Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/22/e128e0-00a6-4689-95be-524c2109cb05/1/N4kaRySqxrXaAAUymqOlq-h3edY.mft
File: N4kaRySqxrXaAAUymqOlq-h3edY.mft (raw, json)
Hash identifier: 8FZp55B+XucWYv4wJb+d3eFNi2q2Tx1KOpYYDzMHx80=
Subject key identifier: 18:B7:B7:0F:63:38:46:F0:A0:75:A0:CE:25:E5:17:7F:32:92:0E:EE
Authority key identifier: 37:89:1A:47:24:AA:C6:B5:DA:00:05:32:9A:A3:A5:AB:E8:77:79:D6
Certificate issuer: /CN=37891a4724aac6b5da0005329aa3a5abe87779d6
Certificate serial: 0199228D0F475D88C9777A3A518E7598C527
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/N4kaRySqxrXaAAUymqOlq-h3edY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/22/e128e0-00a6-4689-95be-524c2109cb05/1/N4kaRySqxrXaAAUymqOlq-h3edY.mft
Manifest number: 1670
Signing time: Sun 07 Sep 2025 05:01:33 +0000
Manifest this update: Sun 07 Sep 2025 05:01:33 +0000
Manifest next update: Mon 08 Sep 2025 05:01:33 +0000
Files and hashes: 1: N4kaRySqxrXaAAUymqOlq-h3edY.crl (hash: 9rijTjHAQOGO/v5OO+943Eob5ChKZDVyD6+fOv9Q/is=)
2: mUVCmxlyRHOtQgqO0rU0Vfd_JxM.roa (hash: 4mDmX111g5PLlffQE3BOZIPTW2uYVk7yBC9oTl48FX8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/22/e128e0-00a6-4689-95be-524c2109cb05/1/N4kaRySqxrXaAAUymqOlq-h3edY.crl
rsync://rpki.ripe.net/repository/DEFAULT/22/e128e0-00a6-4689-95be-524c2109cb05/1/N4kaRySqxrXaAAUymqOlq-h3edY.mft
rsync://rpki.ripe.net/repository/DEFAULT/N4kaRySqxrXaAAUymqOlq-h3edY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 05:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:22:8d:0f:47:5d:88:c9:77:7a:3a:51:8e:75:98:c5:27
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=37891a4724aac6b5da0005329aa3a5abe87779d6
Validity
Not Before: Sep 7 05:01:33 2025 GMT
Not After : Sep 8 05:01:33 2025 GMT
Subject: CN=18b7b70f633846f0a075a0ce25e5177f32920eee
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:8a:38:79:e9:02:54:d2:d5:2d:d8:ba:a1:b2:
a3:f4:d7:6d:93:b3:c2:19:99:fb:4e:a4:b9:fc:0a:
95:0c:4b:51:c9:c7:84:cc:6a:03:75:af:a5:6e:71:
e5:01:79:63:a4:a5:29:4d:05:c4:ba:9d:79:40:bf:
44:4b:cf:f1:3a:a8:d3:7a:8c:c1:24:c9:ca:af:aa:
56:bd:36:a8:27:54:39:e3:d8:6c:01:49:92:4c:2f:
f7:04:f1:49:03:11:c3:06:3c:81:2c:37:00:ee:c9:
7c:89:1b:15:9b:0c:5b:09:a4:19:d8:d6:a4:30:ae:
30:1a:ff:bb:4d:cd:43:fc:d2:58:86:54:2f:1d:95:
e4:f3:0a:96:06:8c:af:e6:1b:85:ca:bc:48:01:3a:
b3:65:68:79:bd:ca:6d:2a:04:cc:fe:8d:28:12:7a:
8d:ea:28:e4:96:a9:34:fb:b3:d9:77:7c:c6:14:65:
43:d3:c7:1d:18:70:34:30:40:66:a7:7b:e5:34:0a:
6d:7a:65:81:1c:43:f2:40:89:c8:8b:83:eb:a9:1c:
0d:87:fd:53:aa:94:9b:77:a8:6c:71:41:cb:48:93:
b3:0f:e7:0c:93:b1:e6:a3:c1:84:ba:a6:e8:4d:40:
f3:ca:6d:e8:a0:c2:17:a2:db:fc:99:d5:d4:d8:28:
0e:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:B7:B7:0F:63:38:46:F0:A0:75:A0:CE:25:E5:17:7F:32:92:0E:EE
X509v3 Authority Key Identifier:
keyid:37:89:1A:47:24:AA:C6:B5:DA:00:05:32:9A:A3:A5:AB:E8:77:79:D6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/N4kaRySqxrXaAAUymqOlq-h3edY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/e128e0-00a6-4689-95be-524c2109cb05/1/N4kaRySqxrXaAAUymqOlq-h3edY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/22/e128e0-00a6-4689-95be-524c2109cb05/1/N4kaRySqxrXaAAUymqOlq-h3edY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
92:d6:86:ae:50:2b:ab:9a:e4:a6:f0:0e:40:dd:62:19:2a:a1:
20:88:06:56:1f:79:19:9c:50:39:1b:75:63:4d:03:3b:b1:d7:
89:c4:37:53:86:82:81:aa:cf:45:1e:b4:d5:dc:59:2f:67:3b:
1f:6e:b1:e8:92:31:80:4e:78:45:1f:14:b7:eb:ec:db:4c:f7:
c1:8b:39:4f:cb:62:60:fa:6c:94:e0:2c:1b:50:c9:74:17:54:
52:da:20:e8:44:12:02:8c:87:21:93:14:80:86:85:dd:28:ea:
5c:e1:7a:cd:f5:cd:53:55:3d:0c:56:08:a3:eb:bb:2c:c2:90:
d1:fa:57:67:9d:91:73:79:0c:13:e4:29:1f:85:5a:c0:3d:60:
7e:bd:e7:a4:6d:c5:b4:ea:0e:61:7b:63:f0:ad:cc:bb:6d:16:
a8:b7:0b:27:92:0c:9b:5a:53:7c:d4:d8:cb:02:c5:6f:a8:c6:
73:dd:6d:5b:72:f7:c2:50:8a:6e:bd:20:44:37:42:fc:93:cf:
b8:5d:04:2f:cd:34:56:28:19:5b:35:7b:53:96:66:49:09:90:
d7:0a:ed:de:4f:2f:1c:3b:f9:8c:1c:f0:a7:16:99:88:d4:17:
02:66:e0:45:56:69:1f:24:3c:e4:c6:66:dd:1c:1a:59:c5:70:
ef:80:3f:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 11:20:47 2025 by rpki-client