d-7b22-47c7-a17e-8a136cb0dd5c/1/N8SLeJzH_-e-CURGQ_24a9tXP30.crl
rsync://rpki.ripe.net/repository/DEFAULT/56/1d575d-7b22-47c7-a17e-8a136cb0dd5c/1/N8SLeJzH_-e-CURGQ_24a9tXP30.mft
rsync://rpki.ripe.net/repository/DEFAULT/N8SLeJzH_-e-CURGQ_24a9tXP30.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 16:01:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:45:84:a1:18:7d:aa:57:87:ac:90:7b:45:d2:f5:5c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=37c48b789cc7ffe7be09444643fdb86bdb573f7d
Validity
Not Before: Jun 28 16:01:15 2025 GMT
Not After : Jun 29 16:01:15 2025 GMT
Subject: CN=257dcaf4c81cdf21b05c2181c95d5af084f6c041
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:2d:07:9a:10:84:5c:d8:1e:48:a0:ba:cb:64:
49:36:93:42:7c:20:66:16:3b:2e:53:13:05:a8:b5:
a4:d4:0f:c0:2e:8c:d2:7b:d0:d8:6a:41:06:a6:84:
4f:42:72:6a:02:c1:63:d7:2b:30:9e:c1:ed:67:f6:
bd:2e:bf:54:01:ae:83:0d:7d:4d:9c:24:9d:e0:1b:
17:39:75:33:a4:7e:bc:51:d3:bc:50:c8:d2:76:b3:
6f:2d:c5:21:fa:2a:35:03:bb:3a:e6:34:d2:e5:62:
e5:97:e3:0a:5a:5d:ca:7f:6a:b8:5d:f8:1b:3d:c3:
e2:5b:7a:f3:70:37:5f:cd:c2:f1:1f:47:15:31:6a:
36:81:18:08:3d:fc:ad:1d:23:a2:b1:12:24:7b:ae:
0f:87:1e:8b:4a:81:fe:61:6e:ac:86:9f:f0:15:e8:
5b:8f:5b:70:83:eb:57:c3:54:7a:29:e3:98:d8:5b:
6e:29:fa:1e:d2:4d:8b:1f:e8:ad:fe:d8:79:62:cf:
3f:60:19:26:26:ef:ba:2c:8f:7f:92:c3:73:e7:63:
1b:12:e6:70:c6:ea:07:f6:07:42:eb:4b:9f:96:f1:
6e:25:f3:90:57:35:f1:01:cc:6f:42:8f:05:2d:97:
18:a7:f3:2a:4a:42:84:34:a7:fe:74:d6:6f:eb:85:
29:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:7D:CA:F4:C8:1C:DF:21:B0:5C:21:81:C9:5D:5A:F0:84:F6:C0:41
X509v3 Authority Key Identifier:
keyid:37:C4:8B:78:9C:C7:FF:E7:BE:09:44:46:43:FD:B8:6B:DB:57:3F:7D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/N8SLeJzH_-e-CURGQ_24a9tXP30.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/1d575d-7b22-47c7-a17e-8a136cb0dd5c/1/N8SLeJzH_-e-CURGQ_24a9tXP30.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/56/1d575d-7b22-47c7-a17e-8a136cb0dd5c/1/N8SLeJzH_-e-CURGQ_24a9tXP30.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
77:ca:ce:8a:39:96:1e:61:97:cf:45:ea:aa:39:90:c0:d0:17:
2d:7f:f7:ae:f1:25:48:a3:63:40:88:d5:17:05:22:ff:a0:60:
5c:94:c3:88:01:fd:47:2d:88:08:ae:b0:8a:13:d2:7a:05:af:
15:9f:28:1c:1b:a0:ee:4b:49:b3:7c:51:e5:e0:67:28:df:30:
0d:fc:a2:d1:60:22:c5:f4:ca:34:d3:0a:fa:ef:84:9a:0e:36:
b6:1e:2f:c6:8c:4b:af:9b:9e:39:12:50:56:3b:8a:8b:0f:00:
d1:dc:67:cb:89:78:7d:c4:10:e5:9c:14:d6:ce:34:93:00:54:
8d:12:74:6d:77:2b:42:1b:2b:da:59:84:df:6e:66:2f:f3:c7:
2b:a7:1d:3f:cf:f5:fe:3b:ce:2c:eb:60:f8:6f:db:db:c8:f4:
b3:b0:53:bb:a1:e1:70:ce:96:f1:5a:fa:c9:31:3b:9e:da:d5:
8b:85:c0:72:40:83:9f:8b:7d:7a:c0:64:da:16:9e:83:5e:9d:
5d:bf:11:bc:e8:d9:58:a6:7a:37:82:d3:01:f3:eb:67:06:f9:
f9:c9:6e:0b:a4:e9:a6:94:f9:7a:82:1f:03:cb:b2:91:63:ca:
a7:30:4c:99:48:34:52:88:d1:f9:52:d5:1b:3b:52:f7:9c:e1:
b9:ae:0c:5c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZe3RYShGH2qV4eskHtF0vVcMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM3YzQ4Yjc4OWNjN2ZmZTdiZTA5NDQ0NjQzZmRiODZiZGI1
NzNmN2QwHhcNMjUwNjI4MTYwMTE1WhcNMjUwNjI5MTYwMTE1WjAzMTEwLwYDVQQD
EygyNTdkY2FmNGM4MWNkZjIxYjA1YzIxODFjOTVkNWFmMDg0ZjZjMDQxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5i0HmhCEXNgeSKC6y2RJNpNCfCBm
FjsuUxMFqLWk1A/ALozSe9DYakEGpoRPQnJqAsFj1yswnsHtZ/a9Lr9UAa6DDX1N
nCSd4BsXOXUzpH68UdO8UMjSdrNvLcUh+io1A7s65jTS5WLll+MKWl3Kf2q4Xfgb
PcPiW3rzcDdfzcLxH0cVMWo2gRgIPfytHSOisRIke64Phx6LSoH+YW6shp/wFehb
j1twg+tXw1R6KeOY2FtuKfoe0k2LH+it/th5Ys8/YBkmJu+6LI9/ksNz52MbEuZw
xuoH9gdC60uflvFuJfOQVzXxAcxvQo8FLZcYp/MqSkKENKf+dNZv64UpuwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCV9yvTIHN8hsFwhgcldWvCE9sBBMB8GA1UdIwQY
MBaAFDfEi3icx//nvglERkP9uGvbVz99MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTjhTTGVKekhfLWUtQ1VSR1FfMjRhOXRYUDMwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Ni8xZDU3NWQtN2IyMi00N2M3LWExN2Ut
OGExMzZjYjBkZDVjLzEvTjhTTGVKekhfLWUtQ1VSR1FfMjRhOXRYUDMwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Ni8xZDU3NWQtN2IyMi00N2M3LWExN2UtOGExMzZjYjBkZDVj
LzEvTjhTTGVKekhfLWUtQ1VSR1FfMjRhOXRYUDMwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAd8rOijmW
HmGXz0XqqjmQwNAXLX/3rvElSKNjQIjVFwUi/6BgXJTDiAH9Ry2ICK6wihPSegWv
FZ8oHBug7ktJs3xR5eBnKN8wDfyi0WAixfTKNNMK+u+Emg42th4vxoxLr5ueORJQ
VjuKiw8A0dxny4l4fcQQ5ZwU1s40kwBUjRJ0bXcrQhsr2lmE325mL/PHK6cdP8/1
/jvOLOtg+G/b28j0s7BTu6HhcM6W8Vr6yTE7ntrVi4XAckCDn4t9esBk2haeg16d
Xb8RvOjZWKZ6N4LTAfPrZwb5+cluC6TpppT5eoIfA8uykWPKpzBMmUg0UojR+VLV
GztS95zhua4MXA==
-----END CERTIFICATE-----
Generated at Sun Jun 29 01:37:03 2025 by rpki-client