Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c1/2b0928-5cb6-4d6b-a8ad-00e55a2499d0/1/n3g9_Cib-qPEuhsyTx27V_WGoB0.mft
File: n3g9_Cib-qPEuhsyTx27V_WGoB0.mft (raw, json)
Hash identifier: 0Ug7dmdnxgjmu9IVcA7HUBQnU+r23U0Q74wOBJn3mDI=
Subject key identifier: 3C:8A:37:D6:86:AC:2D:C6:63:93:A9:9D:A6:CA:95:98:9F:89:0F:E4
Authority key identifier: 9F:78:3D:FC:28:9B:FA:A3:C4:BA:1B:32:4F:1D:BB:57:F5:86:A0:1D
Certificate issuer: /CN=9f783dfc289bfaa3c4ba1b324f1dbb57f586a01d
Certificate serial: 0198D473A244C98D16F518AD7F22274E24AE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/n3g9_Cib-qPEuhsyTx27V_WGoB0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c1/2b0928-5cb6-4d6b-a8ad-00e55a2499d0/1/n3g9_Cib-qPEuhsyTx27V_WGoB0.mft
Manifest number: 029D
Signing time: Sat 23 Aug 2025 01:03:24 +0000
Manifest this update: Sat 23 Aug 2025 01:03:24 +0000
Manifest next update: Sun 24 Aug 2025 01:03:24 +0000
Files and hashes: 1: AE5IQSZ07aDFdSNH0kV7_4HeAEw.roa (hash: urftXRrLYNfHknYhlBilfeq0wuuzqoCnp0BIMu9jSb4=)
2: n3g9_Cib-qPEuhsyTx27V_WGoB0.crl (hash: 5HrkyTII3s06MGKng9pYEIocC6t3KbpqgAoffo6PjUY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c1/2b0928-5cb6-4d6b-a8ad-00e55a2499d0/1/n3g9_Cib-qPEuhsyTx27V_WGoB0.crl
rsync://rpki.ripe.net/repository/DEFAULT/c1/2b0928-5cb6-4d6b-a8ad-00e55a2499d0/1/n3g9_Cib-qPEuhsyTx27V_WGoB0.mft
rsync://rpki.ripe.net/repository/DEFAULT/n3g9_Cib-qPEuhsyTx27V_WGoB0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 01:03:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:73:a2:44:c9:8d:16:f5:18:ad:7f:22:27:4e:24:ae
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9f783dfc289bfaa3c4ba1b324f1dbb57f586a01d
Validity
Not Before: Aug 23 01:03:24 2025 GMT
Not After : Aug 24 01:03:24 2025 GMT
Subject: CN=3c8a37d686ac2dc66393a99da6ca95989f890fe4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:b1:3a:cd:90:e2:b7:61:18:97:9d:33:be:5c:
42:d3:27:5a:43:1d:31:f8:cd:ce:48:86:e0:42:74:
5d:3e:5d:5e:c6:99:ed:4f:d6:79:37:65:a6:1b:e1:
f6:7c:94:94:cb:f8:f9:73:2d:e4:47:dc:69:91:de:
43:c0:21:08:7d:d4:91:68:e6:ad:94:fc:cb:17:ef:
85:20:ed:d0:33:32:e2:55:8d:30:d6:ea:47:07:1f:
b4:f0:62:55:6c:59:9f:fc:7a:5b:fd:71:1f:83:fe:
26:f6:80:cf:80:1f:3b:f2:99:51:79:6a:2e:a1:31:
47:0e:5d:0c:64:c5:37:3a:fb:fd:1d:c3:12:b6:57:
9c:a9:40:ef:bc:28:40:39:b5:44:fc:93:7f:a3:b3:
61:38:00:08:4a:e3:67:2b:41:06:76:6d:0a:69:35:
56:16:34:ab:a3:ef:2a:83:f0:cc:c4:25:25:29:d4:
ed:8c:e1:fd:cd:65:d2:d4:20:c7:de:9c:0d:57:ab:
34:67:ed:c9:eb:4e:fa:ca:51:1a:86:c2:3b:b7:8e:
52:b4:20:70:3f:84:5a:ed:c3:3b:7e:24:ad:56:00:
0d:b4:e9:9d:33:ab:8d:54:81:7d:a5:fe:03:44:a7:
d9:a4:f4:a7:be:69:00:c4:52:58:8f:49:7b:f2:c3:
cc:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:8A:37:D6:86:AC:2D:C6:63:93:A9:9D:A6:CA:95:98:9F:89:0F:E4
X509v3 Authority Key Identifier:
keyid:9F:78:3D:FC:28:9B:FA:A3:C4:BA:1B:32:4F:1D:BB:57:F5:86:A0:1D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/n3g9_Cib-qPEuhsyTx27V_WGoB0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/2b0928-5cb6-4d6b-a8ad-00e55a2499d0/1/n3g9_Cib-qPEuhsyTx27V_WGoB0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/2b0928-5cb6-4d6b-a8ad-00e55a2499d0/1/n3g9_Cib-qPEuhsyTx27V_WGoB0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
01:8e:aa:6d:ef:03:dd:32:3c:3d:c9:8c:d9:52:49:fd:48:dd:
0d:dc:8e:12:07:ca:e4:9d:d6:b2:6a:45:ad:c3:6f:d6:53:82:
7e:fc:00:f6:04:e0:a9:9d:ad:e5:39:d0:e5:6f:3e:fe:54:6a:
82:db:2e:05:d2:d3:98:e0:d1:04:42:4a:8a:f7:87:95:95:66:
63:b2:0b:45:9f:45:dc:6e:f5:02:50:a0:e9:5a:e1:f7:2f:ed:
20:b3:91:4e:06:34:e9:87:22:9f:f5:cc:8d:7c:d9:9f:72:b3:
45:63:bf:26:b8:e7:06:8e:16:4b:76:bb:1b:e0:f2:ad:5f:f9:
cc:0b:95:40:77:28:3a:cf:47:92:c1:5a:bb:97:e7:0b:55:a0:
3f:8b:68:90:76:f7:e1:30:b8:48:f5:a7:6a:c5:63:0a:1d:6a:
04:73:1d:00:fc:6f:13:ff:cc:49:5f:41:18:58:f7:f2:68:15:
f4:ad:92:f0:4a:2e:78:8f:58:a1:c1:2c:65:99:4a:c9:84:a7:
64:20:04:c7:6b:40:37:2e:26:85:32:79:98:49:8e:04:81:ee:
1b:db:84:0a:0b:5c:e0:4a:8c:46:b4:1c:da:cf:f7:75:5e:13:
04:25:92:7c:1b:5f:9c:54:cc:0b:3b:b5:59:d7:3e:d9:ad:03:
3b:77:ae:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 11:44:29 2025 by rpki-client