Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/644501-9d42-4816-89c9-10aca3313387/1/n3LjoM10kAU1tqb4_8ZX2ToJB6Y.mft
File: n3LjoM10kAU1tqb4_8ZX2ToJB6Y.mft (raw, json)
Hash identifier: xkUFhHoB6xkOBI+ltuZiYwYPd8i/WBO3nAM8UA/dsSY=
Subject key identifier: 18:BC:E5:E8:E3:7C:90:68:7D:15:D5:47:68:17:C4:5F:59:EC:00:63
Authority key identifier: 9F:72:E3:A0:CD:74:90:05:35:B6:A6:F8:FF:C6:57:D9:3A:09:07:A6
Certificate issuer: /CN=9f72e3a0cd74900535b6a6f8ffc657d93a0907a6
Certificate serial: 0197B77CB6843630CA338390FDB018512573
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/n3LjoM10kAU1tqb4_8ZX2ToJB6Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/644501-9d42-4816-89c9-10aca3313387/1/n3LjoM10kAU1tqb4_8ZX2ToJB6Y.mft
Manifest number: 09C3
Signing time: Sat 28 Jun 2025 17:01:33 +0000
Manifest this update: Sat 28 Jun 2025 17:01:33 +0000
Manifest next update: Sun 29 Jun 2025 17:01:33 +0000
Files and hashes: 1: n3LjoM10kAU1tqb4_8ZX2ToJB6Y.crl (hash: f+vl1gTo0KiicleAKQ3+Kue65I5ank2g0GD2CIAOIJs=)
2: xCIH9wp6RKlehql4M5SLCZPHQEs.roa (hash: 80w1j7Z/qMuNCNOWS8szAQAtDk98iD2/lDFP83CUU3U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bc/644501-9d42-4816-89c9-10aca3313387/1/n3LjoM10kAU1tqb4_8ZX2ToJB6Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/bc/644501-9d42-4816-89c9-10aca3313387/1/n3LjoM10kAU1tqb4_8ZX2ToJB6Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/n3LjoM10kAU1tqb4_8ZX2ToJB6Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:7c:b6:84:36:30:ca:33:83:90:fd:b0:18:51:25:73
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9f72e3a0cd74900535b6a6f8ffc657d93a0907a6
Validity
Not Before: Jun 28 17:01:33 2025 GMT
Not After : Jun 29 17:01:33 2025 GMT
Subject: CN=18bce5e8e37c90687d15d5476817c45f59ec0063
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:92:d3:ef:00:70:b3:0d:73:f4:94:f6:09:07:
ec:24:95:70:a6:03:e4:a5:ec:8c:e2:5e:58:f3:5f:
a9:0f:ee:27:51:d1:5d:22:63:e7:57:0c:bb:75:5e:
a9:66:ca:e2:55:8c:45:dd:1c:fe:4c:f7:00:1e:e9:
fc:6b:e4:5d:ef:35:ee:94:65:46:8c:d8:3a:61:fe:
b7:19:15:bd:04:fe:1c:35:3f:f2:4c:97:cc:79:0e:
00:8e:d1:a7:51:0e:fc:37:73:26:ff:a1:05:8f:21:
7c:89:43:4c:51:f4:eb:07:89:bc:19:13:1f:ab:57:
c7:1f:66:d1:1b:c8:51:f3:6e:12:44:cc:de:55:cf:
cc:db:d6:d5:2a:c5:f5:7d:a1:95:31:28:fe:67:f9:
c3:6b:d9:6f:bb:f6:32:61:2f:12:5c:d4:4b:90:3b:
a9:19:89:cc:6b:b2:a9:ee:4c:d9:eb:87:39:b8:b1:
78:e6:71:0d:17:8d:76:8a:0f:6d:8f:d5:e1:bb:52:
90:dc:95:5e:41:a4:13:cd:a7:6c:ba:ca:71:05:c1:
2b:46:75:3d:17:48:6f:e6:af:ff:b4:cf:64:1b:3b:
38:58:ab:b6:97:0c:1a:46:78:82:85:ab:6e:7c:84:
6a:47:df:ea:61:89:bb:bc:16:60:9f:99:0a:12:4f:
d0:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:BC:E5:E8:E3:7C:90:68:7D:15:D5:47:68:17:C4:5F:59:EC:00:63
X509v3 Authority Key Identifier:
keyid:9F:72:E3:A0:CD:74:90:05:35:B6:A6:F8:FF:C6:57:D9:3A:09:07:A6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/n3LjoM10kAU1tqb4_8ZX2ToJB6Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/644501-9d42-4816-89c9-10aca3313387/1/n3LjoM10kAU1tqb4_8ZX2ToJB6Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/644501-9d42-4816-89c9-10aca3313387/1/n3LjoM10kAU1tqb4_8ZX2ToJB6Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8a:a7:1f:d8:77:e3:a2:f0:3c:1c:f6:bd:45:62:8e:fe:d2:c4:
40:3a:f6:f1:50:96:2f:c6:fb:05:71:46:09:a0:2a:74:8d:a8:
1f:d3:5f:89:c8:7c:b0:de:b4:e1:6c:05:3b:a7:06:5d:58:ac:
28:c1:66:74:44:a6:dc:8c:b0:93:9c:54:fe:b5:bf:b4:e7:5a:
70:e4:3f:80:de:cd:8f:80:3b:f9:90:70:fa:0a:dc:fc:e2:52:
d7:96:ce:ce:5e:24:a5:fd:00:03:c5:02:f0:cb:2a:40:d3:02:
ce:cc:af:b8:b2:c0:1f:aa:09:d4:27:1b:95:94:c7:c4:18:03:
3c:a0:2c:83:fb:4b:3b:2d:02:f3:53:50:d6:26:6c:be:3f:fa:
4d:82:58:93:50:ec:7f:fe:79:43:da:e0:13:e5:6e:2d:b7:d4:
e9:29:6b:4a:4b:a8:f5:65:71:2c:fc:61:4e:93:86:c1:b9:83:
b5:84:56:e1:1f:4b:d7:f0:ec:78:7d:d2:46:0e:ea:05:a6:9f:
b7:62:8d:a9:26:38:ac:65:29:1b:5c:99:f7:7d:a0:d2:0a:4b:
47:fd:88:7d:8f:74:d4:b0:7c:62:cf:f2:17:1b:24:48:5a:99:
29:de:83:d4:b5:29:31:b1:6c:32:51:c6:b7:be:f0:ff:11:34:
b5:c6:47:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 22:45:13 2025 by rpki-client