Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7c/8a5ee7-b638-4b70-8a8e-f97745d13b8d/1/N1x0Iln_kAhX0TaJ2NSNsg7fRgM.mft
File: N1x0Iln_kAhX0TaJ2NSNsg7fRgM.mft (raw, json)
Hash identifier: h/WMVlRNX60hlj56lQ49OWpGQnK+0vwJH2e6UgXOUkM=
Subject key identifier: 09:1B:40:E4:9B:39:E3:38:EA:A0:B2:D4:F2:E0:F7:B8:A5:69:DB:F0
Authority key identifier: 37:5C:74:22:59:FF:90:08:57:D1:36:89:D8:D4:8D:B2:0E:DF:46:03
Certificate issuer: /CN=375c742259ff900857d13689d8d48db20edf4603
Certificate serial: 0199228C9E802A62FFD58DCBCFF37DDEB2DD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/N1x0Iln_kAhX0TaJ2NSNsg7fRgM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7c/8a5ee7-b638-4b70-8a8e-f97745d13b8d/1/N1x0Iln_kAhX0TaJ2NSNsg7fRgM.mft
Manifest number: 13AF
Signing time: Sun 07 Sep 2025 05:01:04 +0000
Manifest this update: Sun 07 Sep 2025 05:01:04 +0000
Manifest next update: Mon 08 Sep 2025 05:01:04 +0000
Files and hashes: 1: N1x0Iln_kAhX0TaJ2NSNsg7fRgM.crl (hash: WripFUSXLr30RpmXtkF3ZvI//zOzv20n4jIbEIU6enA=)
2: g_21VS9VjPQrGz2Td7dDraqxWmA.roa (hash: iyA8oXAsAeuHezc22yRIhc2flepygJS+6M+Uvfpnntg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7c/8a5ee7-b638-4b70-8a8e-f97745d13b8d/1/N1x0Iln_kAhX0TaJ2NSNsg7fRgM.crl
rsync://rpki.ripe.net/repository/DEFAULT/7c/8a5ee7-b638-4b70-8a8e-f97745d13b8d/1/N1x0Iln_kAhX0TaJ2NSNsg7fRgM.mft
rsync://rpki.ripe.net/repository/DEFAULT/N1x0Iln_kAhX0TaJ2NSNsg7fRgM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 05:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:22:8c:9e:80:2a:62:ff:d5:8d:cb:cf:f3:7d:de:b2:dd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=375c742259ff900857d13689d8d48db20edf4603
Validity
Not Before: Sep 7 05:01:04 2025 GMT
Not After : Sep 8 05:01:04 2025 GMT
Subject: CN=091b40e49b39e338eaa0b2d4f2e0f7b8a569dbf0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:b4:15:b1:59:ae:da:48:21:9a:cd:80:9c:bf:
dd:8b:52:d7:fd:2a:77:56:ef:93:5c:a6:58:00:6a:
d9:ba:35:68:ae:51:98:1f:01:87:e4:f0:78:65:54:
1e:e0:99:3c:58:fb:b7:db:56:32:f6:e6:e0:72:99:
a3:b0:79:ef:af:c9:fc:28:bd:94:df:2c:8c:af:09:
5e:b7:4e:00:00:35:02:15:d9:29:7f:f7:54:f4:52:
46:08:74:f9:6e:ad:00:4c:f5:28:4e:90:43:e1:92:
bb:89:76:06:b7:cc:b4:95:b7:a1:42:9e:94:93:5c:
b7:23:22:d3:07:70:7f:76:02:01:b8:d6:89:06:e7:
3c:ec:5f:92:e6:c9:2c:96:7a:e2:43:d6:4a:26:ce:
0c:d0:d5:9a:90:e1:a5:86:f6:30:d1:b3:02:93:b2:
db:18:bc:66:5a:16:f0:2d:3b:c4:c9:4d:c5:fc:48:
00:29:59:96:9e:25:42:a2:02:c8:fd:c0:f5:97:13:
18:ce:79:9b:1a:2e:b2:ed:2e:f1:0d:47:2a:9a:70:
11:87:a4:db:b1:20:5c:48:02:f6:b5:3c:47:e2:79:
72:5a:b6:8f:37:10:17:5f:01:da:3b:f5:53:49:20:
10:9a:db:dc:7c:b1:02:d1:fa:9f:c5:92:44:d3:c3:
2d:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:1B:40:E4:9B:39:E3:38:EA:A0:B2:D4:F2:E0:F7:B8:A5:69:DB:F0
X509v3 Authority Key Identifier:
keyid:37:5C:74:22:59:FF:90:08:57:D1:36:89:D8:D4:8D:B2:0E:DF:46:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/N1x0Iln_kAhX0TaJ2NSNsg7fRgM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/8a5ee7-b638-4b70-8a8e-f97745d13b8d/1/N1x0Iln_kAhX0TaJ2NSNsg7fRgM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/8a5ee7-b638-4b70-8a8e-f97745d13b8d/1/N1x0Iln_kAhX0TaJ2NSNsg7fRgM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7a:b4:de:b3:ad:5b:96:ec:b3:96:88:12:e9:05:48:89:b5:d6:
f5:73:10:ad:65:f6:f5:58:02:94:48:28:26:ee:51:93:10:41:
d2:57:7e:ed:99:4f:a7:13:c0:ce:2b:5d:e8:20:fb:36:6d:ed:
9a:3c:1c:4d:0d:e5:8d:fc:e9:e2:a0:a9:b9:3a:a2:80:45:de:
d6:02:51:8f:54:75:10:31:2b:0f:8e:45:a9:e7:33:89:6f:4f:
6b:85:06:b4:18:c2:b3:23:1d:07:a7:c8:12:6e:fc:02:9f:6e:
3a:0a:ac:6d:d0:ec:0f:0f:64:bf:06:8b:98:c2:74:18:10:44:
34:bf:e5:52:5b:e3:92:e6:ec:67:5c:ea:7e:b4:3c:43:be:ab:
93:5a:af:37:c4:db:32:64:e4:d9:03:18:e3:50:b5:8c:30:34:
0b:ab:20:b5:d8:e9:1f:b2:da:59:36:2f:05:08:97:2b:ba:63:
7f:7b:97:28:56:34:e6:56:64:5d:5f:8f:fd:47:a4:bb:40:b7:
4c:cc:f4:03:6f:14:08:70:41:63:ca:32:93:49:b5:e7:3c:5f:
50:7a:96:f7:6c:3e:e4:ea:1b:47:c5:91:85:ed:a3:d6:83:d0:
8a:f3:28:cd:4c:5a:98:61:da:d5:e2:b3:0c:d9:9f:00:e7:6d:
ab:ce:71:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 11:16:18 2025 by rpki-client