Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/1040ae-aa13-4cbb-90da-367b86fbcbf7/1/N5jHIczxJbe4Klf7Pdk7d6YqOag.mft
File: N5jHIczxJbe4Klf7Pdk7d6YqOag.mft (raw, json)
Hash identifier: QT3pY4n4ef6hYIxebrKbQTBR3OfOQ8JrR29tS2v5A1o=
Subject key identifier: 6D:37:06:19:3E:67:B9:53:A5:23:C8:10:7F:10:C4:26:F5:E1:1E:72
Authority key identifier: 37:98:C7:21:CC:F1:25:B7:B8:2A:57:FB:3D:D9:3B:77:A6:2A:39:A8
Certificate issuer: /CN=3798c721ccf125b7b82a57fb3dd93b77a62a39a8
Certificate serial: 0198D6CD546E4A4FD7842F9412284D42D612
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/N5jHIczxJbe4Klf7Pdk7d6YqOag.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/70/1040ae-aa13-4cbb-90da-367b86fbcbf7/1/N5jHIczxJbe4Klf7Pdk7d6YqOag.mft
Manifest number: 0AB4
Signing time: Sat 23 Aug 2025 12:00:37 +0000
Manifest this update: Sat 23 Aug 2025 12:00:37 +0000
Manifest next update: Sun 24 Aug 2025 12:00:37 +0000
Files and hashes: 1: N5jHIczxJbe4Klf7Pdk7d6YqOag.crl (hash: ZcGg+wgfE+hdYHZBC5gssod4z+7IbX83N6rLORhexDc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/70/1040ae-aa13-4cbb-90da-367b86fbcbf7/1/N5jHIczxJbe4Klf7Pdk7d6YqOag.crl
rsync://rpki.ripe.net/repository/DEFAULT/70/1040ae-aa13-4cbb-90da-367b86fbcbf7/1/N5jHIczxJbe4Klf7Pdk7d6YqOag.mft
rsync://rpki.ripe.net/repository/DEFAULT/N5jHIczxJbe4Klf7Pdk7d6YqOag.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 12:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:cd:54:6e:4a:4f:d7:84:2f:94:12:28:4d:42:d6:12
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3798c721ccf125b7b82a57fb3dd93b77a62a39a8
Validity
Not Before: Aug 23 12:00:37 2025 GMT
Not After : Aug 24 12:00:37 2025 GMT
Subject: CN=6d3706193e67b953a523c8107f10c426f5e11e72
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:00:a6:eb:a3:b9:b5:ee:5c:f0:1c:d2:0b:da:
7c:80:84:3d:73:56:b7:e1:7a:7a:8c:1e:24:f9:49:
da:fd:81:4e:06:d5:70:99:32:6f:fd:ad:d2:2f:1f:
d6:3b:e8:cb:ed:72:19:33:84:c4:dd:50:f2:8b:58:
f9:0f:47:a1:f0:6c:35:ce:04:a5:d8:73:ea:e5:63:
6a:6d:27:7f:e9:2b:a2:70:46:0a:d8:57:f9:f4:df:
96:e4:fd:8a:32:0c:59:cf:bf:55:6a:40:f7:60:81:
af:85:26:88:0e:b8:b5:1a:00:2a:6f:a7:4d:32:2d:
f9:f0:fe:a1:c3:1a:c3:f3:0c:93:78:f8:bd:ce:29:
3d:e3:02:3c:b7:45:1f:ff:b7:d6:74:4c:d3:14:4b:
3e:c9:d7:db:2e:52:c9:e7:9f:14:5a:23:a3:61:df:
0c:5f:9a:45:de:50:76:1b:dd:59:57:76:e8:26:15:
e0:64:5f:a0:cc:9e:de:b0:3f:4d:6f:fb:7c:82:b6:
14:47:9d:21:17:e4:7b:4c:9b:89:a7:d2:72:18:31:
b8:89:a4:a1:0c:a5:2b:67:6b:b9:59:95:af:83:42:
86:fc:7b:65:f9:f6:ec:71:1d:60:5a:0d:5e:78:94:
5a:91:b2:e8:d0:95:75:99:77:d3:09:6f:c6:23:43:
02:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6D:37:06:19:3E:67:B9:53:A5:23:C8:10:7F:10:C4:26:F5:E1:1E:72
X509v3 Authority Key Identifier:
keyid:37:98:C7:21:CC:F1:25:B7:B8:2A:57:FB:3D:D9:3B:77:A6:2A:39:A8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/N5jHIczxJbe4Klf7Pdk7d6YqOag.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/1040ae-aa13-4cbb-90da-367b86fbcbf7/1/N5jHIczxJbe4Klf7Pdk7d6YqOag.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/70/1040ae-aa13-4cbb-90da-367b86fbcbf7/1/N5jHIczxJbe4Klf7Pdk7d6YqOag.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
07:80:59:48:6f:18:65:25:49:f5:44:b1:63:52:ce:2e:b8:10:
66:6d:d1:a1:1e:e8:5c:7c:75:70:95:6b:7d:a3:79:09:bb:62:
53:70:65:42:a3:cf:53:3e:93:3b:41:34:53:48:fb:d5:3e:98:
5d:7f:16:f6:86:af:69:3d:67:38:61:a6:96:74:55:ba:b5:a1:
c6:26:3c:d5:77:2e:aa:c7:b0:c5:1b:d0:fd:1a:bd:3f:61:29:
87:41:0b:6d:fe:15:41:f2:7e:ee:1b:18:d4:62:f6:75:76:de:
f2:ba:bd:63:5d:c0:4b:7a:3c:20:e5:a0:93:c5:de:3e:6f:0b:
ab:31:b2:eb:59:1a:7c:ca:d1:ad:cb:13:f0:99:29:54:16:f6:
38:18:d5:ba:cf:7e:d5:a7:09:f5:cc:df:95:3a:27:f5:18:2d:
60:da:a2:cf:2d:f5:fe:bc:99:69:7e:95:06:f0:35:5c:bb:a7:
93:b3:12:af:7d:09:0d:f0:75:54:eb:be:be:35:7c:59:3b:b9:
d5:2e:b1:56:51:8d:6c:3d:f9:b4:2f:40:49:a4:2f:a1:ab:08:
c4:a9:e2:98:68:9f:16:83:c0:dc:06:18:25:14:83:28:4a:94:
63:09:e2:d5:32:97:d0:ac:8f:07:e9:fc:30:68:4b:5a:b4:c0:
0d:20:d3:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 16:44:30 2025 by rpki-client