Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/86f93b-cd9d-4e82-bef0-9dcf6b3c0797/1/N3G9bi3aX6MFfEvCg_r3E6kVpdk.mft
File: N3G9bi3aX6MFfEvCg_r3E6kVpdk.mft (raw, json)
Hash identifier: l8k4l2RI1PYw9NFBjCSjlAELe26/azDyR+98ylpXKds=
Subject key identifier: 8E:4F:F2:78:3E:D3:05:96:CC:C8:B6:F5:9C:78:D0:95:5B:FD:11:81
Authority key identifier: 37:71:BD:6E:2D:DA:5F:A3:05:7C:4B:C2:83:FA:F7:13:A9:15:A5:D9
Certificate issuer: /CN=3771bd6e2dda5fa3057c4bc283faf713a915a5d9
Certificate serial: 0199FBEA76C2F1607D12F7B335FC95149E96
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/N3G9bi3aX6MFfEvCg_r3E6kVpdk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/86f93b-cd9d-4e82-bef0-9dcf6b3c0797/1/N3G9bi3aX6MFfEvCg_r3E6kVpdk.mft
Manifest number: 0BEC
Signing time: Sun 19 Oct 2025 10:01:10 +0000
Manifest this update: Sun 19 Oct 2025 10:01:10 +0000
Manifest next update: Mon 20 Oct 2025 10:01:10 +0000
Files and hashes: 1: N3G9bi3aX6MFfEvCg_r3E6kVpdk.crl (hash: pDcxlNlHIZuYal0BzrUu4QbtlYWwUcXibkipLcO259E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/86f93b-cd9d-4e82-bef0-9dcf6b3c0797/1/N3G9bi3aX6MFfEvCg_r3E6kVpdk.crl
rsync://rpki.ripe.net/repository/DEFAULT/10/86f93b-cd9d-4e82-bef0-9dcf6b3c0797/1/N3G9bi3aX6MFfEvCg_r3E6kVpdk.mft
rsync://rpki.ripe.net/repository/DEFAULT/N3G9bi3aX6MFfEvCg_r3E6kVpdk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 10:01:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:ea:76:c2:f1:60:7d:12:f7:b3:35:fc:95:14:9e:96
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3771bd6e2dda5fa3057c4bc283faf713a915a5d9
Validity
Not Before: Oct 19 10:01:10 2025 GMT
Not After : Oct 20 10:01:10 2025 GMT
Subject: CN=8e4ff2783ed30596ccc8b6f59c78d0955bfd1181
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:93:ce:6e:f5:1b:fd:a4:a2:7a:90:a4:d0:08:
ef:e6:10:bd:5f:58:ee:8f:3b:74:8d:74:08:6d:f0:
51:d9:ae:69:53:7d:a0:e4:81:d6:a6:84:15:bf:18:
98:bb:d1:41:35:51:ab:c1:be:63:d2:3e:a8:c1:33:
cd:8f:fc:d6:80:42:9d:1f:14:b7:eb:6e:32:51:14:
9e:b3:02:4e:99:65:78:5a:84:f8:18:96:a0:d7:96:
cc:4f:f4:40:31:ab:53:a7:88:b3:ff:fa:0b:1f:38:
7b:b1:36:d7:af:06:64:25:e4:29:0c:4d:18:41:7c:
05:8c:88:dd:05:34:cb:fe:37:49:22:d7:d8:f7:63:
dc:9c:ad:bd:a6:5a:a4:00:bd:d6:cb:a1:fb:b2:b8:
2c:99:b3:af:48:ab:c0:9e:c7:a5:0f:4d:cf:85:b2:
33:8c:59:df:36:18:32:c4:5f:b4:78:a3:08:30:2a:
36:65:e7:dd:17:9a:b9:d7:1e:e3:4e:cc:22:8d:b7:
01:e9:d2:48:83:dd:b1:84:ae:9e:b0:fd:aa:55:86:
22:f5:8b:39:95:64:68:84:48:f3:a0:1f:bb:d0:e3:
5d:f3:f3:7c:99:67:84:a0:af:4d:cd:05:e9:7f:73:
09:11:2e:26:99:2b:d9:51:e4:47:27:ea:6a:98:4f:
29:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:4F:F2:78:3E:D3:05:96:CC:C8:B6:F5:9C:78:D0:95:5B:FD:11:81
X509v3 Authority Key Identifier:
keyid:37:71:BD:6E:2D:DA:5F:A3:05:7C:4B:C2:83:FA:F7:13:A9:15:A5:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/N3G9bi3aX6MFfEvCg_r3E6kVpdk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/86f93b-cd9d-4e82-bef0-9dcf6b3c0797/1/N3G9bi3aX6MFfEvCg_r3E6kVpdk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/86f93b-cd9d-4e82-bef0-9dcf6b3c0797/1/N3G9bi3aX6MFfEvCg_r3E6kVpdk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5b:87:b8:3b:9d:69:c3:d4:54:28:4f:90:51:f4:75:8c:eb:fc:
c1:b3:fe:ed:cd:a6:de:5d:7a:52:a1:2f:34:59:1e:37:93:fb:
ab:d3:1d:fd:01:18:df:62:6b:fb:93:9a:6f:f7:75:3e:85:10:
c6:6c:cf:1a:4b:cd:c7:ec:06:87:ad:fe:a8:bd:f2:fd:78:30:
e5:81:c0:22:b1:34:57:68:dc:2e:fe:cf:19:54:ea:22:78:f1:
0b:0c:5f:dd:89:10:06:05:0f:4a:27:a7:a3:34:68:3e:ee:cf:
ae:b7:34:e9:b5:d7:d6:b1:9c:79:f9:62:0b:01:f0:25:ee:3b:
44:1c:c1:2d:a6:47:1a:c3:e0:3c:22:0a:fc:54:48:9c:7b:bc:
63:92:07:9b:52:e6:09:61:da:0e:b3:d5:e6:1e:3c:35:7b:9a:
52:39:18:06:47:fa:5c:ce:67:01:99:fc:eb:0e:19:07:82:f5:
0a:4d:a8:2d:18:68:d6:5f:88:79:38:32:29:3f:d1:cc:b7:51:
ce:9d:01:e0:38:33:4f:af:64:6e:4b:73:da:e5:37:2b:16:2d:
fa:64:12:60:40:13:d7:52:b1:c8:1d:f3:5c:ad:40:7f:f2:45:
0e:e5:65:97:eb:27:76:99:00:7a:02:0e:cd:bd:33:bf:0e:b0:
e1:fc:1c:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 19:54:39 2025 by rpki-client