Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/af/46c38b-4324-44aa-9bb5-386910dcb903/1/N-DLWK4j1HOuE6c0G3pzvdECig0.mft
File: N-DLWK4j1HOuE6c0G3pzvdECig0.mft (raw, json)
Hash identifier: gpXR9O/MX7eoCtU5hB3a0oQ957ACJDzJ2PKPEJHmQKg=
Subject key identifier: D9:64:1B:0D:E4:87:DC:DE:DA:1A:51:AF:7D:23:84:A8:1B:B8:B8:37
Authority key identifier: 37:E0:CB:58:AE:23:D4:73:AE:13:A7:34:1B:7A:73:BD:D1:02:8A:0D
Certificate issuer: /CN=37e0cb58ae23d473ae13a7341b7a73bdd1028a0d
Certificate serial: 01984B54190F64B25D148FB05A05159ACC02
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/N-DLWK4j1HOuE6c0G3pzvdECig0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/af/46c38b-4324-44aa-9bb5-386910dcb903/1/N-DLWK4j1HOuE6c0G3pzvdECig0.mft
Manifest number: 0FFB
Signing time: Sun 27 Jul 2025 10:00:59 +0000
Manifest this update: Sun 27 Jul 2025 10:00:59 +0000
Manifest next update: Mon 28 Jul 2025 10:00:59 +0000
Files and hashes: 1: N-DLWK4j1HOuE6c0G3pzvdECig0.crl (hash: c4tzCD5JRn7FqJNr0FuQSOuSsOROPkR2j7Oz0Zyoe94=)
2: cxXgE4ze3p5Y_SSxlmeJ4o5QzaU.roa (hash: VnVBSnuyvJSL8u2y/xmozn76q7jfteZhwwoJt7Qqpuc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/af/46c38b-4324-44aa-9bb5-386910dcb903/1/N-DLWK4j1HOuE6c0G3pzvdECig0.crl
rsync://rpki.ripe.net/repository/DEFAULT/af/46c38b-4324-44aa-9bb5-386910dcb903/1/N-DLWK4j1HOuE6c0G3pzvdECig0.mft
rsync://rpki.ripe.net/repository/DEFAULT/N-DLWK4j1HOuE6c0G3pzvdECig0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 05:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:4b:54:19:0f:64:b2:5d:14:8f:b0:5a:05:15:9a:cc:02
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=37e0cb58ae23d473ae13a7341b7a73bdd1028a0d
Validity
Not Before: Jul 27 10:00:59 2025 GMT
Not After : Jul 28 10:00:59 2025 GMT
Subject: CN=d9641b0de487dcdeda1a51af7d2384a81bb8b837
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:51:c4:6e:3d:96:fb:59:e5:85:8b:07:31:49:
6e:f4:d0:63:b9:83:c7:7c:7a:fb:0f:26:69:4e:93:
b1:62:09:b9:b8:79:f2:ff:50:f5:42:f8:f9:e3:6c:
f8:d2:f9:3e:14:1f:e1:fa:73:08:d8:38:b5:c1:86:
56:0f:d2:fc:03:0a:69:fa:74:ca:8e:21:8f:06:9b:
ad:35:82:50:19:fe:d0:db:9c:e8:bd:40:a3:29:3d:
9e:cb:9f:9e:6e:dd:48:7e:ca:08:3e:0d:2d:f4:c5:
b9:df:22:2d:5d:45:76:f6:62:48:a1:50:22:a2:85:
d5:08:ac:d0:50:37:51:00:b2:e3:d0:2a:68:f9:b6:
45:64:46:b3:71:71:99:a5:11:0b:7b:72:7a:f0:5c:
1f:f8:f7:0e:cc:26:07:e5:ad:2e:70:f7:07:61:11:
88:76:b7:21:32:11:a2:ff:1e:91:e4:b0:65:a6:f4:
37:41:cf:a8:7c:e2:ea:83:cd:ea:57:a9:b5:77:61:
39:62:95:be:fd:d0:3e:1a:b5:3c:a8:db:1c:07:52:
cd:04:71:18:55:da:a4:89:48:f2:eb:bb:23:03:0b:
3e:1b:8c:7f:c9:2e:16:c5:80:d9:02:89:63:b7:74:
28:1d:d0:30:71:b6:fe:e0:b4:ed:c6:48:e2:c9:15:
e9:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:64:1B:0D:E4:87:DC:DE:DA:1A:51:AF:7D:23:84:A8:1B:B8:B8:37
X509v3 Authority Key Identifier:
keyid:37:E0:CB:58:AE:23:D4:73:AE:13:A7:34:1B:7A:73:BD:D1:02:8A:0D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/N-DLWK4j1HOuE6c0G3pzvdECig0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/46c38b-4324-44aa-9bb5-386910dcb903/1/N-DLWK4j1HOuE6c0G3pzvdECig0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/af/46c38b-4324-44aa-9bb5-386910dcb903/1/N-DLWK4j1HOuE6c0G3pzvdECig0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
66:52:30:3e:3e:89:23:fd:e2:53:e8:fe:ce:d3:17:bf:d7:5d:
97:5f:90:37:7d:8d:44:d8:c3:1f:a5:b4:4a:d7:66:e5:b1:ce:
15:c6:c3:cf:3e:8a:5a:bb:3e:19:c6:2c:81:a9:0e:6d:71:e1:
db:91:73:d4:7b:ce:21:ce:45:9a:45:62:b3:2d:18:e7:f9:41:
a6:72:1c:ec:4a:9c:8e:d8:8d:4c:78:86:64:69:c9:b1:6f:1e:
52:38:4d:bd:36:93:a7:74:48:24:0c:b1:03:80:03:07:8a:22:
72:a3:52:d5:dc:d4:f9:52:6f:4d:29:6e:b9:b9:be:c2:bc:4b:
7e:fb:08:65:07:1e:3e:ff:d5:aa:6d:62:e4:5f:06:62:d5:2b:
3a:de:ac:a8:43:8b:8c:78:dc:7c:5f:41:cc:55:1c:c5:29:66:
bc:54:85:6b:b7:e9:2d:58:74:7d:3e:f2:7a:1d:4d:58:fd:2a:
5c:fd:b7:9c:16:b7:12:4d:cb:cc:02:68:8a:f5:1e:91:87:1f:
36:03:5f:cb:e6:1a:c2:85:f7:85:60:c9:03:8a:f8:9e:78:76:
09:89:da:21:9f:d0:e7:4b:e3:ba:54:72:d4:f6:85:d6:ff:9c:
f5:4c:08:b8:70:07:52:47:af:20:4b:d1:76:17:2e:1a:d1:82:
ec:23:df:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 12:04:31 2025 by rpki-client