Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/8f83c2-3bb3-4d47-8031-de571b89618d/1/N4G6usaSUnGxeYF1FeBuahCs9rQ.mft
File: N4G6usaSUnGxeYF1FeBuahCs9rQ.mft (raw, json)
Hash identifier: 7IMxhwieij89oU21y8QMFepy9VetPHMHYhrivp7HLlw=
Subject key identifier: 3E:75:2E:C1:8E:8F:BA:96:0C:4B:A1:C1:F7:99:CE:3D:E3:A0:43:98
Authority key identifier: 37:81:BA:BA:C6:92:52:71:B1:79:81:75:15:E0:6E:6A:10:AC:F6:B4
Certificate issuer: /CN=3781babac6925271b179817515e06e6a10acf6b4
Certificate serial: 0198D629902441B471036F401D1AC816518A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/N4G6usaSUnGxeYF1FeBuahCs9rQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/8f83c2-3bb3-4d47-8031-de571b89618d/1/N4G6usaSUnGxeYF1FeBuahCs9rQ.mft
Manifest number: 05F0
Signing time: Sat 23 Aug 2025 09:01:44 +0000
Manifest this update: Sat 23 Aug 2025 09:01:44 +0000
Manifest next update: Sun 24 Aug 2025 09:01:44 +0000
Files and hashes: 1: N4G6usaSUnGxeYF1FeBuahCs9rQ.crl (hash: HxyPi36bXUjpBOqscfs+5MqssEoIAv9MYdsG3TIGS2g=)
2: R1GLOmkDsdOQU3JmSI6jpWMtr0k.roa (hash: TobK47r5xeGKINzekYR4rqZ5DBGKz/0D1yzbu2xP0c8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/8f83c2-3bb3-4d47-8031-de571b89618d/1/N4G6usaSUnGxeYF1FeBuahCs9rQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/8e/8f83c2-3bb3-4d47-8031-de571b89618d/1/N4G6usaSUnGxeYF1FeBuahCs9rQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/N4G6usaSUnGxeYF1FeBuahCs9rQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 09:01:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:29:90:24:41:b4:71:03:6f:40:1d:1a:c8:16:51:8a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3781babac6925271b179817515e06e6a10acf6b4
Validity
Not Before: Aug 23 09:01:44 2025 GMT
Not After : Aug 24 09:01:44 2025 GMT
Subject: CN=3e752ec18e8fba960c4ba1c1f799ce3de3a04398
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:d4:15:fd:9e:7f:6a:50:bc:dc:ef:1a:62:52:
ce:e0:5b:9d:ca:f4:fc:f0:f0:34:1f:bc:6d:27:ea:
cf:be:fd:5c:8c:bf:81:52:62:92:19:bd:db:aa:00:
fe:8a:80:2c:b7:f8:1d:c9:34:1c:20:f0:25:6b:6b:
f9:9c:33:05:b4:4c:56:55:91:1b:ef:ef:29:7e:61:
b4:93:98:9f:e9:08:6b:e0:f5:34:f6:cb:64:e9:d9:
a2:88:5f:5a:70:10:34:0e:1f:41:ac:eb:96:81:33:
e8:6b:19:2f:37:88:cc:a5:fe:81:4d:36:80:91:f2:
de:a3:56:96:85:e8:5c:21:26:c1:b8:69:4e:5e:45:
6b:a7:0a:23:92:2b:ea:23:97:09:99:e6:1f:6e:0c:
00:20:c4:63:7f:bd:9d:1c:25:2e:2b:c4:85:3b:e9:
df:fa:56:b7:e0:0b:d5:0d:26:4f:d9:9b:39:1b:31:
4f:33:2e:5a:74:d5:23:1e:18:71:55:a0:fe:d2:92:
c9:c5:ea:d4:e2:a9:d7:a8:3e:c2:91:aa:a2:fa:ff:
94:9c:00:6d:78:fa:71:2a:a2:e5:f0:04:f6:b6:8c:
67:b5:7f:f0:f7:45:b2:ca:7d:7b:ac:6e:d0:45:6e:
07:98:25:28:92:54:76:9f:68:9b:19:88:41:5c:45:
98:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:75:2E:C1:8E:8F:BA:96:0C:4B:A1:C1:F7:99:CE:3D:E3:A0:43:98
X509v3 Authority Key Identifier:
keyid:37:81:BA:BA:C6:92:52:71:B1:79:81:75:15:E0:6E:6A:10:AC:F6:B4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/N4G6usaSUnGxeYF1FeBuahCs9rQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/8f83c2-3bb3-4d47-8031-de571b89618d/1/N4G6usaSUnGxeYF1FeBuahCs9rQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/8f83c2-3bb3-4d47-8031-de571b89618d/1/N4G6usaSUnGxeYF1FeBuahCs9rQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
91:ed:fc:95:d7:20:e6:d1:91:bc:c0:10:c1:02:5d:88:c3:7e:
cf:0e:46:6b:fe:f7:65:9c:cd:1d:d9:3f:3e:c6:02:e1:80:df:
ac:24:71:2d:61:86:40:de:5a:18:72:47:f8:fd:4a:50:87:57:
7f:88:22:d8:43:96:16:9a:d2:46:19:80:07:9f:92:b2:c2:cc:
e2:31:98:8b:c2:60:89:a4:8e:f1:8f:40:9f:db:21:ff:76:54:
01:ad:a6:04:92:00:d0:7e:95:71:d6:97:21:a4:21:5e:95:b9:
74:41:97:cf:a7:6b:78:7a:69:7d:8d:ad:bb:8c:86:ce:49:8a:
42:02:62:9f:2f:c2:f9:b6:c1:6d:54:4f:f1:eb:36:3a:78:3d:
c3:5d:92:e6:74:c9:a0:68:f0:37:92:7a:38:1b:a8:a4:05:d3:
64:90:98:11:39:9b:ec:75:a8:07:0a:af:ef:d9:25:4c:e3:f8:
7d:d9:ac:94:37:d7:d3:f6:88:20:59:4b:a2:cb:c3:8c:41:4a:
37:d9:21:26:df:d3:54:fc:60:37:f3:0d:a0:5c:72:3c:e9:c2:
18:d0:ed:47:fa:1a:49:d5:45:89:10:ee:31:a7:08:fb:8d:d0:
56:fa:b8:f5:72:77:01:b5:e9:16:96:5e:b8:93:6e:80:32:f6:
2c:f2:0f:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 19:05:49 2025 by rpki-client