Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/ef9498-44f4-4ffd-844f-5c830fe4bad0/1/N8pQAigo2QG_QrJ5j3hEEEsFQE0.mft
File: N8pQAigo2QG_QrJ5j3hEEEsFQE0.mft (raw, json)
Hash identifier: PGU4BnNg5pn6Y3Fd8BOGl4MN7DNO2w5nWJyaMn+lsao=
Subject key identifier: 1F:E7:39:4C:AE:06:29:27:B2:A5:0F:04:BA:FE:E0:A6:03:E6:B3:45
Authority key identifier: 37:CA:50:02:28:28:D9:01:BF:42:B2:79:8F:78:44:10:4B:05:40:4D
Certificate issuer: /CN=37ca50022828d901bf42b2798f7844104b05404d
Certificate serial: 01975C49D2BDC46B5C00C75B34C0053D9BFF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/N8pQAigo2QG_QrJ5j3hEEEsFQE0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/ef9498-44f4-4ffd-844f-5c830fe4bad0/1/N8pQAigo2QG_QrJ5j3hEEEsFQE0.mft
Manifest number: 099B
Signing time: Wed 11 Jun 2025 00:00:31 +0000
Manifest this update: Wed 11 Jun 2025 00:00:31 +0000
Manifest next update: Thu 12 Jun 2025 00:00:31 +0000
Files and hashes: 1: N8pQAigo2QG_QrJ5j3hEEEsFQE0.crl (hash: paoL1SOeKCxQPzX4OPTsTom2qRFaSuYUMmdBidSns1c=)
2: o5v0Cm5PNAVArL3iEJHw_CFIknA.roa (hash: Sf1IrFfhAHUJ08yJsTL6eR491AGzhJcL2ToeOR5gShQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/65/ef9498-44f4-4ffd-844f-5c830fe4bad0/1/N8pQAigo2QG_QrJ5j3hEEEsFQE0.crl
rsync://rpki.ripe.net/repository/DEFAULT/65/ef9498-44f4-4ffd-844f-5c830fe4bad0/1/N8pQAigo2QG_QrJ5j3hEEEsFQE0.mft
rsync://rpki.ripe.net/repository/DEFAULT/N8pQAigo2QG_QrJ5j3hEEEsFQE0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 11 Jun 2025 20:45:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:5c:49:d2:bd:c4:6b:5c:00:c7:5b:34:c0:05:3d:9b:ff
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=37ca50022828d901bf42b2798f7844104b05404d
Validity
Not Before: Jun 11 00:00:31 2025 GMT
Not After : Jun 12 00:00:31 2025 GMT
Subject: CN=1fe7394cae062927b2a50f04bafee0a603e6b345
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:1e:23:2c:61:ae:d6:14:b0:3f:bc:2d:ce:85:
b8:a1:0c:03:af:0d:5b:3b:63:5e:df:c4:c2:66:09:
21:65:5b:5e:d0:70:05:25:70:ad:52:18:e8:f6:bb:
1e:84:45:95:22:0b:4d:2c:68:aa:3b:f0:39:4a:c8:
59:ca:d0:19:a7:38:f9:46:96:bf:0d:ae:6d:ff:52:
a8:ff:92:99:5c:fa:1e:bd:4a:7e:d5:77:d0:02:02:
b9:b5:7b:11:54:cb:59:02:96:42:da:cf:24:ad:ae:
00:b1:bf:b6:e1:b0:a1:0d:03:90:39:4d:45:c0:af:
57:4d:72:7f:03:97:7f:ff:b8:33:ad:c7:f8:8d:c4:
44:67:30:17:82:4a:b0:7c:20:66:88:5b:31:c6:7a:
5d:73:03:c6:11:20:ac:6e:6b:55:04:1a:9a:1a:97:
68:dd:01:26:8f:b2:0f:f4:3b:82:3e:4a:17:82:ee:
2d:49:05:34:68:eb:96:b0:0d:d9:1e:53:d6:38:20:
0c:89:62:7c:b5:c6:59:97:df:27:ac:85:5e:f9:13:
0f:c8:0f:c8:1d:20:a0:d0:14:ad:3c:a7:a4:c0:72:
48:14:ac:da:a4:5a:d6:29:37:57:e3:c1:44:12:08:
d4:ac:ce:bb:4b:bc:45:e3:ab:bc:b2:01:49:0c:e0:
6e:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:E7:39:4C:AE:06:29:27:B2:A5:0F:04:BA:FE:E0:A6:03:E6:B3:45
X509v3 Authority Key Identifier:
keyid:37:CA:50:02:28:28:D9:01:BF:42:B2:79:8F:78:44:10:4B:05:40:4D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/N8pQAigo2QG_QrJ5j3hEEEsFQE0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/ef9498-44f4-4ffd-844f-5c830fe4bad0/1/N8pQAigo2QG_QrJ5j3hEEEsFQE0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/65/ef9498-44f4-4ffd-844f-5c830fe4bad0/1/N8pQAigo2QG_QrJ5j3hEEEsFQE0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5b:e0:c4:8f:b1:a6:09:ec:67:16:cc:1a:fd:49:dd:0f:4e:10:
3d:20:0b:a4:58:fd:ac:35:0b:6a:72:58:9c:0a:c2:f5:99:f6:
ca:41:a8:03:62:bd:b8:54:c7:a6:b8:1b:77:f8:eb:6b:76:6f:
68:ca:b5:62:02:62:ec:4a:bf:52:d0:e1:d9:e7:8d:cf:c7:30:
c8:84:65:f4:8b:38:20:f6:91:3a:34:7d:36:11:17:2d:79:9d:
84:fa:26:50:4b:0a:10:ec:c0:ca:98:e2:7e:76:2e:0d:f4:df:
74:c1:3b:d4:f1:4a:89:95:c7:0e:1d:8e:aa:23:03:58:43:8c:
41:c4:9f:9f:4e:be:52:dc:09:3b:e5:6b:06:fa:45:40:26:db:
2e:32:f1:16:0f:b1:84:04:7c:ab:ff:cd:14:53:89:be:a9:a6:
fe:40:1e:3d:e5:55:07:ab:59:40:af:e1:fa:e1:3a:a1:20:45:
99:b0:6e:4e:56:a8:37:2a:19:f5:82:44:e7:b9:3b:38:e1:bc:
94:19:9f:06:ea:82:3f:b4:ad:87:2f:d4:39:c3:ed:a0:04:ba:
b2:d1:cf:3c:d1:9d:88:d0:21:3a:7a:58:88:6e:8c:f8:a4:ef:
c5:ae:47:0e:83:db:3c:45:08:89:2f:ed:54:e5:2f:41:db:98:
ee:33:e3:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 11 06:52:35 2025 by rpki-client