Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/25fb54-d467-4e90-a41f-91c0d8e7549d/1/N6TS5C8jYsLm71K4Lxn35WN1fgw.mft
File: N6TS5C8jYsLm71K4Lxn35WN1fgw.mft (raw, json)
Hash identifier: I0T0oiZiWYbQL+NgtXcJ+FgOPGF/BrpqHZtj5tU+4sg=
Subject key identifier: B7:5A:00:55:9F:FB:E2:09:D0:E5:BE:7D:D0:BC:77:49:46:F0:A2:C3
Authority key identifier: 37:A4:D2:E4:2F:23:62:C2:E6:EF:52:B8:2F:19:F7:E5:63:75:7E:0C
Certificate issuer: /CN=37a4d2e42f2362c2e6ef52b82f19f7e563757e0c
Certificate serial: 01974A43880195C05719500180E10321C3E7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/N6TS5C8jYsLm71K4Lxn35WN1fgw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/25fb54-d467-4e90-a41f-91c0d8e7549d/1/N6TS5C8jYsLm71K4Lxn35WN1fgw.mft
Manifest number: 02A8
Signing time: Sat 07 Jun 2025 12:00:29 +0000
Manifest this update: Sat 07 Jun 2025 12:00:29 +0000
Manifest next update: Sun 08 Jun 2025 12:00:29 +0000
Files and hashes: 1: 3PpgKNG0AmRV_aCWCsXZ_tB5eIg.roa (hash: eRzqoJ+wnFE50kPBIiEdOOr71bv/+CxmFvCCuPDTNi4=)
2: N6TS5C8jYsLm71K4Lxn35WN1fgw.crl (hash: nbuDabJWxnWtro+qzioRYLGxe4v2kYF4bg8sngDLApA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/36/25fb54-d467-4e90-a41f-91c0d8e7549d/1/N6TS5C8jYsLm71K4Lxn35WN1fgw.crl
rsync://rpki.ripe.net/repository/DEFAULT/36/25fb54-d467-4e90-a41f-91c0d8e7549d/1/N6TS5C8jYsLm71K4Lxn35WN1fgw.mft
rsync://rpki.ripe.net/repository/DEFAULT/N6TS5C8jYsLm71K4Lxn35WN1fgw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 11:24:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4a:43:88:01:95:c0:57:19:50:01:80:e1:03:21:c3:e7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=37a4d2e42f2362c2e6ef52b82f19f7e563757e0c
Validity
Not Before: Jun 7 12:00:29 2025 GMT
Not After : Jun 8 12:00:29 2025 GMT
Subject: CN=b75a00559ffbe209d0e5be7dd0bc774946f0a2c3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:88:c1:b8:4d:4f:28:c0:93:06:fd:07:33:52:
2a:a3:aa:32:67:4f:a1:f4:c2:1e:28:e5:90:bc:ac:
47:f8:77:8c:2e:11:8d:b8:b1:e3:0a:c1:ce:4c:73:
2f:a3:a0:f1:d5:c4:9a:6c:ff:b3:ce:1f:04:09:02:
cd:62:7b:17:f3:43:3f:35:b9:ac:5d:fc:97:88:25:
0b:bc:e9:48:b6:e3:9e:b9:e6:c7:1c:98:16:44:22:
2a:96:83:38:21:5b:00:9c:cd:9b:d8:48:b2:3c:b6:
b5:cb:be:2b:c1:1f:d9:4b:89:98:0d:ee:17:1c:d2:
71:88:c0:f5:0a:18:58:a9:ec:ad:14:e0:0d:9d:ae:
1a:58:12:28:8c:f4:9e:cf:a0:47:a0:57:a8:bd:20:
e5:33:87:04:66:94:37:b6:dc:4a:96:50:eb:45:dc:
9c:29:9a:25:25:b3:a8:b2:21:e8:e1:99:35:94:51:
94:c0:df:e8:93:76:2b:f8:54:05:29:bd:39:34:7e:
c6:60:af:8c:8e:db:34:d3:43:a2:16:69:81:7a:7b:
d8:c1:9d:8b:80:77:73:43:48:f9:58:f4:8e:86:36:
b8:fa:d1:de:4a:75:51:fa:af:ea:e0:3a:9c:1a:94:
ee:02:cb:30:a4:21:9d:5f:02:87:50:e6:a0:2d:5a:
91:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:5A:00:55:9F:FB:E2:09:D0:E5:BE:7D:D0:BC:77:49:46:F0:A2:C3
X509v3 Authority Key Identifier:
keyid:37:A4:D2:E4:2F:23:62:C2:E6:EF:52:B8:2F:19:F7:E5:63:75:7E:0C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/N6TS5C8jYsLm71K4Lxn35WN1fgw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/25fb54-d467-4e90-a41f-91c0d8e7549d/1/N6TS5C8jYsLm71K4Lxn35WN1fgw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/25fb54-d467-4e90-a41f-91c0d8e7549d/1/N6TS5C8jYsLm71K4Lxn35WN1fgw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
21:13:d0:fb:3b:1b:b1:fe:56:a5:de:4e:fb:50:36:c5:95:e0:
11:fe:b2:46:2e:68:3f:69:39:6a:f5:59:3f:19:71:ca:1f:27:
f6:38:80:c3:7d:ec:37:53:20:59:2c:1e:2c:39:26:0e:7d:21:
3c:ae:35:d9:b6:e2:ca:b8:3e:36:6d:58:a9:38:60:8c:46:3c:
4f:c5:1a:cf:92:55:d2:b3:1f:1f:1e:ab:05:00:97:da:ef:f9:
a7:63:18:b3:89:66:09:1c:db:aa:8d:55:6a:2f:3e:3b:49:e9:
b6:02:71:84:d6:61:20:34:ef:0c:5c:d2:13:56:07:3e:57:03:
92:c9:2d:aa:2d:d3:b8:d6:eb:51:87:2f:78:75:f7:a5:e0:87:
0d:ae:d6:f5:df:49:2c:1b:f0:0b:07:83:3c:b6:49:0f:24:ac:
02:70:53:91:01:90:a5:ca:14:8b:5f:c2:ff:ea:14:ff:35:f7:
4a:00:96:76:91:5c:16:22:c6:25:b2:a5:36:94:ed:34:5f:a8:
27:e7:19:ea:c9:3b:df:d4:bc:78:23:a8:14:f5:1c:bf:23:ad:
c1:1d:fa:f7:d7:49:5b:56:2e:26:16:e3:61:de:e9:b1:81:cb:
f2:94:e0:10:ed:7c:6e:27:42:ec:7a:1d:c0:20:7e:8f:75:b2:
fa:42:60:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 20:46:35 2025 by rpki-client