Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ad/b53547-d340-4392-af46-615961312b52/1/N0MfG-n9wkGQmEec3kV7v3lXF1k.mft
File: N0MfG-n9wkGQmEec3kV7v3lXF1k.mft (raw, json)
Hash identifier: O/TclCb+D2UNUF89VBKUIo1TzhOQhQJM8m7oq/oSu6g=
Subject key identifier: 8D:74:94:1F:9B:82:E6:FB:5E:41:6F:15:83:CC:49:58:DD:F2:2A:52
Authority key identifier: 37:43:1F:1B:E9:FD:C2:41:90:98:47:9C:DE:45:7B:BF:79:57:17:59
Certificate issuer: /CN=37431f1be9fdc2419098479cde457bbf79571759
Certificate serial: 0198CBA664F18C5265287D4466BACBD953CB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/N0MfG-n9wkGQmEec3kV7v3lXF1k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ad/b53547-d340-4392-af46-615961312b52/1/N0MfG-n9wkGQmEec3kV7v3lXF1k.mft
Manifest number: 08CC
Signing time: Thu 21 Aug 2025 08:02:16 +0000
Manifest this update: Thu 21 Aug 2025 08:02:16 +0000
Manifest next update: Fri 22 Aug 2025 08:02:16 +0000
Files and hashes: 1: A3ey_cAeMANwFWddA6tWalsb_HU.roa (hash: 1QzvBN6h57NIWttaQKkwiJVejIWg/N7/NzIPvbKh3sU=)
2: N0MfG-n9wkGQmEec3kV7v3lXF1k.crl (hash: CFWFYkosExHWtjy8dAiaqjpCUVH6WP5UeHDlNeRoguA=)
3: X2IBg-0ZoG3nzdbOUqoFpfNzTiM.roa (hash: I3L20uWKmG3AN70fPYDWHSKnKdL/hAFebOsi5YIWBck=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ad/b53547-d340-4392-af46-615961312b52/1/N0MfG-n9wkGQmEec3kV7v3lXF1k.crl
rsync://rpki.ripe.net/repository/DEFAULT/ad/b53547-d340-4392-af46-615961312b52/1/N0MfG-n9wkGQmEec3kV7v3lXF1k.mft
rsync://rpki.ripe.net/repository/DEFAULT/N0MfG-n9wkGQmEec3kV7v3lXF1k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 22 Aug 2025 07:46:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:cb:a6:64:f1:8c:52:65:28:7d:44:66:ba:cb:d9:53:cb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=37431f1be9fdc2419098479cde457bbf79571759
Validity
Not Before: Aug 21 08:02:16 2025 GMT
Not After : Aug 22 08:02:16 2025 GMT
Subject: CN=8d74941f9b82e6fb5e416f1583cc4958ddf22a52
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:08:21:af:32:ec:7f:d0:ec:9d:b8:3b:f0:7e:
4b:ee:88:4b:2f:73:02:78:d6:98:31:b8:e5:2e:cf:
79:c9:ee:73:4f:d4:9a:c4:f8:17:a5:17:72:da:fd:
e2:51:b7:fe:f9:95:53:30:5a:1d:39:d1:ee:7e:f6:
74:bb:87:82:2d:15:62:ca:bd:f5:fa:5b:a4:46:72:
f0:83:0e:1a:3c:a8:60:37:32:ed:d4:a6:0f:8b:de:
49:8a:6f:15:7a:af:de:34:f4:ab:8f:bf:c4:64:49:
8a:91:80:bc:17:2c:6e:c3:88:bd:32:e8:83:41:23:
9d:0b:20:4c:e8:19:c7:59:82:04:0e:22:41:c9:18:
8f:17:f1:06:43:4b:3d:f3:c7:9d:8a:89:26:41:96:
75:c5:7c:c7:6b:2c:ce:03:02:b3:e0:d1:89:ba:ca:
88:4e:79:8c:63:24:97:25:48:69:f1:e5:01:9f:26:
ad:8e:ca:07:08:05:7f:5a:3d:17:77:fd:98:49:f2:
2a:ba:67:20:91:4b:b8:4e:36:66:e3:5d:a9:15:eb:
c6:2a:a6:4e:16:c2:fe:d0:f9:12:ce:25:18:43:4a:
65:cc:0f:d4:58:f7:d6:4a:d8:4a:4b:62:08:d2:76:
7c:d1:6f:af:7e:cd:8c:33:c3:91:20:5d:0b:5c:4d:
12:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:74:94:1F:9B:82:E6:FB:5E:41:6F:15:83:CC:49:58:DD:F2:2A:52
X509v3 Authority Key Identifier:
keyid:37:43:1F:1B:E9:FD:C2:41:90:98:47:9C:DE:45:7B:BF:79:57:17:59
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/N0MfG-n9wkGQmEec3kV7v3lXF1k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/b53547-d340-4392-af46-615961312b52/1/N0MfG-n9wkGQmEec3kV7v3lXF1k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/b53547-d340-4392-af46-615961312b52/1/N0MfG-n9wkGQmEec3kV7v3lXF1k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8d:6a:be:ed:f5:7b:65:f3:45:0a:ea:d0:e9:45:a6:71:79:5a:
ef:8d:cd:42:69:e9:75:04:ae:a7:61:fa:9a:86:e9:2f:df:a6:
ab:dd:8a:c1:55:63:e4:37:96:20:e2:8f:bf:16:02:63:5d:34:
a3:18:c3:2e:ad:6f:34:18:24:53:ec:89:3d:38:53:94:8f:7c:
4e:0b:17:08:4d:aa:ed:81:32:40:bb:c3:91:9b:df:08:0c:05:
4b:cb:43:dc:35:c0:d5:3a:ae:87:e3:88:39:6c:1f:b5:54:39:
13:b8:fe:09:a9:5e:5e:90:28:d1:0f:03:7e:50:3d:be:e7:44:
52:c1:58:95:82:f7:24:41:4e:c7:74:bd:02:c6:e1:75:bc:0a:
91:85:27:15:94:ee:89:04:65:30:cf:56:93:35:4f:53:3f:96:
1a:90:46:cd:49:38:31:62:a1:d3:f7:12:ce:3c:e9:28:da:1b:
05:f9:de:ec:48:95:40:e4:8e:5b:ba:7c:8f:30:1e:74:93:a6:
93:9c:b1:de:f8:1a:0e:b9:ae:26:38:7b:4b:46:98:04:39:0d:
90:5b:a6:f2:c4:17:90:b0:ef:e3:5e:77:d1:58:ca:a8:4b:95:
4a:04:85:82:5d:d0:be:a9:a1:94:2e:30:c5:88:2e:da:87:e6:
72:13:41:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 21 10:33:40 2025 by rpki-client