Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/dc76ff-2b35-42be-ab56-5df2de08b695/1/N9Zwai4nDLSGu0ckNGPMu_n01co.mft
File: N9Zwai4nDLSGu0ckNGPMu_n01co.mft (raw, json)
Hash identifier: khHqH468DDcdF9Hpj4oLgW3tuan3xHqJ7xmrSf17tVM=
Subject key identifier: D5:33:0D:75:7A:11:D6:09:9E:08:16:4C:C5:F1:E1:38:4E:79:D1:94
Authority key identifier: 37:D6:70:6A:2E:27:0C:B4:86:BB:47:24:34:63:CC:BB:F9:F4:D5:CA
Certificate issuer: /CN=37d6706a2e270cb486bb47243463ccbbf9f4d5ca
Certificate serial: 0198D7E148C7BA9CB4E66E0EB33A88A25662
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/N9Zwai4nDLSGu0ckNGPMu_n01co.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f6/dc76ff-2b35-42be-ab56-5df2de08b695/1/N9Zwai4nDLSGu0ckNGPMu_n01co.mft
Manifest number: 134F
Signing time: Sat 23 Aug 2025 17:02:02 +0000
Manifest this update: Sat 23 Aug 2025 17:02:02 +0000
Manifest next update: Sun 24 Aug 2025 17:02:02 +0000
Files and hashes: 1: 7YrGIJ8Lq47CmtHh_aA30VmkPjo.roa (hash: hoLOmqh1vosQ/NxuWEBoizkiy56HJ0MD/vugBLaASkY=)
2: N9Zwai4nDLSGu0ckNGPMu_n01co.crl (hash: /SH+2MsTqUVdxrX7P0fSOEmS54Z2O6MP1ILYs2M2w2Y=)
3: bWi2Mkf_arohbIgqpZEaCaewlho.roa (hash: o4YIfYScSNSPxx9rfmbXoBu7Bh9velBEqxyrfd2MDmI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f6/dc76ff-2b35-42be-ab56-5df2de08b695/1/N9Zwai4nDLSGu0ckNGPMu_n01co.crl
rsync://rpki.ripe.net/repository/DEFAULT/f6/dc76ff-2b35-42be-ab56-5df2de08b695/1/N9Zwai4nDLSGu0ckNGPMu_n01co.mft
rsync://rpki.ripe.net/repository/DEFAULT/N9Zwai4nDLSGu0ckNGPMu_n01co.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 14:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d7:e1:48:c7:ba:9c:b4:e6:6e:0e:b3:3a:88:a2:56:62
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=37d6706a2e270cb486bb47243463ccbbf9f4d5ca
Validity
Not Before: Aug 23 17:02:02 2025 GMT
Not After : Aug 24 17:02:02 2025 GMT
Subject: CN=d5330d757a11d6099e08164cc5f1e1384e79d194
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:35:b0:18:d0:8b:0f:d0:bc:19:70:02:6e:9f:
e9:47:72:05:bb:a9:8b:ca:3f:55:60:94:58:93:fb:
d9:e6:81:b5:fc:9f:58:80:da:4c:d7:c1:2a:4e:fc:
b2:7e:5c:7f:f8:48:44:54:af:e7:c2:ae:a0:3e:c9:
94:db:91:f3:ce:38:53:c4:4d:27:d4:9a:0d:cf:ab:
fa:fe:13:67:d0:5d:5b:f1:3f:15:de:a3:31:9d:ee:
04:03:42:f1:e0:80:20:15:6d:ef:6c:49:6e:f9:b4:
ec:84:2c:da:bf:52:a5:18:5b:77:db:52:e2:74:c0:
17:c3:d7:a2:4e:1f:d9:8f:04:20:23:7f:31:c1:6c:
0b:1f:ed:a7:7f:2c:70:32:28:23:6d:7c:d3:cc:e7:
dd:c7:41:03:85:80:51:22:39:4d:32:fd:22:93:ce:
65:ab:08:52:33:33:f1:13:c1:1b:5e:a6:b9:61:0c:
dd:ac:5b:91:c6:27:51:13:9c:8c:14:dd:23:87:43:
cb:05:5c:ee:3b:be:d8:07:f1:95:7a:79:33:66:01:
97:f2:44:d5:a4:b9:e8:1e:ca:ee:29:1e:5b:37:dd:
0b:f4:69:54:db:ce:05:64:8f:32:97:b5:06:bb:b7:
dc:54:fa:82:57:5d:77:a0:99:ef:53:6a:8f:4e:34:
c2:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:33:0D:75:7A:11:D6:09:9E:08:16:4C:C5:F1:E1:38:4E:79:D1:94
X509v3 Authority Key Identifier:
keyid:37:D6:70:6A:2E:27:0C:B4:86:BB:47:24:34:63:CC:BB:F9:F4:D5:CA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/N9Zwai4nDLSGu0ckNGPMu_n01co.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/dc76ff-2b35-42be-ab56-5df2de08b695/1/N9Zwai4nDLSGu0ckNGPMu_n01co.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/dc76ff-2b35-42be-ab56-5df2de08b695/1/N9Zwai4nDLSGu0ckNGPMu_n01co.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a6:08:99:cb:20:a6:92:85:e2:3e:7f:45:42:ab:7e:3e:f7:5e:
20:96:0d:92:0e:46:2a:d0:94:2c:c9:85:d4:5c:9e:71:ef:c7:
62:48:08:ad:4e:19:15:c2:d8:7b:61:ad:1f:d4:c3:b6:07:21:
24:ee:5b:5e:83:f9:7e:37:64:8e:ca:72:db:8d:9c:d6:52:7e:
f9:f6:9c:26:92:3f:bc:77:19:3e:e7:de:cf:5a:83:f4:9d:66:
c3:15:76:46:76:da:5e:a0:48:e4:6a:fe:6e:7b:a5:fb:58:01:
4b:de:35:17:dc:3b:17:89:63:7d:5e:eb:19:6f:7b:a0:e4:6a:
f1:e7:9c:cb:4a:55:60:0c:69:b5:1d:f0:27:8c:b0:80:d1:84:
9b:75:b7:41:06:2e:88:f7:11:6e:3d:54:b0:e0:a1:80:c5:6e:
bf:3d:4b:20:6a:51:97:61:c2:4e:3a:58:08:59:fb:a9:92:0b:
f3:cf:32:31:36:62:d7:71:00:0c:5a:55:15:20:0d:ed:27:19:
2f:c1:78:df:2a:07:d6:d6:eb:b8:22:ce:48:53:bc:0b:73:ac:
d0:4f:c0:bf:d1:b3:37:4c:48:b7:7b:b8:cd:5b:dd:a0:f1:48:
43:e2:ad:90:ab:ca:2c:8d:77:21:62:2c:71:98:ff:d7:38:5f:
7a:35:d4:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 19:11:55 2025 by rpki-client