Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6e/3fc4e0-eb5f-42d3-98e1-be00a65103ad/1/N0mXVDn-T_qTECYqy91fcjzuIiM.mft
File: N0mXVDn-T_qTECYqy91fcjzuIiM.mft (raw, json)
Hash identifier: +TKaHZEGpuJo809GmtmpB3wTYeWC+B05SI0gZI5xGoc=
Subject key identifier: 41:ED:6F:71:4A:89:9D:7A:07:A9:5A:BC:46:4C:CF:44:65:97:54:A7
Authority key identifier: 37:49:97:54:39:FE:4F:FA:93:10:26:2A:CB:DD:5F:72:3C:EE:22:23
Certificate issuer: /CN=3749975439fe4ffa9310262acbdd5f723cee2223
Certificate serial: 019923D646133E4A5390FCF71727835D4F6D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/N0mXVDn-T_qTECYqy91fcjzuIiM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6e/3fc4e0-eb5f-42d3-98e1-be00a65103ad/1/N0mXVDn-T_qTECYqy91fcjzuIiM.mft
Manifest number: 1667
Signing time: Sun 07 Sep 2025 11:01:09 +0000
Manifest this update: Sun 07 Sep 2025 11:01:09 +0000
Manifest next update: Mon 08 Sep 2025 11:01:09 +0000
Files and hashes: 1: N0mXVDn-T_qTECYqy91fcjzuIiM.crl (hash: AC35DC3u+xQMG50nnnnME8VgjtBBaM5MzTZhN6rFXhY=)
2: kzwjfq1uCpgiTAUnk5qhqKOqoaU.roa (hash: MJDFWuspOJe8rc6Woxt8ScoRrsfkLnrA6WpK9920n7A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6e/3fc4e0-eb5f-42d3-98e1-be00a65103ad/1/N0mXVDn-T_qTECYqy91fcjzuIiM.crl
rsync://rpki.ripe.net/repository/DEFAULT/6e/3fc4e0-eb5f-42d3-98e1-be00a65103ad/1/N0mXVDn-T_qTECYqy91fcjzuIiM.mft
rsync://rpki.ripe.net/repository/DEFAULT/N0mXVDn-T_qTECYqy91fcjzuIiM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 07:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:23:d6:46:13:3e:4a:53:90:fc:f7:17:27:83:5d:4f:6d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3749975439fe4ffa9310262acbdd5f723cee2223
Validity
Not Before: Sep 7 11:01:09 2025 GMT
Not After : Sep 8 11:01:09 2025 GMT
Subject: CN=41ed6f714a899d7a07a95abc464ccf44659754a7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:ea:f0:55:e7:d5:e7:ea:56:b3:2c:b7:c6:94:
00:9c:16:e8:a3:76:bf:09:91:92:21:63:8b:17:96:
7b:9c:01:5e:76:96:37:8f:53:74:89:1e:35:21:78:
68:73:93:e6:b9:a8:d1:e4:a8:7e:1f:a3:40:c9:89:
cb:93:67:98:05:b1:c5:28:09:75:51:df:6d:26:f8:
65:db:b6:87:dc:9c:f9:bc:a5:f5:27:99:69:a1:84:
2b:70:34:57:a3:95:73:73:08:aa:2a:eb:ed:34:32:
a4:87:76:f5:84:0b:54:cf:50:bb:8a:47:aa:75:94:
04:a3:fc:a0:6b:2c:dc:3d:8d:43:a1:9d:c7:76:a4:
4d:0e:ad:82:d4:60:0f:4e:6b:df:29:bf:f8:59:a4:
a1:1d:a0:f9:11:3d:02:43:ed:8d:4b:fe:b7:fa:01:
97:ff:b0:81:ed:74:1a:14:df:00:7b:92:bd:8d:f8:
dd:31:fb:85:8f:96:89:c6:71:b8:ae:ce:b8:64:f2:
30:a8:61:72:6f:6e:5c:a3:61:b0:52:ca:f4:28:24:
1e:fb:25:06:2f:1f:c0:2a:ce:de:cc:36:40:b4:36:
7e:5e:b5:20:a7:44:09:49:2d:0a:44:aa:e1:e3:1a:
11:b0:d1:c5:54:ea:0b:d8:42:d8:c2:30:e6:12:82:
ea:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:ED:6F:71:4A:89:9D:7A:07:A9:5A:BC:46:4C:CF:44:65:97:54:A7
X509v3 Authority Key Identifier:
keyid:37:49:97:54:39:FE:4F:FA:93:10:26:2A:CB:DD:5F:72:3C:EE:22:23
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/N0mXVDn-T_qTECYqy91fcjzuIiM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/3fc4e0-eb5f-42d3-98e1-be00a65103ad/1/N0mXVDn-T_qTECYqy91fcjzuIiM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/3fc4e0-eb5f-42d3-98e1-be00a65103ad/1/N0mXVDn-T_qTECYqy91fcjzuIiM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9b:53:03:14:8a:0f:8e:23:9f:f5:e9:64:eb:9f:08:d2:c5:7e:
e1:5c:f1:b6:3c:d0:67:ff:e5:80:15:5b:ff:8c:e3:0a:85:2d:
fd:11:43:03:96:62:ca:6e:0a:0c:64:f4:92:dc:4e:67:31:60:
c3:38:6f:eb:45:b2:06:b8:29:41:63:09:11:5c:6a:90:04:ac:
fc:f1:96:89:e1:09:5d:4b:57:d4:3b:c5:19:35:38:32:e3:a8:
e8:d1:ff:64:0f:f9:30:d8:3e:39:f3:16:cd:7e:6f:be:f2:35:
a5:5f:53:bb:d2:0f:aa:90:d0:85:e8:b8:5f:4e:6b:75:23:de:
13:d1:0f:36:7f:a7:2e:f0:75:d0:b4:ab:4c:70:7b:5c:35:ed:
ce:a9:e5:14:7a:7b:36:91:80:8d:ca:90:91:4b:02:eb:55:66:
17:0d:2d:b7:34:aa:20:74:2b:93:9b:ec:93:ea:32:ff:09:61:
43:31:fb:ec:1a:df:f1:d2:9c:df:f0:70:51:fe:2e:01:46:5c:
21:c5:20:2b:30:ef:74:00:fa:21:5f:64:fb:4d:cd:a7:06:e8:
f5:25:66:6b:81:2d:7f:8e:57:f8:51:48:d4:fa:ab:18:ee:bc:
9b:aa:1a:9e:20:15:36:aa:21:39:ed:46:2c:bb:a0:24:c0:56:
4c:3f:da:4b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZkj1kYTPkpTkPz3FyeDXU9tMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM3NDk5NzU0MzlmZTRmZmE5MzEwMjYyYWNiZGQ1ZjcyM2Nl
ZTIyMjMwHhcNMjUwOTA3MTEwMTA5WhcNMjUwOTA4MTEwMTA5WjAzMTEwLwYDVQQD
Eyg0MWVkNmY3MTRhODk5ZDdhMDdhOTVhYmM0NjRjY2Y0NDY1OTc1NGE3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoerwVefV5+pWsyy3xpQAnBboo3a/
CZGSIWOLF5Z7nAFedpY3j1N0iR41IXhoc5PmuajR5Kh+H6NAyYnLk2eYBbHFKAl1
Ud9tJvhl27aH3Jz5vKX1J5lpoYQrcDRXo5VzcwiqKuvtNDKkh3b1hAtUz1C7ikeq
dZQEo/ygayzcPY1DoZ3HdqRNDq2C1GAPTmvfKb/4WaShHaD5ET0CQ+2NS/63+gGX
/7CB7XQaFN8Ae5K9jfjdMfuFj5aJxnG4rs64ZPIwqGFyb25co2GwUsr0KCQe+yUG
Lx/AKs7ezDZAtDZ+XrUgp0QJSS0KRKrh4xoRsNHFVOoL2ELYwjDmEoLqhwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEHtb3FKiZ16B6lavEZMz0Rll1SnMB8GA1UdIwQY
MBaAFDdJl1Q5/k/6kxAmKsvdX3I87iIjMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTjBtWFZEbi1UX3FURUNZcXk5MWZjanp1SWlNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82ZS8zZmM0ZTAtZWI1Zi00MmQzLTk4ZTEt
YmUwMGE2NTEwM2FkLzEvTjBtWFZEbi1UX3FURUNZcXk5MWZjanp1SWlNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82ZS8zZmM0ZTAtZWI1Zi00MmQzLTk4ZTEtYmUwMGE2NTEwM2Fk
LzEvTjBtWFZEbi1UX3FURUNZcXk5MWZjanp1SWlNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAm1MDFIoP
jiOf9elk658I0sV+4VzxtjzQZ//lgBVb/4zjCoUt/RFDA5Ziym4KDGT0ktxOZzFg
wzhv60WyBrgpQWMJEVxqkASs/PGWieEJXUtX1DvFGTU4MuOo6NH/ZA/5MNg+OfMW
zX5vvvI1pV9Tu9IPqpDQhei4X05rdSPeE9EPNn+nLvB10LSrTHB7XDXtzqnlFHp7
NpGAjcqQkUsC61VmFw0ttzSqIHQrk5vsk+oy/wlhQzH77Brf8dKc3/BwUf4uAUZc
IcUgKzDvdAD6IV9k+03Npwbo9SVma4Etf45X+FFI1PqrGO68m6oaniAVNqohOe1G
LLugJMBWTD/aSw==
-----END CERTIFICATE-----
Generated at Sun Sep 7 13:49:20 2025 by rpki-client