Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/de956f-e55b-437e-85d9-686f836cbcad/1/N7giEJlIajsTPgE540uTQmTN1wA.mft
File: N7giEJlIajsTPgE540uTQmTN1wA.mft (raw, json)
Hash identifier: 6PfOcRj7qASqjWT7PckgP55w1N29uczaL3KhQ/akvD4=
Subject key identifier: 06:A5:CD:6E:56:63:C8:5D:86:BD:02:85:0A:9D:BC:76:C2:7A:97:95
Authority key identifier: 37:B8:22:10:99:48:6A:3B:13:3E:01:39:E3:4B:93:42:64:CD:D7:00
Certificate issuer: /CN=37b8221099486a3b133e0139e34b934264cdd700
Certificate serial: 0199221E4D56EC253E0F5040A276F80CDA22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/N7giEJlIajsTPgE540uTQmTN1wA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fe/de956f-e55b-437e-85d9-686f836cbcad/1/N7giEJlIajsTPgE540uTQmTN1wA.mft
Manifest number: 0FE6
Signing time: Sun 07 Sep 2025 03:00:35 +0000
Manifest this update: Sun 07 Sep 2025 03:00:35 +0000
Manifest next update: Mon 08 Sep 2025 03:00:35 +0000
Files and hashes: 1: N7giEJlIajsTPgE540uTQmTN1wA.crl (hash: N1yAGZv9oK65ugOmlsUq/g90+dJcwjNh3/D8qBbWNzU=)
2: Vldb1Pv9SKH1pSEjNm1gf_bg3_M.roa (hash: Ox3xcaNfkxGbMXT71Q5JDbePmqXmxZEbJ+Iew6AAo/E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fe/de956f-e55b-437e-85d9-686f836cbcad/1/N7giEJlIajsTPgE540uTQmTN1wA.crl
rsync://rpki.ripe.net/repository/DEFAULT/fe/de956f-e55b-437e-85d9-686f836cbcad/1/N7giEJlIajsTPgE540uTQmTN1wA.mft
rsync://rpki.ripe.net/repository/DEFAULT/N7giEJlIajsTPgE540uTQmTN1wA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 03:00:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:22:1e:4d:56:ec:25:3e:0f:50:40:a2:76:f8:0c:da:22
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=37b8221099486a3b133e0139e34b934264cdd700
Validity
Not Before: Sep 7 03:00:35 2025 GMT
Not After : Sep 8 03:00:35 2025 GMT
Subject: CN=06a5cd6e5663c85d86bd02850a9dbc76c27a9795
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:08:f0:3d:94:d7:a8:66:4e:85:ca:7a:e2:ea:
fa:b6:1d:77:6c:16:c0:5e:0e:e2:f6:21:cf:1b:60:
f8:e9:4c:33:c2:f9:e5:b0:54:9b:24:e3:39:1c:85:
cf:e2:0e:ae:7c:f3:e2:2e:cf:27:ec:07:d8:dd:10:
c3:cf:bb:19:93:3a:6a:ea:e5:76:73:bd:2b:75:7c:
55:fb:e8:28:7a:6a:d9:24:e7:e3:1c:7b:5d:22:7e:
16:d9:93:77:be:80:10:fd:fb:e6:8d:12:5c:4d:97:
2c:e3:c2:ad:cc:72:b4:9c:47:d5:c7:53:97:f9:b2:
0e:66:a2:a2:77:11:07:06:64:f0:2f:56:3a:97:f6:
dc:44:5e:b3:46:7b:19:6f:57:ac:44:11:34:14:a8:
19:66:0c:2b:06:20:b9:01:a9:80:fe:47:c1:b8:61:
08:f9:1b:25:61:e5:de:a2:d6:20:c6:5f:24:4e:32:
03:a5:88:01:3e:67:74:89:af:3f:69:38:1c:54:c0:
78:67:3d:1d:8a:56:11:54:7c:2d:03:2d:e4:ee:38:
75:1d:07:a4:ff:e4:51:53:f8:33:8f:fa:5b:20:33:
b6:ef:73:a5:86:98:16:0e:1d:3b:4d:12:85:cb:d6:
8a:ad:f6:67:8c:90:b4:d4:43:40:49:e3:77:a7:9b:
ac:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:A5:CD:6E:56:63:C8:5D:86:BD:02:85:0A:9D:BC:76:C2:7A:97:95
X509v3 Authority Key Identifier:
keyid:37:B8:22:10:99:48:6A:3B:13:3E:01:39:E3:4B:93:42:64:CD:D7:00
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/N7giEJlIajsTPgE540uTQmTN1wA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/de956f-e55b-437e-85d9-686f836cbcad/1/N7giEJlIajsTPgE540uTQmTN1wA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/de956f-e55b-437e-85d9-686f836cbcad/1/N7giEJlIajsTPgE540uTQmTN1wA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4d:e7:81:60:9a:86:1e:c4:f8:87:5d:88:d7:ac:9f:6a:ab:02:
c5:bb:c0:65:5d:91:1d:38:08:38:4b:d7:7d:08:1a:02:71:ce:
40:be:b5:1a:eb:d9:4d:36:db:ff:64:f1:68:39:75:09:4e:c2:
97:5c:fc:fc:47:50:8c:69:4d:5e:d2:24:f8:28:0a:1a:dd:6f:
a1:3b:f6:15:2a:da:9c:9a:bc:39:9c:e0:a1:15:5b:cf:69:9e:
19:0d:7a:7d:74:5f:59:70:f4:00:31:42:df:31:e6:ff:d4:92:
6a:b9:93:85:50:14:24:79:67:cc:6d:5e:67:91:2e:ef:d8:b5:
13:77:74:d3:b6:1d:ba:32:9b:33:36:5a:16:93:ab:c8:11:1b:
ac:c3:7c:e5:d4:2c:49:60:40:8a:ab:5d:cf:37:53:38:05:a2:
0b:52:91:46:a4:d9:3f:a9:4e:f5:22:c2:1c:18:ad:45:5c:17:
9a:cf:d2:54:17:41:a0:80:21:45:42:c4:2f:99:4b:ac:01:e3:
03:bb:1c:8d:a7:9d:d1:52:e8:f2:e7:6f:48:6d:39:6f:2f:2a:
1e:03:20:c6:34:50:c7:0c:87:b5:55:8e:72:0d:b1:b5:a7:05:
01:1a:66:c2:21:10:e4:b3:af:a3:26:0b:ef:c5:93:e1:bb:3a:
fd:a7:44:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 11:25:27 2025 by rpki-client