Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/6b0344-8229-4d25-b498-8ce7c4fc5e0b/1/N-dRoRwaeIj6WNv8MsiVm8lGMD4.mft
File: N-dRoRwaeIj6WNv8MsiVm8lGMD4.mft (raw, json)
Hash identifier: OO2BMnnGr4wfxH59wJatibM5aoUfjOtjP4ACHOsNOg8=
Subject key identifier: 08:A8:8D:71:FA:C1:11:41:44:44:F7:4A:4B:F4:45:1F:D9:82:7A:43
Authority key identifier: 37:E7:51:A1:1C:1A:78:88:FA:58:DB:FC:32:C8:95:9B:C9:46:30:3E
Certificate issuer: /CN=37e751a11c1a7888fa58dbfc32c8959bc946303e
Certificate serial: 0199375D0EF12475D5E8EC0630A516CB1D56
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/N-dRoRwaeIj6WNv8MsiVm8lGMD4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/6b0344-8229-4d25-b498-8ce7c4fc5e0b/1/N-dRoRwaeIj6WNv8MsiVm8lGMD4.mft
Manifest number: 13C8
Signing time: Thu 11 Sep 2025 06:01:09 +0000
Manifest this update: Thu 11 Sep 2025 06:01:09 +0000
Manifest next update: Fri 12 Sep 2025 06:01:09 +0000
Files and hashes: 1: 1iavcJFqwR6rzZKxM06ahcbF1Us.roa (hash: AJ47Zqj/T7JKUetOVwikynuHEcJu1eg9YDS731mpe6I=)
2: N-dRoRwaeIj6WNv8MsiVm8lGMD4.crl (hash: sExC1J14IeF3Udl44OMzwzAuUB9lk0KQs6Zq+iEajQg=)
3: dqEoxI3WEV2rOPAYE8C4EEj1ebI.roa (hash: nVo4yJxw9EhxkUipVljpw16vPXrVAlAiSw+4KWPaovY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/45/6b0344-8229-4d25-b498-8ce7c4fc5e0b/1/N-dRoRwaeIj6WNv8MsiVm8lGMD4.crl
rsync://rpki.ripe.net/repository/DEFAULT/45/6b0344-8229-4d25-b498-8ce7c4fc5e0b/1/N-dRoRwaeIj6WNv8MsiVm8lGMD4.mft
rsync://rpki.ripe.net/repository/DEFAULT/N-dRoRwaeIj6WNv8MsiVm8lGMD4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 12 Sep 2025 05:00:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:37:5d:0e:f1:24:75:d5:e8:ec:06:30:a5:16:cb:1d:56
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=37e751a11c1a7888fa58dbfc32c8959bc946303e
Validity
Not Before: Sep 11 06:01:09 2025 GMT
Not After : Sep 12 06:01:09 2025 GMT
Subject: CN=08a88d71fac111414444f74a4bf4451fd9827a43
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:ed:93:ce:ed:8f:d0:ba:d1:43:89:e7:84:6f:
8e:eb:11:6f:52:a2:bb:0a:bd:03:a0:fc:d6:1a:80:
ce:44:6a:f3:fc:4a:8f:82:dd:b1:6b:c0:e8:24:ba:
08:5d:df:9e:82:ee:55:99:d5:c1:fa:e3:61:6b:0e:
7a:68:3d:9f:90:50:29:12:f4:db:05:ad:2b:6b:98:
35:37:92:fe:78:10:82:7b:c0:92:03:a1:a0:df:20:
ab:41:a9:ce:54:40:dc:5e:5e:1a:c6:f9:89:f6:7e:
19:42:cd:48:84:d1:51:ac:c4:34:94:27:23:c4:7b:
e7:72:ca:f4:af:a9:56:d8:e9:3f:82:fe:a6:17:ee:
c7:1c:e7:d9:fc:d0:59:be:fb:df:51:b6:7a:93:9b:
78:b9:2b:c2:e5:10:37:2c:1d:c9:08:5f:d9:f2:98:
69:58:7d:80:23:5e:26:0d:ea:c7:9c:db:4d:d8:73:
d8:34:e7:3e:6f:81:11:8d:a2:52:c6:c9:f1:32:7c:
27:c2:ac:03:e8:59:a0:77:63:77:df:1d:1f:ee:8a:
11:3c:fc:37:a2:0b:37:ee:11:12:a1:b2:62:54:e3:
18:6c:b5:1a:81:c8:ba:d1:e2:3a:4a:03:9c:13:33:
32:a8:f2:ca:5b:ce:a9:06:1e:c3:ff:ae:e2:93:e1:
5c:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:A8:8D:71:FA:C1:11:41:44:44:F7:4A:4B:F4:45:1F:D9:82:7A:43
X509v3 Authority Key Identifier:
keyid:37:E7:51:A1:1C:1A:78:88:FA:58:DB:FC:32:C8:95:9B:C9:46:30:3E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/N-dRoRwaeIj6WNv8MsiVm8lGMD4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/6b0344-8229-4d25-b498-8ce7c4fc5e0b/1/N-dRoRwaeIj6WNv8MsiVm8lGMD4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/45/6b0344-8229-4d25-b498-8ce7c4fc5e0b/1/N-dRoRwaeIj6WNv8MsiVm8lGMD4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3c:f3:08:17:69:53:b7:f7:fe:1d:76:e7:9a:5d:a4:31:de:ba:
0f:2e:a7:99:3f:be:90:99:24:ec:4e:fb:6b:57:cb:fc:04:4e:
65:2b:f1:b3:db:38:15:a5:5e:bc:ea:f4:58:5f:82:ae:d6:27:
a4:ec:83:33:96:3f:58:a5:00:6e:a5:92:13:ad:af:5a:99:3e:
d8:2e:d3:69:54:84:ce:4c:05:ec:7d:96:93:ce:f8:fb:7a:fd:
d5:7e:36:c7:35:15:ac:f8:91:3f:57:3b:c7:3c:f5:e2:cf:7b:
69:fa:17:47:08:31:21:c6:33:ef:eb:fb:3b:86:30:79:98:11:
62:d1:ce:ec:63:32:46:30:e0:36:7c:9a:ce:67:03:a2:d2:3a:
6b:c3:0e:d0:ea:73:a7:9c:03:fb:f3:36:17:a5:41:bc:5d:f0:
48:f4:19:64:71:a4:25:34:73:4e:c8:b1:62:14:0b:1c:6c:2e:
6d:43:28:6e:b8:a6:13:c8:43:61:cb:24:9e:84:99:c3:b5:a4:
5b:2d:9d:50:07:31:be:b4:10:9c:d6:a8:41:70:2d:1d:a6:23:
db:c6:57:dc:ef:a8:91:40:47:40:c6:99:1d:cc:3c:9c:9d:09:
6b:d6:49:29:e8:fd:31:db:6b:cd:0b:7f:0b:f2:a6:13:f1:7b:
dd:1b:b1:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 11 14:18:23 2025 by rpki-client