Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/9b1928-9929-4ee8-9f35-077b29730ce6/1/N5D3H6pDya9aDc9gP9Cyp4wiSpM.mft
File: N5D3H6pDya9aDc9gP9Cyp4wiSpM.mft (raw, json)
Hash identifier: dKgeIt3EslC/C/Vpsp6LW5KUR/H5EuN4kl26hx7UH+U=
Subject key identifier: F6:C1:BE:D7:F1:C4:F7:2B:39:C3:AB:3F:04:03:95:AD:E6:2E:15:DA
Authority key identifier: 37:90:F7:1F:AA:43:C9:AF:5A:0D:CF:60:3F:D0:B2:A7:8C:22:4A:93
Certificate issuer: /CN=3790f71faa43c9af5a0dcf603fd0b2a78c224a93
Certificate serial: 0198D54EAC78535076B05BBD820E83D5D19E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/N5D3H6pDya9aDc9gP9Cyp4wiSpM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/62/9b1928-9929-4ee8-9f35-077b29730ce6/1/N5D3H6pDya9aDc9gP9Cyp4wiSpM.mft
Manifest number: 0BD4
Signing time: Sat 23 Aug 2025 05:02:39 +0000
Manifest this update: Sat 23 Aug 2025 05:02:39 +0000
Manifest next update: Sun 24 Aug 2025 05:02:39 +0000
Files and hashes: 1: N5D3H6pDya9aDc9gP9Cyp4wiSpM.crl (hash: qg7uoozP4auUMKAfM3imHYedQjBHIy/NWh7htg3sdxA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/62/9b1928-9929-4ee8-9f35-077b29730ce6/1/N5D3H6pDya9aDc9gP9Cyp4wiSpM.crl
rsync://rpki.ripe.net/repository/DEFAULT/62/9b1928-9929-4ee8-9f35-077b29730ce6/1/N5D3H6pDya9aDc9gP9Cyp4wiSpM.mft
rsync://rpki.ripe.net/repository/DEFAULT/N5D3H6pDya9aDc9gP9Cyp4wiSpM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 00:37:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:4e:ac:78:53:50:76:b0:5b:bd:82:0e:83:d5:d1:9e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3790f71faa43c9af5a0dcf603fd0b2a78c224a93
Validity
Not Before: Aug 23 05:02:39 2025 GMT
Not After : Aug 24 05:02:39 2025 GMT
Subject: CN=f6c1bed7f1c4f72b39c3ab3f040395ade62e15da
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ee:df:77:e2:fc:6d:65:87:2d:e5:cc:91:ac:0e:
b9:c2:43:28:95:66:0c:39:d0:9a:f5:7d:8e:67:3b:
af:f4:16:16:5a:74:d1:e6:00:34:65:d4:06:42:8e:
d0:64:fa:99:55:d3:8f:55:27:e6:1c:78:c4:af:27:
7b:ac:0b:a3:1d:da:1c:f9:46:a5:b9:6f:88:20:d6:
73:c9:6f:7c:32:80:ad:45:49:e2:2b:b6:9f:5d:3f:
e0:0e:f0:56:b9:b0:37:c7:4a:a3:16:76:29:60:03:
a5:24:1f:7f:43:6c:92:47:ad:0c:9d:58:9f:a2:12:
f0:fb:27:8c:40:84:4c:cb:c5:2b:3f:d0:96:a0:bb:
9a:b9:41:fc:b3:e3:f1:0c:f6:f3:2c:22:a9:85:3f:
d4:7c:31:80:90:06:8a:48:1e:e9:62:89:dd:dc:b5:
6d:6d:00:d1:5c:d5:1c:0b:c0:5c:cf:c2:cf:f2:3f:
24:5c:6b:a8:fa:c5:54:97:33:46:8b:2f:81:d6:5f:
6e:19:4e:67:88:09:7f:48:da:3b:40:4a:a9:35:55:
cc:1a:2c:2a:12:fb:0f:52:b1:a3:2f:89:2d:59:01:
fe:ad:bc:75:e0:5a:5d:9b:a9:2c:1d:18:8e:5d:35:
91:da:e8:0d:23:5d:e5:13:d9:3d:fe:b2:ba:2d:e3:
e5:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:C1:BE:D7:F1:C4:F7:2B:39:C3:AB:3F:04:03:95:AD:E6:2E:15:DA
X509v3 Authority Key Identifier:
keyid:37:90:F7:1F:AA:43:C9:AF:5A:0D:CF:60:3F:D0:B2:A7:8C:22:4A:93
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/N5D3H6pDya9aDc9gP9Cyp4wiSpM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/9b1928-9929-4ee8-9f35-077b29730ce6/1/N5D3H6pDya9aDc9gP9Cyp4wiSpM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/62/9b1928-9929-4ee8-9f35-077b29730ce6/1/N5D3H6pDya9aDc9gP9Cyp4wiSpM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
07:f9:ed:32:8f:dd:b1:0f:3c:66:f1:5f:92:17:65:41:ef:10:
1f:98:8a:a9:61:32:ee:4a:d5:a4:85:d0:99:8c:5e:97:fa:3e:
8e:52:d3:fd:ef:db:16:d5:57:a0:98:b8:78:fd:44:d4:9a:42:
9b:32:3f:3e:92:ba:51:9a:a8:29:43:8a:c9:08:1d:77:50:cf:
a8:c3:84:d6:05:41:e4:af:6e:0f:bc:93:43:ba:0c:df:b3:98:
a4:e4:63:53:b2:e5:1f:29:a3:1d:a5:b5:a3:d3:be:70:9c:f2:
c4:1c:79:f6:6a:16:e5:43:42:92:d1:87:aa:4d:a8:89:8b:cc:
29:2e:c1:53:8a:73:cd:67:c3:7d:a0:bc:8d:6d:07:cd:83:62:
21:fe:5a:c7:bf:5f:46:d6:17:2c:65:ba:70:ea:43:df:25:79:
2c:fe:9e:e7:d2:dc:40:7d:5f:d4:d0:3a:e7:0f:c0:8d:9e:c3:
e5:8d:9f:e5:be:68:ab:0e:7c:87:48:f7:1c:99:a1:0c:d7:14:
f6:bc:cb:24:9a:13:a1:e9:02:cf:aa:1c:1c:d4:c5:01:b0:97:
e1:56:bb:34:e3:3d:74:9a:8b:24:60:e1:c3:9a:f9:32:fe:e5:
14:d6:c7:96:62:5b:2f:14:2b:68:8f:52:1e:35:e6:1a:f7:f4:
70:4c:02:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 09:42:38 2025 by rpki-client