Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6f/399d34-e4d0-4b80-8ecd-b7892f76e8c5/1/N28vTtsjIwxkt5O0GVfvSjI-PFM.mft
File: N28vTtsjIwxkt5O0GVfvSjI-PFM.mft (raw, json)
Hash identifier: Q32rdx4PM4Dr8BOPcLcqCP+BVOe2HZT+QglQ88JDTzQ=
Subject key identifier: DC:02:6D:4E:E5:98:AC:74:B7:A0:4B:61:1C:E7:40:BF:26:C3:F5:1E
Authority key identifier: 37:6F:2F:4E:DB:23:23:0C:64:B7:93:B4:19:57:EF:4A:32:3E:3C:53
Certificate issuer: /CN=376f2f4edb23230c64b793b41957ef4a323e3c53
Certificate serial: 0198D7A8D9A276DC81531A246DB928DC8EE1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/N28vTtsjIwxkt5O0GVfvSjI-PFM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6f/399d34-e4d0-4b80-8ecd-b7892f76e8c5/1/N28vTtsjIwxkt5O0GVfvSjI-PFM.mft
Manifest number: 10F6
Signing time: Sat 23 Aug 2025 16:00:23 +0000
Manifest this update: Sat 23 Aug 2025 16:00:23 +0000
Manifest next update: Sun 24 Aug 2025 16:00:23 +0000
Files and hashes: 1: N28vTtsjIwxkt5O0GVfvSjI-PFM.crl (hash: 07dQFYUlWC8vxjWzQp5UDRQphMTqTywIMrSHGYvwNnU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6f/399d34-e4d0-4b80-8ecd-b7892f76e8c5/1/N28vTtsjIwxkt5O0GVfvSjI-PFM.crl
rsync://rpki.ripe.net/repository/DEFAULT/6f/399d34-e4d0-4b80-8ecd-b7892f76e8c5/1/N28vTtsjIwxkt5O0GVfvSjI-PFM.mft
rsync://rpki.ripe.net/repository/DEFAULT/N28vTtsjIwxkt5O0GVfvSjI-PFM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 12:50:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d7:a8:d9:a2:76:dc:81:53:1a:24:6d:b9:28:dc:8e:e1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=376f2f4edb23230c64b793b41957ef4a323e3c53
Validity
Not Before: Aug 23 16:00:23 2025 GMT
Not After : Aug 24 16:00:23 2025 GMT
Subject: CN=dc026d4ee598ac74b7a04b611ce740bf26c3f51e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:4f:00:13:63:26:ee:31:b2:58:23:b3:ca:11:
1c:96:2e:fe:8f:8c:b8:98:71:28:23:9c:1d:a1:b0:
f5:d9:64:68:f7:e3:c8:27:cf:4b:58:5c:7b:9c:b2:
8a:55:84:19:86:83:44:4b:64:97:bd:d2:74:be:e6:
1c:68:bd:8b:54:12:fb:01:23:44:2d:8e:26:4e:33:
ef:93:67:8c:1e:c0:d1:82:4c:27:c4:c7:37:a8:a9:
43:48:59:08:05:12:f2:a1:a1:50:6e:f5:30:79:16:
94:28:25:67:c2:7b:d3:a0:47:c9:04:2f:31:ed:0e:
20:4f:9e:39:b4:7f:ce:9c:ae:fb:a3:cb:ed:07:75:
80:54:ee:95:3e:e0:9b:4c:7d:fe:f3:b8:08:11:f5:
d2:70:1f:2d:4c:62:98:1b:c2:38:85:ba:d7:86:b8:
14:05:f7:77:fa:fb:7f:e1:73:64:53:aa:26:1b:3e:
65:f9:49:5c:be:19:53:00:86:01:5e:1c:bb:c9:89:
3d:23:d5:01:5e:a3:2f:86:5e:4b:b6:23:21:60:c6:
42:52:ee:d6:12:1d:a5:2d:ec:f1:89:73:d1:dd:8a:
74:f9:88:7a:cf:40:05:24:92:bd:b3:33:b4:f3:30:
79:03:78:32:1c:5e:3e:e0:49:a2:b1:1e:ac:f1:1b:
2e:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:02:6D:4E:E5:98:AC:74:B7:A0:4B:61:1C:E7:40:BF:26:C3:F5:1E
X509v3 Authority Key Identifier:
keyid:37:6F:2F:4E:DB:23:23:0C:64:B7:93:B4:19:57:EF:4A:32:3E:3C:53
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/N28vTtsjIwxkt5O0GVfvSjI-PFM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/399d34-e4d0-4b80-8ecd-b7892f76e8c5/1/N28vTtsjIwxkt5O0GVfvSjI-PFM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/399d34-e4d0-4b80-8ecd-b7892f76e8c5/1/N28vTtsjIwxkt5O0GVfvSjI-PFM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
90:65:cd:d6:fe:b9:8c:0f:d8:6a:43:fc:53:86:6f:51:ac:bf:
57:70:75:a3:35:3a:5a:c8:3c:23:ad:1a:15:f4:42:b8:e5:de:
4a:db:e4:62:f0:c2:90:c5:8d:be:52:1d:ae:88:0b:c3:71:95:
17:99:a6:1d:07:37:57:82:79:62:48:aa:41:16:fa:35:07:84:
a7:47:54:bc:4f:30:b2:d1:22:80:d5:9c:b9:66:b9:f1:b6:14:
62:1b:cc:06:bf:35:8d:f0:06:0b:31:05:36:31:30:cf:f6:e1:
d6:de:e1:be:e2:8e:79:75:5d:33:bb:5d:8c:b0:e7:28:f6:95:
16:a2:5c:44:3e:f4:86:9e:aa:8f:b6:26:24:16:79:9a:3c:c8:
aa:7a:f6:29:00:4a:2e:ee:21:b0:2b:6f:c0:8c:03:02:bd:f9:
78:54:80:38:38:a3:cb:af:cb:2f:87:46:42:09:22:8d:0f:3b:
f2:82:c0:e8:df:7b:71:08:79:f9:88:a9:df:ae:d5:4f:38:5c:
23:76:8d:a0:55:bf:33:55:42:de:04:23:d9:a4:ad:81:1b:b2:
de:96:2e:7e:4e:ee:07:8b:86:01:3a:01:a0:b7:5b:70:a0:f5:
62:8c:7f:ee:f0:94:de:f3:a1:23:8f:fd:5c:c3:93:d5:39:fb:
78:27:47:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 17:32:32 2025 by rpki-client