Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/86f93b-cd9d-4e82-bef0-9dcf6b3c0797/1/N3G9bi3aX6MFfEvCg_r3E6kVpdk.mft
File: N3G9bi3aX6MFfEvCg_r3E6kVpdk.mft (raw, json)
Hash identifier: kQgAMcPw0ZfkJGXdH1ZXvIm3IxQlJb0r7YQPDdJIs6M=
Subject key identifier: 89:CB:57:B4:59:5F:CD:6B:87:C0:E6:60:26:35:A2:BE:63:7C:32:07
Authority key identifier: 37:71:BD:6E:2D:DA:5F:A3:05:7C:4B:C2:83:FA:F7:13:A9:15:A5:D9
Certificate issuer: /CN=3771bd6e2dda5fa3057c4bc283faf713a915a5d9
Certificate serial: 01969E9A3E4C4779491F747F919F533BC25A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/N3G9bi3aX6MFfEvCg_r3E6kVpdk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/86f93b-cd9d-4e82-bef0-9dcf6b3c0797/1/N3G9bi3aX6MFfEvCg_r3E6kVpdk.mft
Manifest number: 0A2E
Signing time: Mon 05 May 2025 04:00:30 +0000
Manifest this update: Mon 05 May 2025 04:00:30 +0000
Manifest next update: Tue 06 May 2025 04:00:30 +0000
Files and hashes: 1: N3G9bi3aX6MFfEvCg_r3E6kVpdk.crl (hash: UuBHsun9O3KY938OAxkkjaMjQaoTlohCCCkvkWu5dXg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/86f93b-cd9d-4e82-bef0-9dcf6b3c0797/1/N3G9bi3aX6MFfEvCg_r3E6kVpdk.crl
rsync://rpki.ripe.net/repository/DEFAULT/10/86f93b-cd9d-4e82-bef0-9dcf6b3c0797/1/N3G9bi3aX6MFfEvCg_r3E6kVpdk.mft
rsync://rpki.ripe.net/repository/DEFAULT/N3G9bi3aX6MFfEvCg_r3E6kVpdk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 06 May 2025 01:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:9e:9a:3e:4c:47:79:49:1f:74:7f:91:9f:53:3b:c2:5a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3771bd6e2dda5fa3057c4bc283faf713a915a5d9
Validity
Not Before: May 5 04:00:30 2025 GMT
Not After : May 6 04:00:30 2025 GMT
Subject: CN=89cb57b4595fcd6b87c0e6602635a2be637c3207
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:07:c9:12:33:b0:86:f3:9d:46:97:7b:17:98:
43:df:31:76:41:65:3e:20:93:f7:79:d1:21:ed:59:
ae:d5:97:d3:5d:e8:6c:86:e6:97:65:79:3e:b5:cb:
80:84:9b:eb:af:08:17:b4:ee:6b:ee:bc:ce:93:ee:
0a:ea:9c:95:ed:02:31:db:67:ed:80:81:d0:65:88:
fe:d5:ce:d6:ea:96:0a:b3:5a:7f:61:ae:ee:16:e4:
7f:17:7a:f6:a2:51:c0:3b:8f:d6:a0:35:68:ae:1c:
25:98:7f:bb:5b:46:5a:38:71:b0:e0:7c:c0:2d:d5:
ce:e3:7a:e7:44:42:e6:a9:54:41:dc:aa:da:db:5f:
54:6e:3f:87:1b:3a:08:7a:47:01:f6:25:f6:98:6a:
1b:c1:f5:35:7d:85:6c:c7:1f:3b:46:17:78:0c:36:
fd:7f:bd:1e:9b:fa:2e:2b:c4:2f:b0:de:34:b1:65:
6e:e6:61:ce:6c:73:94:4f:fd:ab:64:05:84:94:10:
81:bc:93:56:f7:2a:68:0b:f8:e1:36:6f:f3:56:4b:
c6:05:69:d4:c5:1c:92:1e:82:b4:d2:48:82:61:13:
18:6f:e0:c0:5a:7d:89:d5:5a:4b:62:f5:45:d3:1f:
3e:ad:0c:96:d2:ae:54:15:1a:40:a3:39:61:b2:10:
f4:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:CB:57:B4:59:5F:CD:6B:87:C0:E6:60:26:35:A2:BE:63:7C:32:07
X509v3 Authority Key Identifier:
keyid:37:71:BD:6E:2D:DA:5F:A3:05:7C:4B:C2:83:FA:F7:13:A9:15:A5:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/N3G9bi3aX6MFfEvCg_r3E6kVpdk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/86f93b-cd9d-4e82-bef0-9dcf6b3c0797/1/N3G9bi3aX6MFfEvCg_r3E6kVpdk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/86f93b-cd9d-4e82-bef0-9dcf6b3c0797/1/N3G9bi3aX6MFfEvCg_r3E6kVpdk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
73:64:e2:36:b8:af:20:16:0e:af:8c:ed:a0:f3:1a:20:5a:2b:
63:1a:d0:f6:37:e2:b1:e1:23:b9:8d:1c:59:74:78:11:6a:a4:
8f:48:be:95:6d:9c:46:ab:6f:e3:5d:08:34:31:a2:90:c5:77:
4e:ad:93:ae:38:ac:4c:8a:05:da:ab:66:4e:ce:5a:f3:58:a4:
27:7c:ec:cb:d9:9e:38:9e:c0:f5:d2:04:3a:3c:d1:34:dc:e9:
35:b4:92:39:94:1d:e1:ed:5b:b7:48:b3:dd:dc:5c:2c:9a:71:
b1:47:5f:b5:76:de:89:6e:b7:24:0e:5b:49:0a:88:f1:11:a3:
79:e4:04:ea:09:3c:6b:53:01:fe:24:4a:50:ed:2f:0c:8b:a5:
5c:5a:f4:b1:ab:b7:22:b4:53:3e:8a:66:96:c0:fa:b7:76:a6:
70:62:e9:4c:d7:94:b4:11:74:1c:8d:33:e3:3a:83:5c:05:55:
cd:d5:8e:46:05:66:d1:67:a6:6e:e9:b0:4d:06:85:d7:31:5c:
e7:a1:3b:0a:ba:47:19:e7:bd:21:6c:a5:d9:c6:31:ba:be:d6:
35:5a:41:3b:c4:a9:4d:02:ff:8e:a6:25:68:86:1f:d3:19:18:
7d:b2:89:c0:7b:d1:92:55:e9:d4:e2:b8:11:aa:99:03:81:ef:
f2:f0:bb:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 5 10:50:31 2025 by rpki-client