Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/86f93b-cd9d-4e82-bef0-9dcf6b3c0797/1/N3G9bi3aX6MFfEvCg_r3E6kVpdk.mft
File: N3G9bi3aX6MFfEvCg_r3E6kVpdk.mft (raw, json)
Hash identifier: 4pm2ZuKJno7bdtmcpqSazacCvz+MEtGHgXrp9RWeWb8=
Subject key identifier: 79:C1:88:4E:53:45:F5:BD:AA:22:DB:FE:F3:7B:6F:29:83:AE:30:64
Authority key identifier: 37:71:BD:6E:2D:DA:5F:A3:05:7C:4B:C2:83:FA:F7:13:A9:15:A5:D9
Certificate issuer: /CN=3771bd6e2dda5fa3057c4bc283faf713a915a5d9
Certificate serial: 0197B6A12F304A395BA651FE53FCE69517FC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/N3G9bi3aX6MFfEvCg_r3E6kVpdk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/86f93b-cd9d-4e82-bef0-9dcf6b3c0797/1/N3G9bi3aX6MFfEvCg_r3E6kVpdk.mft
Manifest number: 0ABF
Signing time: Sat 28 Jun 2025 13:01:46 +0000
Manifest this update: Sat 28 Jun 2025 13:01:46 +0000
Manifest next update: Sun 29 Jun 2025 13:01:46 +0000
Files and hashes: 1: N3G9bi3aX6MFfEvCg_r3E6kVpdk.crl (hash: 6eV+jWnZ3acISW0UBs+FVD2/FKhYH+xlpeT5rgVGbGo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/86f93b-cd9d-4e82-bef0-9dcf6b3c0797/1/N3G9bi3aX6MFfEvCg_r3E6kVpdk.crl
rsync://rpki.ripe.net/repository/DEFAULT/10/86f93b-cd9d-4e82-bef0-9dcf6b3c0797/1/N3G9bi3aX6MFfEvCg_r3E6kVpdk.mft
rsync://rpki.ripe.net/repository/DEFAULT/N3G9bi3aX6MFfEvCg_r3E6kVpdk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 10:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:a1:2f:30:4a:39:5b:a6:51:fe:53:fc:e6:95:17:fc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3771bd6e2dda5fa3057c4bc283faf713a915a5d9
Validity
Not Before: Jun 28 13:01:46 2025 GMT
Not After : Jun 29 13:01:46 2025 GMT
Subject: CN=79c1884e5345f5bdaa22dbfef37b6f2983ae3064
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:f2:cd:72:19:3f:0a:e3:b6:e0:db:e7:72:2d:
cd:fc:3c:ef:70:95:e8:42:4e:65:04:f9:fe:9d:0f:
e0:7c:44:f4:ee:eb:f9:69:d9:a2:c7:f6:5d:0c:be:
33:53:2a:43:50:47:54:8c:59:1d:1a:fa:18:7f:ef:
e6:f5:95:f6:ff:e5:f2:03:aa:d6:2b:a2:e7:da:01:
6c:9c:53:e7:63:52:b9:8c:78:2d:75:6f:b0:e4:a5:
b7:86:62:21:36:77:c8:a5:41:2c:4a:61:b4:1f:99:
22:12:6e:c8:2a:88:f0:dd:c2:4a:51:e4:dc:0a:76:
1c:fb:be:5a:59:f3:f6:dc:81:7d:b8:5d:2c:78:a3:
1c:96:dd:3f:ed:92:1d:89:f6:7a:fe:4f:4f:3a:1d:
95:78:b8:af:1e:a6:0b:31:86:73:63:7c:7b:65:cd:
4f:10:82:c5:01:39:d5:f5:d6:67:fa:3f:7e:5d:49:
f1:de:41:22:ef:52:71:28:86:fd:e0:6d:28:a9:d8:
da:34:f4:aa:8a:d8:7d:23:dc:9b:a0:63:77:69:10:
ee:64:7a:b8:6a:7a:e5:88:96:b5:2a:57:d4:a4:54:
37:27:83:99:58:87:18:2d:13:1c:da:a6:77:1b:ac:
03:4a:3f:ee:ff:8d:7b:05:b7:a4:67:72:29:e3:cb:
0a:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:C1:88:4E:53:45:F5:BD:AA:22:DB:FE:F3:7B:6F:29:83:AE:30:64
X509v3 Authority Key Identifier:
keyid:37:71:BD:6E:2D:DA:5F:A3:05:7C:4B:C2:83:FA:F7:13:A9:15:A5:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/N3G9bi3aX6MFfEvCg_r3E6kVpdk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/86f93b-cd9d-4e82-bef0-9dcf6b3c0797/1/N3G9bi3aX6MFfEvCg_r3E6kVpdk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/86f93b-cd9d-4e82-bef0-9dcf6b3c0797/1/N3G9bi3aX6MFfEvCg_r3E6kVpdk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
48:e0:15:85:49:f7:d3:79:72:c5:e0:46:55:df:fa:11:ec:97:
e7:c7:c3:e7:c5:a9:20:7f:5c:c0:f8:27:72:10:97:4b:cb:64:
82:8b:3b:24:3d:b4:1a:f1:2c:ef:16:f8:78:9f:4a:51:77:ab:
26:b1:89:7a:39:b3:74:91:88:db:2c:11:67:3d:28:2d:37:d2:
5a:14:35:db:7b:54:8d:35:71:ee:dc:84:7e:ef:0c:8d:d8:e6:
b8:95:0c:e8:bb:89:0b:5a:fa:03:ee:9b:5d:2f:a1:aa:47:1e:
b9:d8:ce:34:c3:90:ea:ea:86:f7:a0:d8:eb:0a:e5:c0:37:43:
3c:b4:b9:73:93:21:46:f0:5a:5b:62:6b:33:f0:fb:c1:c2:81:
0a:d4:5f:c8:0b:28:a8:83:1c:ed:cf:8a:93:6f:81:ba:36:b4:
70:14:64:e4:3e:14:2d:36:14:a7:c3:e3:06:1b:74:fc:2b:90:
c8:bf:44:65:d9:0d:57:1d:d9:5d:68:7b:50:af:04:cd:30:d5:
8c:4a:61:a0:16:d3:b4:81:ff:92:f4:61:b9:94:b8:bf:9c:9f:
fe:11:a8:a7:09:4a:7c:58:2a:0c:dd:34:59:02:d9:b3:76:0d:
9a:22:c0:c5:c0:f8:83:75:06:a2:27:8c:fd:d9:22:13:f2:8d:
32:43:10:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 19:06:36 2025 by rpki-client