Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/33541a-f9ac-475a-b297-88a0e450a17b/1/N2PHEGpfJkAWLnmAWD6rW9gAjEU.mft
File: N2PHEGpfJkAWLnmAWD6rW9gAjEU.mft (raw, json)
Hash identifier: +pLkImKkhzKAo1JJ4uCoUkPSZzvZfRMnadKtAO96WWQ=
Subject key identifier: 61:11:17:0E:C2:A2:F1:E0:D8:11:5D:52:63:50:A3:ED:CA:6A:8B:4C
Authority key identifier: 37:63:C7:10:6A:5F:26:40:16:2E:79:80:58:3E:AB:5B:D8:00:8C:45
Certificate issuer: /CN=3763c7106a5f2640162e7980583eab5bd8008c45
Certificate serial: 0198C75B2200A5F30B60E7C7028120B68ECE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/N2PHEGpfJkAWLnmAWD6rW9gAjEU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/33541a-f9ac-475a-b297-88a0e450a17b/1/N2PHEGpfJkAWLnmAWD6rW9gAjEU.mft
Manifest number: 1197
Signing time: Wed 20 Aug 2025 12:01:35 +0000
Manifest this update: Wed 20 Aug 2025 12:01:35 +0000
Manifest next update: Thu 21 Aug 2025 12:01:35 +0000
Files and hashes: 1: JqPeTKIiSqFLnMuoE0z5MMpECyE.roa (hash: Sm0VFijktfATyc4h+uw4DoW/FSQrn3UdeoSnPalbaPo=)
2: N2PHEGpfJkAWLnmAWD6rW9gAjEU.crl (hash: 3C0IVqDLQjHWZO3TUYdnvj8iEZ+VDYhtIYlGUvkHcWY=)
3: VmdUY2uJ9NapTyZJ8UBdjlgGJQQ.roa (hash: 53UxHJyDkYLtFVil6COplJSwSFn/MNxw2tMZPgc57WQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/33541a-f9ac-475a-b297-88a0e450a17b/1/N2PHEGpfJkAWLnmAWD6rW9gAjEU.crl
rsync://rpki.ripe.net/repository/DEFAULT/5a/33541a-f9ac-475a-b297-88a0e450a17b/1/N2PHEGpfJkAWLnmAWD6rW9gAjEU.mft
rsync://rpki.ripe.net/repository/DEFAULT/N2PHEGpfJkAWLnmAWD6rW9gAjEU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 21 Aug 2025 12:01:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:c7:5b:22:00:a5:f3:0b:60:e7:c7:02:81:20:b6:8e:ce
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3763c7106a5f2640162e7980583eab5bd8008c45
Validity
Not Before: Aug 20 12:01:35 2025 GMT
Not After : Aug 21 12:01:35 2025 GMT
Subject: CN=6111170ec2a2f1e0d8115d526350a3edca6a8b4c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:ab:08:3b:bf:5d:61:f8:3f:39:c5:42:ce:10:
a1:2c:71:17:e6:58:3d:a3:6e:99:fb:5d:31:da:9d:
e0:8d:71:a0:31:29:22:42:ad:ed:6e:93:9c:95:16:
a4:7f:11:99:13:0a:cc:0b:e8:53:5f:58:ca:ee:a8:
81:bb:68:65:aa:eb:af:10:44:65:fa:21:1b:57:01:
78:c5:e1:18:c1:5c:8f:c1:b2:26:1d:a7:a9:00:82:
1c:ef:1f:88:40:e9:ef:fd:99:db:b6:5c:09:e5:1d:
ba:d5:52:20:f2:70:8f:e7:db:38:45:a3:12:5f:52:
c1:16:04:e3:cf:25:e3:33:f2:d9:1d:cd:3b:72:8c:
5a:e5:56:0a:e3:4d:22:1d:e0:f9:98:6e:10:de:78:
5b:d1:0b:67:e9:67:ab:54:a0:16:d7:1b:6c:c5:a4:
d1:6f:1a:b7:7b:27:c2:2c:b1:0e:ab:ad:6c:97:cf:
4a:25:e9:9b:10:f9:40:2f:91:e6:af:17:f0:55:d8:
93:9f:bd:d4:68:60:ce:2c:12:83:9b:2f:22:81:d9:
3a:8f:08:0c:04:52:0b:16:d6:37:ec:2b:06:d6:d4:
8f:22:92:55:83:fb:50:e7:99:b2:7f:28:52:d0:56:
f6:d9:0e:1d:92:68:6e:58:7e:dd:26:5c:b1:30:cb:
b6:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:11:17:0E:C2:A2:F1:E0:D8:11:5D:52:63:50:A3:ED:CA:6A:8B:4C
X509v3 Authority Key Identifier:
keyid:37:63:C7:10:6A:5F:26:40:16:2E:79:80:58:3E:AB:5B:D8:00:8C:45
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/N2PHEGpfJkAWLnmAWD6rW9gAjEU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/33541a-f9ac-475a-b297-88a0e450a17b/1/N2PHEGpfJkAWLnmAWD6rW9gAjEU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/33541a-f9ac-475a-b297-88a0e450a17b/1/N2PHEGpfJkAWLnmAWD6rW9gAjEU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
26:cc:dd:3a:f3:8b:e6:9d:18:ee:6a:32:b4:7e:59:ef:41:b4:
65:54:93:38:6d:11:b5:8d:af:a1:d2:60:05:60:1a:27:76:43:
44:66:24:02:2c:f9:28:b0:24:8f:e5:24:dd:d4:e6:85:52:d9:
53:cc:57:e7:b1:c0:40:50:ab:91:30:4d:05:0b:5c:f0:38:fb:
9c:ef:2b:92:3c:54:c0:69:20:17:e6:a4:2c:9e:0e:49:e7:d8:
17:5f:e0:fa:4b:43:7e:51:58:d2:5f:ed:84:ad:46:b3:a4:01:
f6:ff:09:45:92:52:fc:1d:6e:36:73:74:0e:8a:01:8b:48:07:
05:d6:4f:2b:1d:59:89:f3:64:bc:46:4d:16:65:7a:26:69:f9:
bc:ce:8f:ea:0e:bc:82:7e:65:71:b2:07:96:cb:90:7a:c5:da:
dd:4e:5f:00:4c:77:3b:fa:8e:2c:76:c3:b6:d2:9c:da:8b:11:
a5:79:a4:0a:bf:1b:7a:cc:59:02:11:e9:3c:a3:50:eb:03:fc:
55:de:8f:e5:ac:e6:38:d7:3f:4e:13:1e:72:b1:eb:a2:e3:79:
44:82:1d:59:70:2e:a7:03:5a:0e:09:01:3e:f6:88:c7:0b:34:
db:70:d7:13:a3:b7:f9:99:cf:29:8e:64:25:b2:02:63:9a:00:
d6:87:7e:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 20 15:31:38 2025 by rpki-client