Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/3252a9-2e42-4228-b540-e6064efce2ac/1/N3wmTTiDM9NCNykxqg0ZKw-6YsE.mft
File: N3wmTTiDM9NCNykxqg0ZKw-6YsE.mft (raw, json)
Hash identifier: dm5kylNbWO4c+VRKfSpv+AiN6WrcS5vjn3CatUVu8OM=
Subject key identifier: 43:DE:8D:83:D8:CD:F8:EF:9E:96:B6:DE:11:E6:8D:2B:3B:3F:88:45
Authority key identifier: 37:7C:26:4D:38:83:33:D3:42:37:29:31:AA:0D:19:2B:0F:BA:62:C1
Certificate issuer: /CN=377c264d388333d342372931aa0d192b0fba62c1
Certificate serial: 0197B745110823B1ECB9D0AC63775B3A1FA6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/N3wmTTiDM9NCNykxqg0ZKw-6YsE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/3252a9-2e42-4228-b540-e6064efce2ac/1/N3wmTTiDM9NCNykxqg0ZKw-6YsE.mft
Manifest number: 15B3
Signing time: Sat 28 Jun 2025 16:00:46 +0000
Manifest this update: Sat 28 Jun 2025 16:00:46 +0000
Manifest next update: Sun 29 Jun 2025 16:00:46 +0000
Files and hashes: 1: N3wmTTiDM9NCNykxqg0ZKw-6YsE.crl (hash: 4hfVx6YPMhAmp+q1PA8AUeLo1y8qZC/Ss60XUO7Sg6E=)
2: kDvrCZDJUN6ltTbVicwTRbgkORo.roa (hash: ZU7fz2rjwPLJnVqFmW3M/TsgnCWukDOaodixRDMDm4E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/eb/3252a9-2e42-4228-b540-e6064efce2ac/1/N3wmTTiDM9NCNykxqg0ZKw-6YsE.crl
rsync://rpki.ripe.net/repository/DEFAULT/eb/3252a9-2e42-4228-b540-e6064efce2ac/1/N3wmTTiDM9NCNykxqg0ZKw-6YsE.mft
rsync://rpki.ripe.net/repository/DEFAULT/N3wmTTiDM9NCNykxqg0ZKw-6YsE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:45:11:08:23:b1:ec:b9:d0:ac:63:77:5b:3a:1f:a6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=377c264d388333d342372931aa0d192b0fba62c1
Validity
Not Before: Jun 28 16:00:46 2025 GMT
Not After : Jun 29 16:00:46 2025 GMT
Subject: CN=43de8d83d8cdf8ef9e96b6de11e68d2b3b3f8845
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:cc:10:18:2c:13:d4:ce:b7:2c:de:c4:5c:d5:
af:70:a6:61:d5:d6:e6:cb:77:db:cc:50:de:43:3c:
51:92:58:0b:f7:53:49:8c:f3:85:af:8a:80:72:02:
c7:66:58:57:46:38:7b:62:24:de:11:ac:24:71:94:
2f:f8:c9:6d:8d:63:95:d9:49:5a:17:bc:3c:5b:0c:
94:92:bb:82:41:69:38:ad:31:bd:f4:66:69:c4:e1:
b3:f7:e8:19:ac:e5:6a:e7:7a:1d:b0:b0:b9:7b:2d:
60:fc:e4:2e:02:2d:23:60:69:1e:be:98:ab:3b:f5:
d4:23:83:f0:8e:fe:67:b9:4e:4d:10:95:99:01:3a:
cb:92:c5:eb:e1:a8:98:0b:68:04:38:94:bd:49:53:
bb:82:0d:9f:82:70:1c:7b:ab:4c:36:28:6b:f4:fc:
ad:b3:85:9f:28:c3:5d:29:94:96:e8:4b:92:bb:c5:
1f:ac:88:4e:d1:cf:1c:08:db:ac:2e:77:c9:72:10:
0e:7e:f2:48:03:d6:84:49:99:e6:13:37:ae:6a:48:
76:3d:bf:3b:58:75:f2:ae:09:1c:a1:b6:ad:2e:9a:
43:85:44:51:eb:c1:40:4d:ec:a6:84:8f:93:a8:33:
08:0c:01:86:cb:31:92:1a:51:78:cb:b4:48:d2:eb:
56:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:DE:8D:83:D8:CD:F8:EF:9E:96:B6:DE:11:E6:8D:2B:3B:3F:88:45
X509v3 Authority Key Identifier:
keyid:37:7C:26:4D:38:83:33:D3:42:37:29:31:AA:0D:19:2B:0F:BA:62:C1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/N3wmTTiDM9NCNykxqg0ZKw-6YsE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/3252a9-2e42-4228-b540-e6064efce2ac/1/N3wmTTiDM9NCNykxqg0ZKw-6YsE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/3252a9-2e42-4228-b540-e6064efce2ac/1/N3wmTTiDM9NCNykxqg0ZKw-6YsE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3c:ef:9d:be:61:fd:a3:40:6d:ea:5a:73:6e:71:03:11:e3:3f:
f6:11:c0:ec:68:cf:e7:fa:dc:9a:58:19:d0:2a:da:5a:e3:e8:
e3:4c:46:76:4e:1e:5f:65:27:cf:4a:ef:3a:0a:ee:c1:b7:03:
5f:c7:e6:0c:40:ca:10:6b:d9:0b:ae:40:ca:e3:4c:4b:fe:3b:
63:66:df:82:2c:9b:ae:c8:74:01:de:61:16:da:c3:c5:1f:1d:
b3:ca:6f:c3:a5:41:a3:6a:a4:4a:e3:c0:8f:e6:e6:5e:f1:4c:
1a:67:35:5b:9f:2f:35:22:20:2a:72:ed:cd:f3:48:ca:b4:d3:
52:b7:b6:e1:33:37:91:54:fb:d6:ea:94:34:2e:4b:b2:a4:cf:
fd:46:a7:1d:5e:1b:39:3b:32:9a:a3:f3:21:5a:0c:73:dc:b2:
17:23:c8:ff:e9:d4:2c:a3:70:56:36:fc:2d:ef:09:7a:26:31:
cd:ad:a3:47:01:00:d4:69:07:ec:73:c9:d2:49:c2:1f:09:ab:
96:32:e9:7a:87:eb:9e:f4:2c:c2:18:d0:82:4e:4d:d9:96:a5:
72:85:95:3e:af:23:ad:a3:05:5c:e0:7d:f2:88:b8:ab:17:31:
c2:5b:43:17:74:40:77:2f:ec:0e:fd:60:5b:a4:4c:e5:e2:c1:
5d:a5:0b:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 23:15:17 2025 by rpki-client