Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2f/ad8994-51f1-4b65-aca0-e15a8b70e8d2/1/N86qYmy9iQUvNUUzXf2zGhM4MAQ.mft
File: N86qYmy9iQUvNUUzXf2zGhM4MAQ.mft (raw, json)
Hash identifier: YqxpaM1wC8JJ7WQi7sIYV6Pkh7QghKyQ5cdX6+kBX00=
Subject key identifier: 03:E0:C3:56:16:D7:4B:17:45:27:E5:FD:0E:26:EB:8F:F4:48:E8:5F
Authority key identifier: 37:CE:AA:62:6C:BD:89:05:2F:35:45:33:5D:FD:B3:1A:13:38:30:04
Certificate issuer: /CN=37ceaa626cbd89052f3545335dfdb31a13383004
Certificate serial: 01992FDA61305517673CB4ED2C9ADB20C2CE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/N86qYmy9iQUvNUUzXf2zGhM4MAQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2f/ad8994-51f1-4b65-aca0-e15a8b70e8d2/1/N86qYmy9iQUvNUUzXf2zGhM4MAQ.mft
Manifest number: 15D3
Signing time: Tue 09 Sep 2025 19:01:04 +0000
Manifest this update: Tue 09 Sep 2025 19:01:04 +0000
Manifest next update: Wed 10 Sep 2025 19:01:04 +0000
Files and hashes: 1: N86qYmy9iQUvNUUzXf2zGhM4MAQ.crl (hash: g1lYqyYsDTxMHl/0PFcprFS+yoh9dcovG90LzIJANBo=)
2: n9uV52lUlBfny_mibwK9eMiu_og.roa (hash: 54PSRM/jpJmSMS9ihIFUAJNjZSe2qLiVsg1xoZD4Jhk=)
3: spA2D5bFhwjtsAUrsUVWAYuQYCw.roa (hash: G0F7ImWqWoF9HSrIReZ5ZDnra1S9Yg59kPLrgfQKBWo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2f/ad8994-51f1-4b65-aca0-e15a8b70e8d2/1/N86qYmy9iQUvNUUzXf2zGhM4MAQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/2f/ad8994-51f1-4b65-aca0-e15a8b70e8d2/1/N86qYmy9iQUvNUUzXf2zGhM4MAQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/N86qYmy9iQUvNUUzXf2zGhM4MAQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 10 Sep 2025 19:01:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:2f:da:61:30:55:17:67:3c:b4:ed:2c:9a:db:20:c2:ce
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=37ceaa626cbd89052f3545335dfdb31a13383004
Validity
Not Before: Sep 9 19:01:04 2025 GMT
Not After : Sep 10 19:01:04 2025 GMT
Subject: CN=03e0c35616d74b174527e5fd0e26eb8ff448e85f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:7d:cd:39:69:81:08:bb:9c:16:a6:38:66:1d:
f1:b7:a2:ac:8e:3f:77:6d:ec:0f:83:1e:52:02:75:
0f:62:5d:50:3a:e1:76:c8:fb:94:9b:fc:e6:0c:54:
04:48:76:04:b1:88:4e:4e:43:37:78:14:f6:f6:83:
44:41:b0:d0:1f:d2:32:49:13:30:3b:7c:eb:c3:95:
7c:53:a3:3e:9a:13:0a:39:21:d0:1a:dd:2a:65:dd:
a6:a7:66:71:a7:9c:e5:57:6c:ff:07:a0:34:0a:8f:
ad:32:fe:cc:09:3c:05:77:80:0b:71:83:01:a1:bd:
56:e2:7f:58:94:6b:e3:c0:c0:fb:2a:db:ec:a6:c9:
ff:2b:ef:15:2b:f0:93:af:24:a6:37:c8:7e:a9:ef:
22:fa:95:11:6d:d1:e1:03:7f:57:16:95:6e:7c:67:
80:71:03:a6:54:93:4d:e2:0a:f1:fd:c2:04:93:ce:
4d:4f:5a:c4:24:e0:42:56:e5:6b:54:9f:90:b3:22:
32:ea:17:a9:f8:e7:8d:6f:95:2b:bf:b1:63:b1:3d:
73:2f:21:94:bc:f8:61:7e:32:35:fa:db:0c:8a:ad:
41:2a:f8:44:e8:b9:4d:37:bd:02:20:48:b0:8b:0d:
0d:aa:37:e8:65:07:5b:47:14:cf:cc:d3:e6:39:ad:
c8:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:E0:C3:56:16:D7:4B:17:45:27:E5:FD:0E:26:EB:8F:F4:48:E8:5F
X509v3 Authority Key Identifier:
keyid:37:CE:AA:62:6C:BD:89:05:2F:35:45:33:5D:FD:B3:1A:13:38:30:04
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/N86qYmy9iQUvNUUzXf2zGhM4MAQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/ad8994-51f1-4b65-aca0-e15a8b70e8d2/1/N86qYmy9iQUvNUUzXf2zGhM4MAQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/ad8994-51f1-4b65-aca0-e15a8b70e8d2/1/N86qYmy9iQUvNUUzXf2zGhM4MAQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3b:e2:f8:e8:ee:89:d3:24:be:24:bf:66:d7:83:99:4f:f3:55:
f5:05:8a:66:52:3f:99:f1:78:3d:18:b5:85:f5:9d:95:38:c1:
71:74:25:e0:b1:1f:7e:32:d3:a6:2f:15:e5:3b:fb:71:69:2d:
61:45:fd:2e:86:1f:68:1c:87:73:79:60:94:b9:b9:66:0d:fa:
d4:a4:ee:83:cc:e0:ea:5f:fc:ba:a6:36:7f:dd:38:cb:cc:13:
cf:0a:ad:84:35:dc:56:ff:25:b3:fb:f0:98:ff:49:67:78:fd:
72:eb:ba:40:ec:65:f3:46:ee:e5:3f:4f:d8:04:a8:3b:c1:dc:
07:d1:86:c0:41:2a:4f:07:e0:78:33:3d:b3:a2:ce:1a:38:91:
77:7b:be:df:b8:7c:f8:3d:66:79:c0:c6:b1:c7:d9:56:3b:8e:
d6:8c:61:57:ff:a0:c4:12:a1:86:bf:f4:ca:81:12:a6:19:dc:
4a:65:b7:66:aa:d4:14:8d:d5:6f:20:57:46:be:18:a9:f3:09:
8c:6e:4a:04:4f:4a:2d:00:23:83:6b:67:f5:96:fb:15:0b:9f:
55:d8:69:02:9a:d3:44:26:c6:bc:74:78:43:16:4a:57:5b:2a:
e9:ab:62:71:3e:10:53:23:a3:d3:2e:96:80:f8:4c:fe:c8:ac:
4e:90:a8:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 10 04:51:07 2025 by rpki-client