Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ad/b53547-d340-4392-af46-615961312b52/1/N0MfG-n9wkGQmEec3kV7v3lXF1k.mft
File: N0MfG-n9wkGQmEec3kV7v3lXF1k.mft (raw, json)
Hash identifier: 16bp6LgkgGOTxRg4Fv2Jr04YATFRXtVeFL+scotEOOA=
Subject key identifier: E6:F5:5E:83:71:C5:E6:65:69:95:C2:53:13:5A:EF:CD:C9:A6:B8:2D
Authority key identifier: 37:43:1F:1B:E9:FD:C2:41:90:98:47:9C:DE:45:7B:BF:79:57:17:59
Certificate issuer: /CN=37431f1be9fdc2419098479cde457bbf79571759
Certificate serial: 0198D54E43C26C6B4E0CBB204CF388083908
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/N0MfG-n9wkGQmEec3kV7v3lXF1k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ad/b53547-d340-4392-af46-615961312b52/1/N0MfG-n9wkGQmEec3kV7v3lXF1k.mft
Manifest number: 08D1
Signing time: Sat 23 Aug 2025 05:02:12 +0000
Manifest this update: Sat 23 Aug 2025 05:02:12 +0000
Manifest next update: Sun 24 Aug 2025 05:02:12 +0000
Files and hashes: 1: A3ey_cAeMANwFWddA6tWalsb_HU.roa (hash: 1QzvBN6h57NIWttaQKkwiJVejIWg/N7/NzIPvbKh3sU=)
2: N0MfG-n9wkGQmEec3kV7v3lXF1k.crl (hash: r6MwE+UaaKr8oLMC2cVKw+RuJbADV3/RWhWSNdSkIts=)
3: X2IBg-0ZoG3nzdbOUqoFpfNzTiM.roa (hash: I3L20uWKmG3AN70fPYDWHSKnKdL/hAFebOsi5YIWBck=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ad/b53547-d340-4392-af46-615961312b52/1/N0MfG-n9wkGQmEec3kV7v3lXF1k.crl
rsync://rpki.ripe.net/repository/DEFAULT/ad/b53547-d340-4392-af46-615961312b52/1/N0MfG-n9wkGQmEec3kV7v3lXF1k.mft
rsync://rpki.ripe.net/repository/DEFAULT/N0MfG-n9wkGQmEec3kV7v3lXF1k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:4e:43:c2:6c:6b:4e:0c:bb:20:4c:f3:88:08:39:08
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=37431f1be9fdc2419098479cde457bbf79571759
Validity
Not Before: Aug 23 05:02:12 2025 GMT
Not After : Aug 24 05:02:12 2025 GMT
Subject: CN=e6f55e8371c5e6656995c253135aefcdc9a6b82d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:b7:00:07:d4:50:ab:47:6a:4f:8e:8f:46:78:
a1:c2:e6:4c:4c:b8:4b:2d:16:73:ed:d8:f0:69:96:
26:a2:3e:bb:9b:fb:99:21:d2:c4:2d:25:5b:af:e5:
b6:4a:58:04:48:6a:d1:1b:8d:7d:f3:fd:23:0a:b8:
39:63:70:c4:69:7c:b0:38:ef:00:21:63:5e:3c:22:
8d:73:1c:ec:f9:19:71:4e:05:a9:e8:80:e5:19:da:
af:fd:a8:df:22:1c:c9:5c:7f:07:59:bf:40:93:cb:
a4:b4:3c:d4:45:33:da:fc:46:35:c5:05:ea:4b:77:
9e:05:49:9d:f9:ae:90:bd:f1:dc:74:4e:f5:cd:de:
06:2a:dc:e1:75:26:f2:e9:fd:32:65:ae:19:cc:0b:
c0:ac:fc:44:22:d7:99:ce:6d:d6:65:9f:75:19:82:
36:96:b9:6f:ac:df:04:ba:67:fb:0b:a0:98:b0:e0:
47:1a:cc:cd:61:3c:57:86:81:46:d3:c3:65:36:b2:
71:7b:2f:95:b8:90:62:80:46:56:7a:5d:79:c7:21:
95:45:13:a7:a7:80:de:36:f6:4f:07:33:c0:f5:df:
7c:8b:d6:4e:72:6c:0b:3e:c6:66:37:61:74:b7:42:
a5:23:df:98:c2:37:06:de:18:80:a0:83:01:d2:28:
c3:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E6:F5:5E:83:71:C5:E6:65:69:95:C2:53:13:5A:EF:CD:C9:A6:B8:2D
X509v3 Authority Key Identifier:
keyid:37:43:1F:1B:E9:FD:C2:41:90:98:47:9C:DE:45:7B:BF:79:57:17:59
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/N0MfG-n9wkGQmEec3kV7v3lXF1k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/b53547-d340-4392-af46-615961312b52/1/N0MfG-n9wkGQmEec3kV7v3lXF1k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/b53547-d340-4392-af46-615961312b52/1/N0MfG-n9wkGQmEec3kV7v3lXF1k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5a:60:76:ee:f8:1d:21:9f:c6:b7:b9:b1:90:5b:46:21:df:48:
8a:4a:96:e4:9f:e0:19:9f:ce:3d:c6:f9:1a:34:ec:0c:aa:be:
58:a2:ad:05:80:28:cc:0a:fb:9a:87:15:da:b7:e2:1d:13:4b:
57:44:e7:48:dc:61:da:30:3e:95:20:9d:93:21:f6:e3:bb:24:
cf:ed:93:cc:47:24:3c:d8:74:a1:c5:81:6f:32:70:74:17:da:
1c:79:3d:45:3b:4e:61:fe:b9:13:b9:c9:28:20:3d:15:f0:c3:
8f:5a:49:0f:2b:dc:ae:a4:8a:a1:b2:c6:f6:7b:b6:ec:24:79:
58:25:9e:df:b7:70:4d:e2:cc:18:8f:d5:82:d2:61:ec:a6:36:
1f:3c:e8:31:ed:98:ca:c8:33:a0:1d:ab:ef:9d:91:37:65:1d:
08:be:92:4b:fb:ca:1b:53:37:f0:de:e0:83:bf:90:a6:26:68:
86:95:b0:83:04:d7:d5:7b:9d:66:cd:cc:4f:29:16:c8:e3:11:
b2:60:d7:ab:66:a8:bc:79:08:ce:a0:43:94:f7:53:0e:1d:b6:
12:7a:7f:8c:6a:2a:08:eb:e3:8d:b7:73:f6:20:44:c1:7d:7f:
f4:88:73:94:4b:c6:d0:fc:64:b5:00:43:5c:84:ad:4d:76:55:
94:fe:4d:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 10:57:31 2025 by rpki-client