Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/1040ae-aa13-4cbb-90da-367b86fbcbf7/1/N5jHIczxJbe4Klf7Pdk7d6YqOag.mft
File: N5jHIczxJbe4Klf7Pdk7d6YqOag.mft (raw, json)
Hash identifier: PX1ydJ11jG/mrv5CZ2uOW0GRFcnrl/n8f+utNzDTYdA=
Subject key identifier: 11:90:28:79:3C:62:1D:5C:2A:EF:F4:6E:A5:D6:A3:27:11:22:D7:90
Authority key identifier: 37:98:C7:21:CC:F1:25:B7:B8:2A:57:FB:3D:D9:3B:77:A6:2A:39:A8
Certificate issuer: /CN=3798c721ccf125b7b82a57fb3dd93b77a62a39a8
Certificate serial: 019845F6160E84DB0EF70DD8B93170759D6A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/N5jHIczxJbe4Klf7Pdk7d6YqOag.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/70/1040ae-aa13-4cbb-90da-367b86fbcbf7/1/N5jHIczxJbe4Klf7Pdk7d6YqOag.mft
Manifest number: 0A69
Signing time: Sat 26 Jul 2025 09:00:11 +0000
Manifest this update: Sat 26 Jul 2025 09:00:11 +0000
Manifest next update: Sun 27 Jul 2025 09:00:11 +0000
Files and hashes: 1: N5jHIczxJbe4Klf7Pdk7d6YqOag.crl (hash: wjPZXZA1vQpjfgjgQe29hiW7l1HKAbpllaaqrRWMHOM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/70/1040ae-aa13-4cbb-90da-367b86fbcbf7/1/N5jHIczxJbe4Klf7Pdk7d6YqOag.crl
rsync://rpki.ripe.net/repository/DEFAULT/70/1040ae-aa13-4cbb-90da-367b86fbcbf7/1/N5jHIczxJbe4Klf7Pdk7d6YqOag.mft
rsync://rpki.ripe.net/repository/DEFAULT/N5jHIczxJbe4Klf7Pdk7d6YqOag.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 02:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:45:f6:16:0e:84:db:0e:f7:0d:d8:b9:31:70:75:9d:6a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3798c721ccf125b7b82a57fb3dd93b77a62a39a8
Validity
Not Before: Jul 26 09:00:11 2025 GMT
Not After : Jul 27 09:00:11 2025 GMT
Subject: CN=119028793c621d5c2aeff46ea5d6a3271122d790
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:10:5f:14:b2:2e:09:58:67:a5:30:32:14:2b:
1d:62:c4:c8:e7:5c:6a:b5:c4:73:d5:c9:98:90:e2:
14:77:f9:96:b2:c3:3c:00:50:75:3c:4c:26:73:31:
03:61:53:24:fb:57:0d:5d:47:d4:a1:cd:47:82:11:
05:6d:3e:c8:6a:c3:ac:d9:1d:4b:01:ea:7c:4c:86:
89:6d:d4:3d:2f:e1:aa:0a:83:78:dc:3f:d5:5c:af:
ac:7b:cb:e9:c3:69:fb:34:1b:67:d2:46:d6:06:83:
12:cc:b3:3f:23:9e:9a:72:24:89:81:97:db:aa:9e:
33:a8:e5:38:96:0f:86:ae:4e:e1:64:b3:1e:bf:aa:
f5:35:2a:c1:be:b8:fd:25:af:96:f4:b2:56:15:6e:
2a:d6:45:53:aa:55:8f:8f:2b:e2:fc:8d:9f:f5:7b:
b1:fd:00:36:90:94:a9:f4:d7:ce:57:db:c9:71:02:
35:70:41:60:4b:14:67:88:48:1b:8b:42:0a:18:06:
2d:a9:1e:5d:69:30:02:5b:25:f6:84:21:4a:39:4d:
fd:49:b6:c7:34:a0:d0:35:76:bc:8d:dc:16:df:4a:
2c:d9:37:a0:60:79:68:c2:a5:5d:e8:59:b1:aa:66:
07:49:ec:38:9f:48:8f:b2:a1:52:88:fd:09:77:8a:
0d:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:90:28:79:3C:62:1D:5C:2A:EF:F4:6E:A5:D6:A3:27:11:22:D7:90
X509v3 Authority Key Identifier:
keyid:37:98:C7:21:CC:F1:25:B7:B8:2A:57:FB:3D:D9:3B:77:A6:2A:39:A8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/N5jHIczxJbe4Klf7Pdk7d6YqOag.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/1040ae-aa13-4cbb-90da-367b86fbcbf7/1/N5jHIczxJbe4Klf7Pdk7d6YqOag.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/70/1040ae-aa13-4cbb-90da-367b86fbcbf7/1/N5jHIczxJbe4Klf7Pdk7d6YqOag.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5c:b8:8a:0b:68:f9:4e:78:d1:2d:77:2d:33:2c:53:66:ad:f8:
eb:5e:1d:0f:c1:9d:7b:b3:05:c3:05:70:8a:f6:ac:c4:66:7f:
dc:d6:1a:79:fa:39:d9:25:e2:80:59:33:a1:16:73:cd:8b:74:
8d:23:b8:88:ed:4b:0f:a8:7f:4f:be:6a:03:95:1c:a7:b1:b6:
77:74:ae:47:2e:83:a7:28:4c:2d:cd:43:9c:82:db:12:7f:3b:
bc:64:e3:ae:97:c2:04:30:02:91:27:31:23:93:d0:fc:76:89:
cf:6f:cd:41:ca:04:0d:03:bc:8b:bb:59:6b:33:90:07:47:70:
f9:b6:11:8e:aa:04:c6:a8:cc:f7:47:df:dc:8a:dc:d4:57:61:
82:03:9e:83:b2:6d:c3:dd:0c:b7:68:a1:40:38:28:04:0a:55:
82:84:ab:3a:d0:94:09:40:75:5f:ce:c5:c2:5c:a7:2c:f2:ba:
e2:d1:cf:4f:83:69:4b:4f:ef:37:53:41:83:e2:b0:fc:43:c2:
52:82:01:f1:8f:ea:39:e2:be:76:07:26:96:67:e9:53:aa:9f:
a4:e2:4e:ec:10:35:c8:60:ff:32:36:bb:29:0d:6e:4e:78:21:
a9:91:ef:b8:dd:17:4f:22:f3:1b:6a:ec:39:f5:b6:b4:cf:8a:
67:f6:49:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 26 11:59:49 2025 by rpki-client