Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/56/1d575d-7b22-47c7-a17e-8a136cb0dd5c/1/N8SLeJzH_-e-CURGQ_24a9tXP30.mft
File: N8SLeJzH_-e-CURGQ_24a9tXP30.mft (raw, json)
Hash identifier: VSP1uz3OEc9ZmgnZAvvwfWh50WeBhEatXLg1QUY2xus=
Subject key identifier: 7A:E0:94:6E:BB:06:C5:FB:8F:35:FB:81:A4:38:56:A1:46:9B:F6:A2
Authority key identifier: 37:C4:8B:78:9C:C7:FF:E7:BE:09:44:46:43:FD:B8:6B:DB:57:3F:7D
Certificate issuer: /CN=37c48b789cc7ffe7be09444643fdb86bdb573f7d
Certificate serial: 01974742E0973D8EE8570A72D225439ED1DE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/N8SLeJzH_-e-CURGQ_24a9tXP30.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/56/1d575d-7b22-47c7-a17e-8a136cb0dd5c/1/N8SLeJzH_-e-CURGQ_24a9tXP30.mft
Manifest number: 0A13
Signing time: Fri 06 Jun 2025 22:00:54 +0000
Manifest this update: Fri 06 Jun 2025 22:00:54 +0000
Manifest next update: Sat 07 Jun 2025 22:00:54 +0000
Files and hashes: 1: N8SLeJzH_-e-CURGQ_24a9tXP30.crl (hash: 7vJNSZz8dX5noadhWF0d8ChhZpM0P5mwGPHEEay0l0I=)
2: zElW9nBSEefX0nViIsarFQPCkZs.roa (hash: CmIv1btIhlBvo+yXBuSYJkAIeImv5p3pKaVYvxzuwhU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/56/1d575d-7b22-47c7-a17e-8a136cb0dd5c/1/N8SLeJzH_-e-CURGQ_24a9tXP30.crl
rsync://rpki.ripe.net/repository/DEFAULT/56/1d575d-7b22-47c7-a17e-8a136cb0dd5c/1/N8SLeJzH_-e-CURGQ_24a9tXP30.mft
rsync://rpki.ripe.net/repository/DEFAULT/N8SLeJzH_-e-CURGQ_24a9tXP30.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 07 Jun 2025 22:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:47:42:e0:97:3d:8e:e8:57:0a:72:d2:25:43:9e:d1:de
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=37c48b789cc7ffe7be09444643fdb86bdb573f7d
Validity
Not Before: Jun 6 22:00:54 2025 GMT
Not After : Jun 7 22:00:54 2025 GMT
Subject: CN=7ae0946ebb06c5fb8f35fb81a43856a1469bf6a2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:2f:64:02:d7:2b:1e:4b:18:6f:b5:3e:f5:5b:
d7:36:3e:56:12:e2:2a:c9:d4:90:de:88:79:97:b3:
b5:ff:51:44:ec:0e:70:95:2d:17:2d:95:36:1a:c1:
58:47:a5:1b:2b:2c:64:e4:41:e7:91:c0:1d:ed:59:
45:00:94:19:3c:02:60:0d:82:85:f4:71:16:43:af:
6c:86:2a:03:e5:ba:d5:ea:2b:5a:f0:62:82:f8:b1:
be:dc:c5:4e:83:d3:13:b0:a2:4c:46:5e:ee:48:a9:
8d:fc:6f:ce:f4:11:13:e4:8b:93:38:ff:37:8f:95:
31:e5:b6:57:09:11:de:07:d0:fa:32:f3:2a:14:8c:
a9:fa:a8:01:63:df:4e:7a:70:c6:df:5e:6e:e0:62:
cc:30:41:3b:f1:df:e0:46:49:20:b1:6b:8f:87:09:
7b:e2:3a:5e:8d:a6:f4:0e:81:a4:f5:cf:82:9c:74:
12:17:61:d4:c7:e5:f2:ec:78:b3:12:03:2a:c2:53:
6a:c2:21:dd:81:78:70:9c:53:28:58:65:0f:6c:ae:
ad:b2:dd:26:74:92:97:64:8a:dd:5a:9b:7f:56:a5:
e6:11:aa:fa:ef:5e:9f:7b:66:f3:8e:d2:cc:28:8a:
5e:f9:58:29:84:01:63:2e:21:95:ec:63:8b:d1:28:
57:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:E0:94:6E:BB:06:C5:FB:8F:35:FB:81:A4:38:56:A1:46:9B:F6:A2
X509v3 Authority Key Identifier:
keyid:37:C4:8B:78:9C:C7:FF:E7:BE:09:44:46:43:FD:B8:6B:DB:57:3F:7D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/N8SLeJzH_-e-CURGQ_24a9tXP30.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/1d575d-7b22-47c7-a17e-8a136cb0dd5c/1/N8SLeJzH_-e-CURGQ_24a9tXP30.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/56/1d575d-7b22-47c7-a17e-8a136cb0dd5c/1/N8SLeJzH_-e-CURGQ_24a9tXP30.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
07:ff:fc:4f:28:38:c6:e1:1a:cd:d7:30:31:f7:93:82:32:2e:
ed:28:74:e9:ef:36:04:4e:1e:d6:6a:79:00:9e:6f:79:71:c6:
88:8a:dd:a8:4e:94:83:e1:53:3d:5d:ee:84:b3:35:15:18:33:
52:ee:18:b5:d0:48:83:b4:c8:0f:d1:c9:43:2c:e7:3e:e8:30:
aa:ed:e8:4b:b5:f0:2c:49:d1:ff:ce:19:1a:3a:cd:8e:1a:e9:
d5:bf:43:c0:a4:64:b8:76:d7:5d:c3:ca:04:8a:e3:e9:63:ef:
b1:31:d9:fa:d2:01:ca:8d:d9:ba:8d:73:99:c9:0a:9b:d9:4b:
54:b3:71:cc:80:45:da:3d:83:a0:a8:1c:a6:65:32:59:ad:45:
d4:88:d8:dd:d9:5b:bf:7c:61:34:64:57:d1:3a:31:82:d0:2b:
8f:73:ab:68:d8:8f:fd:70:d6:6b:69:ce:48:c2:17:4a:95:d7:
0e:a2:4f:c2:a7:0a:fe:ba:b8:57:09:95:37:0f:24:53:74:45:
37:4a:6a:05:73:31:88:7f:ab:74:c0:d0:3f:4f:5a:1a:0a:0d:
45:db:1c:99:53:e6:11:64:97:ec:64:d8:92:1e:42:13:cf:09:
43:a1:94:19:6f:cb:1b:93:75:6a:3b:f2:0b:fd:be:4a:fc:1a:
74:30:85:24
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdHQuCXPY7oVwpy0iVDntHeMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM3YzQ4Yjc4OWNjN2ZmZTdiZTA5NDQ0NjQzZmRiODZiZGI1
NzNmN2QwHhcNMjUwNjA2MjIwMDU0WhcNMjUwNjA3MjIwMDU0WjAzMTEwLwYDVQQD
Eyg3YWUwOTQ2ZWJiMDZjNWZiOGYzNWZiODFhNDM4NTZhMTQ2OWJmNmEyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxi9kAtcrHksYb7U+9VvXNj5WEuIq
ydSQ3oh5l7O1/1FE7A5wlS0XLZU2GsFYR6UbKyxk5EHnkcAd7VlFAJQZPAJgDYKF
9HEWQ69shioD5brV6ita8GKC+LG+3MVOg9MTsKJMRl7uSKmN/G/O9BET5IuTOP83
j5Ux5bZXCRHeB9D6MvMqFIyp+qgBY99OenDG315u4GLMMEE78d/gRkkgsWuPhwl7
4jpejab0DoGk9c+CnHQSF2HUx+Xy7HizEgMqwlNqwiHdgXhwnFMoWGUPbK6tst0m
dJKXZIrdWpt/VqXmEar6716fe2bzjtLMKIpe+VgphAFjLiGV7GOL0ShX1QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHrglG67BsX7jzX7gaQ4VqFGm/aiMB8GA1UdIwQY
MBaAFDfEi3icx//nvglERkP9uGvbVz99MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTjhTTGVKekhfLWUtQ1VSR1FfMjRhOXRYUDMwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Ni8xZDU3NWQtN2IyMi00N2M3LWExN2Ut
OGExMzZjYjBkZDVjLzEvTjhTTGVKekhfLWUtQ1VSR1FfMjRhOXRYUDMwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Ni8xZDU3NWQtN2IyMi00N2M3LWExN2UtOGExMzZjYjBkZDVj
LzEvTjhTTGVKekhfLWUtQ1VSR1FfMjRhOXRYUDMwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAB//8Tyg4
xuEazdcwMfeTgjIu7Sh06e82BE4e1mp5AJ5veXHGiIrdqE6Ug+FTPV3uhLM1FRgz
Uu4YtdBIg7TID9HJQyznPugwqu3oS7XwLEnR/84ZGjrNjhrp1b9DwKRkuHbXXcPK
BIrj6WPvsTHZ+tIByo3Zuo1zmckKm9lLVLNxzIBF2j2DoKgcpmUyWa1F1IjY3dlb
v3xhNGRX0ToxgtArj3OraNiP/XDWa2nOSMIXSpXXDqJPwqcK/rq4VwmVNw8kU3RF
N0pqBXMxiH+rdMDQP09aGgoNRdscmVPmEWSX7GTYkh5CE88JQ6GUGW/LG5N1ajvy
C/2+SvwadDCFJA==
-----END CERTIFICATE-----
Generated at Sat Jun 7 07:30:46 2025 by rpki-client