Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/56/1d575d-7b22-47c7-a17e-8a136cb0dd5c/1/N8SLeJzH_-e-CURGQ_24a9tXP30.mft
File: N8SLeJzH_-e-CURGQ_24a9tXP30.mft (raw, json)
Hash identifier: z8Qn2FxUMW6K9JAjO70hfCg1roxppCxKBBEiAs2uong=
Subject key identifier: A4:BA:2D:18:7A:05:36:DC:73:1F:1B:0B:49:D9:CB:9C:D3:9B:10:DC
Authority key identifier: 37:C4:8B:78:9C:C7:FF:E7:BE:09:44:46:43:FD:B8:6B:DB:57:3F:7D
Certificate issuer: /CN=37c48b789cc7ffe7be09444643fdb86bdb573f7d
Certificate serial: 0198D5160F9B95F4A23317556C7992F26391
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/N8SLeJzH_-e-CURGQ_24a9tXP30.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/56/1d575d-7b22-47c7-a17e-8a136cb0dd5c/1/N8SLeJzH_-e-CURGQ_24a9tXP30.mft
Manifest number: 0AE1
Signing time: Sat 23 Aug 2025 04:00:49 +0000
Manifest this update: Sat 23 Aug 2025 04:00:49 +0000
Manifest next update: Sun 24 Aug 2025 04:00:49 +0000
Files and hashes: 1: N8SLeJzH_-e-CURGQ_24a9tXP30.crl (hash: DdPXpfJ8RpiYvxfB0omDC6ljsME/lmArxlMoTEfPlas=)
2: zElW9nBSEefX0nViIsarFQPCkZs.roa (hash: CmIv1btIhlBvo+yXBuSYJkAIeImv5p3pKaVYvxzuwhU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/56/1d575d-7b22-47c7-a17e-8a136cb0dd5c/1/N8SLeJzH_-e-CURGQ_24a9tXP30.crl
rsync://rpki.ripe.net/repository/DEFAULT/56/1d575d-7b22-47c7-a17e-8a136cb0dd5c/1/N8SLeJzH_-e-CURGQ_24a9tXP30.mft
rsync://rpki.ripe.net/repository/DEFAULT/N8SLeJzH_-e-CURGQ_24a9tXP30.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 04:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:16:0f:9b:95:f4:a2:33:17:55:6c:79:92:f2:63:91
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=37c48b789cc7ffe7be09444643fdb86bdb573f7d
Validity
Not Before: Aug 23 04:00:49 2025 GMT
Not After : Aug 24 04:00:49 2025 GMT
Subject: CN=a4ba2d187a0536dc731f1b0b49d9cb9cd39b10dc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:95:c7:f5:02:e8:08:b3:ca:10:52:f6:b1:93:
e8:3e:b5:a4:a7:48:0a:53:f8:90:5a:ce:30:b7:64:
9a:d4:93:95:67:41:8d:bd:24:c6:6c:29:80:0f:19:
bc:ff:39:37:91:c5:b1:0d:e4:16:76:a2:43:6f:75:
4e:81:d7:e5:43:24:aa:e0:ba:25:26:f2:97:7e:09:
b2:44:f5:d1:a9:27:a6:29:2e:1b:dd:49:29:cb:bb:
5c:ce:3a:bf:19:9e:55:8d:d5:a5:75:04:40:ac:74:
9c:c5:5a:72:8d:27:73:71:32:0d:e3:ea:05:e7:4c:
c7:78:3e:61:5e:bc:03:33:32:a0:8a:b4:de:89:f7:
4b:de:21:44:d7:d7:af:91:b7:b8:28:9e:0c:6f:46:
f5:cf:43:a0:14:7d:76:66:1a:4c:d3:9f:3f:8e:06:
af:22:52:e5:99:4d:28:b9:3c:c4:e9:09:f0:10:96:
59:e8:46:0e:1b:02:d9:50:bd:ac:24:23:9e:59:13:
58:55:dd:11:5c:ea:e1:b4:68:d2:cf:8f:f6:0b:15:
05:a7:43:9d:fa:ea:27:1b:d3:2c:bd:ef:35:4f:64:
30:61:17:ea:da:97:6a:ea:19:91:af:ee:c4:c1:f2:
d0:8f:86:19:76:77:22:7d:32:62:c2:78:9d:34:4e:
7f:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:BA:2D:18:7A:05:36:DC:73:1F:1B:0B:49:D9:CB:9C:D3:9B:10:DC
X509v3 Authority Key Identifier:
keyid:37:C4:8B:78:9C:C7:FF:E7:BE:09:44:46:43:FD:B8:6B:DB:57:3F:7D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/N8SLeJzH_-e-CURGQ_24a9tXP30.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/1d575d-7b22-47c7-a17e-8a136cb0dd5c/1/N8SLeJzH_-e-CURGQ_24a9tXP30.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/56/1d575d-7b22-47c7-a17e-8a136cb0dd5c/1/N8SLeJzH_-e-CURGQ_24a9tXP30.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
80:98:86:f9:a4:40:30:b6:e8:ec:ba:62:72:16:3d:ba:3c:45:
12:76:e7:54:15:f7:15:2b:66:94:6f:e1:47:55:51:4d:16:2c:
e5:42:2d:f0:18:36:4e:e6:13:c5:2f:8f:b1:56:a5:ba:b5:38:
03:ea:2b:d0:b3:04:27:d7:de:ab:35:c1:4e:27:7b:c5:fa:f3:
f9:57:64:0f:33:ce:35:33:68:02:fb:d3:53:80:6e:30:17:95:
b1:f4:2b:35:8f:a8:78:75:31:e0:9d:84:36:2d:5a:ee:04:f7:
e8:06:e0:68:15:59:96:e3:1a:be:f7:3c:93:08:1a:c5:7f:f7:
15:b4:80:0c:82:38:9c:a3:04:45:44:72:88:e6:29:be:b3:d4:
64:d3:af:95:4e:21:86:e9:c6:bb:26:ca:ed:ad:95:56:0c:3f:
17:b5:d7:ef:74:52:b1:5a:83:c6:dc:fa:55:81:24:e9:e3:90:
d4:ff:1b:ef:ac:f9:fa:2c:e7:8b:00:d9:70:ec:0a:00:a6:20:
77:e5:a4:7a:f3:e1:1a:d0:9e:be:6b:28:89:5a:c5:7e:8d:97:
3a:87:01:8b:c0:73:01:a5:de:59:fc:cd:5a:f0:97:f9:74:a6:
33:8b:76:f5:1f:cb:3d:d4:11:2c:65:db:89:84:c6:6f:3b:be:
42:d7:64:c9
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjVFg+blfSiMxdVbHmS8mORMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM3YzQ4Yjc4OWNjN2ZmZTdiZTA5NDQ0NjQzZmRiODZiZGI1
NzNmN2QwHhcNMjUwODIzMDQwMDQ5WhcNMjUwODI0MDQwMDQ5WjAzMTEwLwYDVQQD
EyhhNGJhMmQxODdhMDUzNmRjNzMxZjFiMGI0OWQ5Y2I5Y2QzOWIxMGRjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw5XH9QLoCLPKEFL2sZPoPrWkp0gK
U/iQWs4wt2Sa1JOVZ0GNvSTGbCmADxm8/zk3kcWxDeQWdqJDb3VOgdflQySq4Lol
JvKXfgmyRPXRqSemKS4b3Ukpy7tczjq/GZ5VjdWldQRArHScxVpyjSdzcTIN4+oF
50zHeD5hXrwDMzKgirTeifdL3iFE19evkbe4KJ4Mb0b1z0OgFH12ZhpM058/jgav
IlLlmU0ouTzE6QnwEJZZ6EYOGwLZUL2sJCOeWRNYVd0RXOrhtGjSz4/2CxUFp0Od
+uonG9Msve81T2QwYRfq2pdq6hmRr+7EwfLQj4YZdncifTJiwnidNE5/kQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKS6LRh6BTbccx8bC0nZy5zTmxDcMB8GA1UdIwQY
MBaAFDfEi3icx//nvglERkP9uGvbVz99MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTjhTTGVKekhfLWUtQ1VSR1FfMjRhOXRYUDMwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Ni8xZDU3NWQtN2IyMi00N2M3LWExN2Ut
OGExMzZjYjBkZDVjLzEvTjhTTGVKekhfLWUtQ1VSR1FfMjRhOXRYUDMwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Ni8xZDU3NWQtN2IyMi00N2M3LWExN2UtOGExMzZjYjBkZDVj
LzEvTjhTTGVKekhfLWUtQ1VSR1FfMjRhOXRYUDMwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAgJiG+aRA
MLbo7LpichY9ujxFEnbnVBX3FStmlG/hR1VRTRYs5UIt8Bg2TuYTxS+PsValurU4
A+or0LMEJ9feqzXBTid7xfrz+VdkDzPONTNoAvvTU4BuMBeVsfQrNY+oeHUx4J2E
Ni1a7gT36AbgaBVZluMavvc8kwgaxX/3FbSADII4nKMERURyiOYpvrPUZNOvlU4h
hunGuybK7a2VVgw/F7XX73RSsVqDxtz6VYEk6eOQ1P8b76z5+izniwDZcOwKAKYg
d+WkevPhGtCevmsoiVrFfo2XOocBi8BzAaXeWfzNWvCX+XSmM4t29R/LPdQRLGXb
iYTGbzu+QtdkyQ==
-----END CERTIFICATE-----
Generated at Sat Aug 23 11:30:39 2025 by rpki-client