Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/1336c7-a33f-4ec6-82d7-f44166bb2db0/1/N_vfL1-FXl4cpI53w73TO9R7RDg.mft
File: N_vfL1-FXl4cpI53w73TO9R7RDg.mft (raw, json)
Hash identifier: OA/gFTneUu52QqS5U3/3XP4v+Ll87nIxBpibzbu338U=
Subject key identifier: CD:E0:39:C7:FB:8C:92:A1:85:26:E6:2E:9C:5C:9C:3E:B3:A1:34:04
Authority key identifier: 37:FB:DF:2F:5F:85:5E:5E:1C:A4:8E:77:C3:BD:D3:3B:D4:7B:44:38
Certificate issuer: /CN=37fbdf2f5f855e5e1ca48e77c3bdd33bd47b4438
Certificate serial: 019954546172666F78305B03C3EAE851AEA3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/N_vfL1-FXl4cpI53w73TO9R7RDg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/1336c7-a33f-4ec6-82d7-f44166bb2db0/1/N_vfL1-FXl4cpI53w73TO9R7RDg.mft
Manifest number: 168E
Signing time: Tue 16 Sep 2025 21:00:40 +0000
Manifest this update: Tue 16 Sep 2025 21:00:40 +0000
Manifest next update: Wed 17 Sep 2025 21:00:40 +0000
Files and hashes: 1: N_vfL1-FXl4cpI53w73TO9R7RDg.crl (hash: dwt1/Rifd9ZlcbSmmNszn7T2g+CLOY3Zf2q1ghMBlMU=)
2: PSL2OSxsoutF8sVX_uvIaiWUApI.roa (hash: IoDHAxb+U2Gaz8HUwj/mdMtnodnlu8iYqMMfCwQw35I=)
3: t0FWDnJPs6XvZokHfTcCnjKRaeE.roa (hash: Aou1i/O3zguK2P9WdtUpbw8G9iRuYff1/7SNrw+Pohw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8a/1336c7-a33f-4ec6-82d7-f44166bb2db0/1/N_vfL1-FXl4cpI53w73TO9R7RDg.crl
rsync://rpki.ripe.net/repository/DEFAULT/8a/1336c7-a33f-4ec6-82d7-f44166bb2db0/1/N_vfL1-FXl4cpI53w73TO9R7RDg.mft
rsync://rpki.ripe.net/repository/DEFAULT/N_vfL1-FXl4cpI53w73TO9R7RDg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 17 Sep 2025 21:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:54:54:61:72:66:6f:78:30:5b:03:c3:ea:e8:51:ae:a3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=37fbdf2f5f855e5e1ca48e77c3bdd33bd47b4438
Validity
Not Before: Sep 16 21:00:40 2025 GMT
Not After : Sep 17 21:00:40 2025 GMT
Subject: CN=cde039c7fb8c92a18526e62e9c5c9c3eb3a13404
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:2c:e7:5b:f3:b7:29:42:1a:37:1a:68:cc:a6:
3f:ca:73:37:35:53:71:73:a8:1c:ea:e9:9a:d1:08:
2e:60:de:8d:0d:6f:8e:73:77:2a:cf:3e:23:2c:3d:
d5:8e:bb:4a:79:05:3d:7e:4c:96:c0:55:60:d4:6d:
68:fa:eb:fe:d2:ca:85:fb:25:d7:eb:38:28:a3:e3:
d2:55:8a:b3:ab:ee:d7:d0:05:b1:50:f7:5c:c5:a1:
c3:44:c8:f6:5e:33:1e:60:64:51:58:c7:74:2f:c7:
c6:ec:95:48:46:2f:29:07:28:4f:8e:d0:77:90:8d:
b8:8e:a3:8c:18:9d:c1:41:78:d5:c1:5c:7f:ce:8e:
3c:0f:91:6d:d1:62:32:e3:1d:79:75:df:d3:6c:48:
44:a3:15:68:66:e8:48:48:14:c7:08:8b:47:04:14:
c6:81:b4:e1:ea:97:fa:26:0e:dd:2b:5b:2a:75:42:
9b:d1:03:cb:2a:34:c1:b8:43:53:b7:fc:4f:08:89:
d5:2a:1e:55:03:ee:cf:42:3e:ea:16:b3:d2:e8:6b:
27:42:42:f8:29:5e:1d:40:b1:17:3b:42:81:7e:7b:
62:81:01:f8:be:f1:17:cc:02:01:ca:5c:74:77:3e:
65:ef:aa:0b:3c:e0:48:cd:c4:4d:46:41:4d:49:57:
1d:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:E0:39:C7:FB:8C:92:A1:85:26:E6:2E:9C:5C:9C:3E:B3:A1:34:04
X509v3 Authority Key Identifier:
keyid:37:FB:DF:2F:5F:85:5E:5E:1C:A4:8E:77:C3:BD:D3:3B:D4:7B:44:38
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/N_vfL1-FXl4cpI53w73TO9R7RDg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/1336c7-a33f-4ec6-82d7-f44166bb2db0/1/N_vfL1-FXl4cpI53w73TO9R7RDg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/1336c7-a33f-4ec6-82d7-f44166bb2db0/1/N_vfL1-FXl4cpI53w73TO9R7RDg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
97:c2:58:0f:83:10:9b:1b:2c:c5:16:73:3c:b1:98:bc:96:f8:
05:4c:38:ef:d3:b2:c8:53:36:a1:02:0c:3f:fb:b5:a3:f3:1a:
fb:52:cf:54:da:a7:8e:4a:ca:16:bf:40:76:6d:9c:c6:06:3c:
9f:0e:bf:75:46:30:a7:0b:97:2e:39:16:5f:d3:61:51:4f:0b:
0d:3f:c7:eb:3f:8e:89:65:36:0c:0a:55:10:e1:d5:4f:16:db:
51:60:c3:86:c4:1c:b4:a6:1b:4a:f1:ab:7d:e5:27:13:f0:68:
93:54:9a:16:80:03:18:7a:dd:95:e6:7f:09:91:97:ce:cc:61:
d0:de:a6:54:c9:c3:68:bf:d0:96:03:7e:ec:6e:84:02:e1:af:
78:1c:7c:45:54:a6:e3:05:60:e6:b2:a4:a3:23:80:2f:76:ab:
c3:ed:5f:b8:d0:1e:d3:ac:e6:23:df:cb:45:3a:6f:c0:fa:bc:
2a:11:5c:a1:1b:83:77:7a:ae:2d:b5:b9:78:d7:0e:32:8e:99:
11:60:e1:d4:d9:39:bc:4e:63:2f:65:b0:82:ba:a9:b4:8f:88:
45:04:c8:7d:1f:4a:2a:4b:13:37:44:c6:5b:a9:a9:52:90:64:
9e:24:87:76:ca:d3:77:50:d7:63:c6:30:4a:bd:c1:34:c7:ae:
61:8b:93:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 17 05:51:33 2025 by rpki-client