Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d8/020d47-2cc0-436b-b9f9-b73bfccb4e08/1/N97mrLx4K4x2lqQLKOgDOWGdDxs.mft
File: N97mrLx4K4x2lqQLKOgDOWGdDxs.mft (raw, json)
Hash identifier: 8vj3qQKH3J+e8189+W+xP3xdN0ZqwGmbMwHMRNpP980=
Subject key identifier: B5:C6:D7:66:98:59:81:83:C9:E9:44:DF:F0:D5:0E:43:85:24:18:5A
Authority key identifier: 37:DE:E6:AC:BC:78:2B:8C:76:96:A4:0B:28:E8:03:39:61:9D:0F:1B
Certificate issuer: /CN=37dee6acbc782b8c7696a40b28e80339619d0f1b
Certificate serial: 0198D58361B8EA033ED50BE95AC88A48CF4C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/N97mrLx4K4x2lqQLKOgDOWGdDxs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d8/020d47-2cc0-436b-b9f9-b73bfccb4e08/1/N97mrLx4K4x2lqQLKOgDOWGdDxs.mft
Manifest number: 164D
Signing time: Sat 23 Aug 2025 06:00:13 +0000
Manifest this update: Sat 23 Aug 2025 06:00:13 +0000
Manifest next update: Sun 24 Aug 2025 06:00:13 +0000
Files and hashes: 1: MbrCU5EWrzqFZBAeUe4bUJd8wew.roa (hash: 5Pva3cv3+IYsnuZvSImhrKouYMj9MMRYEIbLj8Bzi98=)
2: N97mrLx4K4x2lqQLKOgDOWGdDxs.crl (hash: W6goO6SkIsIC2TxmpUF8vAZwgo0et7jRGtmEcZUIr0U=)
3: zQEfbksVhhA2S7Y-4p6fScJooW4.roa (hash: wml6Lhyvjtk0nrkWUQQ2ofJbLrbKj1m4u8FJSWuGbD4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d8/020d47-2cc0-436b-b9f9-b73bfccb4e08/1/N97mrLx4K4x2lqQLKOgDOWGdDxs.crl
rsync://rpki.ripe.net/repository/DEFAULT/d8/020d47-2cc0-436b-b9f9-b73bfccb4e08/1/N97mrLx4K4x2lqQLKOgDOWGdDxs.mft
rsync://rpki.ripe.net/repository/DEFAULT/N97mrLx4K4x2lqQLKOgDOWGdDxs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 00:37:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:83:61:b8:ea:03:3e:d5:0b:e9:5a:c8:8a:48:cf:4c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=37dee6acbc782b8c7696a40b28e80339619d0f1b
Validity
Not Before: Aug 23 06:00:13 2025 GMT
Not After : Aug 24 06:00:13 2025 GMT
Subject: CN=b5c6d76698598183c9e944dff0d50e438524185a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f6:b4:ca:e4:f8:c9:ec:a4:54:7f:fd:c2:e6:d2:
0f:83:46:8d:fc:36:0d:19:ec:1d:2c:73:61:9d:35:
9a:9c:15:58:95:b4:b6:3d:8a:27:13:23:eb:d0:a3:
34:31:b9:57:8d:fb:9c:11:04:d6:2f:6e:f2:2f:b4:
93:9c:50:76:87:c3:1c:39:39:67:4a:ae:43:05:e0:
02:16:c4:15:40:f9:8c:0f:04:28:d3:2b:a3:ac:10:
8f:3d:64:d0:5e:23:f2:87:5b:d2:2f:96:6b:5a:97:
59:df:1e:c3:e3:bf:97:11:f6:09:d5:6b:ad:8d:54:
94:b1:8b:94:ba:40:45:0e:d3:c0:7f:f3:cc:00:33:
18:2a:cd:17:ca:14:ad:fa:9c:7a:d8:00:19:a5:74:
01:04:9e:2b:aa:13:bb:87:5f:8e:b5:51:1e:98:d1:
35:26:1a:38:5b:7d:26:e9:e9:a6:31:be:4e:90:5c:
70:64:7b:5a:3d:c7:69:73:1f:b7:9a:65:00:fb:41:
d2:31:00:86:5d:47:4a:6d:a9:aa:54:3a:a4:ee:0f:
14:40:39:1b:73:c7:13:9a:22:88:b1:f9:e4:20:40:
d4:b0:38:30:ca:27:c2:aa:87:02:44:6c:50:e6:86:
2e:34:02:f0:af:04:19:c2:96:83:61:eb:88:bd:49:
3f:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:C6:D7:66:98:59:81:83:C9:E9:44:DF:F0:D5:0E:43:85:24:18:5A
X509v3 Authority Key Identifier:
keyid:37:DE:E6:AC:BC:78:2B:8C:76:96:A4:0B:28:E8:03:39:61:9D:0F:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/N97mrLx4K4x2lqQLKOgDOWGdDxs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/020d47-2cc0-436b-b9f9-b73bfccb4e08/1/N97mrLx4K4x2lqQLKOgDOWGdDxs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/020d47-2cc0-436b-b9f9-b73bfccb4e08/1/N97mrLx4K4x2lqQLKOgDOWGdDxs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
76:77:f9:1e:d2:e2:f3:b6:08:d6:06:b5:12:44:d4:84:ed:02:
76:80:1c:20:1d:32:34:da:26:21:7c:6c:6c:95:8d:d2:a9:e6:
b0:b1:9d:3d:33:b9:16:4f:8c:02:6b:f2:13:ce:fa:51:21:70:
47:8f:28:ea:a9:c1:b7:05:08:00:27:b0:f8:1d:07:a5:09:a1:
24:bd:fd:11:16:ad:e3:30:dd:d3:ed:be:f4:b3:78:ab:6b:93:
b1:4b:f7:b5:c3:b2:f7:8b:63:f2:9e:56:e9:60:21:3e:28:83:
e7:4f:01:6c:2c:0f:a6:ad:98:df:c4:7e:7a:fb:59:e7:76:6f:
2c:48:5a:23:bf:f4:ff:27:03:4e:2f:96:45:a5:d1:6e:f4:24:
47:a7:72:ce:68:54:66:4e:6e:56:6f:34:e7:fb:a5:ca:65:c0:
57:89:10:a3:e6:ad:bd:2f:ed:1c:70:a4:66:31:36:8c:a2:07:
fa:40:54:4a:c2:a6:e4:0d:4e:37:dc:a2:89:ec:a4:7e:bd:51:
85:2a:54:ca:8b:43:46:f1:9b:d5:1d:95:4a:e8:09:81:59:fd:
57:f1:2a:2e:36:52:26:d4:b1:6f:44:79:18:97:55:7c:d2:9b:
52:08:a0:6b:4e:9e:76:90:13:66:5e:aa:c2:31:19:a2:ef:e5:
7e:17:e4:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 10:32:47 2025 by rpki-client