Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/56/1d575d-7b22-47c7-a17e-8a136cb0dd5c/1/N8SLeJzH_-e-CURGQ_24a9tXP30.mft
File: N8SLeJzH_-e-CURGQ_24a9tXP30.mft (raw, json)
Hash identifier: JmcVCFdYFt4AaTU09fzcJi/Z39b5qu57PPopXIcCCPE=
Subject key identifier: AF:87:B2:20:21:4C:30:FE:61:62:E4:44:F8:32:D1:0D:9A:59:AD:B3
Authority key identifier: 37:C4:8B:78:9C:C7:FF:E7:BE:09:44:46:43:FD:B8:6B:DB:57:3F:7D
Certificate issuer: /CN=37c48b789cc7ffe7be09444643fdb86bdb573f7d
Certificate serial: 0199FC8F6A4C1F3BB811CE680A90F7C7B305
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/N8SLeJzH_-e-CURGQ_24a9tXP30.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/56/1d575d-7b22-47c7-a17e-8a136cb0dd5c/1/N8SLeJzH_-e-CURGQ_24a9tXP30.mft
Manifest number: 0B7A
Signing time: Sun 19 Oct 2025 13:01:21 +0000
Manifest this update: Sun 19 Oct 2025 13:01:21 +0000
Manifest next update: Mon 20 Oct 2025 13:01:21 +0000
Files and hashes: 1: N8SLeJzH_-e-CURGQ_24a9tXP30.crl (hash: u3QUQAE+iNsTivsQnxfPaunTR91NxSAvJ1sDw66z5nI=)
2: zElW9nBSEefX0nViIsarFQPCkZs.roa (hash: CmIv1btIhlBvo+yXBuSYJkAIeImv5p3pKaVYvxzuwhU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/56/1d575d-7b22-47c7-a17e-8a136cb0dd5c/1/N8SLeJzH_-e-CURGQ_24a9tXP30.crl
rsync://rpki.ripe.net/repository/DEFAULT/56/1d575d-7b22-47c7-a17e-8a136cb0dd5c/1/N8SLeJzH_-e-CURGQ_24a9tXP30.mft
rsync://rpki.ripe.net/repository/DEFAULT/N8SLeJzH_-e-CURGQ_24a9tXP30.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:8f:6a:4c:1f:3b:b8:11:ce:68:0a:90:f7:c7:b3:05
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=37c48b789cc7ffe7be09444643fdb86bdb573f7d
Validity
Not Before: Oct 19 13:01:21 2025 GMT
Not After : Oct 20 13:01:21 2025 GMT
Subject: CN=af87b220214c30fe6162e444f832d10d9a59adb3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:12:6a:21:33:91:a8:41:d3:15:f9:a4:a3:eb:
13:95:18:d4:d4:3b:e1:04:2f:83:92:e5:a6:4c:ac:
2a:1e:2f:88:39:1d:89:3a:78:c8:80:3f:ae:ea:cd:
9d:9b:a5:ee:e3:53:71:fb:62:d3:e7:bb:30:aa:44:
d9:67:fc:d4:7b:ae:a2:4e:2d:66:ae:28:cd:6f:9c:
f4:70:cc:63:15:f7:29:59:9b:9d:af:9f:f8:65:ac:
0b:b2:e4:d7:03:0b:3d:a8:58:41:c0:ba:f2:1f:5b:
5c:90:64:e3:66:88:2d:b9:2a:fd:80:ff:eb:70:d0:
22:b2:8f:27:a8:b6:cc:a1:5b:21:3b:13:02:be:fd:
44:f8:00:12:07:f0:1e:9d:9b:41:16:11:00:1c:5d:
d5:3f:ac:10:d2:2c:b0:72:74:db:95:99:6e:b1:42:
ca:f7:a4:ae:f8:b0:c5:f9:2e:0b:cb:98:2b:54:83:
8a:e0:ec:5b:42:e4:86:19:67:3d:14:c4:ae:48:90:
8c:6e:0f:08:cf:52:4f:29:76:73:5e:c6:75:c1:0e:
66:a5:81:46:38:58:cc:36:ba:8b:0b:c6:09:b0:82:
ef:49:50:a3:63:17:0f:dc:5d:a8:00:24:63:ca:b4:
cb:9b:6b:4b:bd:3f:21:64:3a:fe:c8:20:e8:84:58:
3c:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:87:B2:20:21:4C:30:FE:61:62:E4:44:F8:32:D1:0D:9A:59:AD:B3
X509v3 Authority Key Identifier:
keyid:37:C4:8B:78:9C:C7:FF:E7:BE:09:44:46:43:FD:B8:6B:DB:57:3F:7D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/N8SLeJzH_-e-CURGQ_24a9tXP30.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/1d575d-7b22-47c7-a17e-8a136cb0dd5c/1/N8SLeJzH_-e-CURGQ_24a9tXP30.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/56/1d575d-7b22-47c7-a17e-8a136cb0dd5c/1/N8SLeJzH_-e-CURGQ_24a9tXP30.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
47:59:ee:00:91:c8:22:81:02:00:ef:c4:6b:ea:0e:d9:2b:e4:
64:57:1c:1b:4e:9f:0c:b7:80:7d:ce:51:59:49:95:d8:93:05:
d3:20:14:a2:4c:16:d5:d1:a3:08:16:93:fd:cc:ac:84:2c:96:
3e:c6:e3:3c:79:b0:fe:fc:9f:25:3f:2a:53:88:ce:57:2c:17:
30:e8:68:9c:01:b5:63:dc:82:da:59:c4:b6:3e:66:85:f8:77:
f8:46:e7:c1:79:aa:b5:b8:f0:a4:da:17:f9:4f:12:ea:18:25:
c6:80:5e:55:97:d7:48:65:bc:59:d9:df:a6:be:30:09:b6:e0:
4f:54:b2:be:fb:fc:67:99:8a:0d:42:36:f6:25:ff:25:bc:ef:
15:d9:ec:6a:8f:dd:4a:8e:c1:ff:bf:3d:6c:a0:da:6c:c9:2e:
54:7c:9c:f1:e7:4c:8d:c5:6b:73:cb:b7:38:12:9f:32:55:b5:
45:0c:c7:09:83:24:ef:5e:49:5f:15:22:7a:69:63:73:72:0f:
e7:06:5c:f4:fe:c5:67:36:b2:ef:e7:db:96:fa:88:85:46:07:
ef:e9:d4:51:34:99:c8:e7:53:25:30:88:39:b2:b6:53:28:a8:
c3:4a:91:b2:2a:64:43:9e:7b:c4:17:c6:5d:59:4b:d3:ce:2d:
77:f6:ea:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:08:25 2025 by rpki-client