Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/de956f-e55b-437e-85d9-686f836cbcad/1/N7giEJlIajsTPgE540uTQmTN1wA.mft
File: N7giEJlIajsTPgE540uTQmTN1wA.mft (raw, json)
Hash identifier: jaLpgu7uqF2jEC2ebrlfNljUbaTSur6xpDjnPubXqlw=
Subject key identifier: 4A:20:2C:33:DC:DD:77:5F:57:5C:D7:F0:31:AF:3C:DD:CA:BB:08:24
Authority key identifier: 37:B8:22:10:99:48:6A:3B:13:3E:01:39:E3:4B:93:42:64:CD:D7:00
Certificate issuer: /CN=37b8221099486a3b133e0139e34b934264cdd700
Certificate serial: 0197B8FCFF767965CB2E34F00F52985D234C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/N7giEJlIajsTPgE540uTQmTN1wA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fe/de956f-e55b-437e-85d9-686f836cbcad/1/N7giEJlIajsTPgE540uTQmTN1wA.mft
Manifest number: 0F2B
Signing time: Sun 29 Jun 2025 00:01:17 +0000
Manifest this update: Sun 29 Jun 2025 00:01:17 +0000
Manifest next update: Mon 30 Jun 2025 00:01:17 +0000
Files and hashes: 1: N7giEJlIajsTPgE540uTQmTN1wA.crl (hash: Hi5BBIR5PXMSzjuS+PgxbIGqPMOWsWLaF159Pn3pDZs=)
2: Vldb1Pv9SKH1pSEjNm1gf_bg3_M.roa (hash: Ox3xcaNfkxGbMXT71Q5JDbePmqXmxZEbJ+Iew6AAo/E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fe/de956f-e55b-437e-85d9-686f836cbcad/1/N7giEJlIajsTPgE540uTQmTN1wA.crl
rsync://rpki.ripe.net/repository/DEFAULT/fe/de956f-e55b-437e-85d9-686f836cbcad/1/N7giEJlIajsTPgE540uTQmTN1wA.mft
rsync://rpki.ripe.net/repository/DEFAULT/N7giEJlIajsTPgE540uTQmTN1wA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Jun 2025 00:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b8:fc:ff:76:79:65:cb:2e:34:f0:0f:52:98:5d:23:4c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=37b8221099486a3b133e0139e34b934264cdd700
Validity
Not Before: Jun 29 00:01:17 2025 GMT
Not After : Jun 30 00:01:17 2025 GMT
Subject: CN=4a202c33dcdd775f575cd7f031af3cddcabb0824
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:e8:4f:09:57:80:77:44:69:5e:b9:99:85:36:
f3:a5:27:af:b8:42:9f:9f:2c:cb:c6:d8:2c:24:2b:
92:1c:f4:62:e2:87:10:11:9c:91:af:65:97:67:e1:
e3:96:2d:b0:8e:6f:8e:df:e8:01:86:3f:13:c3:67:
c5:f8:4a:1c:43:4e:c0:28:54:23:e0:5f:a8:b1:0b:
4e:6f:fe:80:bc:6b:dc:37:ea:8d:ad:a2:db:eb:31:
ee:31:16:3d:ec:98:67:31:1b:84:b6:e3:d9:46:da:
b7:b8:a2:f0:7b:5d:c2:93:7f:e6:1e:91:8a:1b:8f:
ac:cc:08:0f:bc:0e:6e:03:59:5f:5b:87:2d:7a:44:
d9:46:be:90:72:76:d4:28:88:5e:65:ba:3c:7c:8c:
11:d3:e7:6d:b4:c8:5c:4d:5c:1c:4d:4c:2f:43:3d:
f7:4b:3c:7d:98:74:95:b7:e0:0d:00:c6:96:72:43:
ca:d0:83:04:e7:6d:32:e3:ee:f0:90:61:eb:99:5e:
76:e8:80:00:fd:94:73:74:5e:1f:6b:97:04:e0:cb:
71:45:7e:a4:1a:00:d1:bd:53:fc:eb:6b:c5:1a:8d:
17:5b:d1:f7:64:89:dc:a8:fe:5d:c1:32:d1:f7:0e:
4a:43:3a:3b:76:ff:9c:6b:a8:5b:49:c8:6a:8f:23:
d5:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:20:2C:33:DC:DD:77:5F:57:5C:D7:F0:31:AF:3C:DD:CA:BB:08:24
X509v3 Authority Key Identifier:
keyid:37:B8:22:10:99:48:6A:3B:13:3E:01:39:E3:4B:93:42:64:CD:D7:00
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/N7giEJlIajsTPgE540uTQmTN1wA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/de956f-e55b-437e-85d9-686f836cbcad/1/N7giEJlIajsTPgE540uTQmTN1wA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/de956f-e55b-437e-85d9-686f836cbcad/1/N7giEJlIajsTPgE540uTQmTN1wA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b1:d0:49:4d:26:f6:17:55:3d:85:b4:c9:94:6a:79:31:f4:9b:
93:46:ca:6f:eb:f0:30:71:73:35:06:ab:69:51:80:a6:5f:7a:
1a:42:e5:8f:ae:6c:5d:80:df:3c:81:48:7f:e2:18:17:3e:f1:
fc:c8:e2:1e:f8:4e:e2:b3:c2:97:20:3a:eb:ff:0a:c6:66:9a:
12:83:20:08:6f:8f:ce:59:8c:3f:79:a7:cd:06:be:1c:72:26:
3e:83:08:04:ad:b7:ba:5f:ad:06:eb:f6:56:8d:fc:53:03:31:
93:da:da:01:89:70:82:b7:04:20:11:94:12:f4:7e:25:f2:39:
6c:ff:69:a5:8d:53:5a:63:05:d4:3f:7b:c8:e0:86:84:5e:27:
b9:5d:77:5c:55:c7:66:b5:5b:92:02:15:76:10:7d:34:8c:fa:
50:dd:ca:f5:7a:1e:18:34:b6:1c:92:84:2d:97:9b:36:48:09:
28:15:23:8a:e8:dc:7d:f0:fa:51:21:78:f6:b6:7c:33:08:23:
8f:cf:ef:c9:71:bb:b7:b2:8b:28:42:4a:e8:8e:4b:a4:7a:2e:
8e:ea:59:04:22:de:aa:51:4c:ae:1c:fa:1f:19:4f:cc:b7:86:
1e:28:e9:8e:97:c6:32:68:98:89:9d:18:23:29:b4:31:ea:55:
fe:e2:5b:fc
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZe4/P92eWXLLjTwD1KYXSNMMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM3YjgyMjEwOTk0ODZhM2IxMzNlMDEzOWUzNGI5MzQyNjRj
ZGQ3MDAwHhcNMjUwNjI5MDAwMTE3WhcNMjUwNjMwMDAwMTE3WjAzMTEwLwYDVQQD
Eyg0YTIwMmMzM2RjZGQ3NzVmNTc1Y2Q3ZjAzMWFmM2NkZGNhYmIwODI0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1+hPCVeAd0RpXrmZhTbzpSevuEKf
nyzLxtgsJCuSHPRi4ocQEZyRr2WXZ+Hjli2wjm+O3+gBhj8Tw2fF+EocQ07AKFQj
4F+osQtOb/6AvGvcN+qNraLb6zHuMRY97JhnMRuEtuPZRtq3uKLwe13Ck3/mHpGK
G4+szAgPvA5uA1lfW4ctekTZRr6QcnbUKIheZbo8fIwR0+dttMhcTVwcTUwvQz33
Szx9mHSVt+ANAMaWckPK0IME520y4+7wkGHrmV526IAA/ZRzdF4fa5cE4MtxRX6k
GgDRvVP862vFGo0XW9H3ZIncqP5dwTLR9w5KQzo7dv+ca6hbSchqjyPVkwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEogLDPc3XdfV1zX8DGvPN3KuwgkMB8GA1UdIwQY
MBaAFDe4IhCZSGo7Ez4BOeNLk0JkzdcAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTjdnaUVKbElhanNUUGdFNTQwdVRRbVROMXdBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZS9kZTk1NmYtZTU1Yi00MzdlLTg1ZDkt
Njg2ZjgzNmNiY2FkLzEvTjdnaUVKbElhanNUUGdFNTQwdVRRbVROMXdBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mZS9kZTk1NmYtZTU1Yi00MzdlLTg1ZDktNjg2ZjgzNmNiY2Fk
LzEvTjdnaUVKbElhanNUUGdFNTQwdVRRbVROMXdBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAsdBJTSb2
F1U9hbTJlGp5MfSbk0bKb+vwMHFzNQaraVGApl96GkLlj65sXYDfPIFIf+IYFz7x
/MjiHvhO4rPClyA66/8KxmaaEoMgCG+PzlmMP3mnzQa+HHImPoMIBK23ul+tBuv2
Vo38UwMxk9raAYlwgrcEIBGUEvR+JfI5bP9ppY1TWmMF1D97yOCGhF4nuV13XFXH
ZrVbkgIVdhB9NIz6UN3K9XoeGDS2HJKELZebNkgJKBUjiujcffD6USF49rZ8Mwgj
j8/vyXG7t7KLKEJK6I5LpHoujupZBCLeqlFMrhz6HxlPzLeGHijpjpfGMmiYiZ0Y
Iym0MepV/uJb/A==
-----END CERTIFICATE-----
Generated at Sun Jun 29 06:38:31 2025 by rpki-client