Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/1336c7-a33f-4ec6-82d7-f44166bb2db0/1/N_vfL1-FXl4cpI53w73TO9R7RDg.mft
File: N_vfL1-FXl4cpI53w73TO9R7RDg.mft (raw, json)
Hash identifier: a/395foG7XT/qYo4v8fHm5QmSNbWRN5gMnPrvqlUtRo=
Subject key identifier: E1:C7:01:05:C1:6C:85:2A:33:C1:67:6F:CD:D4:62:1C:C2:CB:D4:F2
Authority key identifier: 37:FB:DF:2F:5F:85:5E:5E:1C:A4:8E:77:C3:BD:D3:3B:D4:7B:44:38
Certificate issuer: /CN=37fbdf2f5f855e5e1ca48e77c3bdd33bd47b4438
Certificate serial: 019849D2C8BB3DDA44A2EA25B79B68C15399
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/N_vfL1-FXl4cpI53w73TO9R7RDg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/1336c7-a33f-4ec6-82d7-f44166bb2db0/1/N_vfL1-FXl4cpI53w73TO9R7RDg.mft
Manifest number: 1604
Signing time: Sun 27 Jul 2025 03:00:07 +0000
Manifest this update: Sun 27 Jul 2025 03:00:07 +0000
Manifest next update: Mon 28 Jul 2025 03:00:07 +0000
Files and hashes: 1: N_vfL1-FXl4cpI53w73TO9R7RDg.crl (hash: 1OleqYy55xYLeH5bozl+6s3W/5L2S1G4FBUhyszWFvk=)
2: PSL2OSxsoutF8sVX_uvIaiWUApI.roa (hash: IoDHAxb+U2Gaz8HUwj/mdMtnodnlu8iYqMMfCwQw35I=)
3: t0FWDnJPs6XvZokHfTcCnjKRaeE.roa (hash: Aou1i/O3zguK2P9WdtUpbw8G9iRuYff1/7SNrw+Pohw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8a/1336c7-a33f-4ec6-82d7-f44166bb2db0/1/N_vfL1-FXl4cpI53w73TO9R7RDg.crl
rsync://rpki.ripe.net/repository/DEFAULT/8a/1336c7-a33f-4ec6-82d7-f44166bb2db0/1/N_vfL1-FXl4cpI53w73TO9R7RDg.mft
rsync://rpki.ripe.net/repository/DEFAULT/N_vfL1-FXl4cpI53w73TO9R7RDg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 20:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:49:d2:c8:bb:3d:da:44:a2:ea:25:b7:9b:68:c1:53:99
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=37fbdf2f5f855e5e1ca48e77c3bdd33bd47b4438
Validity
Not Before: Jul 27 03:00:07 2025 GMT
Not After : Jul 28 03:00:07 2025 GMT
Subject: CN=e1c70105c16c852a33c1676fcdd4621cc2cbd4f2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:85:94:81:8c:98:f8:55:2d:b2:6d:1c:65:ef:
fd:e6:d8:be:df:d3:96:83:78:5f:69:ee:ef:da:06:
a6:7f:41:e2:4a:ab:67:a6:9c:a2:06:e8:9e:1c:6c:
7b:b1:ce:ba:b3:6a:93:53:13:15:eb:20:6b:78:66:
64:45:22:10:b4:d6:d6:0e:84:e3:85:ec:1b:0c:e5:
6a:68:7a:ad:e3:ce:45:24:1c:31:38:2c:2e:ad:a0:
3e:a1:58:58:86:3f:fa:37:a9:c1:d3:a9:8d:ec:69:
11:fe:eb:2c:0f:4a:f3:25:d8:43:5f:fc:97:5b:af:
89:1f:f9:b8:0a:f6:ca:b5:90:76:a8:bd:03:f3:81:
be:c1:85:d9:f2:d2:0a:20:86:83:28:d5:56:56:04:
9c:40:4a:f8:2b:38:85:ef:65:88:cb:f4:ef:73:cb:
ea:4c:01:52:de:c3:d5:c6:da:f9:8c:5b:98:49:6f:
09:0c:c3:26:77:c9:c4:14:30:dc:11:c3:e4:a5:bf:
6f:8c:08:24:36:a0:8c:5a:dd:51:c7:58:5b:b8:19:
ee:4b:5a:05:65:88:a2:de:dd:b0:84:38:ba:0f:df:
f2:c4:a1:1a:8c:1d:8f:a0:43:4e:af:1a:00:00:28:
32:57:d1:1f:f3:e4:87:51:5c:89:32:26:89:5a:45:
79:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:C7:01:05:C1:6C:85:2A:33:C1:67:6F:CD:D4:62:1C:C2:CB:D4:F2
X509v3 Authority Key Identifier:
keyid:37:FB:DF:2F:5F:85:5E:5E:1C:A4:8E:77:C3:BD:D3:3B:D4:7B:44:38
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/N_vfL1-FXl4cpI53w73TO9R7RDg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/1336c7-a33f-4ec6-82d7-f44166bb2db0/1/N_vfL1-FXl4cpI53w73TO9R7RDg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/1336c7-a33f-4ec6-82d7-f44166bb2db0/1/N_vfL1-FXl4cpI53w73TO9R7RDg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9a:c2:ff:0f:00:7f:81:1c:4c:a5:e7:6b:64:f0:b4:3e:ff:e1:
c0:ae:15:fa:8b:59:8c:81:4e:1d:e1:f8:71:6c:7a:17:5e:34:
8f:00:33:8d:d3:df:7b:33:6a:1b:4a:6b:52:23:33:42:dd:4a:
12:4c:b4:50:b8:d4:7a:52:4f:05:64:f3:a3:61:7d:f3:4b:80:
59:0f:80:2e:2e:bb:ca:a5:59:54:d0:78:c5:5e:8f:80:6f:37:
24:25:16:e6:d0:9b:42:b2:cf:bd:40:2b:44:33:eb:7e:da:40:
16:b9:92:20:a5:c6:ca:ea:80:eb:f4:14:78:71:09:e8:c7:35:
bd:4f:5d:a0:4d:3c:87:80:90:68:db:54:e5:74:b7:a7:2c:c6:
59:19:bd:85:4a:b4:88:d6:d2:e8:43:19:2d:c3:32:0d:a0:28:
7b:8c:d9:59:19:b0:93:a6:c5:55:e5:7a:0b:1c:87:c1:e4:70:
b3:a9:29:4b:80:2c:04:7f:d1:19:d7:43:ea:33:13:cc:ad:48:
b2:eb:18:32:76:0a:a0:d1:c4:5a:a3:a5:0e:4b:50:dc:37:47:
c2:aa:6d:cb:2f:55:18:38:a7:88:e3:19:e8:38:b8:4c:da:f5:
08:21:d5:20:4d:90:f6:9b:cb:c1:2a:27:17:cc:94:ee:2d:ad:
72:21:13:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 04:37:05 2025 by rpki-client