Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/87/bd7dce-0ddc-4368-b04d-13f34b09ae61/1/N9IJppWeI1T3POLyuUEib4MpDIw.mft
File: N9IJppWeI1T3POLyuUEib4MpDIw.mft (raw, json)
Hash identifier: 2nGFFOFzlO3203/6APn4IDtVe9htJPc9XHSSdUceWGE=
Subject key identifier: 37:A1:5F:5E:84:B5:3A:99:49:C2:87:01:22:8E:00:2D:17:D0:63:CD
Authority key identifier: 37:D2:09:A6:95:9E:23:54:F7:3C:E2:F2:B9:41:22:6F:83:29:0C:8C
Certificate issuer: /CN=37d209a6959e2354f73ce2f2b941226f83290c8c
Certificate serial: 0198D473BD130201523C40F4D2C4CD25905D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/N9IJppWeI1T3POLyuUEib4MpDIw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/87/bd7dce-0ddc-4368-b04d-13f34b09ae61/1/N9IJppWeI1T3POLyuUEib4MpDIw.mft
Manifest number: FE
Signing time: Sat 23 Aug 2025 01:03:31 +0000
Manifest this update: Sat 23 Aug 2025 01:03:31 +0000
Manifest next update: Sun 24 Aug 2025 01:03:31 +0000
Files and hashes: 1: N9IJppWeI1T3POLyuUEib4MpDIw.crl (hash: awr+vNIOwWVv9dD3CMWleKUYWw3coSYb+TOkBGN4GlA=)
2: p02sjha6oluTWKotOKPITJ53VlU.roa (hash: rLFuslHglQh990YEEpEUg7xz9pfaxlb0KsezlTb7ZC4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/87/bd7dce-0ddc-4368-b04d-13f34b09ae61/1/N9IJppWeI1T3POLyuUEib4MpDIw.crl
rsync://rpki.ripe.net/repository/DEFAULT/87/bd7dce-0ddc-4368-b04d-13f34b09ae61/1/N9IJppWeI1T3POLyuUEib4MpDIw.mft
rsync://rpki.ripe.net/repository/DEFAULT/N9IJppWeI1T3POLyuUEib4MpDIw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 01:03:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:73:bd:13:02:01:52:3c:40:f4:d2:c4:cd:25:90:5d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=37d209a6959e2354f73ce2f2b941226f83290c8c
Validity
Not Before: Aug 23 01:03:31 2025 GMT
Not After : Aug 24 01:03:31 2025 GMT
Subject: CN=37a15f5e84b53a9949c28701228e002d17d063cd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:01:61:0d:11:d2:47:65:b9:60:c6:93:04:5d:
ec:d5:d7:53:e3:2a:7f:9b:11:e0:1f:97:00:32:a4:
83:b4:56:b2:e8:ce:47:d0:7d:c9:fb:07:c8:97:05:
08:5a:f1:01:b8:0f:0f:71:2d:0b:c7:3f:c4:ba:e6:
c2:34:67:c4:28:e2:a4:a4:09:2d:f8:25:84:d4:0e:
68:cc:76:af:7d:e8:4d:76:d8:a1:1d:1f:60:f9:46:
35:b0:38:32:64:31:91:59:35:dc:e6:6d:7e:d8:a8:
db:6b:1e:19:0d:66:80:1f:5a:1b:8f:c4:82:73:96:
e0:84:e4:e9:0a:c3:37:17:ba:09:fd:2f:d0:ca:3c:
8d:d5:6c:4d:db:9c:c6:56:89:9d:0a:fd:51:c9:51:
d1:d6:d9:5d:69:df:04:cc:20:f9:26:9a:f8:b5:9d:
ac:36:dc:93:cd:63:81:51:75:ec:42:5d:5e:9f:3e:
b5:3b:ef:bd:b3:ef:f9:d7:19:2e:9a:d4:fd:dc:d1:
07:4b:fa:e4:23:36:ac:51:6f:88:c8:e2:c4:92:83:
2f:0e:5c:96:6a:67:93:ea:4f:cb:bf:a2:0e:ad:7c:
dd:ac:1f:ff:92:69:12:13:9c:be:66:b1:6c:f8:07:
8a:1e:ef:09:c1:18:08:d6:73:d0:5c:f7:9f:43:52:
8f:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:A1:5F:5E:84:B5:3A:99:49:C2:87:01:22:8E:00:2D:17:D0:63:CD
X509v3 Authority Key Identifier:
keyid:37:D2:09:A6:95:9E:23:54:F7:3C:E2:F2:B9:41:22:6F:83:29:0C:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/N9IJppWeI1T3POLyuUEib4MpDIw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/bd7dce-0ddc-4368-b04d-13f34b09ae61/1/N9IJppWeI1T3POLyuUEib4MpDIw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/87/bd7dce-0ddc-4368-b04d-13f34b09ae61/1/N9IJppWeI1T3POLyuUEib4MpDIw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
26:3a:38:c2:98:5e:d7:4f:95:b2:a7:04:ff:2d:63:d2:fb:df:
9f:19:c5:73:6e:7a:e3:6c:f9:0c:3f:20:ae:34:48:d8:cd:8e:
25:2e:51:34:b0:82:49:20:d8:0a:94:4f:b5:f9:aa:25:18:c0:
0b:ed:73:b8:7a:7e:18:30:c3:0a:9b:a8:9e:77:c6:a2:97:72:
cf:0f:e2:4c:69:d0:3c:a6:76:18:9e:37:ac:cc:a2:3e:fa:a9:
07:8d:40:20:cd:18:49:fc:68:a9:eb:68:21:3a:bb:09:b5:6f:
1e:e2:e3:86:8c:35:0e:56:2e:67:3c:9d:d8:d6:cd:b4:20:6e:
38:37:61:f5:7a:9a:d3:5f:61:bb:88:41:55:dc:da:be:d4:56:
21:b8:07:02:d5:d4:15:74:82:d8:de:4b:35:79:aa:00:fc:c4:
bc:b1:56:05:e1:8b:ef:73:b1:bb:03:7b:cd:1a:8e:08:1f:c3:
23:ac:87:34:74:1f:95:ed:cd:02:9f:e3:6b:76:a1:f7:f2:aa:
2f:e7:83:b9:af:81:e2:1f:c6:54:45:7c:51:7e:28:fd:31:65:
16:d4:37:c3:ee:18:92:97:b7:ae:cd:52:83:ff:99:ee:65:45:
1b:88:17:02:92:c9:4d:aa:9b:ef:29:69:8a:b1:4f:b8:6d:8c:
e0:89:2d:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 10:50:11 2025 by rpki-client