Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/07/b1c31a-fc39-4160-b1da-8373a6a411bf/1/N0kwALmnBFMdoaF2a-U4Jx7gzMk.mft
File: N0kwALmnBFMdoaF2a-U4Jx7gzMk.mft (raw, json)
Hash identifier: dRkgA7QB3iyFvfhH7rs7qFnLA2wxe3peEOIM+FpQQ6o=
Subject key identifier: A2:7A:73:9B:F3:15:C6:7F:E5:CF:E4:D6:49:03:9E:89:47:22:98:CB
Authority key identifier: 37:49:30:00:B9:A7:04:53:1D:A1:A1:76:6B:E5:38:27:1E:E0:CC:C9
Certificate issuer: /CN=37493000b9a704531da1a1766be538271ee0ccc9
Certificate serial: 01992367D3B359D388A0401BCC2BC9E8A9B9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/N0kwALmnBFMdoaF2a-U4Jx7gzMk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/07/b1c31a-fc39-4160-b1da-8373a6a411bf/1/N0kwALmnBFMdoaF2a-U4Jx7gzMk.mft
Manifest number: 44
Signing time: Sun 07 Sep 2025 09:00:30 +0000
Manifest this update: Sun 07 Sep 2025 09:00:30 +0000
Manifest next update: Mon 08 Sep 2025 09:00:30 +0000
Files and hashes: 1: DWNtN1UdTBREYyaanUpXB_FD8t4.roa (hash: xHaaIDZ06J/70dT/JEm/SEDUNciR+mQ5wcEXZY/Pc2k=)
2: N0kwALmnBFMdoaF2a-U4Jx7gzMk.crl (hash: V6tOSQtfn1i+5n8sbKXNqPilRpJ2FFbz85Xm819mpo0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/07/b1c31a-fc39-4160-b1da-8373a6a411bf/1/N0kwALmnBFMdoaF2a-U4Jx7gzMk.crl
rsync://rpki.ripe.net/repository/DEFAULT/07/b1c31a-fc39-4160-b1da-8373a6a411bf/1/N0kwALmnBFMdoaF2a-U4Jx7gzMk.mft
rsync://rpki.ripe.net/repository/DEFAULT/N0kwALmnBFMdoaF2a-U4Jx7gzMk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 07:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:23:67:d3:b3:59:d3:88:a0:40:1b:cc:2b:c9:e8:a9:b9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=37493000b9a704531da1a1766be538271ee0ccc9
Validity
Not Before: Sep 7 09:00:30 2025 GMT
Not After : Sep 8 09:00:30 2025 GMT
Subject: CN=a27a739bf315c67fe5cfe4d649039e89472298cb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:77:5c:12:d1:8f:61:46:70:37:a0:6b:97:db:
01:c5:18:af:a0:77:95:a5:81:df:64:4d:2e:cf:9d:
16:48:c4:80:88:8f:80:0e:a2:25:b0:a4:f7:a7:27:
8b:20:3e:7c:87:52:30:94:00:a9:74:db:5f:c2:c4:
5c:33:bd:4a:11:3e:3e:a7:73:bc:f0:32:26:dd:67:
2c:ba:f7:cd:19:29:2f:d3:5b:c5:38:40:e4:ab:8f:
bb:ac:5a:bb:4e:08:dc:65:b4:ea:c5:a6:e8:10:0f:
44:c5:c7:7f:71:b3:3a:dd:2d:d6:cc:ec:44:b8:10:
01:45:1d:8c:27:19:8d:e8:e9:41:3e:9b:2a:51:91:
2c:c2:3f:25:51:57:1b:c4:64:82:af:90:9f:a2:0e:
bf:c8:f2:2c:c2:ef:96:67:f6:4d:64:5d:d1:c7:e8:
a2:9b:e2:71:10:a0:59:9e:bc:2b:0d:5e:84:6b:00:
39:dd:d2:b3:de:eb:8b:73:33:d3:57:ec:c4:5a:2c:
bd:c4:f7:22:e7:ee:5a:b3:54:01:e9:e3:57:e4:97:
6b:43:f8:66:e3:0f:e3:29:57:6d:a3:21:d3:48:0a:
b0:cc:70:7f:5b:d7:af:57:90:5c:16:4e:14:93:99:
3c:c7:0a:ed:57:43:71:6c:b2:8a:82:70:4d:4d:23:
2c:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:7A:73:9B:F3:15:C6:7F:E5:CF:E4:D6:49:03:9E:89:47:22:98:CB
X509v3 Authority Key Identifier:
keyid:37:49:30:00:B9:A7:04:53:1D:A1:A1:76:6B:E5:38:27:1E:E0:CC:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/N0kwALmnBFMdoaF2a-U4Jx7gzMk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/b1c31a-fc39-4160-b1da-8373a6a411bf/1/N0kwALmnBFMdoaF2a-U4Jx7gzMk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/07/b1c31a-fc39-4160-b1da-8373a6a411bf/1/N0kwALmnBFMdoaF2a-U4Jx7gzMk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
10:6a:b8:05:f7:91:da:c6:2e:44:13:81:b7:d1:6b:62:9b:89:
56:b1:01:9b:3f:3e:dd:a9:54:76:ea:e9:9f:d8:2c:24:6b:0b:
3c:3c:20:d8:ad:a0:8f:f9:d8:8c:93:a4:4d:85:95:54:7d:bf:
ea:58:fe:e3:a2:01:64:9f:c7:33:21:9e:77:36:06:00:24:3c:
8a:44:08:a9:be:11:70:7c:96:b0:c7:35:ba:b9:2b:6e:6d:48:
c6:e2:f9:b4:5b:3d:d1:4d:4f:8f:e7:b0:32:ea:c5:bc:d4:c3:
be:b1:3c:88:93:91:43:3c:3e:67:82:20:79:c8:db:40:98:65:
a2:49:db:79:31:fd:3b:fe:f2:c2:d7:3d:08:bb:01:dd:b9:db:
d0:dc:17:29:d9:7e:2f:d4:ac:c5:14:85:25:8e:bf:e4:cb:7f:
09:87:83:82:41:8b:bb:b2:a6:a3:d7:95:01:a0:27:6f:ba:ef:
56:29:63:b2:aa:36:5f:41:7b:af:72:d6:46:93:95:15:08:5a:
60:f3:4f:10:58:18:08:bd:7a:ac:08:0a:9e:0c:2d:90:ba:b5:
d8:22:d2:ea:38:a2:7d:57:5d:4d:03:54:f1:ec:43:80:95:35:
01:a0:2d:e7:67:67:94:4a:ed:d7:fb:67:69:67:88:10:46:b5:
e3:53:1c:11
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZkjZ9OzWdOIoEAbzCvJ6Km5MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM3NDkzMDAwYjlhNzA0NTMxZGExYTE3NjZiZTUzODI3MWVl
MGNjYzkwHhcNMjUwOTA3MDkwMDMwWhcNMjUwOTA4MDkwMDMwWjAzMTEwLwYDVQQD
EyhhMjdhNzM5YmYzMTVjNjdmZTVjZmU0ZDY0OTAzOWU4OTQ3MjI5OGNiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzHdcEtGPYUZwN6Brl9sBxRivoHeV
pYHfZE0uz50WSMSAiI+ADqIlsKT3pyeLID58h1IwlACpdNtfwsRcM71KET4+p3O8
8DIm3WcsuvfNGSkv01vFOEDkq4+7rFq7TgjcZbTqxaboEA9Excd/cbM63S3WzOxE
uBABRR2MJxmN6OlBPpsqUZEswj8lUVcbxGSCr5Cfog6/yPIswu+WZ/ZNZF3Rx+ii
m+JxEKBZnrwrDV6EawA53dKz3uuLczPTV+zEWiy9xPci5+5as1QB6eNX5JdrQ/hm
4w/jKVdtoyHTSAqwzHB/W9evV5BcFk4Uk5k8xwrtV0NxbLKKgnBNTSMstQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKJ6c5vzFcZ/5c/k1kkDnolHIpjLMB8GA1UdIwQY
MBaAFDdJMAC5pwRTHaGhdmvlOCce4MzJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTjBrd0FMbW5CRk1kb2FGMmEtVTRKeDdnek1rLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNy9iMWMzMWEtZmMzOS00MTYwLWIxZGEt
ODM3M2E2YTQxMWJmLzEvTjBrd0FMbW5CRk1kb2FGMmEtVTRKeDdnek1rLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wNy9iMWMzMWEtZmMzOS00MTYwLWIxZGEtODM3M2E2YTQxMWJm
LzEvTjBrd0FMbW5CRk1kb2FGMmEtVTRKeDdnek1rLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAEGq4BfeR
2sYuRBOBt9FrYpuJVrEBmz8+3alUdurpn9gsJGsLPDwg2K2gj/nYjJOkTYWVVH2/
6lj+46IBZJ/HMyGedzYGACQ8ikQIqb4RcHyWsMc1urkrbm1IxuL5tFs90U1Pj+ew
MurFvNTDvrE8iJORQzw+Z4IgecjbQJhloknbeTH9O/7ywtc9CLsB3bnb0NwXKdl+
L9SsxRSFJY6/5Mt/CYeDgkGLu7Kmo9eVAaAnb7rvViljsqo2X0F7r3LWRpOVFQha
YPNPEFgYCL16rAgKngwtkLq12CLS6jiifVddTQNU8exDgJU1AaAt52dnlErt1/tn
aWeIEEa141McEQ==
-----END CERTIFICATE-----
Generated at Sun Sep 7 13:50:24 2025 by rpki-client