
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/6b0344-8229-4d25-b498-8ce7c4fc5e0b/1/N-dRoRwaeIj6WNv8MsiVm8lGMD4.mft
File: N-dRoRwaeIj6WNv8MsiVm8lGMD4.mft (raw, json)
Hash identifier: /lwVkk6LbNyHhl3zX8CCerpfXqiNnNUmwebch8WJwzM=
Subject key identifier: 37:74:F5:34:DD:3A:4A:4B:F2:7D:65:BC:06:51:8E:15:29:53:F1:2C
Authority key identifier: 37:E7:51:A1:1C:1A:78:88:FA:58:DB:FC:32:C8:95:9B:C9:46:30:3E
Certificate issuer: /CN=37e751a11c1a7888fa58dbfc32c8959bc946303e
Certificate serial: 019748FAC0A21D4C1A21C0B3746B3858EA83
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/N-dRoRwaeIj6WNv8MsiVm8lGMD4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/6b0344-8229-4d25-b498-8ce7c4fc5e0b/1/N-dRoRwaeIj6WNv8MsiVm8lGMD4.mft
Manifest number: 12C8
Signing time: Sat 07 Jun 2025 06:01:22 +0000
Manifest this update: Sat 07 Jun 2025 06:01:22 +0000
Manifest next update: Sun 08 Jun 2025 06:01:22 +0000
Files and hashes: 1: 1iavcJFqwR6rzZKxM06ahcbF1Us.roa (hash: AJ47Zqj/T7JKUetOVwikynuHEcJu1eg9YDS731mpe6I=)
2: N-dRoRwaeIj6WNv8MsiVm8lGMD4.crl (hash: AD+O2GYgqk5wE+w0XOtYgI8r3J+8TbCMTflNg/VHt04=)
3: dqEoxI3WEV2rOPAYE8C4EEj1ebI.roa (hash: nVo4yJxw9EhxkUipVljpw16vPXrVAlAiSw+4KWPaovY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/45/6b0344-8229-4d25-b498-8ce7c4fc5e0b/1/N-dRoRwaeIj6WNv8MsiVm8lGMD4.crl
rsync://rpki.ripe.net/repository/DEFAULT/45/6b0344-8229-4d25-b498-8ce7c4fc5e0b/1/N-dRoRwaeIj6WNv8MsiVm8lGMD4.mft
rsync://rpki.ripe.net/repository/DEFAULT/N-dRoRwaeIj6WNv8MsiVm8lGMD4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 00:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:48:fa:c0:a2:1d:4c:1a:21:c0:b3:74:6b:38:58:ea:83
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=37e751a11c1a7888fa58dbfc32c8959bc946303e
Validity
Not Before: Jun 7 06:01:22 2025 GMT
Not After : Jun 8 06:01:22 2025 GMT
Subject: CN=3774f534dd3a4a4bf27d65bc06518e152953f12c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:b4:aa:05:a7:1f:9d:cf:49:46:51:5d:62:5a:
e8:19:63:93:c0:ba:78:8d:46:3f:19:72:d5:bb:e9:
d9:72:e9:02:0d:ef:ab:d2:1a:f3:a7:34:4c:10:2d:
3b:e1:2e:54:b7:c7:0e:1c:ed:85:ae:d6:75:06:df:
c6:5b:41:97:75:69:3b:5f:24:1a:09:c8:71:27:8c:
5c:8f:4c:89:3b:a2:b9:10:0f:80:93:fe:c3:d0:fb:
93:30:d4:94:d9:f5:01:60:26:1b:c5:03:cd:0b:44:
b2:a7:0f:95:7e:87:25:f9:bf:9a:f7:db:bd:a9:f4:
fb:5a:1d:33:2e:9f:0f:ec:a2:ba:8c:24:72:53:e8:
fc:50:73:82:c8:3c:44:ed:7c:32:0f:45:a6:82:9e:
03:52:22:d9:76:be:a6:7e:e7:25:e7:fc:a9:a6:a8:
ff:37:ab:a1:34:d4:44:05:f8:17:94:6b:40:69:b6:
45:37:f0:9f:0b:e3:19:c3:0c:f5:0a:f5:9c:73:50:
f6:18:b8:45:3c:83:85:7a:7e:a4:cb:15:99:e6:d8:
15:5e:14:4d:e6:97:11:f2:82:30:f8:71:bb:74:4e:
0b:f4:91:a0:78:d6:d6:33:b2:56:c0:13:4a:b7:24:
23:06:c1:98:dc:99:6d:75:15:05:8b:3a:31:69:39:
01:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:74:F5:34:DD:3A:4A:4B:F2:7D:65:BC:06:51:8E:15:29:53:F1:2C
X509v3 Authority Key Identifier:
keyid:37:E7:51:A1:1C:1A:78:88:FA:58:DB:FC:32:C8:95:9B:C9:46:30:3E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/N-dRoRwaeIj6WNv8MsiVm8lGMD4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/6b0344-8229-4d25-b498-8ce7c4fc5e0b/1/N-dRoRwaeIj6WNv8MsiVm8lGMD4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/45/6b0344-8229-4d25-b498-8ce7c4fc5e0b/1/N-dRoRwaeIj6WNv8MsiVm8lGMD4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
37:7a:3a:bf:42:57:50:08:4c:f5:27:20:ba:26:04:6e:2c:7c:
aa:04:22:46:b4:00:56:82:d8:3c:d0:a1:e9:4f:aa:59:9e:ae:
ed:cc:b1:9f:64:e5:38:6d:5f:6b:e9:a2:98:ff:6b:ec:8d:88:
d5:72:72:a8:31:13:26:a3:47:e2:6c:6b:02:0d:a7:98:67:68:
34:f2:a7:32:d4:74:9a:70:bf:b5:10:0c:31:31:07:93:04:d7:
4f:7d:a7:1e:4a:40:3d:ff:b0:30:48:ee:d2:c1:3f:91:4d:09:
73:c2:f1:c4:2a:8a:7c:84:9c:ea:d7:a4:a7:17:c6:79:3e:3b:
23:27:8e:ff:7b:eb:80:98:ad:cf:03:77:bc:f7:35:04:62:7f:
e8:b4:30:44:bf:63:87:83:31:2e:a4:86:5a:b0:0c:b5:1c:8b:
bf:e6:22:ef:18:b0:c7:11:1a:1b:56:f8:7f:36:16:63:c8:99:
b8:9a:51:c8:aa:2a:94:3b:ce:a9:93:21:f0:e5:0c:5c:61:f2:
aa:73:fa:7f:5d:7d:58:90:dd:9b:40:3d:e4:b8:20:ff:6c:69:
bd:06:c9:11:eb:23:66:b3:7e:cc:c8:b3:4f:33:c3:d0:33:ce:
1b:48:6d:36:98:12:ac:7c:d3:d1:0f:29:35:7a:7d:2c:09:4f:
c4:5b:90:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 09:30:15 2025 by rpki-client