Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e1/2155f1-976a-4f7e-95a4-076e1d77aebe/1/N2AlOewyw5Gf8cvJWU3cq4FWdMU.mft
File: N2AlOewyw5Gf8cvJWU3cq4FWdMU.mft (raw, json)
Hash identifier: sEX/q6r2CW+qJSNCIbueEIC+cqAGqfQB2IsdIggJCgw=
Subject key identifier: 3D:6A:D0:BE:FF:27:53:A0:A7:1F:D9:53:95:BD:40:6E:D1:CE:22:08
Authority key identifier: 37:60:25:39:EC:32:C3:91:9F:F1:CB:C9:59:4D:DC:AB:81:56:74:C5
Certificate issuer: /CN=37602539ec32c3919ff1cbc9594ddcab815674c5
Certificate serial: 0198D5F18C597DA665CF0CA3A5A3A8CA92D8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/N2AlOewyw5Gf8cvJWU3cq4FWdMU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e1/2155f1-976a-4f7e-95a4-076e1d77aebe/1/N2AlOewyw5Gf8cvJWU3cq4FWdMU.mft
Manifest number: 0D00
Signing time: Sat 23 Aug 2025 08:00:33 +0000
Manifest this update: Sat 23 Aug 2025 08:00:33 +0000
Manifest next update: Sun 24 Aug 2025 08:00:33 +0000
Files and hashes: 1: 8OUuy6RxMKAA3VbPAT05z8x14Y0.roa (hash: /S82CRuIWRkEgkIG58XNeFsI8Jv6K3dyodJP/54XncE=)
2: N2AlOewyw5Gf8cvJWU3cq4FWdMU.crl (hash: 7zp3fy+7VGwh8GKa6gPcEolhy3uhhtgMqfZmQ6l/D4g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e1/2155f1-976a-4f7e-95a4-076e1d77aebe/1/N2AlOewyw5Gf8cvJWU3cq4FWdMU.crl
rsync://rpki.ripe.net/repository/DEFAULT/e1/2155f1-976a-4f7e-95a4-076e1d77aebe/1/N2AlOewyw5Gf8cvJWU3cq4FWdMU.mft
rsync://rpki.ripe.net/repository/DEFAULT/N2AlOewyw5Gf8cvJWU3cq4FWdMU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:f1:8c:59:7d:a6:65:cf:0c:a3:a5:a3:a8:ca:92:d8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=37602539ec32c3919ff1cbc9594ddcab815674c5
Validity
Not Before: Aug 23 08:00:33 2025 GMT
Not After : Aug 24 08:00:33 2025 GMT
Subject: CN=3d6ad0beff2753a0a71fd95395bd406ed1ce2208
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:ec:01:be:98:ca:f6:b0:90:88:00:6d:70:f2:
43:4f:c3:f5:64:c6:a2:07:33:55:80:92:7f:38:08:
57:44:7d:cf:8b:4f:b3:18:28:ee:34:f2:df:ab:fb:
06:e9:27:7a:6e:6a:5c:e9:02:b6:ca:4a:a9:62:e5:
d8:94:a9:0c:f1:82:29:77:78:04:16:91:51:79:25:
2d:a8:b2:32:68:3c:64:ed:d8:d0:fb:b8:18:28:33:
72:3a:5c:c3:46:aa:de:fe:65:e1:f7:fb:3f:9d:98:
6b:a2:7c:aa:59:0b:3a:a6:60:27:97:b1:75:4f:10:
e3:21:f0:03:ad:0d:d3:9a:da:4c:9a:f0:36:a3:87:
e0:cf:16:7e:74:79:32:b9:65:d0:03:1a:3b:10:e0:
7d:f3:44:4d:17:45:af:08:2e:23:73:c7:53:27:2a:
16:5e:03:93:b5:a3:e9:b3:ea:2c:68:eb:29:56:9f:
53:5e:37:12:07:bc:65:15:34:16:9a:68:4a:30:7e:
ac:0f:34:f2:35:2e:7a:dc:cc:00:49:6f:5e:10:7d:
3a:52:49:42:a6:ba:f1:45:80:6f:9e:ac:ec:be:cb:
62:da:5b:e4:68:3b:0c:bb:39:17:c5:e0:33:35:a1:
1e:25:ff:69:1c:9f:52:0d:30:d3:f4:29:08:b8:8b:
ee:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:6A:D0:BE:FF:27:53:A0:A7:1F:D9:53:95:BD:40:6E:D1:CE:22:08
X509v3 Authority Key Identifier:
keyid:37:60:25:39:EC:32:C3:91:9F:F1:CB:C9:59:4D:DC:AB:81:56:74:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/N2AlOewyw5Gf8cvJWU3cq4FWdMU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/2155f1-976a-4f7e-95a4-076e1d77aebe/1/N2AlOewyw5Gf8cvJWU3cq4FWdMU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/2155f1-976a-4f7e-95a4-076e1d77aebe/1/N2AlOewyw5Gf8cvJWU3cq4FWdMU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
77:4e:e4:04:c2:94:11:8f:fa:d3:96:14:01:c3:f0:6f:2f:d3:
86:3d:f9:fa:df:dd:ba:95:c9:1e:27:1f:68:11:fa:09:d1:7b:
9b:f8:71:2c:88:8a:0c:86:19:07:46:50:72:25:36:89:2b:91:
e7:7e:fa:59:5f:01:81:ed:b9:12:67:f2:60:c5:92:0c:b6:dd:
1a:53:48:7f:38:72:47:f8:8e:c8:d6:d6:36:27:1f:ab:bf:30:
ea:4b:13:a4:f6:59:64:7d:79:b7:5f:58:5e:fa:c0:06:fa:4e:
dd:4e:ab:b9:74:15:2b:cc:31:b1:ee:3c:ad:66:cf:42:59:ab:
dc:9c:f2:87:be:58:03:1b:c5:e7:a8:ce:77:95:f5:fd:56:4a:
cd:69:6a:3d:93:fc:ea:b1:3a:93:0d:ef:b9:bd:65:bd:64:cd:
f1:53:de:2d:e5:27:fa:a8:13:9e:56:8f:0c:b0:db:cb:6e:40:
9b:cc:d8:5e:8c:52:56:56:f7:f3:8b:f6:9d:87:bc:d0:fe:2e:
09:c7:bf:f8:84:b7:01:ee:d8:18:91:4e:4f:91:67:77:de:cb:
26:45:53:bb:a0:eb:09:3a:d8:b8:0e:09:54:8c:b2:12:ef:15:
2b:d9:66:62:df:74:22:7b:17:e0:2f:23:cb:71:d4:f7:15:33:
cd:72:88:45
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjV8YxZfaZlzwyjpaOoypLYMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM3NjAyNTM5ZWMzMmMzOTE5ZmYxY2JjOTU5NGRkY2FiODE1
Njc0YzUwHhcNMjUwODIzMDgwMDMzWhcNMjUwODI0MDgwMDMzWjAzMTEwLwYDVQQD
EygzZDZhZDBiZWZmMjc1M2EwYTcxZmQ5NTM5NWJkNDA2ZWQxY2UyMjA4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0uwBvpjK9rCQiABtcPJDT8P1ZMai
BzNVgJJ/OAhXRH3Pi0+zGCjuNPLfq/sG6Sd6bmpc6QK2ykqpYuXYlKkM8YIpd3gE
FpFReSUtqLIyaDxk7djQ+7gYKDNyOlzDRqre/mXh9/s/nZhronyqWQs6pmAnl7F1
TxDjIfADrQ3TmtpMmvA2o4fgzxZ+dHkyuWXQAxo7EOB980RNF0WvCC4jc8dTJyoW
XgOTtaPps+osaOspVp9TXjcSB7xlFTQWmmhKMH6sDzTyNS563MwASW9eEH06UklC
prrxRYBvnqzsvsti2lvkaDsMuzkXxeAzNaEeJf9pHJ9SDTDT9CkIuIvuAQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFD1q0L7/J1Ogpx/ZU5W9QG7RziIIMB8GA1UdIwQY
MBaAFDdgJTnsMsORn/HLyVlN3KuBVnTFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTjJBbE9ld3l3NUdmOGN2SldVM2NxNEZXZE1VLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMS8yMTU1ZjEtOTc2YS00ZjdlLTk1YTQt
MDc2ZTFkNzdhZWJlLzEvTjJBbE9ld3l3NUdmOGN2SldVM2NxNEZXZE1VLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lMS8yMTU1ZjEtOTc2YS00ZjdlLTk1YTQtMDc2ZTFkNzdhZWJl
LzEvTjJBbE9ld3l3NUdmOGN2SldVM2NxNEZXZE1VLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAd07kBMKU
EY/605YUAcPwby/Thj35+t/dupXJHicfaBH6CdF7m/hxLIiKDIYZB0ZQciU2iSuR
5376WV8Bge25EmfyYMWSDLbdGlNIfzhyR/iOyNbWNicfq78w6ksTpPZZZH15t19Y
XvrABvpO3U6ruXQVK8wxse48rWbPQlmr3Jzyh75YAxvF56jOd5X1/VZKzWlqPZP8
6rE6kw3vub1lvWTN8VPeLeUn+qgTnlaPDLDby25Am8zYXoxSVlb384v2nYe80P4u
Cce/+IS3Ae7YGJFOT5Fnd97LJkVTu6DrCTrYuA4JVIyyEu8VK9lmYt90InsX4C8j
y3HU9xUzzXKIRQ==
-----END CERTIFICATE-----
Generated at Sat Aug 23 11:35:33 2025 by rpki-client