Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/8f83c2-3bb3-4d47-8031-de571b89618d/1/N4G6usaSUnGxeYF1FeBuahCs9rQ.mft
File: N4G6usaSUnGxeYF1FeBuahCs9rQ.mft (raw, json)
Hash identifier: GKZMU5Q9vza1kj8Wn9rY4p2r3z7O9dGYecASLW5apsg=
Subject key identifier: 85:CF:F4:96:F4:8D:32:9F:03:06:75:B6:50:A2:EC:59:FB:00:84:F6
Authority key identifier: 37:81:BA:BA:C6:92:52:71:B1:79:81:75:15:E0:6E:6A:10:AC:F6:B4
Certificate issuer: /CN=3781babac6925271b179817515e06e6a10acf6b4
Certificate serial: 01992367BA8FD8F52F8D2130D859BCE89E6E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/N4G6usaSUnGxeYF1FeBuahCs9rQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/8f83c2-3bb3-4d47-8031-de571b89618d/1/N4G6usaSUnGxeYF1FeBuahCs9rQ.mft
Manifest number: 0618
Signing time: Sun 07 Sep 2025 09:00:24 +0000
Manifest this update: Sun 07 Sep 2025 09:00:24 +0000
Manifest next update: Mon 08 Sep 2025 09:00:24 +0000
Files and hashes: 1: N4G6usaSUnGxeYF1FeBuahCs9rQ.crl (hash: rPgc6lWVzOny4p9qfy8hmhH3m4YaLYj1vxqA/aKmLKo=)
2: R1GLOmkDsdOQU3JmSI6jpWMtr0k.roa (hash: TobK47r5xeGKINzekYR4rqZ5DBGKz/0D1yzbu2xP0c8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/8f83c2-3bb3-4d47-8031-de571b89618d/1/N4G6usaSUnGxeYF1FeBuahCs9rQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/8e/8f83c2-3bb3-4d47-8031-de571b89618d/1/N4G6usaSUnGxeYF1FeBuahCs9rQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/N4G6usaSUnGxeYF1FeBuahCs9rQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 05:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:23:67:ba:8f:d8:f5:2f:8d:21:30:d8:59:bc:e8:9e:6e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3781babac6925271b179817515e06e6a10acf6b4
Validity
Not Before: Sep 7 09:00:24 2025 GMT
Not After : Sep 8 09:00:24 2025 GMT
Subject: CN=85cff496f48d329f030675b650a2ec59fb0084f6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:4c:29:57:f1:78:ce:f8:9b:b0:90:b9:94:34:
d9:a9:1f:d9:02:65:8c:92:af:30:5a:d4:c8:07:b1:
f9:a1:b6:f6:59:2d:ae:a6:6b:97:3c:af:0f:1e:b6:
e4:84:00:77:65:e8:b5:82:9f:56:82:9e:c5:f8:23:
b9:07:1d:3c:15:82:3a:d4:69:0b:1b:ab:9b:7b:b5:
1e:68:f8:5a:f5:5d:99:9a:cb:b4:78:9c:c5:89:ab:
36:5d:5b:ec:0b:89:3a:09:3d:3a:2f:5c:db:fd:dc:
cd:06:0d:6d:e7:ff:13:47:bb:98:05:cb:3a:25:bf:
f3:3b:da:c6:46:74:14:a7:85:c8:83:43:71:da:02:
ec:76:68:82:59:ad:a5:5a:10:1f:e9:c2:2c:e4:41:
71:a0:73:6f:2f:ad:33:2e:24:8b:52:f5:fd:81:1c:
7b:34:8d:3c:eb:31:54:86:85:52:72:0c:9b:e4:f0:
0c:a5:c6:31:0a:6e:cf:ce:8a:74:b4:4b:18:96:ad:
69:f1:1e:9a:5f:84:6e:a6:0f:30:84:c6:d0:fa:e8:
d9:d7:0b:36:c2:ee:88:eb:ab:cc:05:1f:43:fe:ce:
5b:7a:67:ef:8d:86:1f:54:cf:e8:55:86:85:55:c5:
c9:cb:d6:1d:56:07:54:0f:3c:7d:c0:9b:5f:56:45:
81:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:CF:F4:96:F4:8D:32:9F:03:06:75:B6:50:A2:EC:59:FB:00:84:F6
X509v3 Authority Key Identifier:
keyid:37:81:BA:BA:C6:92:52:71:B1:79:81:75:15:E0:6E:6A:10:AC:F6:B4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/N4G6usaSUnGxeYF1FeBuahCs9rQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/8f83c2-3bb3-4d47-8031-de571b89618d/1/N4G6usaSUnGxeYF1FeBuahCs9rQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/8f83c2-3bb3-4d47-8031-de571b89618d/1/N4G6usaSUnGxeYF1FeBuahCs9rQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3e:1c:90:ab:28:2f:a0:45:e0:80:4e:28:2a:d1:c0:c0:43:f4:
7c:fa:a5:df:99:72:5c:64:f4:2a:0a:79:2f:05:bf:ec:82:bc:
a4:e3:8c:ff:05:f8:1b:c6:b5:95:10:f8:f8:6d:8e:74:0f:df:
d8:b8:b6:86:06:a9:e1:f5:32:bf:19:c5:7a:44:f6:04:2c:33:
d7:1f:7c:cb:c2:5d:be:a8:9a:d7:bb:8a:3f:9d:0c:9c:8c:5f:
9d:d0:40:e0:6a:cd:44:f6:a6:2d:a5:6e:66:98:c2:37:d1:2a:
4f:f0:7e:e5:bf:0f:f4:41:5b:25:66:4c:95:3b:be:4f:ba:b0:
bb:1f:c8:98:c0:df:12:64:6b:fd:2a:9a:58:ff:95:83:62:d3:
0b:20:08:e8:b0:bf:2d:da:ff:53:84:cf:8b:ec:af:3d:11:33:
b7:a4:eb:5d:ff:0f:c0:45:37:b5:14:3c:95:6a:59:af:d1:4c:
52:a0:53:5a:e7:87:a9:3a:21:7e:67:c6:59:d1:80:0b:6c:44:
55:c7:e6:16:15:cf:6c:47:b1:e7:ae:7c:06:2f:1d:61:61:33:
e9:a6:bc:b0:20:98:16:77:c0:0e:6e:57:03:90:20:a0:4f:8d:
6f:2b:23:73:6f:2d:52:73:2c:0a:d8:7a:c3:ca:84:df:2d:56:
ee:4c:30:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 11:29:19 2025 by rpki-client