Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/b5dfcc-cd35-4837-b892-f226b144a89a/1/N0u2qfskWk-vy41iHRx19Z1uyhk.mft
File: N0u2qfskWk-vy41iHRx19Z1uyhk.mft (raw, json)
Hash identifier: ngx9v3DaD0q2OG/ralRQ13mEAQ7H5hwVi7C2mTUJti0=
Subject key identifier: 3D:0A:B8:70:E7:8A:CE:4B:B3:B3:45:F2:35:B1:32:9B:EB:DF:6F:2F
Authority key identifier: 37:4B:B6:A9:FB:24:5A:4F:AF:CB:8D:62:1D:1C:75:F5:9D:6E:CA:19
Certificate issuer: /CN=374bb6a9fb245a4fafcb8d621d1c75f59d6eca19
Certificate serial: 019849653AF92477E12643A46BCE0CC2DE8A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/N0u2qfskWk-vy41iHRx19Z1uyhk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2a/b5dfcc-cd35-4837-b892-f226b144a89a/1/N0u2qfskWk-vy41iHRx19Z1uyhk.mft
Manifest number: 0486
Signing time: Sun 27 Jul 2025 01:00:27 +0000
Manifest this update: Sun 27 Jul 2025 01:00:27 +0000
Manifest next update: Mon 28 Jul 2025 01:00:27 +0000
Files and hashes: 1: N0u2qfskWk-vy41iHRx19Z1uyhk.crl (hash: fgXoQ/Z/P52ICvi1mt9IH+Qk8j5ZDf7uX/Q2LPyNwH8=)
2: W09Hs7YV_rlCMmFfP5OjxUCv0DQ.roa (hash: zUsXUKlv5KVQErO/W3pmAzbRpm0hLO9n4LhnJ2Df8ps=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2a/b5dfcc-cd35-4837-b892-f226b144a89a/1/N0u2qfskWk-vy41iHRx19Z1uyhk.crl
rsync://rpki.ripe.net/repository/DEFAULT/2a/b5dfcc-cd35-4837-b892-f226b144a89a/1/N0u2qfskWk-vy41iHRx19Z1uyhk.mft
rsync://rpki.ripe.net/repository/DEFAULT/N0u2qfskWk-vy41iHRx19Z1uyhk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 20:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:49:65:3a:f9:24:77:e1:26:43:a4:6b:ce:0c:c2:de:8a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=374bb6a9fb245a4fafcb8d621d1c75f59d6eca19
Validity
Not Before: Jul 27 01:00:27 2025 GMT
Not After : Jul 28 01:00:27 2025 GMT
Subject: CN=3d0ab870e78ace4bb3b345f235b1329bebdf6f2f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:10:7c:7f:87:a4:a2:6b:74:ee:fd:10:6f:45:
9b:ce:72:39:e3:d3:f2:ae:a5:d8:c9:61:6b:d5:36:
e4:5e:ee:f6:ed:5f:e9:60:cf:7b:a7:7a:36:6b:c8:
fe:18:1a:ee:52:98:72:fe:e1:53:7d:a0:a3:bd:34:
c6:3f:fe:bd:8b:f4:09:71:9a:da:93:03:b9:5b:87:
0c:4c:2b:ce:86:76:d1:24:50:e0:fa:52:92:cf:50:
a3:d3:f0:cd:a1:63:f3:db:3e:97:24:42:cd:d5:78:
18:c3:ab:4a:33:f8:5c:14:04:8b:05:c5:68:ed:35:
ed:84:7e:8d:ed:9c:ef:f6:7c:30:33:fa:36:84:19:
8b:b7:d4:33:e5:d8:01:e5:04:04:c4:89:63:c0:e8:
4a:a0:c0:18:81:0f:f8:76:01:77:55:c2:5d:64:d5:
23:3f:0e:08:7e:f4:e5:21:2a:04:e5:a7:bc:5c:20:
a4:86:8c:2b:f5:49:d7:97:b9:5c:e3:a3:63:28:da:
73:5c:bf:63:10:c2:3b:39:26:a7:46:9a:00:df:11:
6a:0a:ca:58:cb:ff:06:f7:75:80:12:e6:b5:ce:dc:
c0:80:11:ef:96:7b:76:39:c4:2d:fc:13:f0:76:5c:
3b:2a:0c:b1:11:94:d1:4d:88:f2:c9:78:47:7f:32:
35:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:0A:B8:70:E7:8A:CE:4B:B3:B3:45:F2:35:B1:32:9B:EB:DF:6F:2F
X509v3 Authority Key Identifier:
keyid:37:4B:B6:A9:FB:24:5A:4F:AF:CB:8D:62:1D:1C:75:F5:9D:6E:CA:19
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/N0u2qfskWk-vy41iHRx19Z1uyhk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/b5dfcc-cd35-4837-b892-f226b144a89a/1/N0u2qfskWk-vy41iHRx19Z1uyhk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/b5dfcc-cd35-4837-b892-f226b144a89a/1/N0u2qfskWk-vy41iHRx19Z1uyhk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
44:d8:95:15:93:d3:ca:7f:9e:3f:5e:37:2f:59:40:f8:ff:ce:
10:95:14:2e:3e:3a:1b:91:02:50:95:33:ce:3a:78:f3:fd:42:
bb:b9:72:6f:a7:c3:60:2e:2c:c7:1a:c4:d0:1b:98:75:78:10:
90:dd:1b:1c:5b:52:70:a8:39:54:29:3e:6c:38:d2:ac:7d:c9:
66:81:c5:94:86:40:8c:f9:fa:47:dd:c7:95:8d:25:b7:27:24:
74:ef:aa:ba:ab:90:ac:70:af:b5:17:4a:c8:ac:aa:ad:2f:29:
f7:7e:be:7a:83:3e:f0:09:c4:f3:6b:53:5e:9b:ca:29:47:7b:
90:c9:d9:44:06:ed:61:ec:e7:c9:9e:c5:d2:a1:d8:cc:93:dd:
32:23:f4:87:4c:2f:a4:40:f9:a7:db:d9:b3:83:f1:92:81:2f:
ec:89:bd:42:2a:bd:ed:29:ed:b6:d3:cc:3f:1f:d7:be:45:a2:
a2:49:e4:aa:a0:8e:04:b2:0e:a8:dc:f8:2f:c0:2f:3f:6c:2e:
c0:d3:61:08:97:77:aa:54:03:b5:73:dc:43:37:03:5b:4c:5e:
89:3a:94:33:47:31:8c:85:6a:13:d4:48:cd:db:ed:ff:d8:5b:
a2:f3:f0:40:51:8a:00:fc:11:94:1d:2c:e6:05:71:54:cd:0d:
fc:17:91:99
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZhJZTr5JHfhJkOka84Mwt6KMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM3NGJiNmE5ZmIyNDVhNGZhZmNiOGQ2MjFkMWM3NWY1OWQ2
ZWNhMTkwHhcNMjUwNzI3MDEwMDI3WhcNMjUwNzI4MDEwMDI3WjAzMTEwLwYDVQQD
EygzZDBhYjg3MGU3OGFjZTRiYjNiMzQ1ZjIzNWIxMzI5YmViZGY2ZjJmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoRB8f4ekomt07v0Qb0WbznI549Py
rqXYyWFr1TbkXu727V/pYM97p3o2a8j+GBruUphy/uFTfaCjvTTGP/69i/QJcZra
kwO5W4cMTCvOhnbRJFDg+lKSz1Cj0/DNoWPz2z6XJELN1XgYw6tKM/hcFASLBcVo
7TXthH6N7Zzv9nwwM/o2hBmLt9Qz5dgB5QQExIljwOhKoMAYgQ/4dgF3VcJdZNUj
Pw4IfvTlISoE5ae8XCCkhowr9UnXl7lc46NjKNpzXL9jEMI7OSanRpoA3xFqCspY
y/8G93WAEua1ztzAgBHvlnt2OcQt/BPwdlw7KgyxEZTRTYjyyXhHfzI1xQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFD0KuHDnis5Ls7NF8jWxMpvr328vMB8GA1UdIwQY
MBaAFDdLtqn7JFpPr8uNYh0cdfWdbsoZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTjB1MnFmc2tXay12eTQxaUhSeDE5WjF1eWhrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yYS9iNWRmY2MtY2QzNS00ODM3LWI4OTIt
ZjIyNmIxNDRhODlhLzEvTjB1MnFmc2tXay12eTQxaUhSeDE5WjF1eWhrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yYS9iNWRmY2MtY2QzNS00ODM3LWI4OTItZjIyNmIxNDRhODlh
LzEvTjB1MnFmc2tXay12eTQxaUhSeDE5WjF1eWhrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEARNiVFZPT
yn+eP143L1lA+P/OEJUULj46G5ECUJUzzjp48/1Cu7lyb6fDYC4sxxrE0BuYdXgQ
kN0bHFtScKg5VCk+bDjSrH3JZoHFlIZAjPn6R93HlY0ltyckdO+ququQrHCvtRdK
yKyqrS8p936+eoM+8AnE82tTXpvKKUd7kMnZRAbtYeznyZ7F0qHYzJPdMiP0h0wv
pED5p9vZs4PxkoEv7Im9Qiq97SntttPMPx/XvkWioknkqqCOBLIOqNz4L8AvP2wu
wNNhCJd3qlQDtXPcQzcDW0xeiTqUM0cxjIVqE9RIzdvt/9hbovPwQFGKAPwRlB0s
5gVxVM0N/BeRmQ==
-----END CERTIFICATE-----
Generated at Sun Jul 27 05:55:20 2025 by rpki-client