Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b9/84179d-4c65-44b8-b30b-5dabb4e47abb/1/N2ieqsuvaK810_r7lnTeSKb8CXg.mft
File: N2ieqsuvaK810_r7lnTeSKb8CXg.mft (raw, json)
Hash identifier: NQZWIQ0iz4nJHX6yK7XFz1hvmQV9QuraHA1RMg7GrAI=
Subject key identifier: B5:09:AA:D7:95:7C:98:34:2A:CC:8A:2A:1A:F8:3B:C4:99:13:4F:FA
Authority key identifier: 37:68:9E:AA:CB:AF:68:AF:35:D3:FA:FB:96:74:DE:48:A6:FC:09:78
Certificate issuer: /CN=37689eaacbaf68af35d3fafb9674de48a6fc0978
Certificate serial: 0198D472734F6F6C7EB36CEFE4F1AFF2763A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/N2ieqsuvaK810_r7lnTeSKb8CXg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b9/84179d-4c65-44b8-b30b-5dabb4e47abb/1/N2ieqsuvaK810_r7lnTeSKb8CXg.mft
Manifest number: 0CF3
Signing time: Sat 23 Aug 2025 01:02:06 +0000
Manifest this update: Sat 23 Aug 2025 01:02:06 +0000
Manifest next update: Sun 24 Aug 2025 01:02:06 +0000
Files and hashes: 1: N2ieqsuvaK810_r7lnTeSKb8CXg.crl (hash: JiDKJorXsSbDXUfwRnvnXxnH7+A3w3cV/b3G5t6b4as=)
2: cNzBuZews7ZdR62Aog1WuWIa_Vc.roa (hash: QJxazJXAbp+Y08ZTXOoocYGXg/oCHOcrCqlhmHqJgf8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b9/84179d-4c65-44b8-b30b-5dabb4e47abb/1/N2ieqsuvaK810_r7lnTeSKb8CXg.crl
rsync://rpki.ripe.net/repository/DEFAULT/b9/84179d-4c65-44b8-b30b-5dabb4e47abb/1/N2ieqsuvaK810_r7lnTeSKb8CXg.mft
rsync://rpki.ripe.net/repository/DEFAULT/N2ieqsuvaK810_r7lnTeSKb8CXg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 00:37:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:72:73:4f:6f:6c:7e:b3:6c:ef:e4:f1:af:f2:76:3a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=37689eaacbaf68af35d3fafb9674de48a6fc0978
Validity
Not Before: Aug 23 01:02:06 2025 GMT
Not After : Aug 24 01:02:06 2025 GMT
Subject: CN=b509aad7957c98342acc8a2a1af83bc499134ffa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:f2:e6:bc:65:62:f3:77:4f:b7:f8:dd:28:21:
bf:65:8e:84:31:63:80:86:40:b7:f4:f7:38:98:bf:
07:4a:46:a9:10:a2:25:6b:b8:83:77:71:79:1d:df:
16:6f:b3:78:85:89:3e:f9:59:b5:9e:84:c6:93:ab:
ad:0f:78:e2:3d:a4:a5:39:f2:a6:d5:4c:3e:a1:fb:
42:f3:5f:71:5b:5c:51:1c:79:86:99:34:fc:ed:48:
d6:8f:ab:9b:59:d5:0b:ea:f7:ed:93:d3:06:16:cb:
c2:cb:21:6b:72:ca:b9:db:0a:99:a3:e7:4f:e4:2f:
eb:b2:52:d0:d3:75:61:43:88:75:6d:db:10:2b:4f:
7b:e9:7f:04:ec:a3:98:42:bc:33:1c:4a:48:ff:65:
88:cc:ab:27:b7:20:f6:01:35:da:9b:10:4f:a0:b6:
00:86:f4:32:3c:58:be:e7:b0:6d:64:9c:60:53:fa:
f2:5d:fb:3a:56:d4:34:6a:bb:bf:82:c7:da:e4:25:
f8:a0:00:5d:35:74:2b:51:b9:47:c5:bc:35:ce:26:
b3:67:b7:70:a9:78:b5:4b:81:ec:6e:f8:29:1d:47:
47:27:4e:07:aa:91:4c:b1:b3:9f:b7:6f:cb:eb:23:
09:a9:79:e8:ca:9f:20:bc:d9:67:1b:76:2c:7f:73:
6d:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:09:AA:D7:95:7C:98:34:2A:CC:8A:2A:1A:F8:3B:C4:99:13:4F:FA
X509v3 Authority Key Identifier:
keyid:37:68:9E:AA:CB:AF:68:AF:35:D3:FA:FB:96:74:DE:48:A6:FC:09:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/N2ieqsuvaK810_r7lnTeSKb8CXg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/84179d-4c65-44b8-b30b-5dabb4e47abb/1/N2ieqsuvaK810_r7lnTeSKb8CXg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/84179d-4c65-44b8-b30b-5dabb4e47abb/1/N2ieqsuvaK810_r7lnTeSKb8CXg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
47:eb:af:71:06:b9:29:38:32:8c:fd:dc:ff:10:a0:ac:33:11:
10:ff:98:df:04:ef:eb:94:b1:36:10:63:ec:2d:f2:6a:fa:54:
fb:87:61:a7:4b:df:5b:8f:13:52:93:6a:b3:e7:a4:0f:27:5a:
72:fe:49:78:f7:24:8d:be:e5:64:81:ee:b5:f6:16:49:13:07:
44:3a:ec:a3:a5:11:cb:20:19:86:24:dc:6d:cb:3a:29:6f:e9:
64:df:e1:25:2f:18:c2:6a:a9:60:62:8b:e3:9b:c8:fb:e6:c0:
24:04:37:82:79:7c:09:6b:35:19:8d:bb:6f:e7:1e:9b:69:e7:
52:13:c9:54:40:bf:24:ed:ec:1d:04:55:30:c2:47:08:c2:0e:
b0:bf:d7:de:9c:3f:da:6e:0b:95:d9:6e:28:fc:16:d4:ce:98:
f2:ee:52:5a:6a:ef:9c:e3:9b:54:cf:fb:76:2b:12:3e:bd:3f:
61:f3:1c:f0:17:45:de:e8:88:f6:a8:78:f3:f6:ea:38:43:d8:
f6:9c:9e:32:69:c2:9a:c1:f2:ff:89:07:3a:86:15:51:52:ee:
e1:c7:2e:bc:32:ef:3b:d3:cf:15:57:40:a6:07:15:a2:e8:59:
57:82:a0:5a:ab:19:e0:6e:99:c8:15:89:19:e0:45:49:54:95:
10:04:6d:e5
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjUcnNPb2x+s2zv5PGv8nY6MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM3Njg5ZWFhY2JhZjY4YWYzNWQzZmFmYjk2NzRkZTQ4YTZm
YzA5NzgwHhcNMjUwODIzMDEwMjA2WhcNMjUwODI0MDEwMjA2WjAzMTEwLwYDVQQD
EyhiNTA5YWFkNzk1N2M5ODM0MmFjYzhhMmExYWY4M2JjNDk5MTM0ZmZhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvvLmvGVi83dPt/jdKCG/ZY6EMWOA
hkC39Pc4mL8HSkapEKIla7iDd3F5Hd8Wb7N4hYk++Vm1noTGk6utD3jiPaSlOfKm
1Uw+oftC819xW1xRHHmGmTT87UjWj6ubWdUL6vftk9MGFsvCyyFrcsq52wqZo+dP
5C/rslLQ03VhQ4h1bdsQK0976X8E7KOYQrwzHEpI/2WIzKsntyD2ATXamxBPoLYA
hvQyPFi+57BtZJxgU/ryXfs6VtQ0aru/gsfa5CX4oABdNXQrUblHxbw1ziazZ7dw
qXi1S4HsbvgpHUdHJ04HqpFMsbOft2/L6yMJqXnoyp8gvNlnG3Ysf3NtGQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLUJqteVfJg0KsyKKhr4O8SZE0/6MB8GA1UdIwQY
MBaAFDdonqrLr2ivNdP6+5Z03kim/Al4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTjJpZXFzdXZhSzgxMF9yN2xuVGVTS2I4Q1hnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iOS84NDE3OWQtNGM2NS00NGI4LWIzMGIt
NWRhYmI0ZTQ3YWJiLzEvTjJpZXFzdXZhSzgxMF9yN2xuVGVTS2I4Q1hnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iOS84NDE3OWQtNGM2NS00NGI4LWIzMGItNWRhYmI0ZTQ3YWJi
LzEvTjJpZXFzdXZhSzgxMF9yN2xuVGVTS2I4Q1hnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAR+uvcQa5
KTgyjP3c/xCgrDMREP+Y3wTv65SxNhBj7C3yavpU+4dhp0vfW48TUpNqs+ekDyda
cv5JePckjb7lZIHutfYWSRMHRDrso6URyyAZhiTcbcs6KW/pZN/hJS8YwmqpYGKL
45vI++bAJAQ3gnl8CWs1GY27b+cem2nnUhPJVEC/JO3sHQRVMMJHCMIOsL/X3pw/
2m4LldluKPwW1M6Y8u5SWmrvnOObVM/7disSPr0/YfMc8BdF3uiI9qh48/bqOEPY
9pyeMmnCmsHy/4kHOoYVUVLu4ccuvDLvO9PPFVdApgcVouhZV4KgWqsZ4G6ZyBWJ
GeBFSVSVEARt5Q==
-----END CERTIFICATE-----
Generated at Sat Aug 23 09:40:35 2025 by rpki-client