Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/341508-a0aa-40c9-ae0c-0379930f8286/1/N1PbxYKexQCzNCahiNA5k5W4Bqo.mft
File: N1PbxYKexQCzNCahiNA5k5W4Bqo.mft (raw, json)
Hash identifier: TPYKoaAvPUuufSnvL3SQu5phY6gdyk7tBVAaqCuCDpg=
Subject key identifier: F8:D6:59:68:51:56:EA:0B:38:26:C5:CA:EE:85:9A:8E:B7:C8:E1:DB
Authority key identifier: 37:53:DB:C5:82:9E:C5:00:B3:34:26:A1:88:D0:39:93:95:B8:06:AA
Certificate issuer: /CN=3753dbc5829ec500b33426a188d0399395b806aa
Certificate serial: 0197B7EA62A1351349FA1616A12B2828E0A9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/N1PbxYKexQCzNCahiNA5k5W4Bqo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/341508-a0aa-40c9-ae0c-0379930f8286/1/N1PbxYKexQCzNCahiNA5k5W4Bqo.mft
Manifest number: 03DB
Signing time: Sat 28 Jun 2025 19:01:20 +0000
Manifest this update: Sat 28 Jun 2025 19:01:20 +0000
Manifest next update: Sun 29 Jun 2025 19:01:20 +0000
Files and hashes: 1: N1PbxYKexQCzNCahiNA5k5W4Bqo.crl (hash: rCYkwuXUHiqr9ufMoavR71JmICpPO+LICh4DUDCsumk=)
2: hr1FzTLzhvjdHRGQawXaK0XuGQ4.roa (hash: wRJW1xVVLpDSguuiY7y5qT4f4RgVOBoZp/PuXmFp+qI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fd/341508-a0aa-40c9-ae0c-0379930f8286/1/N1PbxYKexQCzNCahiNA5k5W4Bqo.crl
rsync://rpki.ripe.net/repository/DEFAULT/fd/341508-a0aa-40c9-ae0c-0379930f8286/1/N1PbxYKexQCzNCahiNA5k5W4Bqo.mft
rsync://rpki.ripe.net/repository/DEFAULT/N1PbxYKexQCzNCahiNA5k5W4Bqo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:ea:62:a1:35:13:49:fa:16:16:a1:2b:28:28:e0:a9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3753dbc5829ec500b33426a188d0399395b806aa
Validity
Not Before: Jun 28 19:01:20 2025 GMT
Not After : Jun 29 19:01:20 2025 GMT
Subject: CN=f8d659685156ea0b3826c5caee859a8eb7c8e1db
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:26:d3:98:15:a1:b1:7e:e4:a0:f7:32:a8:12:
08:84:2d:1f:6e:5f:6a:e4:06:ba:82:37:36:78:f3:
62:e6:48:6a:e7:f7:b8:d2:c1:0a:24:fb:e3:09:a8:
35:67:f6:97:58:73:85:0a:2d:83:61:19:4b:2b:d6:
e5:39:29:a5:6f:e5:dc:c8:41:b9:3c:93:e8:e9:23:
75:54:6e:d3:5a:53:1f:43:80:87:ea:b2:23:5a:84:
4b:9f:ac:2e:2a:e5:bb:99:4e:e3:d4:3b:da:87:ed:
2c:07:a7:74:79:f2:1e:b1:00:94:2b:30:a3:32:00:
b1:53:b7:73:31:4b:32:07:c5:67:41:ac:4e:77:9b:
d7:5f:6c:e9:27:bf:b7:99:3d:11:b7:5d:0d:bb:1b:
e1:e0:e3:62:39:6a:d5:1d:ab:0f:ea:00:39:58:d5:
be:3b:f7:6c:31:6d:4d:a8:85:5e:a5:43:dd:9a:d7:
be:0b:b8:7b:49:f4:e2:96:b2:55:d9:ef:25:8c:12:
81:7b:d2:7d:fb:0a:ac:48:75:b9:cc:c2:91:ec:11:
49:72:89:e7:55:34:de:90:5a:0e:aa:22:b7:7f:68:
7a:e6:2e:e4:c4:44:b4:e8:90:49:1f:bf:1e:6a:86:
3d:20:f3:40:25:8f:ba:cf:16:a0:e8:08:ee:1e:88:
49:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:D6:59:68:51:56:EA:0B:38:26:C5:CA:EE:85:9A:8E:B7:C8:E1:DB
X509v3 Authority Key Identifier:
keyid:37:53:DB:C5:82:9E:C5:00:B3:34:26:A1:88:D0:39:93:95:B8:06:AA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/N1PbxYKexQCzNCahiNA5k5W4Bqo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/341508-a0aa-40c9-ae0c-0379930f8286/1/N1PbxYKexQCzNCahiNA5k5W4Bqo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/341508-a0aa-40c9-ae0c-0379930f8286/1/N1PbxYKexQCzNCahiNA5k5W4Bqo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0b:cc:ff:7a:c0:ef:ce:fb:3c:3f:4b:1c:b2:1e:a7:f1:84:6a:
33:fc:74:a5:15:71:98:64:de:b5:cf:5f:9d:22:bb:08:d8:dd:
70:a4:0d:63:cc:58:d1:c1:35:8c:47:80:20:37:1c:d3:a7:e1:
d4:0b:f0:70:d5:12:af:f2:58:82:52:e8:64:43:0c:ca:e6:41:
5b:2c:47:75:cf:3a:4f:a4:33:ba:fb:b7:ab:de:c2:83:16:60:
99:da:5e:3d:2a:47:93:0a:b5:1a:3d:b8:e9:99:28:04:06:d8:
58:cb:39:3b:5e:7f:29:32:6d:61:3a:19:0b:55:eb:a9:9a:b7:
89:4d:e6:30:af:95:c7:a0:07:fc:90:e9:0c:d5:fe:0a:37:da:
b2:ed:08:2b:f0:99:5e:63:19:34:17:6a:2d:d3:f1:fc:bb:98:
67:31:ba:c4:51:99:fd:72:11:43:c5:b5:ea:c6:0d:89:4a:9f:
53:04:71:b8:5b:c5:e3:3a:c8:67:c0:8c:dc:fd:71:88:31:0e:
d1:e3:0e:56:6c:e4:15:1b:e6:1c:c7:82:92:be:05:e2:56:e2:
c1:e3:38:57:21:0d:94:e3:dd:d3:0b:b0:88:cc:0b:b9:23:87:
3c:d1:95:72:ba:9f:47:04:3b:07:74:7b:03:68:67:97:95:ce:
50:16:a2:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 20:37:23 2025 by rpki-client