Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/ef9498-44f4-4ffd-844f-5c830fe4bad0/1/N8pQAigo2QG_QrJ5j3hEEEsFQE0.mft
File: N8pQAigo2QG_QrJ5j3hEEEsFQE0.mft (raw, json)
Hash identifier: nnhJLtxPVHNdW1duP1Iow0H9zN5TfKZtKoa6CADQwEo=
Subject key identifier: 39:1A:DD:E8:11:9E:DE:0A:F3:BE:A1:73:77:09:6F:85:16:DA:EC:87
Authority key identifier: 37:CA:50:02:28:28:D9:01:BF:42:B2:79:8F:78:44:10:4B:05:40:4D
Certificate issuer: /CN=37ca50022828d901bf42b2798f7844104b05404d
Certificate serial: 0197B70EB86403BDB1F44A2212E9288344E7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/N8pQAigo2QG_QrJ5j3hEEEsFQE0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/ef9498-44f4-4ffd-844f-5c830fe4bad0/1/N8pQAigo2QG_QrJ5j3hEEEsFQE0.mft
Manifest number: 09CA
Signing time: Sat 28 Jun 2025 15:01:24 +0000
Manifest this update: Sat 28 Jun 2025 15:01:24 +0000
Manifest next update: Sun 29 Jun 2025 15:01:24 +0000
Files and hashes: 1: N8pQAigo2QG_QrJ5j3hEEEsFQE0.crl (hash: CNE1wmO4ezkJ7XKhcBTCaznIL4rjSXqFnM0DfK0q1W0=)
2: o5v0Cm5PNAVArL3iEJHw_CFIknA.roa (hash: Sf1IrFfhAHUJ08yJsTL6eR491AGzhJcL2ToeOR5gShQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/65/ef9498-44f4-4ffd-844f-5c830fe4bad0/1/N8pQAigo2QG_QrJ5j3hEEEsFQE0.crl
rsync://rpki.ripe.net/repository/DEFAULT/65/ef9498-44f4-4ffd-844f-5c830fe4bad0/1/N8pQAigo2QG_QrJ5j3hEEEsFQE0.mft
rsync://rpki.ripe.net/repository/DEFAULT/N8pQAigo2QG_QrJ5j3hEEEsFQE0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:0e:b8:64:03:bd:b1:f4:4a:22:12:e9:28:83:44:e7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=37ca50022828d901bf42b2798f7844104b05404d
Validity
Not Before: Jun 28 15:01:24 2025 GMT
Not After : Jun 29 15:01:24 2025 GMT
Subject: CN=391adde8119ede0af3bea17377096f8516daec87
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:bc:96:dd:32:99:4f:6c:76:d2:8f:eb:4e:e8:
54:e9:90:d7:f5:50:77:a7:58:fa:28:80:3b:79:0e:
4f:ee:73:ba:42:a7:7b:f9:54:e6:21:b0:85:e4:53:
62:35:bb:89:70:4b:f8:9a:ea:b7:60:40:cf:7b:ab:
b3:b5:b1:de:7b:e1:db:0a:ad:be:91:bb:d1:06:ae:
22:83:e7:38:5c:f5:95:23:57:0e:dd:86:7d:d3:bb:
a2:52:36:8b:f6:85:24:be:33:8a:6d:e5:07:30:ba:
f1:19:69:94:cf:39:4a:dc:30:56:10:20:6c:da:c4:
df:d0:4f:32:87:b9:d9:1b:44:23:85:47:fe:6b:07:
22:82:06:68:0d:c1:86:42:0b:02:e2:5e:86:39:ce:
81:b8:a4:08:71:e8:6b:57:32:ba:4e:78:de:a2:88:
da:48:6a:fb:38:18:f5:c6:c9:59:b1:80:f8:ad:a1:
82:b6:af:f1:89:07:48:90:78:1a:ee:73:a0:c1:2e:
a8:88:20:b1:e0:7c:cc:d2:8d:fb:23:87:0f:88:07:
cb:1e:f1:9e:8e:3c:32:ed:3a:d1:0d:a8:d4:44:47:
a6:bd:97:51:06:12:37:4e:f0:a9:9e:61:98:fa:b9:
44:54:9a:85:9d:5f:bf:31:c1:c7:0b:cc:9e:09:d0:
74:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:1A:DD:E8:11:9E:DE:0A:F3:BE:A1:73:77:09:6F:85:16:DA:EC:87
X509v3 Authority Key Identifier:
keyid:37:CA:50:02:28:28:D9:01:BF:42:B2:79:8F:78:44:10:4B:05:40:4D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/N8pQAigo2QG_QrJ5j3hEEEsFQE0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/ef9498-44f4-4ffd-844f-5c830fe4bad0/1/N8pQAigo2QG_QrJ5j3hEEEsFQE0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/65/ef9498-44f4-4ffd-844f-5c830fe4bad0/1/N8pQAigo2QG_QrJ5j3hEEEsFQE0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
31:12:70:50:8e:b6:b7:b3:d2:ae:96:65:2e:bc:8c:7f:14:9b:
3c:cd:68:5d:8e:d9:af:91:f7:d5:8e:66:6c:b6:0b:69:35:23:
05:89:3d:d9:74:aa:b3:c3:02:60:92:02:91:f5:b8:65:fc:85:
8e:a0:c0:16:da:93:66:96:02:ec:a7:95:75:09:57:40:25:df:
ab:1f:64:8e:66:6b:56:c2:e9:c7:e2:82:25:05:12:28:27:60:
8b:4a:37:75:94:50:a7:f8:8e:fd:cc:36:20:5f:55:61:e4:19:
72:ff:c7:d0:85:59:78:07:15:37:4a:96:4b:d2:64:2b:e3:79:
87:ba:c8:db:15:c8:91:b6:3f:31:f2:44:42:f1:79:d1:d1:2d:
4c:6d:67:47:12:77:a3:13:c5:fc:7a:65:cb:bb:62:bb:9a:cf:
fa:5c:51:dd:ff:43:90:00:b0:27:7f:72:98:aa:4b:df:a2:a5:
6d:45:75:b8:e2:f1:bd:9c:6c:73:0c:1b:8b:c5:1f:2c:83:5f:
02:e3:08:de:b6:1d:d9:df:b8:e6:15:53:2c:e5:0d:a2:a0:fe:
6b:3c:49:66:bc:6a:8c:54:83:28:b8:6f:c7:ea:4a:23:07:bf:
5c:c0:c7:cf:bf:32:bd:3f:5e:3c:21:35:8f:e4:5e:55:cd:60:
2a:e7:36:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 23:33:48 2025 by rpki-client