Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/64/c28ea4-059c-49dd-9278-a4db396c8987/1/N5SayE0LhpEPT9PPWWKSfYNFCus.mft
File: N5SayE0LhpEPT9PPWWKSfYNFCus.mft (raw, json)
Hash identifier: fp5cYXO1f4ehzvReuHlKnYjj/sS+Nmr5P7Q2dVHL/O4=
Subject key identifier: 52:EC:32:FB:95:7B:13:D1:8E:70:9F:37:01:8B:82:CB:89:4A:56:19
Authority key identifier: 37:94:9A:C8:4D:0B:86:91:0F:4F:D3:CF:59:62:92:7D:83:45:0A:EB
Certificate issuer: /CN=37949ac84d0b86910f4fd3cf5962927d83450aeb
Certificate serial: 0198D6613F8993942BAC790781D8E577D418
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/N5SayE0LhpEPT9PPWWKSfYNFCus.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/64/c28ea4-059c-49dd-9278-a4db396c8987/1/N5SayE0LhpEPT9PPWWKSfYNFCus.mft
Manifest number: 1657
Signing time: Sat 23 Aug 2025 10:02:34 +0000
Manifest this update: Sat 23 Aug 2025 10:02:34 +0000
Manifest next update: Sun 24 Aug 2025 10:02:34 +0000
Files and hashes: 1: N5SayE0LhpEPT9PPWWKSfYNFCus.crl (hash: 0QogcMQXc4YEVTw0ksbaRU2f4Gck30YkTGZ53pMCgIE=)
2: PRhohmSPpTdafiCYHQlb6tS5RSA.roa (hash: rmrtG9C35CBJyHZUuhN45njc7Z7w311hCWAJB2ctSsg=)
3: U3FGMgcx33zABNd6WUQZ6FgIXMg.roa (hash: Wpl9P0cBekHap/iywSD8clsCi8JMACpk0Rm1bx3lrQQ=)
4: ag6Uw2WZeIksxGOXDr4DgUkmA5c.roa (hash: Dv4MeWf6ZNTTsICz0sxMh5s96US2ndB/BMpQt263Gn0=)
5: hn5PYDOLpsdmTwt2qZTXNCawnyY.roa (hash: 3JeglmLM9o2mfs2x0MSYzgxU3A+vKl/1QHtc/EU9QCM=)
6: ncXYiMMk7Py1Om5tGMqWGLBtpDE.roa (hash: ue3PRYMatnVnCc7uFg9uHpheEoijmvmRSQgE1aUj8Qs=)
7: pehnBB-B-wysgLV5x41--aRvVZU.roa (hash: znIOUjgtTlPjJizZbJTREWW6ctyWS6FYMjde0/qvy2I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/64/c28ea4-059c-49dd-9278-a4db396c8987/1/N5SayE0LhpEPT9PPWWKSfYNFCus.crl
rsync://rpki.ripe.net/repository/DEFAULT/64/c28ea4-059c-49dd-9278-a4db396c8987/1/N5SayE0LhpEPT9PPWWKSfYNFCus.mft
rsync://rpki.ripe.net/repository/DEFAULT/N5SayE0LhpEPT9PPWWKSfYNFCus.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:61:3f:89:93:94:2b:ac:79:07:81:d8:e5:77:d4:18
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=37949ac84d0b86910f4fd3cf5962927d83450aeb
Validity
Not Before: Aug 23 10:02:34 2025 GMT
Not After : Aug 24 10:02:34 2025 GMT
Subject: CN=52ec32fb957b13d18e709f37018b82cb894a5619
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f5:af:82:1d:c8:cf:89:81:a2:6b:43:4e:57:bd:
06:9f:00:e9:d3:fd:85:e8:d7:88:00:b4:9a:b2:7f:
38:dd:bc:cf:8a:cd:e0:42:cd:52:fc:29:4b:2e:41:
93:2e:f2:02:a1:91:e5:90:48:a1:2e:47:ae:dc:e4:
6a:36:69:31:6e:b9:e8:31:80:c9:d5:3c:18:2b:d1:
57:ff:29:f1:2b:13:d0:a7:a7:54:eb:73:61:b5:d4:
b5:64:97:34:54:53:16:0a:b9:cd:d4:90:58:85:4a:
71:e1:08:9c:50:bb:ee:63:cc:d0:e3:3f:de:72:88:
e5:ff:5d:89:1c:94:9e:74:16:8b:9b:99:71:1d:7d:
fc:e2:3d:2c:af:7e:c0:58:ce:be:c6:80:9c:32:04:
5d:25:99:b5:ab:09:74:d5:3c:89:79:5e:65:ce:0b:
f7:79:ce:14:f8:be:d3:33:26:15:00:24:1f:f8:f0:
8e:27:9e:f8:40:e0:19:8f:9c:29:9f:e4:49:3c:ad:
ea:d4:63:46:cf:9d:0b:88:88:cd:ac:c1:7a:2b:db:
2c:86:8c:e5:84:3a:b1:74:84:cd:ff:3f:02:84:83:
61:11:b9:5c:db:81:78:9a:a1:04:5a:d7:97:db:c1:
3f:3b:2a:19:d8:83:f7:be:f1:fa:41:6c:24:b8:80:
12:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:EC:32:FB:95:7B:13:D1:8E:70:9F:37:01:8B:82:CB:89:4A:56:19
X509v3 Authority Key Identifier:
keyid:37:94:9A:C8:4D:0B:86:91:0F:4F:D3:CF:59:62:92:7D:83:45:0A:EB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/N5SayE0LhpEPT9PPWWKSfYNFCus.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/c28ea4-059c-49dd-9278-a4db396c8987/1/N5SayE0LhpEPT9PPWWKSfYNFCus.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/64/c28ea4-059c-49dd-9278-a4db396c8987/1/N5SayE0LhpEPT9PPWWKSfYNFCus.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
87:44:99:5a:29:7c:80:fa:b0:c7:18:f9:56:ca:32:54:f1:bd:
0b:6d:e2:52:60:5e:a4:f6:c4:27:d3:01:62:52:18:f8:cc:92:
d3:34:2e:56:ec:ad:26:95:ac:d6:03:9e:b4:44:c3:f3:23:76:
7a:5d:cc:22:3f:ae:c9:fe:dc:ff:ad:40:27:ae:58:25:c5:9a:
2b:12:70:36:dc:60:aa:44:c0:82:7d:fc:b9:75:83:fd:bc:89:
e7:96:00:fb:df:aa:62:d4:c5:8e:32:15:ce:b5:ba:42:86:96:
e4:85:90:5b:3a:9b:86:01:84:e7:2b:c0:3d:a0:98:3b:46:b6:
70:1e:00:10:e1:c5:8a:63:75:66:34:43:2b:fe:27:3e:66:d9:
5c:86:00:5a:50:45:57:66:f6:58:72:c7:d6:88:3a:33:16:e9:
a7:9e:35:5b:5c:c7:37:1c:cf:58:0a:4d:cd:26:09:7e:5e:38:
6d:29:7b:55:18:77:f2:fb:6e:5d:67:a1:b6:45:83:56:ba:e7:
a7:bf:72:b7:90:e1:67:98:cb:84:ce:21:50:e5:59:c1:f2:7d:
f7:26:6b:cb:53:6e:f8:09:c0:e6:df:bc:f6:ea:20:7e:ad:02:
1d:82:fa:7d:80:55:91:b4:4b:54:4a:cc:c4:75:0f:68:0d:7d:
2e:fe:cc:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 12:28:04 2025 by rpki-client