Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/1336c7-a33f-4ec6-82d7-f44166bb2db0/1/N_vfL1-FXl4cpI53w73TO9R7RDg.mft
File: N_vfL1-FXl4cpI53w73TO9R7RDg.mft (raw, json)
Hash identifier: q2N3jp3jy7h2MnFOlY537MRQ93TuzS/TWIggiFI31rA=
Subject key identifier: F2:20:99:1F:FE:CF:59:89:27:24:55:35:21:BE:3D:2B:1C:62:F9:6E
Authority key identifier: 37:FB:DF:2F:5F:85:5E:5E:1C:A4:8E:77:C3:BD:D3:3B:D4:7B:44:38
Certificate issuer: /CN=37fbdf2f5f855e5e1ca48e77c3bdd33bd47b4438
Certificate serial: 0198D6CCE91E505F9F8145EF878FB1280CDE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/N_vfL1-FXl4cpI53w73TO9R7RDg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/1336c7-a33f-4ec6-82d7-f44166bb2db0/1/N_vfL1-FXl4cpI53w73TO9R7RDg.mft
Manifest number: 164D
Signing time: Sat 23 Aug 2025 12:00:09 +0000
Manifest this update: Sat 23 Aug 2025 12:00:09 +0000
Manifest next update: Sun 24 Aug 2025 12:00:09 +0000
Files and hashes: 1: N_vfL1-FXl4cpI53w73TO9R7RDg.crl (hash: 9BZ9IIUC7RhsHtep1lIuued3HeTyAcO3FOgGkwZAfls=)
2: PSL2OSxsoutF8sVX_uvIaiWUApI.roa (hash: IoDHAxb+U2Gaz8HUwj/mdMtnodnlu8iYqMMfCwQw35I=)
3: t0FWDnJPs6XvZokHfTcCnjKRaeE.roa (hash: Aou1i/O3zguK2P9WdtUpbw8G9iRuYff1/7SNrw+Pohw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8a/1336c7-a33f-4ec6-82d7-f44166bb2db0/1/N_vfL1-FXl4cpI53w73TO9R7RDg.crl
rsync://rpki.ripe.net/repository/DEFAULT/8a/1336c7-a33f-4ec6-82d7-f44166bb2db0/1/N_vfL1-FXl4cpI53w73TO9R7RDg.mft
rsync://rpki.ripe.net/repository/DEFAULT/N_vfL1-FXl4cpI53w73TO9R7RDg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 12:00:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:cc:e9:1e:50:5f:9f:81:45:ef:87:8f:b1:28:0c:de
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=37fbdf2f5f855e5e1ca48e77c3bdd33bd47b4438
Validity
Not Before: Aug 23 12:00:09 2025 GMT
Not After : Aug 24 12:00:09 2025 GMT
Subject: CN=f220991ffecf59892724553521be3d2b1c62f96e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ef:f3:14:c4:25:ad:a0:fc:cf:af:b3:29:03:95:
36:c0:ed:da:d4:9f:de:f8:66:35:97:4e:ec:43:01:
68:89:46:00:d9:eb:fe:4f:6c:ff:2d:d2:fb:ab:67:
e3:e5:e4:1d:bf:e9:44:67:14:81:ce:49:2e:ef:7d:
43:28:bb:95:3c:02:3b:d3:93:ed:18:93:96:b8:f3:
6d:71:bb:d0:3c:10:94:d3:1d:1d:e1:48:8e:1c:5a:
63:09:03:ad:96:47:d8:f7:99:02:a1:a7:1b:6f:92:
44:5d:42:9b:c4:06:38:48:f2:de:28:82:47:1a:aa:
f2:de:20:68:b8:a7:ae:8d:00:84:2a:e6:f4:1f:95:
24:63:15:6c:cf:a9:c2:4a:9f:e0:a7:de:6f:c1:86:
1a:30:20:6f:63:b3:f9:87:8f:be:be:f5:86:b5:f4:
ff:7e:b4:2a:e2:bd:b5:ff:f8:ec:12:1f:a4:2c:15:
28:fe:6f:22:8e:0f:5b:46:f5:a3:73:9e:ad:4f:7c:
b9:fd:11:72:48:4a:6e:d2:17:5c:a2:ac:64:68:2d:
03:7b:dd:19:58:6f:f6:dc:c3:fd:4d:4c:7e:f5:bc:
e7:d5:e7:d8:15:25:4d:81:07:f6:5f:4b:30:7f:25:
2b:ce:d1:ff:0d:ee:6c:c1:f7:83:bf:df:12:8b:01:
1b:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:20:99:1F:FE:CF:59:89:27:24:55:35:21:BE:3D:2B:1C:62:F9:6E
X509v3 Authority Key Identifier:
keyid:37:FB:DF:2F:5F:85:5E:5E:1C:A4:8E:77:C3:BD:D3:3B:D4:7B:44:38
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/N_vfL1-FXl4cpI53w73TO9R7RDg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/1336c7-a33f-4ec6-82d7-f44166bb2db0/1/N_vfL1-FXl4cpI53w73TO9R7RDg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/1336c7-a33f-4ec6-82d7-f44166bb2db0/1/N_vfL1-FXl4cpI53w73TO9R7RDg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
61:a8:cd:39:c3:59:d4:c2:93:30:e9:cd:8b:7a:8c:6d:a0:75:
42:b9:a1:29:a1:13:57:bf:04:be:1d:11:0d:74:59:6d:9d:1a:
15:bb:57:82:42:79:9f:64:d7:e7:a4:f9:52:d6:70:65:a2:c1:
1f:bc:40:d8:c9:43:56:6a:a6:d1:fe:b9:cf:58:cc:82:bd:bc:
88:1a:aa:f6:34:b1:98:2a:85:cd:40:cc:39:18:b1:95:3d:29:
f7:d6:1f:3b:da:3b:b6:52:ac:60:29:62:ac:63:41:f4:ee:da:
b6:ec:29:2d:60:d1:80:83:ab:c8:b2:17:27:06:93:68:46:c4:
94:a3:63:53:ca:97:51:1c:02:77:e6:df:44:d3:25:a5:2d:40:
dc:ea:46:89:3c:e6:4a:f9:98:f1:3c:49:35:0d:88:63:1f:16:
69:b6:54:ca:f9:ed:69:ac:44:35:4a:a9:7c:f8:4d:45:09:6e:
7e:0d:59:20:65:94:1b:62:76:c7:81:80:7a:4b:1b:2d:14:6e:
00:0f:73:17:d8:06:3e:50:7d:e1:b7:92:88:59:2b:de:bc:95:
de:3b:bb:fc:7c:e6:a6:ef:f3:8a:61:f9:a3:67:81:9a:ae:b4:
4b:37:8f:86:85:c9:b6:1b:7f:fa:15:4f:3c:c6:bb:3d:a8:55:
59:75:c4:7f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjWzOkeUF+fgUXvh4+xKAzeMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM3ZmJkZjJmNWY4NTVlNWUxY2E0OGU3N2MzYmRkMzNiZDQ3
YjQ0MzgwHhcNMjUwODIzMTIwMDA5WhcNMjUwODI0MTIwMDA5WjAzMTEwLwYDVQQD
EyhmMjIwOTkxZmZlY2Y1OTg5MjcyNDU1MzUyMWJlM2QyYjFjNjJmOTZlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7/MUxCWtoPzPr7MpA5U2wO3a1J/e
+GY1l07sQwFoiUYA2ev+T2z/LdL7q2fj5eQdv+lEZxSBzkku731DKLuVPAI705Pt
GJOWuPNtcbvQPBCU0x0d4UiOHFpjCQOtlkfY95kCoacbb5JEXUKbxAY4SPLeKIJH
Gqry3iBouKeujQCEKub0H5UkYxVsz6nCSp/gp95vwYYaMCBvY7P5h4++vvWGtfT/
frQq4r21//jsEh+kLBUo/m8ijg9bRvWjc56tT3y5/RFySEpu0hdcoqxkaC0De90Z
WG/23MP9TUx+9bzn1efYFSVNgQf2X0swfyUrztH/De5swfeDv98SiwEbqwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPIgmR/+z1mJJyRVNSG+PSscYvluMB8GA1UdIwQY
MBaAFDf73y9fhV5eHKSOd8O90zvUe0Q4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTl92ZkwxLUZYbDRjcEk1M3c3M1RPOVI3UkRnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84YS8xMzM2YzctYTMzZi00ZWM2LTgyZDct
ZjQ0MTY2YmIyZGIwLzEvTl92ZkwxLUZYbDRjcEk1M3c3M1RPOVI3UkRnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84YS8xMzM2YzctYTMzZi00ZWM2LTgyZDctZjQ0MTY2YmIyZGIw
LzEvTl92ZkwxLUZYbDRjcEk1M3c3M1RPOVI3UkRnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYajNOcNZ
1MKTMOnNi3qMbaB1QrmhKaETV78Evh0RDXRZbZ0aFbtXgkJ5n2TX56T5UtZwZaLB
H7xA2MlDVmqm0f65z1jMgr28iBqq9jSxmCqFzUDMORixlT0p99YfO9o7tlKsYCli
rGNB9O7atuwpLWDRgIOryLIXJwaTaEbElKNjU8qXURwCd+bfRNMlpS1A3OpGiTzm
SvmY8TxJNQ2IYx8WabZUyvntaaxENUqpfPhNRQlufg1ZIGWUG2J2x4GAeksbLRRu
AA9zF9gGPlB94beSiFkr3ryV3ju7/Hzmpu/zimH5o2eBmq60SzePhoXJtht/+hVP
PMa7PahVWXXEfw==
-----END CERTIFICATE-----
Generated at Sat Aug 23 17:39:45 2025 by rpki-client