Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/86f93b-cd9d-4e82-bef0-9dcf6b3c0797/1/N3G9bi3aX6MFfEvCg_r3E6kVpdk.mft
File: N3G9bi3aX6MFfEvCg_r3E6kVpdk.mft (raw, json)
Hash identifier: HDsLM7shnjHX+9Dz1ifCfgnLxlTFecpgyPY/vC6I1Qw=
Subject key identifier: 8A:C6:E2:7B:F0:1F:A9:46:35:01:C4:C0:10:72:5B:5B:75:65:00:0C
Authority key identifier: 37:71:BD:6E:2D:DA:5F:A3:05:7C:4B:C2:83:FA:F7:13:A9:15:A5:D9
Certificate issuer: /CN=3771bd6e2dda5fa3057c4bc283faf713a915a5d9
Certificate serial: 0198D6610E880D549D1C5AEE97CDB602E6E7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/N3G9bi3aX6MFfEvCg_r3E6kVpdk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/86f93b-cd9d-4e82-bef0-9dcf6b3c0797/1/N3G9bi3aX6MFfEvCg_r3E6kVpdk.mft
Manifest number: 0B54
Signing time: Sat 23 Aug 2025 10:02:21 +0000
Manifest this update: Sat 23 Aug 2025 10:02:21 +0000
Manifest next update: Sun 24 Aug 2025 10:02:21 +0000
Files and hashes: 1: N3G9bi3aX6MFfEvCg_r3E6kVpdk.crl (hash: XvLOpQWbMtEqLNmSkSPClsvwJ/pqoQJSc91pdAgw1Aw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/86f93b-cd9d-4e82-bef0-9dcf6b3c0797/1/N3G9bi3aX6MFfEvCg_r3E6kVpdk.crl
rsync://rpki.ripe.net/repository/DEFAULT/10/86f93b-cd9d-4e82-bef0-9dcf6b3c0797/1/N3G9bi3aX6MFfEvCg_r3E6kVpdk.mft
rsync://rpki.ripe.net/repository/DEFAULT/N3G9bi3aX6MFfEvCg_r3E6kVpdk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:61:0e:88:0d:54:9d:1c:5a:ee:97:cd:b6:02:e6:e7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3771bd6e2dda5fa3057c4bc283faf713a915a5d9
Validity
Not Before: Aug 23 10:02:21 2025 GMT
Not After : Aug 24 10:02:21 2025 GMT
Subject: CN=8ac6e27bf01fa9463501c4c010725b5b7565000c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:e2:96:a7:dd:4b:f8:46:e9:54:bc:b0:36:36:
2e:2b:1f:64:41:21:f0:43:af:82:6e:77:d2:83:aa:
ea:73:cd:1e:0f:70:ab:a2:03:99:59:0e:95:ee:ef:
b9:95:df:af:02:de:94:6d:20:2e:0f:fe:33:59:b8:
ee:2a:72:98:57:11:45:69:e0:a5:58:32:20:14:22:
64:c8:2d:77:b7:50:7a:af:d8:2b:ff:14:c8:f5:2b:
32:11:2f:49:34:c3:e9:f0:a1:51:6d:35:1c:39:aa:
a2:cd:6e:ef:24:bb:56:7f:08:65:19:01:f0:1c:a2:
d6:d7:f0:9c:d2:86:ce:99:8d:29:a0:aa:ed:15:7b:
a0:f0:e6:85:85:4e:52:73:a9:24:2d:d2:de:7f:7c:
ea:b3:a5:ea:f1:38:4d:d0:01:4e:eb:ea:22:c7:13:
a0:0a:79:84:ff:95:84:af:62:d7:73:03:f9:93:99:
ab:70:69:38:01:2d:1e:48:52:81:63:b4:9d:3b:2d:
8d:1a:8b:57:f9:d6:3d:07:ac:35:bd:9c:d3:df:57:
2e:db:fd:43:94:c7:9f:01:21:65:1c:fb:55:92:15:
2e:8f:10:80:5b:b2:cf:1f:e9:ee:c6:2c:c1:4f:fe:
0f:6e:b9:a5:36:c9:90:63:23:1a:1e:68:d2:ac:1d:
05:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:C6:E2:7B:F0:1F:A9:46:35:01:C4:C0:10:72:5B:5B:75:65:00:0C
X509v3 Authority Key Identifier:
keyid:37:71:BD:6E:2D:DA:5F:A3:05:7C:4B:C2:83:FA:F7:13:A9:15:A5:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/N3G9bi3aX6MFfEvCg_r3E6kVpdk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/86f93b-cd9d-4e82-bef0-9dcf6b3c0797/1/N3G9bi3aX6MFfEvCg_r3E6kVpdk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/86f93b-cd9d-4e82-bef0-9dcf6b3c0797/1/N3G9bi3aX6MFfEvCg_r3E6kVpdk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
38:1b:00:72:6f:86:16:cd:3e:43:3f:2c:0d:91:e1:7d:27:e9:
4d:08:f3:7b:ad:38:08:c7:50:ec:22:c1:96:fd:80:7c:e3:39:
c2:67:9f:f0:6d:5e:46:c3:e1:0d:96:7f:7b:de:1f:8f:30:cc:
86:1a:f8:d8:1b:38:6c:49:df:5d:c8:9d:f1:13:46:cb:9b:e7:
ef:ea:ce:94:4b:e9:4f:27:15:e1:7c:91:86:96:98:e0:b6:71:
8e:b4:0c:f8:96:7a:db:eb:33:32:be:43:82:fb:ee:ad:fe:11:
b3:ac:8f:45:b5:e7:0a:fb:ef:64:53:0a:ea:fd:c2:96:06:54:
72:95:ac:cb:49:d1:3e:b6:b8:54:23:cc:b1:71:b8:4c:7a:64:
94:31:2b:a9:92:7d:67:6b:15:69:f0:0c:20:2e:d7:45:20:5a:
76:9e:b4:e4:a3:a6:c7:23:41:7f:63:35:e0:ac:26:1c:6b:42:
cf:c8:1c:7b:6c:f4:88:a7:49:45:b1:a3:b9:47:da:8d:36:96:
88:37:85:cb:e3:00:7f:80:c5:cb:cb:5a:2c:de:f9:f6:76:8f:
0a:ac:af:12:76:cc:1b:d5:79:df:64:1d:a8:0c:5b:ff:16:6f:
70:e4:4d:98:77:85:84:cd:9a:34:73:80:0b:ef:33:34:49:08:
f6:a3:5f:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 15:25:06 2025 by rpki-client