Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/1336c7-a33f-4ec6-82d7-f44166bb2db0/1/N_vfL1-FXl4cpI53w73TO9R7RDg.mft
File: N_vfL1-FXl4cpI53w73TO9R7RDg.mft (raw, json)
Hash identifier: iXuGi7t6FDyn8tW9ga/AOtBqIplZXZDwk4NzjEFYb3E=
Subject key identifier: AF:83:D9:A5:70:7E:8A:65:A0:34:E7:72:EF:F9:85:5F:86:4B:95:7C
Authority key identifier: 37:FB:DF:2F:5F:85:5E:5E:1C:A4:8E:77:C3:BD:D3:3B:D4:7B:44:38
Certificate issuer: /CN=37fbdf2f5f855e5e1ca48e77c3bdd33bd47b4438
Certificate serial: 0197B70E6064E308F1299A53A2816B2BEE4C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/N_vfL1-FXl4cpI53w73TO9R7RDg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/1336c7-a33f-4ec6-82d7-f44166bb2db0/1/N_vfL1-FXl4cpI53w73TO9R7RDg.mft
Manifest number: 15B8
Signing time: Sat 28 Jun 2025 15:01:02 +0000
Manifest this update: Sat 28 Jun 2025 15:01:02 +0000
Manifest next update: Sun 29 Jun 2025 15:01:02 +0000
Files and hashes: 1: N_vfL1-FXl4cpI53w73TO9R7RDg.crl (hash: Fm2NR7Jiv4a8K6VdVR0uK+tnRd9+rBqAxH92WWPP7Os=)
2: PSL2OSxsoutF8sVX_uvIaiWUApI.roa (hash: IoDHAxb+U2Gaz8HUwj/mdMtnodnlu8iYqMMfCwQw35I=)
3: t0FWDnJPs6XvZokHfTcCnjKRaeE.roa (hash: Aou1i/O3zguK2P9WdtUpbw8G9iRuYff1/7SNrw+Pohw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8a/1336c7-a33f-4ec6-82d7-f44166bb2db0/1/N_vfL1-FXl4cpI53w73TO9R7RDg.crl
rsync://rpki.ripe.net/repository/DEFAULT/8a/1336c7-a33f-4ec6-82d7-f44166bb2db0/1/N_vfL1-FXl4cpI53w73TO9R7RDg.mft
rsync://rpki.ripe.net/repository/DEFAULT/N_vfL1-FXl4cpI53w73TO9R7RDg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 10:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:0e:60:64:e3:08:f1:29:9a:53:a2:81:6b:2b:ee:4c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=37fbdf2f5f855e5e1ca48e77c3bdd33bd47b4438
Validity
Not Before: Jun 28 15:01:02 2025 GMT
Not After : Jun 29 15:01:02 2025 GMT
Subject: CN=af83d9a5707e8a65a034e772eff9855f864b957c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:4c:32:b6:a9:ff:49:92:28:b0:13:b1:95:a7:
b7:10:07:26:72:7b:49:00:0d:7f:98:54:00:91:94:
26:17:bf:04:aa:b6:bb:b0:77:ee:c1:f6:79:22:92:
bf:53:e2:49:85:76:37:07:4e:a2:3f:26:7d:a4:31:
74:b5:ae:12:76:87:a6:f7:be:dd:89:6e:35:34:17:
a3:50:02:bc:13:2c:86:c9:98:83:0c:5a:85:e1:e6:
3f:17:50:2a:be:fb:d1:f8:94:c7:4d:cc:e7:17:38:
96:31:09:f1:60:1b:e8:f5:6a:87:ff:c5:da:1e:8f:
a7:43:37:d7:a2:d1:9c:08:b9:94:05:72:b3:e9:63:
9a:2e:5c:22:b6:dd:fb:06:80:a5:d6:a1:6d:2f:a3:
13:51:f2:54:69:00:9d:0a:a6:f0:ea:5f:97:6c:d0:
4d:4b:df:7d:3d:21:b2:f9:32:40:2b:a5:f3:52:b3:
5f:97:46:2a:f1:22:21:81:62:31:78:79:fe:81:a3:
45:c1:d9:73:0a:87:78:00:e1:cd:db:3d:ef:37:54:
53:cd:73:6b:a2:20:b8:01:63:cf:14:27:68:f8:89:
12:01:3a:90:83:81:e6:22:46:ba:dd:d4:a8:24:a8:
a6:e4:44:56:c5:ee:65:8c:75:aa:bc:ee:89:83:78:
80:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:83:D9:A5:70:7E:8A:65:A0:34:E7:72:EF:F9:85:5F:86:4B:95:7C
X509v3 Authority Key Identifier:
keyid:37:FB:DF:2F:5F:85:5E:5E:1C:A4:8E:77:C3:BD:D3:3B:D4:7B:44:38
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/N_vfL1-FXl4cpI53w73TO9R7RDg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/1336c7-a33f-4ec6-82d7-f44166bb2db0/1/N_vfL1-FXl4cpI53w73TO9R7RDg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/1336c7-a33f-4ec6-82d7-f44166bb2db0/1/N_vfL1-FXl4cpI53w73TO9R7RDg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5e:5e:5b:7f:0c:30:d9:9c:1f:fc:40:20:62:f0:b4:4b:bb:b1:
d0:5f:23:ea:71:1c:74:42:1e:fb:46:e4:d9:e2:d4:9f:7e:33:
bd:76:17:7b:21:e2:c1:79:5c:03:b4:a3:e7:22:0d:1b:cd:39:
9d:39:ac:23:4e:84:6b:3a:fa:4e:32:a2:72:8b:bf:3f:ee:78:
b6:9a:a7:05:2a:bd:14:ac:66:64:a5:d0:7c:f6:e9:4d:12:b8:
59:92:99:fb:ea:1e:c8:c6:08:9b:5d:10:f5:2a:c3:5a:d6:19:
fe:89:d2:00:7d:78:07:01:b5:52:ca:16:b8:42:04:38:d9:6c:
5f:70:dc:e4:b0:45:01:d4:7b:fd:f3:c9:34:4f:09:f1:f7:e5:
7a:2d:c7:10:18:12:a5:d1:e1:59:42:1c:7b:61:11:bb:b0:79:
b3:7a:ca:75:00:d6:c2:1d:c6:c3:54:25:e8:15:52:a2:c8:72:
3e:73:ac:d0:3d:e4:58:2a:ea:12:78:d5:5a:f9:78:9f:0f:05:
be:5a:fe:3e:21:8c:00:77:8b:95:20:be:8e:91:e6:0e:fb:10:
99:c3:fe:33:14:60:b6:29:a4:42:eb:3c:33:fe:9d:ce:c1:9c:
18:a5:cf:0f:f5:e3:21:e7:06:95:09:da:d9:11:88:be:26:53:
84:4e:3c:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 19:09:35 2025 by rpki-client