Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/9b1928-9929-4ee8-9f35-077b29730ce6/1/N5D3H6pDya9aDc9gP9Cyp4wiSpM.mft
File: N5D3H6pDya9aDc9gP9Cyp4wiSpM.mft (raw, json)
Hash identifier: /sZvaIY5EvecvEhKcqHUcSXYLD3ZhZPGNOkT8LzmTj8=
Subject key identifier: B8:2D:9E:3B:6C:4A:22:C4:70:64:B5:36:F1:1E:CF:3F:1A:2B:41:50
Authority key identifier: 37:90:F7:1F:AA:43:C9:AF:5A:0D:CF:60:3F:D0:B2:A7:8C:22:4A:93
Certificate issuer: /CN=3790f71faa43c9af5a0dcf603fd0b2a78c224a93
Certificate serial: 0197B77CBCF3BEE0DC454A4C2A609D838329
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/N5D3H6pDya9aDc9gP9Cyp4wiSpM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/62/9b1928-9929-4ee8-9f35-077b29730ce6/1/N5D3H6pDya9aDc9gP9Cyp4wiSpM.mft
Manifest number: 0B40
Signing time: Sat 28 Jun 2025 17:01:34 +0000
Manifest this update: Sat 28 Jun 2025 17:01:34 +0000
Manifest next update: Sun 29 Jun 2025 17:01:34 +0000
Files and hashes: 1: N5D3H6pDya9aDc9gP9Cyp4wiSpM.crl (hash: 3XaWPtwdaUhzbd3XiFKMboIFVy+qI2oMxHiRBRFALIQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/62/9b1928-9929-4ee8-9f35-077b29730ce6/1/N5D3H6pDya9aDc9gP9Cyp4wiSpM.crl
rsync://rpki.ripe.net/repository/DEFAULT/62/9b1928-9929-4ee8-9f35-077b29730ce6/1/N5D3H6pDya9aDc9gP9Cyp4wiSpM.mft
rsync://rpki.ripe.net/repository/DEFAULT/N5D3H6pDya9aDc9gP9Cyp4wiSpM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:7c:bc:f3:be:e0:dc:45:4a:4c:2a:60:9d:83:83:29
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3790f71faa43c9af5a0dcf603fd0b2a78c224a93
Validity
Not Before: Jun 28 17:01:34 2025 GMT
Not After : Jun 29 17:01:34 2025 GMT
Subject: CN=b82d9e3b6c4a22c47064b536f11ecf3f1a2b4150
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:ad:63:ed:e4:bc:af:19:41:50:fe:74:43:c2:
09:16:2d:b9:6b:29:67:8e:5d:be:47:71:a8:cb:aa:
de:db:f6:88:9c:7a:cd:54:54:c2:e4:47:57:7b:1c:
2d:3b:df:08:80:03:35:d7:a7:8c:0a:71:a1:7f:06:
bf:2b:0f:ad:c7:35:78:74:87:cf:80:2c:9b:d3:67:
36:14:7a:e3:5b:c8:1b:f7:d7:28:15:d5:89:8f:57:
50:27:56:0e:0b:64:e8:37:62:41:4f:95:0d:66:e0:
83:d0:bc:38:27:e9:5e:07:50:d5:58:25:21:5e:dc:
31:52:e8:1c:1b:69:97:29:af:6d:08:33:fe:80:e3:
07:61:02:4b:0c:a9:93:f0:50:fa:c2:e7:ee:0f:57:
e1:4c:23:31:97:3a:22:87:29:d8:83:7f:ab:e5:49:
ec:fc:c2:27:79:b1:da:e7:ba:9c:69:ed:3a:56:bc:
79:41:e1:7a:b0:80:6c:ea:1a:63:a8:4d:45:1a:28:
03:74:8b:0f:a4:29:0b:92:c7:4d:ff:4e:92:08:d8:
50:a5:55:c0:a2:af:50:8e:3b:7c:ac:da:5b:46:3d:
5d:b4:8a:70:de:5e:99:a7:b8:18:1b:7c:43:a3:b5:
50:2a:b0:4f:42:1d:2f:67:4f:16:19:6d:d6:be:20:
3f:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:2D:9E:3B:6C:4A:22:C4:70:64:B5:36:F1:1E:CF:3F:1A:2B:41:50
X509v3 Authority Key Identifier:
keyid:37:90:F7:1F:AA:43:C9:AF:5A:0D:CF:60:3F:D0:B2:A7:8C:22:4A:93
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/N5D3H6pDya9aDc9gP9Cyp4wiSpM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/9b1928-9929-4ee8-9f35-077b29730ce6/1/N5D3H6pDya9aDc9gP9Cyp4wiSpM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/62/9b1928-9929-4ee8-9f35-077b29730ce6/1/N5D3H6pDya9aDc9gP9Cyp4wiSpM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a4:80:b4:37:bd:ab:87:c7:68:31:11:6f:14:ec:c0:6d:8f:98:
7e:6e:a5:a2:18:71:b0:b6:cb:4f:8f:a0:ab:4e:f2:2b:56:0f:
6a:4f:d6:69:2a:70:e3:c1:31:e2:b6:7d:df:2b:3b:95:21:11:
2f:3b:1e:a5:85:e5:3e:d8:16:e0:00:df:c7:46:73:c5:44:4e:
4c:74:6b:82:fd:21:6a:b0:f2:f3:50:c3:47:7a:bb:99:58:2f:
99:90:eb:f4:8c:33:41:2e:47:50:a5:63:3e:36:59:d6:0f:13:
b3:47:a6:34:3e:13:02:f1:34:2f:40:3f:dd:59:f9:95:43:80:
8a:80:e9:ee:17:d1:a7:1a:a9:ef:d9:03:58:a8:69:f3:99:86:
d9:81:e4:c4:f3:a0:73:da:4e:25:58:c0:71:b0:cc:40:dc:ba:
76:64:e4:47:d2:34:68:d1:f2:ed:7e:b0:7b:62:39:b8:5a:ec:
bb:b4:45:51:21:15:fa:98:83:3b:d9:a7:ee:1c:01:bc:9c:00:
9e:6b:42:f9:3b:c4:f4:f7:3f:76:f3:d9:29:6f:46:2b:06:a2:
ab:b5:b1:97:ac:d4:71:be:46:55:97:84:d0:99:58:21:ed:82:
28:ff:38:e8:2d:d2:a3:26:0a:13:a8:04:8d:35:cb:0f:50:3e:
7a:3f:06:90
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZe3fLzzvuDcRUpMKmCdg4MpMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM3OTBmNzFmYWE0M2M5YWY1YTBkY2Y2MDNmZDBiMmE3OGMy
MjRhOTMwHhcNMjUwNjI4MTcwMTM0WhcNMjUwNjI5MTcwMTM0WjAzMTEwLwYDVQQD
EyhiODJkOWUzYjZjNGEyMmM0NzA2NGI1MzZmMTFlY2YzZjFhMmI0MTUwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyK1j7eS8rxlBUP50Q8IJFi25ayln
jl2+R3Goy6re2/aInHrNVFTC5EdXexwtO98IgAM116eMCnGhfwa/Kw+txzV4dIfP
gCyb02c2FHrjW8gb99coFdWJj1dQJ1YOC2ToN2JBT5UNZuCD0Lw4J+leB1DVWCUh
XtwxUugcG2mXKa9tCDP+gOMHYQJLDKmT8FD6wufuD1fhTCMxlzoihynYg3+r5Uns
/MInebHa57qcae06Vrx5QeF6sIBs6hpjqE1FGigDdIsPpCkLksdN/06SCNhQpVXA
oq9Qjjt8rNpbRj1dtIpw3l6Zp7gYG3xDo7VQKrBPQh0vZ08WGW3WviA/YQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLgtnjtsSiLEcGS1NvEezz8aK0FQMB8GA1UdIwQY
MBaAFDeQ9x+qQ8mvWg3PYD/QsqeMIkqTMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTjVEM0g2cER5YTlhRGM5Z1A5Q3lwNHdpU3BNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Mi85YjE5MjgtOTkyOS00ZWU4LTlmMzUt
MDc3YjI5NzMwY2U2LzEvTjVEM0g2cER5YTlhRGM5Z1A5Q3lwNHdpU3BNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82Mi85YjE5MjgtOTkyOS00ZWU4LTlmMzUtMDc3YjI5NzMwY2U2
LzEvTjVEM0g2cER5YTlhRGM5Z1A5Q3lwNHdpU3BNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEApIC0N72r
h8doMRFvFOzAbY+Yfm6lohhxsLbLT4+gq07yK1YPak/WaSpw48Ex4rZ93ys7lSER
LzsepYXlPtgW4ADfx0ZzxUROTHRrgv0harDy81DDR3q7mVgvmZDr9IwzQS5HUKVj
PjZZ1g8Ts0emND4TAvE0L0A/3Vn5lUOAioDp7hfRpxqp79kDWKhp85mG2YHkxPOg
c9pOJVjAcbDMQNy6dmTkR9I0aNHy7X6we2I5uFrsu7RFUSEV+piDO9mn7hwBvJwA
nmtC+TvE9Pc/dvPZKW9GKwaiq7Wxl6zUcb5GVZeE0JlYIe2CKP846C3SoyYKE6gE
jTXLD1A+ej8GkA==
-----END CERTIFICATE-----
Generated at Sat Jun 28 20:40:53 2025 by rpki-client