Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1b/73bfb2-0285-4f53-92f0-ff8713a8e316/1/N0862b8UbAabjYPW1a1UggRetw0.mft
File: N0862b8UbAabjYPW1a1UggRetw0.mft (raw, json)
Hash identifier: nIz1wLedFMCeS1EcxlMyqQTsXsrPRVaOOEsJRzQiuYc=
Subject key identifier: C5:48:0B:0A:2D:15:A0:2B:F6:6B:88:EF:4B:06:38:AD:45:0B:9A:80
Authority key identifier: 37:4F:3A:D9:BF:14:6C:06:9B:8D:83:D6:D5:AD:54:82:04:5E:B7:0D
Certificate issuer: /CN=374f3ad9bf146c069b8d83d6d5ad5482045eb70d
Certificate serial: 01985268B5458AC3167FA134C336CF82901D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/N0862b8UbAabjYPW1a1UggRetw0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1b/73bfb2-0285-4f53-92f0-ff8713a8e316/1/N0862b8UbAabjYPW1a1UggRetw0.mft
Manifest number: 1606
Signing time: Mon 28 Jul 2025 19:00:50 +0000
Manifest this update: Mon 28 Jul 2025 19:00:50 +0000
Manifest next update: Tue 29 Jul 2025 19:00:50 +0000
Files and hashes: 1: N0862b8UbAabjYPW1a1UggRetw0.crl (hash: TDc2JeK6scJ9WR4iOZWeEviirdZxAFMcs1z8D9k32Og=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1b/73bfb2-0285-4f53-92f0-ff8713a8e316/1/N0862b8UbAabjYPW1a1UggRetw0.crl
rsync://rpki.ripe.net/repository/DEFAULT/1b/73bfb2-0285-4f53-92f0-ff8713a8e316/1/N0862b8UbAabjYPW1a1UggRetw0.mft
rsync://rpki.ripe.net/repository/DEFAULT/N0862b8UbAabjYPW1a1UggRetw0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Jul 2025 19:00:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:52:68:b5:45:8a:c3:16:7f:a1:34:c3:36:cf:82:90:1d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=374f3ad9bf146c069b8d83d6d5ad5482045eb70d
Validity
Not Before: Jul 28 19:00:50 2025 GMT
Not After : Jul 29 19:00:50 2025 GMT
Subject: CN=c5480b0a2d15a02bf66b88ef4b0638ad450b9a80
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:10:77:9c:75:1d:38:87:2c:c3:ee:58:9c:64:
b9:d9:cf:82:ca:a9:32:9f:57:c0:ae:f0:16:ed:a8:
31:0e:e0:27:e4:ac:6f:02:52:ae:f8:26:c9:43:c2:
24:4c:ca:76:07:a9:ca:d5:49:79:30:af:d7:02:bd:
33:69:d0:a5:c9:4b:87:e4:00:19:5b:02:38:0a:f4:
78:bb:cd:c9:eb:b4:a2:35:80:de:8f:83:bc:9c:d4:
c7:c1:d5:35:73:61:10:3f:f7:81:12:d1:82:c4:fc:
05:9c:79:ba:b7:c4:0f:8d:22:ef:14:7f:ea:c6:8e:
f4:85:ea:70:08:0d:a4:27:72:1a:23:47:cd:68:bd:
77:b2:98:89:11:d5:ca:39:e0:72:35:03:d3:e5:63:
8b:d8:0c:f5:ac:84:57:2f:ba:1e:47:77:a8:ca:86:
bb:85:40:e5:a9:ac:2e:b1:21:1c:64:11:65:7b:ef:
3f:dd:79:e5:1b:fa:b7:e9:ee:f8:02:11:ce:f6:a2:
27:17:97:e1:f4:6a:34:00:8d:dd:63:cc:19:0b:32:
c2:7d:5e:20:d7:0a:db:8f:96:49:81:23:e5:22:9b:
27:c3:6f:5c:19:a4:7b:08:3e:87:27:00:fa:47:d6:
f7:46:5e:b3:36:e8:fa:72:99:fc:ea:ea:1d:21:99:
6f:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:48:0B:0A:2D:15:A0:2B:F6:6B:88:EF:4B:06:38:AD:45:0B:9A:80
X509v3 Authority Key Identifier:
keyid:37:4F:3A:D9:BF:14:6C:06:9B:8D:83:D6:D5:AD:54:82:04:5E:B7:0D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/N0862b8UbAabjYPW1a1UggRetw0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/73bfb2-0285-4f53-92f0-ff8713a8e316/1/N0862b8UbAabjYPW1a1UggRetw0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/73bfb2-0285-4f53-92f0-ff8713a8e316/1/N0862b8UbAabjYPW1a1UggRetw0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
99:5d:12:77:c3:dc:6b:27:3f:ce:f0:96:f4:89:fc:5a:00:ce:
31:62:ca:76:04:41:ff:1d:e1:96:04:bc:d2:96:71:8d:f3:25:
ac:f7:71:8a:89:ba:e7:1b:f3:b5:cf:61:fc:f6:24:10:70:83:
46:07:cb:ac:1c:93:0b:66:b1:a1:9d:26:7b:07:e3:d6:7a:a9:
74:f3:c6:6d:95:6c:eb:08:bf:2e:d8:07:94:81:7b:64:cc:81:
6e:3b:45:30:33:51:25:b7:25:ac:2d:eb:cb:62:a1:1e:2b:b0:
8a:8d:19:94:ef:da:51:1f:6e:84:39:59:b2:e6:b9:13:fe:66:
1b:8b:da:32:39:55:56:4f:51:21:a1:22:38:1f:02:91:b9:14:
03:6a:1f:e6:4e:3a:fb:be:eb:2d:d5:35:e4:58:3a:4d:33:55:
b6:89:fc:29:c9:53:f0:dc:9a:a7:cc:18:76:93:b2:14:b4:05:
a0:08:63:bc:92:65:78:2d:f8:75:f5:0e:ca:fc:1a:0f:e6:0a:
74:4a:bc:6b:7c:d1:d8:e7:49:79:7e:a4:e9:b8:17:53:07:6b:
46:72:26:db:23:06:69:93:ac:7d:ad:4b:f0:f0:0d:47:10:a8:
8f:e5:b5:59:eb:54:c7:e8:ee:a1:fb:b5:7f:df:48:25:f0:b1:
8f:94:16:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 29 04:00:40 2025 by rpki-client