Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ad/a977ea-4a93-4618-b7ff-35b21bffad4d/1/N6NS4Xr4fuLl3Bc9FVQ9pjvlVHM.mft
File: N6NS4Xr4fuLl3Bc9FVQ9pjvlVHM.mft (raw, json)
Hash identifier: eWXOmv2XZh2IAbmqjp1MhvOYL3QaS9dmgaYhi0sav9w=
Subject key identifier: C7:87:74:62:EE:20:E1:E8:98:75:52:D6:BE:C0:7A:30:B0:2F:F4:26
Authority key identifier: 37:A3:52:E1:7A:F8:7E:E2:E5:DC:17:3D:15:54:3D:A6:3B:E5:54:73
Certificate issuer: /CN=37a352e17af87ee2e5dc173d15543da63be55473
Certificate serial: 01984AAEA7E92B264F6FAF034D18B542B489
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/N6NS4Xr4fuLl3Bc9FVQ9pjvlVHM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ad/a977ea-4a93-4618-b7ff-35b21bffad4d/1/N6NS4Xr4fuLl3Bc9FVQ9pjvlVHM.mft
Manifest number: 0CA6
Signing time: Sun 27 Jul 2025 07:00:16 +0000
Manifest this update: Sun 27 Jul 2025 07:00:16 +0000
Manifest next update: Mon 28 Jul 2025 07:00:16 +0000
Files and hashes: 1: N6NS4Xr4fuLl3Bc9FVQ9pjvlVHM.crl (hash: x9Hykw8iWl+uBlJAIlnpAKwZ9mXt9KHm6CDVIUV481s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ad/a977ea-4a93-4618-b7ff-35b21bffad4d/1/N6NS4Xr4fuLl3Bc9FVQ9pjvlVHM.crl
rsync://rpki.ripe.net/repository/DEFAULT/ad/a977ea-4a93-4618-b7ff-35b21bffad4d/1/N6NS4Xr4fuLl3Bc9FVQ9pjvlVHM.mft
rsync://rpki.ripe.net/repository/DEFAULT/N6NS4Xr4fuLl3Bc9FVQ9pjvlVHM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 05:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:4a:ae:a7:e9:2b:26:4f:6f:af:03:4d:18:b5:42:b4:89
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=37a352e17af87ee2e5dc173d15543da63be55473
Validity
Not Before: Jul 27 07:00:16 2025 GMT
Not After : Jul 28 07:00:16 2025 GMT
Subject: CN=c7877462ee20e1e8987552d6bec07a30b02ff426
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:9d:0b:cf:84:25:88:0e:d0:cb:7e:f2:94:d1:
84:4c:0c:66:d8:a8:08:2b:0c:3a:01:4a:16:a9:0e:
fa:af:04:b0:8e:f6:39:17:a2:2c:f6:95:50:09:fc:
64:d6:b6:b4:59:ae:b2:e6:64:81:7a:d5:00:ab:8a:
50:4e:fb:65:6e:9f:17:c0:e4:44:d0:6e:f8:ca:be:
71:a1:90:d6:b9:59:a4:40:bc:da:12:73:66:1f:ef:
49:b2:86:f9:49:c3:9e:a0:a5:e2:52:74:fe:67:88:
28:a6:86:37:dd:3a:10:cc:7c:36:03:d2:36:a7:7c:
df:c5:50:45:a7:fb:a0:1c:72:a5:fd:4b:03:76:90:
5c:f6:4c:29:02:a8:2d:57:7f:66:33:cb:ea:e2:ea:
11:8d:55:a9:60:94:20:44:f8:f0:89:fc:ba:1c:79:
1c:15:fe:2d:f7:a1:09:c9:e9:b0:61:ac:c2:d2:23:
93:b9:46:15:bf:0b:15:ef:58:34:df:92:0e:a1:31:
94:98:20:9f:2a:0b:4e:fb:87:52:8e:99:e0:d7:38:
13:0f:c5:bf:9b:d6:10:cd:66:0c:9c:e2:0a:33:e0:
6d:3c:89:8e:32:2d:47:d3:a8:4c:56:fa:35:b9:3e:
14:80:e5:9e:02:e7:85:68:af:79:6a:b4:15:4e:42:
18:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:87:74:62:EE:20:E1:E8:98:75:52:D6:BE:C0:7A:30:B0:2F:F4:26
X509v3 Authority Key Identifier:
keyid:37:A3:52:E1:7A:F8:7E:E2:E5:DC:17:3D:15:54:3D:A6:3B:E5:54:73
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/N6NS4Xr4fuLl3Bc9FVQ9pjvlVHM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/a977ea-4a93-4618-b7ff-35b21bffad4d/1/N6NS4Xr4fuLl3Bc9FVQ9pjvlVHM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/a977ea-4a93-4618-b7ff-35b21bffad4d/1/N6NS4Xr4fuLl3Bc9FVQ9pjvlVHM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
13:cc:80:b1:ee:1c:42:38:d7:ed:65:fe:bf:5b:84:1c:44:b0:
17:83:2b:48:38:63:71:1c:32:02:b8:82:30:e3:82:d4:77:06:
79:19:6f:d1:b3:37:f1:f8:b8:7b:db:34:a1:08:89:21:59:49:
40:b6:21:4f:ea:1a:a0:b3:c2:e9:db:0e:98:72:5a:84:93:c7:
74:c8:67:bc:c8:d4:fd:25:92:78:8b:aa:4e:3c:a2:f0:17:05:
cc:ab:e1:c1:5f:bd:23:c8:16:d1:c3:8c:b2:85:70:7e:6d:7a:
31:c9:d9:57:26:71:41:bf:57:d3:50:3b:8e:6e:93:6d:d1:5b:
3b:03:7a:20:81:c2:4f:f4:c8:c5:28:70:44:f0:a5:29:9b:9c:
9e:01:97:42:60:af:17:ec:2f:07:8f:ea:f8:ac:28:b9:f3:d6:
1a:62:e7:33:6a:d9:1e:c5:f5:48:c5:90:9f:49:a3:dd:d6:46:
c3:fc:b4:ad:4c:2b:63:e2:b0:4e:55:44:f8:01:02:31:d9:18:
08:ba:be:3e:2f:93:12:2f:c8:db:1d:88:1e:d5:2d:46:21:fa:
76:07:45:5c:9c:1a:e7:76:1b:1c:1f:e6:08:60:b8:d5:c1:eb:
b4:e5:78:10:75:77:bf:3c:0f:76:28:9c:90:fb:ce:fa:b1:72:
83:48:ed:7b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZhKrqfpKyZPb68DTRi1QrSJMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM3YTM1MmUxN2FmODdlZTJlNWRjMTczZDE1NTQzZGE2M2Jl
NTU0NzMwHhcNMjUwNzI3MDcwMDE2WhcNMjUwNzI4MDcwMDE2WjAzMTEwLwYDVQQD
EyhjNzg3NzQ2MmVlMjBlMWU4OTg3NTUyZDZiZWMwN2EzMGIwMmZmNDI2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmp0Lz4QliA7Qy37ylNGETAxm2KgI
Kww6AUoWqQ76rwSwjvY5F6Is9pVQCfxk1ra0Wa6y5mSBetUAq4pQTvtlbp8XwORE
0G74yr5xoZDWuVmkQLzaEnNmH+9Jsob5ScOeoKXiUnT+Z4gopoY33ToQzHw2A9I2
p3zfxVBFp/ugHHKl/UsDdpBc9kwpAqgtV39mM8vq4uoRjVWpYJQgRPjwify6HHkc
Ff4t96EJyemwYazC0iOTuUYVvwsV71g035IOoTGUmCCfKgtO+4dSjpng1zgTD8W/
m9YQzWYMnOIKM+BtPImOMi1H06hMVvo1uT4UgOWeAueFaK95arQVTkIY7wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMeHdGLuIOHomHVS1r7AejCwL/QmMB8GA1UdIwQY
MBaAFDejUuF6+H7i5dwXPRVUPaY75VRzMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTjZOUzRYcjRmdUxsM0JjOUZWUTlwanZsVkhNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hZC9hOTc3ZWEtNGE5My00NjE4LWI3ZmYt
MzViMjFiZmZhZDRkLzEvTjZOUzRYcjRmdUxsM0JjOUZWUTlwanZsVkhNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hZC9hOTc3ZWEtNGE5My00NjE4LWI3ZmYtMzViMjFiZmZhZDRk
LzEvTjZOUzRYcjRmdUxsM0JjOUZWUTlwanZsVkhNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAE8yAse4c
QjjX7WX+v1uEHESwF4MrSDhjcRwyAriCMOOC1HcGeRlv0bM38fi4e9s0oQiJIVlJ
QLYhT+oaoLPC6dsOmHJahJPHdMhnvMjU/SWSeIuqTjyi8BcFzKvhwV+9I8gW0cOM
soVwfm16McnZVyZxQb9X01A7jm6TbdFbOwN6IIHCT/TIxShwRPClKZucngGXQmCv
F+wvB4/q+KwoufPWGmLnM2rZHsX1SMWQn0mj3dZGw/y0rUwrY+KwTlVE+AECMdkY
CLq+Pi+TEi/I2x2IHtUtRiH6dgdFXJwa53YbHB/mCGC41cHrtOV4EHV3vzwPdiic
kPvO+rFyg0jtew==
-----END CERTIFICATE-----
Generated at Sun Jul 27 10:24:17 2025 by rpki-client