Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/33541a-f9ac-475a-b297-88a0e450a17b/1/N2PHEGpfJkAWLnmAWD6rW9gAjEU.mft
File: N2PHEGpfJkAWLnmAWD6rW9gAjEU.mft (raw, json)
Hash identifier: qgtrMnUUo8MpTQ0qoR3+CjnOdJIf597Aqy4pAnHLrZQ=
Subject key identifier: 08:DF:D8:48:BB:3E:E7:72:E7:E6:90:08:32:FA:71:5B:DD:AB:68:FA
Authority key identifier: 37:63:C7:10:6A:5F:26:40:16:2E:79:80:58:3E:AB:5B:D8:00:8C:45
Certificate issuer: /CN=3763c7106a5f2640162e7980583eab5bd8008c45
Certificate serial: 0198D4E02F7F429F1DDD6B6A2E1005200AA5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/N2PHEGpfJkAWLnmAWD6rW9gAjEU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/33541a-f9ac-475a-b297-88a0e450a17b/1/N2PHEGpfJkAWLnmAWD6rW9gAjEU.mft
Manifest number: 119E
Signing time: Sat 23 Aug 2025 03:01:58 +0000
Manifest this update: Sat 23 Aug 2025 03:01:58 +0000
Manifest next update: Sun 24 Aug 2025 03:01:58 +0000
Files and hashes: 1: JqPeTKIiSqFLnMuoE0z5MMpECyE.roa (hash: Sm0VFijktfATyc4h+uw4DoW/FSQrn3UdeoSnPalbaPo=)
2: N2PHEGpfJkAWLnmAWD6rW9gAjEU.crl (hash: JQQZQb92ymXNrZYG1vNo3prRGFcrKc15JBcbgjiONZs=)
3: VmdUY2uJ9NapTyZJ8UBdjlgGJQQ.roa (hash: 53UxHJyDkYLtFVil6COplJSwSFn/MNxw2tMZPgc57WQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/33541a-f9ac-475a-b297-88a0e450a17b/1/N2PHEGpfJkAWLnmAWD6rW9gAjEU.crl
rsync://rpki.ripe.net/repository/DEFAULT/5a/33541a-f9ac-475a-b297-88a0e450a17b/1/N2PHEGpfJkAWLnmAWD6rW9gAjEU.mft
rsync://rpki.ripe.net/repository/DEFAULT/N2PHEGpfJkAWLnmAWD6rW9gAjEU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 00:37:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:e0:2f:7f:42:9f:1d:dd:6b:6a:2e:10:05:20:0a:a5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3763c7106a5f2640162e7980583eab5bd8008c45
Validity
Not Before: Aug 23 03:01:58 2025 GMT
Not After : Aug 24 03:01:58 2025 GMT
Subject: CN=08dfd848bb3ee772e7e6900832fa715bddab68fa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:71:b4:38:46:d5:6c:49:9e:44:62:f2:11:9f:
8a:29:db:67:bc:cc:33:84:2d:0a:29:61:39:b9:6b:
53:79:8b:6d:b6:1a:92:5a:10:1d:4b:db:f0:90:38:
c1:13:f5:78:7c:7c:dc:2a:08:63:67:f8:73:c5:bd:
e6:a0:6c:2f:29:32:08:4d:bf:8c:4b:bf:c1:65:87:
60:cc:6c:b8:df:93:f2:de:c0:a0:1b:68:03:de:ad:
9c:87:12:69:90:6d:c0:c6:42:a0:8a:be:d2:3d:79:
e1:c0:09:ca:37:ee:5d:ab:4c:0a:c2:90:2a:5f:d2:
c5:58:7a:33:bc:59:a4:62:91:3e:e5:d3:7b:36:19:
6d:0f:d2:f2:14:54:3b:09:c3:3d:d6:9e:7b:98:88:
20:57:dc:82:1f:13:00:74:ec:65:77:cd:80:1f:45:
7a:51:80:f2:9e:a4:d5:77:4f:bb:f1:34:07:c1:cd:
a7:8e:45:1a:ee:fc:40:85:6c:ff:60:25:95:5f:81:
00:cf:79:5b:24:48:0c:a4:97:8c:90:ff:6e:fd:85:
37:01:04:73:8e:97:38:92:ea:69:3a:5d:c6:a5:bb:
34:e0:1f:dc:17:5a:b3:50:5b:cc:a9:f1:1b:f6:63:
80:c4:fe:80:68:d7:ce:7e:68:1f:80:7f:cb:7f:62:
87:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:DF:D8:48:BB:3E:E7:72:E7:E6:90:08:32:FA:71:5B:DD:AB:68:FA
X509v3 Authority Key Identifier:
keyid:37:63:C7:10:6A:5F:26:40:16:2E:79:80:58:3E:AB:5B:D8:00:8C:45
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/N2PHEGpfJkAWLnmAWD6rW9gAjEU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/33541a-f9ac-475a-b297-88a0e450a17b/1/N2PHEGpfJkAWLnmAWD6rW9gAjEU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/33541a-f9ac-475a-b297-88a0e450a17b/1/N2PHEGpfJkAWLnmAWD6rW9gAjEU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9e:57:19:a9:9f:c5:fb:c7:67:bf:77:b9:c3:f1:a6:c2:35:eb:
16:0f:9d:24:b8:91:eb:22:95:fa:5b:a6:05:cd:34:16:cc:e3:
66:e1:3c:92:ae:26:77:be:3f:3f:9f:5e:73:9e:9c:bb:29:38:
f1:fe:87:98:c7:07:84:60:bb:85:d2:88:cc:ff:61:3e:56:73:
cf:10:7e:85:f4:10:d3:fa:38:cc:50:d4:4d:a5:09:ca:59:66:
ef:32:65:ce:ff:4c:0d:bb:60:3a:60:75:c2:77:36:86:b1:a9:
1b:3b:6a:5a:f8:8a:6f:78:d4:4c:a6:e5:8f:e9:ba:5a:c4:97:
60:42:de:e4:fd:35:f2:e9:18:f3:89:cc:27:fd:42:84:7e:fb:
c6:8c:ea:ed:ff:aa:09:41:8f:15:7a:a5:e8:d9:ac:9c:f9:03:
62:9f:c0:07:d4:c4:90:9b:e8:eb:80:29:77:19:ad:af:f2:46:
e5:ef:4e:7d:e7:e3:2b:0d:54:7e:c8:1e:f3:92:96:3e:b4:78:
75:57:f1:52:e9:1f:b9:13:29:9e:f4:64:86:c6:e8:1c:60:a0:
af:85:97:e0:9e:7d:36:4a:72:f4:a1:75:57:d6:0c:6c:5f:f2:
d1:cf:fc:20:56:f6:f7:a6:c7:a0:55:ff:c3:de:ba:3b:84:cd:
05:ef:86:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 10:23:30 2025 by rpki-client