Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7c/8a5ee7-b638-4b70-8a8e-f97745d13b8d/1/N1x0Iln_kAhX0TaJ2NSNsg7fRgM.mft
File: N1x0Iln_kAhX0TaJ2NSNsg7fRgM.mft (raw, json)
Hash identifier: jvnlxrG0usXMQhvlEMpFb1tepEYDLUT4FK5zlLXrHG4=
Subject key identifier: 9C:57:4E:1B:30:2A:80:17:94:F5:85:4B:2F:31:16:16:0A:A7:4F:C1
Authority key identifier: 37:5C:74:22:59:FF:90:08:57:D1:36:89:D8:D4:8D:B2:0E:DF:46:03
Certificate issuer: /CN=375c742259ff900857d13689d8d48db20edf4603
Certificate serial: 0198D54E2458C251C5AA8A2B68273F4FDB35
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/N1x0Iln_kAhX0TaJ2NSNsg7fRgM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7c/8a5ee7-b638-4b70-8a8e-f97745d13b8d/1/N1x0Iln_kAhX0TaJ2NSNsg7fRgM.mft
Manifest number: 1387
Signing time: Sat 23 Aug 2025 05:02:04 +0000
Manifest this update: Sat 23 Aug 2025 05:02:04 +0000
Manifest next update: Sun 24 Aug 2025 05:02:04 +0000
Files and hashes: 1: N1x0Iln_kAhX0TaJ2NSNsg7fRgM.crl (hash: TJrCU9UYOVQ8R6x7UqWtCX++UN0UJZXD0gma6OT6g2M=)
2: g_21VS9VjPQrGz2Td7dDraqxWmA.roa (hash: iyA8oXAsAeuHezc22yRIhc2flepygJS+6M+Uvfpnntg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7c/8a5ee7-b638-4b70-8a8e-f97745d13b8d/1/N1x0Iln_kAhX0TaJ2NSNsg7fRgM.crl
rsync://rpki.ripe.net/repository/DEFAULT/7c/8a5ee7-b638-4b70-8a8e-f97745d13b8d/1/N1x0Iln_kAhX0TaJ2NSNsg7fRgM.mft
rsync://rpki.ripe.net/repository/DEFAULT/N1x0Iln_kAhX0TaJ2NSNsg7fRgM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:4e:24:58:c2:51:c5:aa:8a:2b:68:27:3f:4f:db:35
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=375c742259ff900857d13689d8d48db20edf4603
Validity
Not Before: Aug 23 05:02:04 2025 GMT
Not After : Aug 24 05:02:04 2025 GMT
Subject: CN=9c574e1b302a801794f5854b2f3116160aa74fc1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:aa:23:34:54:9f:d3:9c:41:38:22:37:a7:af:
40:9a:b9:74:12:a3:d3:a3:f7:a6:b5:32:fe:12:28:
b1:1c:f7:04:22:34:bc:84:ed:40:0d:47:e0:c4:03:
b8:2e:84:ca:62:04:87:31:ad:e8:b8:1f:9d:36:c4:
d8:4e:7b:49:58:10:0c:15:92:6a:3f:3a:ca:73:2f:
cc:d0:d6:7a:e2:60:19:be:06:c3:0e:bb:44:e6:7f:
c3:dc:34:79:1d:c2:0f:5b:59:95:c8:f6:f2:10:1c:
4e:ac:9e:c4:e4:cc:2a:e0:e0:16:6a:05:66:46:85:
53:6a:21:16:9b:ef:97:33:05:f3:5b:44:83:c3:80:
fe:5b:22:e4:f6:ed:d2:cf:10:ac:5e:b5:ef:34:aa:
3c:88:02:41:a1:18:31:bf:8f:e6:19:61:77:f9:9c:
90:53:4b:08:2b:5d:e4:8f:52:1b:46:6c:7a:8c:72:
d9:e3:11:ae:e6:57:39:79:9b:f1:33:d5:d3:d7:d8:
2c:ae:ee:d8:2c:28:95:1a:fc:98:79:88:f0:23:42:
07:c0:cc:07:4c:b8:ae:23:e4:48:1f:40:21:de:2e:
c3:de:7e:82:ac:25:03:69:07:93:43:9f:10:1e:e0:
36:f3:32:41:81:93:7d:7a:cd:62:9e:f1:e9:dc:87:
45:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:57:4E:1B:30:2A:80:17:94:F5:85:4B:2F:31:16:16:0A:A7:4F:C1
X509v3 Authority Key Identifier:
keyid:37:5C:74:22:59:FF:90:08:57:D1:36:89:D8:D4:8D:B2:0E:DF:46:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/N1x0Iln_kAhX0TaJ2NSNsg7fRgM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/8a5ee7-b638-4b70-8a8e-f97745d13b8d/1/N1x0Iln_kAhX0TaJ2NSNsg7fRgM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/8a5ee7-b638-4b70-8a8e-f97745d13b8d/1/N1x0Iln_kAhX0TaJ2NSNsg7fRgM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
01:91:4b:cc:d2:bf:6b:20:24:00:66:75:46:48:df:c7:a5:51:
db:1b:66:29:3c:ef:7d:64:bc:ff:1e:a2:58:79:a4:fe:22:25:
fd:67:a1:68:0f:f0:7a:e7:65:3a:e6:6f:96:0b:14:59:f1:aa:
41:55:cb:ba:0a:01:cf:b4:41:e9:0f:8b:ba:83:18:f7:81:df:
cf:35:30:33:70:15:1b:a4:10:48:70:d3:69:cb:17:68:30:32:
16:61:5f:f6:b7:fa:4d:ff:02:b6:92:12:cf:94:85:96:f6:bd:
7c:1e:83:ff:e2:ea:04:06:48:5b:b5:f7:bc:ed:1d:ad:ed:47:
64:94:fe:57:4e:4f:d9:59:2e:92:26:18:42:11:dc:4a:4b:fe:
eb:c2:80:7a:20:3e:d0:7e:c1:9d:f6:c4:14:93:3e:49:19:21:
bb:99:59:2d:05:04:0a:60:d8:01:db:e6:3d:c8:39:2d:ae:e3:
6b:67:af:e1:a5:6b:33:58:3d:d6:13:14:19:b3:ef:b4:ae:6f:
43:11:1e:6b:f0:83:77:8b:ca:ac:31:33:e6:3f:97:2e:e5:a2:
2f:bf:80:90:fc:cf:45:9b:2a:8e:83:a0:27:dc:ad:3d:4e:bc:
79:f3:27:2c:6a:cd:e7:49:3e:b3:3e:1f:ae:e3:4f:30:31:2d:
d5:0b:cb:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 12:09:21 2025 by rpki-client