Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/56/1d575d-7b22-47c7-a17e-8a136cb0dd5c/1/N8SLeJzH_-e-CURGQ_24a9tXP30.mft
File: N8SLeJzH_-e-CURGQ_24a9tXP30.mft (raw, json)
Hash identifier: uNYwDNU4lC8bk5FMwf+56QDq9nPeiBz3bnBH1Ch0sA4=
Subject key identifier: CC:2B:9B:AA:69:B5:BE:56:74:DC:14:F1:96:C2:3D:4A:7A:42:63:04
Authority key identifier: 37:C4:8B:78:9C:C7:FF:E7:BE:09:44:46:43:FD:B8:6B:DB:57:3F:7D
Certificate issuer: /CN=37c48b789cc7ffe7be09444643fdb86bdb573f7d
Certificate serial: 01984A09CC7887D3791FE8DB64D2EDDCE7AA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/N8SLeJzH_-e-CURGQ_24a9tXP30.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/56/1d575d-7b22-47c7-a17e-8a136cb0dd5c/1/N8SLeJzH_-e-CURGQ_24a9tXP30.mft
Manifest number: 0A99
Signing time: Sun 27 Jul 2025 04:00:12 +0000
Manifest this update: Sun 27 Jul 2025 04:00:12 +0000
Manifest next update: Mon 28 Jul 2025 04:00:12 +0000
Files and hashes: 1: N8SLeJzH_-e-CURGQ_24a9tXP30.crl (hash: 2viJWgEjASh75LC0EiM5dIWpFRryeH0epPxBnzoXSOw=)
2: zElW9nBSEefX0nViIsarFQPCkZs.roa (hash: CmIv1btIhlBvo+yXBuSYJkAIeImv5p3pKaVYvxzuwhU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/56/1d575d-7b22-47c7-a17e-8a136cb0dd5c/1/N8SLeJzH_-e-CURGQ_24a9tXP30.crl
rsync://rpki.ripe.net/repository/DEFAULT/56/1d575d-7b22-47c7-a17e-8a136cb0dd5c/1/N8SLeJzH_-e-CURGQ_24a9tXP30.mft
rsync://rpki.ripe.net/repository/DEFAULT/N8SLeJzH_-e-CURGQ_24a9tXP30.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 04:00:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:4a:09:cc:78:87:d3:79:1f:e8:db:64:d2:ed:dc:e7:aa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=37c48b789cc7ffe7be09444643fdb86bdb573f7d
Validity
Not Before: Jul 27 04:00:12 2025 GMT
Not After : Jul 28 04:00:12 2025 GMT
Subject: CN=cc2b9baa69b5be5674dc14f196c23d4a7a426304
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:66:32:c3:91:83:d6:35:0b:2f:03:fc:0d:60:
95:d0:89:fe:be:fa:ed:25:9a:52:55:38:da:b9:e5:
39:32:9a:e7:f1:a8:d4:6d:ef:32:62:12:a4:24:5d:
b7:b6:d7:14:ec:f9:44:fa:a3:0e:7c:0d:c3:01:b2:
bf:4a:5a:b0:b3:5d:0e:fa:56:bb:cc:fb:89:ca:ab:
ba:b3:52:85:45:b7:76:02:86:ec:38:6c:0a:4d:54:
86:36:95:6f:a1:56:96:d7:5e:df:3a:53:c7:88:b4:
e9:db:20:d5:f5:da:42:49:5e:66:9a:42:95:e7:ff:
eb:bc:d7:8c:c1:86:4d:c8:23:f9:b3:30:b8:c8:3b:
5c:1b:fe:2a:e1:dd:da:96:b6:42:82:92:18:b7:ef:
76:31:be:a1:13:35:33:cd:0c:56:00:e1:52:cb:a1:
9d:83:04:b8:9e:bc:51:7f:7f:f7:96:40:9e:81:3a:
b8:28:14:99:53:44:d7:54:c8:d3:07:81:9f:8d:d8:
a1:a4:84:c8:50:55:5f:dc:17:3e:62:9a:f3:b5:ec:
57:73:67:ab:68:24:33:2f:b6:93:45:40:9b:e4:6a:
91:ab:82:ad:8d:41:3e:27:24:24:ed:90:65:bf:45:
99:a5:f5:91:9d:aa:86:49:77:d9:85:da:fb:14:fb:
c1:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:2B:9B:AA:69:B5:BE:56:74:DC:14:F1:96:C2:3D:4A:7A:42:63:04
X509v3 Authority Key Identifier:
keyid:37:C4:8B:78:9C:C7:FF:E7:BE:09:44:46:43:FD:B8:6B:DB:57:3F:7D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/N8SLeJzH_-e-CURGQ_24a9tXP30.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/1d575d-7b22-47c7-a17e-8a136cb0dd5c/1/N8SLeJzH_-e-CURGQ_24a9tXP30.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/56/1d575d-7b22-47c7-a17e-8a136cb0dd5c/1/N8SLeJzH_-e-CURGQ_24a9tXP30.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
52:6f:92:82:ab:eb:3d:0b:72:a2:8a:44:75:45:5c:25:39:2f:
d8:97:fa:1d:a2:27:e6:75:7c:6b:0b:ee:e8:0a:60:10:aa:58:
cd:7a:b1:f2:24:fa:7f:87:93:0a:60:12:a1:82:fb:51:91:b2:
71:c0:6d:89:8e:b0:d4:fb:07:de:f6:7c:4e:d0:dd:af:69:ab:
6a:c5:31:52:c7:83:0c:96:b5:88:ec:a3:df:02:8f:39:11:cb:
bf:47:a9:e7:d1:b5:35:8a:8f:bb:5b:7c:cb:1a:ee:fb:2d:cd:
cc:5b:d0:58:59:4f:7e:eb:3f:ed:a6:52:a1:b6:64:54:76:cb:
12:6e:4b:97:c4:61:b0:5c:a3:3d:c5:00:f4:0b:f9:a8:56:fa:
5a:ee:ee:70:99:1c:90:36:90:ef:42:b7:ed:58:09:1e:93:49:
45:6d:25:ed:49:ae:50:03:1b:7f:81:2e:09:1e:e4:d3:d2:22:
b3:87:92:44:bf:c4:9f:51:35:2c:49:45:66:d0:ee:6f:86:dd:
1d:5e:92:0f:c1:9e:06:9b:c2:d2:d7:fb:3d:e0:1a:96:ee:e5:
77:a4:d1:20:13:4e:fe:53:9c:52:8c:4f:79:ee:d8:09:c6:36:
40:c9:01:d8:02:78:f0:ab:92:cb:1b:fa:6a:3b:1c:b9:19:f1:
cd:26:d8:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 13:38:21 2025 by rpki-client