Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e0/dc43fb-4656-4af9-aad2-ee28a65c8a22/1/N1UunJZN5v9U4JnHEVXBod7IpzA.mft
File: N1UunJZN5v9U4JnHEVXBod7IpzA.mft (raw, json)
Hash identifier: 5NexVlXNGN7lEwjQgECyXX4QIMq9OX90hMiktDiDb6o=
Subject key identifier: 58:4C:4C:B6:30:65:8F:0B:51:A1:36:C9:EF:95:18:CB:3C:A8:80:58
Authority key identifier: 37:55:2E:9C:96:4D:E6:FF:54:E0:99:C7:11:55:C1:A1:DE:C8:A7:30
Certificate issuer: /CN=37552e9c964de6ff54e099c71155c1a1dec8a730
Certificate serial: 0198D4A7CDC4944C42F7675EFD697518623C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/N1UunJZN5v9U4JnHEVXBod7IpzA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e0/dc43fb-4656-4af9-aad2-ee28a65c8a22/1/N1UunJZN5v9U4JnHEVXBod7IpzA.mft
Manifest number: 1649
Signing time: Sat 23 Aug 2025 02:00:23 +0000
Manifest this update: Sat 23 Aug 2025 02:00:23 +0000
Manifest next update: Sun 24 Aug 2025 02:00:23 +0000
Files and hashes: 1: N1UunJZN5v9U4JnHEVXBod7IpzA.crl (hash: KTOGX/ua2uWvzdBv2By5ZYg1IK4bnF2zJwL6CZSUTjg=)
2: erhlDHo6u2N8SbRRVUL49trJG0Q.roa (hash: 3V4uI/Y1go20Ur/8ybcFLPuVLcruMM7J3PxGXh059Vg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e0/dc43fb-4656-4af9-aad2-ee28a65c8a22/1/N1UunJZN5v9U4JnHEVXBod7IpzA.crl
rsync://rpki.ripe.net/repository/DEFAULT/e0/dc43fb-4656-4af9-aad2-ee28a65c8a22/1/N1UunJZN5v9U4JnHEVXBod7IpzA.mft
rsync://rpki.ripe.net/repository/DEFAULT/N1UunJZN5v9U4JnHEVXBod7IpzA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 00:37:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:a7:cd:c4:94:4c:42:f7:67:5e:fd:69:75:18:62:3c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=37552e9c964de6ff54e099c71155c1a1dec8a730
Validity
Not Before: Aug 23 02:00:23 2025 GMT
Not After : Aug 24 02:00:23 2025 GMT
Subject: CN=584c4cb630658f0b51a136c9ef9518cb3ca88058
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:d1:21:f2:8b:28:b6:2a:11:13:65:bb:cd:cd:
c7:c1:5c:a4:64:88:18:4e:37:0c:fb:3b:85:e0:21:
1d:53:8a:da:25:0b:ff:a0:e8:19:dd:ba:89:54:08:
37:7e:0a:42:1c:f6:95:82:af:67:04:de:b5:d5:ad:
9d:a7:63:7f:31:a5:b3:43:bd:cd:1d:bf:41:9b:65:
61:e9:2d:51:54:24:16:24:3f:93:c4:5d:d9:f7:a3:
6c:53:89:cd:fe:6b:cf:71:93:16:22:48:b5:48:b2:
b5:a2:0d:85:ba:63:72:b1:22:08:2e:39:a9:ad:f3:
c7:8d:fc:87:7e:21:6a:21:68:6a:aa:a7:04:5f:51:
94:ba:4d:eb:ad:a8:6a:a9:91:36:3e:07:bd:9b:67:
66:81:78:ea:8a:11:19:df:e0:67:3c:e3:e1:e5:d4:
47:ad:f1:7c:43:e7:8c:44:7e:17:c4:34:b2:b6:92:
8a:0f:cf:9d:4f:0a:fa:ef:78:3d:20:db:a1:5c:68:
66:e9:c0:93:fb:f4:5c:4e:4d:e7:29:37:0b:5e:f5:
d7:31:ce:40:53:cb:11:c5:e6:78:ed:ce:93:32:24:
46:ba:b2:9d:6d:93:d5:f3:69:45:16:0e:87:49:7f:
ee:aa:bf:0d:d2:1b:d6:2d:c0:54:9e:36:1c:b2:f1:
cd:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:4C:4C:B6:30:65:8F:0B:51:A1:36:C9:EF:95:18:CB:3C:A8:80:58
X509v3 Authority Key Identifier:
keyid:37:55:2E:9C:96:4D:E6:FF:54:E0:99:C7:11:55:C1:A1:DE:C8:A7:30
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/N1UunJZN5v9U4JnHEVXBod7IpzA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/dc43fb-4656-4af9-aad2-ee28a65c8a22/1/N1UunJZN5v9U4JnHEVXBod7IpzA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/dc43fb-4656-4af9-aad2-ee28a65c8a22/1/N1UunJZN5v9U4JnHEVXBod7IpzA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
79:6c:40:78:91:43:94:b9:0f:55:ca:2a:60:01:be:89:de:a9:
b9:7e:e3:69:34:69:a1:1a:68:33:ca:5f:91:65:af:ec:23:e6:
9b:bd:46:cd:27:e5:b3:0b:6a:6c:99:aa:5b:9c:de:1f:b2:b0:
3d:2c:a5:56:22:74:fa:0a:6b:f3:f2:79:8c:f7:5f:f0:1f:18:
3d:ca:fd:7b:4d:d7:18:be:ee:e7:4e:35:01:9c:c2:32:cb:ce:
82:c9:77:f6:2e:94:22:ef:ae:21:08:cc:96:c6:1a:d3:04:a1:
0b:7d:00:73:79:bb:63:ba:40:4f:d5:2c:02:6c:bb:73:26:44:
40:99:76:b0:f0:d1:aa:05:0e:77:d6:d4:8c:e8:d9:c2:47:f8:
da:2d:fc:72:8c:2d:f5:fe:a5:2a:06:66:a6:ec:94:13:c2:ee:
8d:97:a9:6d:c3:fd:c6:52:12:f6:ab:4f:2d:35:25:d1:82:2a:
2a:88:25:1b:c5:63:0a:29:f3:ce:09:61:80:12:91:70:4c:57:
06:c9:7e:1c:dd:24:23:13:dc:a8:12:ca:08:ee:34:77:c7:f3:
ee:0f:f3:9b:4f:f5:77:9a:d0:34:ce:69:52:f3:60:77:bc:8d:
28:3b:1e:39:4a:3a:ff:fc:fe:9c:5d:76:96:b4:76:4c:99:b1:
04:61:86:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 10:13:45 2025 by rpki-client