Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ff/d8c58d-8d24-4280-91fd-48b1664d40d5/1/N9J_wkRD_N1LG2XPyAeMShQon54.mft
File: N9J_wkRD_N1LG2XPyAeMShQon54.mft (raw, json)
Hash identifier: m+1pna21xgx1dgw5g9MRvmqSS45oZrabXVHsaHT99EI=
Subject key identifier: 19:B8:7F:25:37:95:F2:4F:51:22:21:59:CF:E9:15:93:3B:DD:49:CE
Authority key identifier: 37:D2:7F:C2:44:43:FC:DD:4B:1B:65:CF:C8:07:8C:4A:14:28:9F:9E
Certificate issuer: /CN=37d27fc24443fcdd4b1b65cfc8078c4a14289f9e
Certificate serial: 0198D5F13343DBE8F9C0247229AF3853AC2E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/N9J_wkRD_N1LG2XPyAeMShQon54.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ff/d8c58d-8d24-4280-91fd-48b1664d40d5/1/N9J_wkRD_N1LG2XPyAeMShQon54.mft
Manifest number: 164B
Signing time: Sat 23 Aug 2025 08:00:10 +0000
Manifest this update: Sat 23 Aug 2025 08:00:10 +0000
Manifest next update: Sun 24 Aug 2025 08:00:10 +0000
Files and hashes: 1: N9J_wkRD_N1LG2XPyAeMShQon54.crl (hash: YKMnLgdU4XTj/f5WQGXEsKbTJvwageet1/1qM9LZq+A=)
2: TLZrPYGbv3OSz3l-n9m1uFTtYyY.roa (hash: BAfT0SDdeatk44A0MoM3KqLiELOkYEeVNpqrfHgFPvo=)
3: fTuGHUDbLXIf1K1JGZkDmgp4h30.roa (hash: CE5/seUejdLKBZqDs568ZVcYXPKEXW1OP4zxVz04Gmo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ff/d8c58d-8d24-4280-91fd-48b1664d40d5/1/N9J_wkRD_N1LG2XPyAeMShQon54.crl
rsync://rpki.ripe.net/repository/DEFAULT/ff/d8c58d-8d24-4280-91fd-48b1664d40d5/1/N9J_wkRD_N1LG2XPyAeMShQon54.mft
rsync://rpki.ripe.net/repository/DEFAULT/N9J_wkRD_N1LG2XPyAeMShQon54.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:f1:33:43:db:e8:f9:c0:24:72:29:af:38:53:ac:2e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=37d27fc24443fcdd4b1b65cfc8078c4a14289f9e
Validity
Not Before: Aug 23 08:00:10 2025 GMT
Not After : Aug 24 08:00:10 2025 GMT
Subject: CN=19b87f253795f24f51222159cfe915933bdd49ce
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:e1:11:13:21:66:bf:9e:9e:f6:91:60:e6:52:
40:d4:21:4c:2f:79:d0:fd:0d:73:a3:71:94:15:5e:
07:3f:aa:33:91:6f:fd:6e:39:0f:6e:3d:b1:63:7b:
24:66:aa:f6:1b:55:23:0f:1a:fb:bd:02:45:8e:a6:
37:87:46:6c:99:9a:0c:89:7f:8e:96:54:1f:ee:60:
6c:88:18:ae:2b:af:de:84:e5:c3:0b:e7:05:9a:9e:
6a:50:cb:6b:d4:96:14:b8:ee:a5:95:16:93:11:47:
fd:ed:8c:7b:8f:ab:75:03:32:28:46:48:c1:2a:ba:
8a:9d:e7:02:64:85:44:ab:0c:16:b7:17:1b:38:74:
26:83:b2:0e:cd:d7:88:f5:2e:cd:39:93:c2:2f:11:
1a:9f:79:17:81:2e:70:0e:af:c6:14:e0:94:44:fe:
9d:d1:4e:54:e9:84:4b:30:fb:19:cd:ab:cc:c5:b2:
be:7f:99:87:d3:bb:e9:6a:6c:06:d0:15:c3:9c:7e:
3f:7b:17:a5:c1:02:21:c9:00:18:54:0c:9c:da:3b:
f1:78:d3:ed:5b:eb:73:6c:fa:87:49:f1:03:71:d9:
1e:c1:a2:20:45:4a:8e:3a:ef:6e:21:43:37:08:d4:
ce:be:24:78:0e:c9:c9:01:41:aa:5b:16:f7:e7:38:
ff:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:B8:7F:25:37:95:F2:4F:51:22:21:59:CF:E9:15:93:3B:DD:49:CE
X509v3 Authority Key Identifier:
keyid:37:D2:7F:C2:44:43:FC:DD:4B:1B:65:CF:C8:07:8C:4A:14:28:9F:9E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/N9J_wkRD_N1LG2XPyAeMShQon54.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/d8c58d-8d24-4280-91fd-48b1664d40d5/1/N9J_wkRD_N1LG2XPyAeMShQon54.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/d8c58d-8d24-4280-91fd-48b1664d40d5/1/N9J_wkRD_N1LG2XPyAeMShQon54.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
59:8f:10:04:47:ca:fe:a6:81:d3:ba:4e:11:17:ad:c0:91:ba:
91:d8:99:1c:bb:e0:43:83:a7:78:0b:ce:01:fc:92:ce:b3:73:
9d:a5:89:b5:85:81:b4:f1:57:3a:30:86:f6:61:75:90:63:15:
7e:62:b7:ff:b7:ff:f8:2e:54:9b:a4:6d:7a:84:b0:65:01:03:
f0:b2:ed:db:d4:a8:d7:38:39:52:c2:7e:ed:e3:80:98:ac:a3:
36:f0:ae:24:90:96:50:72:95:16:22:3d:9e:11:dc:35:5d:dd:
4a:69:a3:2e:57:83:da:26:52:df:a4:98:16:5c:e6:b8:24:48:
8a:dd:2f:51:03:dc:4e:88:85:d1:b8:63:46:9c:4e:42:3c:7d:
70:52:ba:f7:67:80:d5:00:ef:46:63:2e:fe:a0:5a:22:bf:04:
14:1c:f2:06:70:83:6e:dd:d0:c6:3c:d5:e1:0e:64:3a:c2:97:
a3:5b:36:8a:e3:6c:0d:4f:7c:38:d6:9a:1d:7e:1b:33:c3:fe:
69:f3:cd:99:e7:35:85:67:7d:23:79:83:ff:c0:ef:38:99:9f:
2f:e8:ac:7d:c5:e8:a2:56:5b:83:b6:44:3a:a7:f7:b9:0c:a8:
9c:4a:20:5c:ae:5e:12:21:09:7c:66:34:08:6d:e2:72:46:06:
0f:2c:c9:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 13:59:10 2025 by rpki-client