Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7c/8a5ee7-b638-4b70-8a8e-f97745d13b8d/1/N1x0Iln_kAhX0TaJ2NSNsg7fRgM.mft
File: N1x0Iln_kAhX0TaJ2NSNsg7fRgM.mft (raw, json)
Hash identifier: b6AhCtdyPOLpE/wDnZPe5s9se2FuG/c1I91xJ35au7s=
Subject key identifier: 6B:65:D8:2A:C9:08:BD:98:CA:45:69:13:10:8E:8F:0D:39:25:BA:1B
Authority key identifier: 37:5C:74:22:59:FF:90:08:57:D1:36:89:D8:D4:8D:B2:0E:DF:46:03
Certificate issuer: /CN=375c742259ff900857d13689d8d48db20edf4603
Certificate serial: 0197B77C3556D548220F3764FAC7B79F17E2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/N1x0Iln_kAhX0TaJ2NSNsg7fRgM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7c/8a5ee7-b638-4b70-8a8e-f97745d13b8d/1/N1x0Iln_kAhX0TaJ2NSNsg7fRgM.mft
Manifest number: 12F3
Signing time: Sat 28 Jun 2025 17:01:00 +0000
Manifest this update: Sat 28 Jun 2025 17:01:00 +0000
Manifest next update: Sun 29 Jun 2025 17:01:00 +0000
Files and hashes: 1: N1x0Iln_kAhX0TaJ2NSNsg7fRgM.crl (hash: IeMtRyfV8LZWlDevM+zbTeef53ciZrhuxM6vV0gBq0w=)
2: g_21VS9VjPQrGz2Td7dDraqxWmA.roa (hash: iyA8oXAsAeuHezc22yRIhc2flepygJS+6M+Uvfpnntg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7c/8a5ee7-b638-4b70-8a8e-f97745d13b8d/1/N1x0Iln_kAhX0TaJ2NSNsg7fRgM.crl
rsync://rpki.ripe.net/repository/DEFAULT/7c/8a5ee7-b638-4b70-8a8e-f97745d13b8d/1/N1x0Iln_kAhX0TaJ2NSNsg7fRgM.mft
rsync://rpki.ripe.net/repository/DEFAULT/N1x0Iln_kAhX0TaJ2NSNsg7fRgM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:7c:35:56:d5:48:22:0f:37:64:fa:c7:b7:9f:17:e2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=375c742259ff900857d13689d8d48db20edf4603
Validity
Not Before: Jun 28 17:01:00 2025 GMT
Not After : Jun 29 17:01:00 2025 GMT
Subject: CN=6b65d82ac908bd98ca456913108e8f0d3925ba1b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:78:77:01:09:15:27:43:a3:de:e3:f8:19:a6:
ef:ad:6b:d8:94:ed:72:7f:07:a6:24:a3:e0:2c:b2:
bd:9e:25:1f:91:95:03:10:c0:87:65:7d:c6:c2:fd:
27:0f:6d:fa:c1:6b:0e:6c:c4:21:2d:d6:f0:e1:50:
fe:5a:83:ce:22:ab:ba:b9:4b:31:f7:cf:e6:ff:e9:
bb:39:9d:ab:20:2c:bf:8c:04:50:65:f6:65:8f:bf:
cc:b5:ad:f2:2f:d5:d0:ad:d0:bb:de:e7:98:3e:75:
c1:89:8e:d4:f9:64:6b:c1:44:98:e5:35:0a:66:f2:
b8:71:cd:5d:cc:3a:47:05:be:13:57:42:02:5a:e5:
ed:65:94:04:a4:4e:0c:74:e1:eb:36:db:60:d3:45:
87:60:69:5b:0b:49:2c:bb:8f:96:f4:f9:14:b6:bf:
c5:d6:d0:c1:df:57:37:24:b3:ae:93:89:36:de:92:
51:18:e2:4c:d3:92:93:a7:f8:d7:3e:1b:e7:89:af:
ae:45:5c:6b:7d:e4:75:7c:ed:64:38:93:21:0d:3e:
8e:aa:77:af:44:2c:28:fb:b0:7e:40:95:ef:8b:c8:
d3:82:9d:6c:50:2e:6e:c5:24:7a:ae:f9:d1:95:01:
28:b7:a3:7d:a2:2c:4f:5c:5e:60:f4:4e:83:e0:83:
1f:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:65:D8:2A:C9:08:BD:98:CA:45:69:13:10:8E:8F:0D:39:25:BA:1B
X509v3 Authority Key Identifier:
keyid:37:5C:74:22:59:FF:90:08:57:D1:36:89:D8:D4:8D:B2:0E:DF:46:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/N1x0Iln_kAhX0TaJ2NSNsg7fRgM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/8a5ee7-b638-4b70-8a8e-f97745d13b8d/1/N1x0Iln_kAhX0TaJ2NSNsg7fRgM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/8a5ee7-b638-4b70-8a8e-f97745d13b8d/1/N1x0Iln_kAhX0TaJ2NSNsg7fRgM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
02:11:62:9d:9e:4e:39:38:e6:6c:29:60:45:9a:47:2b:0f:f4:
87:e2:95:dd:42:c4:70:6b:d4:70:da:22:33:ff:8a:8f:0b:02:
5d:1e:ca:38:76:d5:61:0c:bd:fd:79:52:3e:55:c7:2f:03:98:
0b:8b:67:8c:27:48:18:29:14:38:42:2b:c2:67:6f:3b:d7:f7:
3d:52:7d:34:26:e5:a5:34:0f:eb:2b:b2:81:45:f5:55:c0:5b:
ac:d4:7e:5f:52:a9:3e:e3:98:fe:ed:94:67:42:da:a8:59:19:
dd:c8:e4:6c:b3:0e:3a:96:f3:bf:df:f5:4d:e1:c5:e8:d0:c3:
fa:27:c1:01:ad:e9:f2:8c:b7:e9:eb:6c:59:21:84:e7:1d:f4:
5f:10:84:88:9e:cb:52:38:04:5a:dd:11:75:06:14:e1:99:c7:
b5:65:f8:32:c9:9a:86:10:26:e9:76:3c:42:06:7d:6d:37:18:
1e:30:a5:28:fe:bc:5d:5f:66:37:59:55:e6:de:04:0d:3c:9f:
b7:24:f7:f5:b1:bd:5a:58:1e:7c:2f:19:25:28:21:0e:29:34:
3c:1b:81:5b:df:58:5e:ad:31:55:f0:77:12:b4:4d:f6:7b:f1:
20:70:a6:a6:df:de:8f:69:11:a9:67:6f:0b:8f:4e:e4:de:d0:
85:13:70:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 22:04:43 2025 by rpki-client