Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6e/3fc4e0-eb5f-42d3-98e1-be00a65103ad/1/N0mXVDn-T_qTECYqy91fcjzuIiM.mft
File: N0mXVDn-T_qTECYqy91fcjzuIiM.mft (raw, json)
Hash identifier: JtggW1Z74xPzOYdTa+yV5OL8JFpppaWv+H9ix0mxlXw=
Subject key identifier: 46:AD:82:69:D1:39:A2:64:C8:0E:08:76:06:28:E4:9D:15:EC:FA:03
Authority key identifier: 37:49:97:54:39:FE:4F:FA:93:10:26:2A:CB:DD:5F:72:3C:EE:22:23
Certificate issuer: /CN=3749975439fe4ffa9310262acbdd5f723cee2223
Certificate serial: 0198D6985F90FB135BF3E382278DD8359C61
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/N0mXVDn-T_qTECYqy91fcjzuIiM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6e/3fc4e0-eb5f-42d3-98e1-be00a65103ad/1/N0mXVDn-T_qTECYqy91fcjzuIiM.mft
Manifest number: 163F
Signing time: Sat 23 Aug 2025 11:02:46 +0000
Manifest this update: Sat 23 Aug 2025 11:02:46 +0000
Manifest next update: Sun 24 Aug 2025 11:02:46 +0000
Files and hashes: 1: N0mXVDn-T_qTECYqy91fcjzuIiM.crl (hash: LGQ0EKdwiqHgjXRLHNhgbPuiacb+FWKYErwYHZvXhfY=)
2: kzwjfq1uCpgiTAUnk5qhqKOqoaU.roa (hash: MJDFWuspOJe8rc6Woxt8ScoRrsfkLnrA6WpK9920n7A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6e/3fc4e0-eb5f-42d3-98e1-be00a65103ad/1/N0mXVDn-T_qTECYqy91fcjzuIiM.crl
rsync://rpki.ripe.net/repository/DEFAULT/6e/3fc4e0-eb5f-42d3-98e1-be00a65103ad/1/N0mXVDn-T_qTECYqy91fcjzuIiM.mft
rsync://rpki.ripe.net/repository/DEFAULT/N0mXVDn-T_qTECYqy91fcjzuIiM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 11:02:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:98:5f:90:fb:13:5b:f3:e3:82:27:8d:d8:35:9c:61
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3749975439fe4ffa9310262acbdd5f723cee2223
Validity
Not Before: Aug 23 11:02:46 2025 GMT
Not After : Aug 24 11:02:46 2025 GMT
Subject: CN=46ad8269d139a264c80e08760628e49d15ecfa03
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:21:e9:50:04:b6:b4:fa:75:30:1b:44:bf:a0:
cc:a2:1f:0d:c1:6f:72:8b:2c:66:02:8d:60:1e:8b:
b5:da:99:8e:ea:4c:cb:f1:f3:75:f3:54:6f:04:e8:
df:a7:52:fd:9a:42:22:47:a4:57:db:ac:fd:0f:ae:
d1:09:87:ec:25:97:b3:2b:4e:31:df:63:7b:9c:c1:
c1:86:e4:2f:64:46:51:56:59:74:14:5e:fa:ab:c7:
25:6d:29:65:5e:d7:4c:c5:7a:28:02:83:48:cf:26:
02:f4:1a:0e:e9:ee:7e:c3:c3:5d:7d:24:df:65:86:
36:c9:4a:b2:a6:07:24:64:be:cc:43:e7:b8:3d:b5:
2c:5c:2f:7a:6b:61:ed:3c:bd:e7:0f:99:65:29:9d:
f5:b7:0c:c9:ae:7b:ec:5f:e6:45:90:c0:b2:5d:2b:
92:f0:a4:46:db:e0:c6:b1:99:b8:b4:80:cb:11:29:
c5:d8:76:69:12:eb:bd:ca:19:d7:cf:81:21:da:5d:
d9:6d:fc:97:3f:3b:b4:53:d7:76:d3:b2:59:4e:9a:
ec:48:c7:0c:a1:c0:34:51:36:b2:b3:ec:bf:6d:9b:
d2:92:bf:0d:b3:50:e9:26:a8:1f:da:b5:09:15:3e:
d0:7b:d0:3c:42:56:64:56:8b:8a:a3:5a:d8:20:5a:
c5:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:AD:82:69:D1:39:A2:64:C8:0E:08:76:06:28:E4:9D:15:EC:FA:03
X509v3 Authority Key Identifier:
keyid:37:49:97:54:39:FE:4F:FA:93:10:26:2A:CB:DD:5F:72:3C:EE:22:23
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/N0mXVDn-T_qTECYqy91fcjzuIiM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/3fc4e0-eb5f-42d3-98e1-be00a65103ad/1/N0mXVDn-T_qTECYqy91fcjzuIiM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/3fc4e0-eb5f-42d3-98e1-be00a65103ad/1/N0mXVDn-T_qTECYqy91fcjzuIiM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
60:c7:e9:59:53:e8:00:02:10:ee:b8:30:5b:bf:64:43:e9:a5:
b5:3c:3a:13:ae:75:36:67:f6:56:c3:84:af:6a:5b:e1:41:35:
13:2e:bd:49:bb:8b:bf:6e:60:1f:b7:4b:08:16:cc:8f:17:11:
a6:e9:9c:56:49:4d:0c:10:53:77:1d:22:e3:f3:7e:ee:6a:21:
83:44:26:b7:87:3d:97:95:11:c4:34:9d:58:fa:ab:69:f5:fa:
91:a4:95:aa:f6:f3:cd:fe:3f:72:26:ae:17:30:73:6d:e4:8d:
37:28:8f:5e:ff:ca:af:5e:5c:70:94:08:69:be:74:7e:b6:ef:
99:ce:fe:7e:24:97:0f:0e:d5:58:81:4b:75:e8:1c:83:3c:b3:
2e:8c:8b:41:f5:74:50:8e:3f:a4:93:27:b1:22:22:15:a2:b8:
14:24:db:17:fa:a5:e6:6b:e2:87:73:ef:02:ba:42:22:51:d6:
4d:f3:88:6e:0a:5c:e3:96:a1:90:d6:ce:1c:80:bb:1f:8e:a9:
32:42:d9:09:de:01:b5:a4:2e:3d:03:a3:02:af:47:95:69:bf:
8d:27:6c:e4:e3:ab:44:a0:cb:64:af:6e:a4:d5:47:e0:2a:0d:
06:71:9d:2d:f0:42:ef:77:8c:e0:a1:3c:6c:00:cb:35:d4:bc:
f0:10:02:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 18:52:30 2025 by rpki-client