Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/208129-d086-49d4-9dc7-5a9ac7f39023/1/N3vRD32QbBMcjJ4vxzFkFt9K4iQ.mft
File: N3vRD32QbBMcjJ4vxzFkFt9K4iQ.mft (raw, json)
Hash identifier: 0KCyn/zvx9JY0H3LNJ8shIu9p4bVi3TmKgZFWatihQw=
Subject key identifier: 97:8C:70:D0:57:AA:EC:28:15:36:E3:79:D4:24:79:5E:50:59:BF:28
Authority key identifier: 37:7B:D1:0F:7D:90:6C:13:1C:8C:9E:2F:C7:31:64:16:DF:4A:E2:24
Certificate issuer: /CN=377bd10f7d906c131c8c9e2fc7316416df4ae224
Certificate serial: 0198D7A8B304017A658EDDE9953E520A9B87
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/N3vRD32QbBMcjJ4vxzFkFt9K4iQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/208129-d086-49d4-9dc7-5a9ac7f39023/1/N3vRD32QbBMcjJ4vxzFkFt9K4iQ.mft
Manifest number: 0DD1
Signing time: Sat 23 Aug 2025 16:00:13 +0000
Manifest this update: Sat 23 Aug 2025 16:00:13 +0000
Manifest next update: Sun 24 Aug 2025 16:00:13 +0000
Files and hashes: 1: N3vRD32QbBMcjJ4vxzFkFt9K4iQ.crl (hash: EWFeS+n0XoCNwJ6UxfZzg5TBGFCxxgZiewqn8/YSTIA=)
2: OMa6gi_iwh1hBu7tbqj9s02UqHs.roa (hash: MtN6hH7mkES8J6BxizWre+aErU3W714/kzoONVlpny4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/17/208129-d086-49d4-9dc7-5a9ac7f39023/1/N3vRD32QbBMcjJ4vxzFkFt9K4iQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/17/208129-d086-49d4-9dc7-5a9ac7f39023/1/N3vRD32QbBMcjJ4vxzFkFt9K4iQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/N3vRD32QbBMcjJ4vxzFkFt9K4iQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 14:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d7:a8:b3:04:01:7a:65:8e:dd:e9:95:3e:52:0a:9b:87
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=377bd10f7d906c131c8c9e2fc7316416df4ae224
Validity
Not Before: Aug 23 16:00:13 2025 GMT
Not After : Aug 24 16:00:13 2025 GMT
Subject: CN=978c70d057aaec281536e379d424795e5059bf28
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:9d:f3:85:24:34:9d:10:bd:35:92:02:b1:44:
62:c2:58:d1:39:8f:e5:b7:6e:6b:d2:ec:b0:dd:c7:
10:44:43:90:4b:e9:74:9f:4a:df:28:1c:cc:3b:54:
37:61:bc:c2:03:53:f4:e2:ff:af:db:18:ed:28:19:
4b:e5:ed:7c:4d:e9:c4:88:eb:16:5c:92:a0:6d:fc:
36:35:4a:10:ab:ec:16:f9:24:01:ee:8d:3d:27:9f:
55:4b:b4:04:7b:25:28:dc:ba:eb:ce:ee:e1:21:7b:
ce:0d:26:d4:42:31:bb:1b:db:61:e2:34:d3:01:fb:
b9:47:98:66:9f:7e:cf:61:21:81:a8:79:cc:d3:dd:
60:17:71:34:02:d8:85:77:bc:64:ee:25:68:8e:60:
26:51:80:b9:f8:8a:46:c1:2f:ef:32:77:bf:61:48:
55:28:c8:e9:91:19:30:b1:03:33:22:ba:d2:36:dd:
d7:f8:b6:0f:75:15:e6:9f:46:dc:a8:74:47:03:68:
01:c1:f3:b4:24:cf:51:9d:57:66:a3:9b:84:8a:6f:
db:ac:27:de:8f:82:dc:5f:b6:78:83:bc:fa:77:39:
dd:3f:17:f9:fa:80:06:11:f8:84:ef:a4:f6:15:ee:
3d:96:cd:52:75:2c:3a:d3:b2:a0:50:fa:c0:a1:f8:
70:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:8C:70:D0:57:AA:EC:28:15:36:E3:79:D4:24:79:5E:50:59:BF:28
X509v3 Authority Key Identifier:
keyid:37:7B:D1:0F:7D:90:6C:13:1C:8C:9E:2F:C7:31:64:16:DF:4A:E2:24
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/N3vRD32QbBMcjJ4vxzFkFt9K4iQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/208129-d086-49d4-9dc7-5a9ac7f39023/1/N3vRD32QbBMcjJ4vxzFkFt9K4iQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/17/208129-d086-49d4-9dc7-5a9ac7f39023/1/N3vRD32QbBMcjJ4vxzFkFt9K4iQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0b:21:04:14:79:3f:5c:92:56:bf:bd:ae:ba:04:a3:38:db:4c:
af:11:00:01:e9:37:8f:a5:c8:c1:e3:c3:98:f6:8f:13:2c:8d:
66:a6:08:34:e0:05:a8:56:da:f6:f7:7c:37:2e:9b:83:7a:21:
05:b8:a0:c4:22:ea:d1:03:59:c9:af:d1:e6:2b:a2:f3:2c:16:
9b:f4:f3:2b:be:46:ff:05:63:d4:aa:46:e4:c6:df:d2:55:99:
e4:ad:f1:2d:dd:dc:01:49:d5:c9:7b:97:96:f0:c5:38:9f:e8:
d9:7f:17:7e:35:13:8a:73:32:d5:18:dd:73:67:97:57:5c:c2:
34:8f:f6:c3:e7:31:d6:3b:d1:eb:98:2f:d7:0d:cb:74:ff:cd:
3a:26:40:67:d8:c8:bf:ed:b0:54:2e:ca:41:69:90:01:b4:82:
b2:a9:08:48:dd:a5:7d:44:95:20:e6:8e:45:9f:3b:0e:54:1a:
7a:08:3e:ca:2c:fa:53:cb:5c:c8:84:ff:0a:0c:d4:f6:76:48:
4d:6d:6f:c5:e5:fc:98:8d:c7:77:18:3a:02:c0:38:f6:0a:64:
10:04:26:3d:72:9a:14:14:e6:3d:f3:c9:93:a6:90:75:19:fa:
3b:10:95:34:be:59:a5:a2:7f:5f:d4:9e:8d:ba:b2:94:e0:3c:
46:8b:df:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 24 00:09:12 2025 by rpki-client