Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/3252a9-2e42-4228-b540-e6064efce2ac/1/N3wmTTiDM9NCNykxqg0ZKw-6YsE.mft
File: N3wmTTiDM9NCNykxqg0ZKw-6YsE.mft (raw, json)
Hash identifier: wcyH/vkXJrx9w9ns61XydvcD5iglkgpJ7IaqvhcaQwM=
Subject key identifier: 87:71:D6:17:41:15:D1:E4:2C:FE:FE:5A:3B:13:11:89:05:4D:23:90
Authority key identifier: 37:7C:26:4D:38:83:33:D3:42:37:29:31:AA:0D:19:2B:0F:BA:62:C1
Certificate issuer: /CN=377c264d388333d342372931aa0d192b0fba62c1
Certificate serial: 0198D5158A5C8D472CC635B144C01DB9312E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/N3wmTTiDM9NCNykxqg0ZKw-6YsE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/3252a9-2e42-4228-b540-e6064efce2ac/1/N3wmTTiDM9NCNykxqg0ZKw-6YsE.mft
Manifest number: 1647
Signing time: Sat 23 Aug 2025 04:00:15 +0000
Manifest this update: Sat 23 Aug 2025 04:00:15 +0000
Manifest next update: Sun 24 Aug 2025 04:00:15 +0000
Files and hashes: 1: N3wmTTiDM9NCNykxqg0ZKw-6YsE.crl (hash: jn6f+ItLr7bvZSGC0YBlqvw9vW9EmyDSO0MPrAsKIq0=)
2: kDvrCZDJUN6ltTbVicwTRbgkORo.roa (hash: ZU7fz2rjwPLJnVqFmW3M/TsgnCWukDOaodixRDMDm4E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/eb/3252a9-2e42-4228-b540-e6064efce2ac/1/N3wmTTiDM9NCNykxqg0ZKw-6YsE.crl
rsync://rpki.ripe.net/repository/DEFAULT/eb/3252a9-2e42-4228-b540-e6064efce2ac/1/N3wmTTiDM9NCNykxqg0ZKw-6YsE.mft
rsync://rpki.ripe.net/repository/DEFAULT/N3wmTTiDM9NCNykxqg0ZKw-6YsE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 00:37:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:15:8a:5c:8d:47:2c:c6:35:b1:44:c0:1d:b9:31:2e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=377c264d388333d342372931aa0d192b0fba62c1
Validity
Not Before: Aug 23 04:00:15 2025 GMT
Not After : Aug 24 04:00:15 2025 GMT
Subject: CN=8771d6174115d1e42cfefe5a3b131189054d2390
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:b0:5f:d0:6d:6e:ed:90:45:c8:d1:f0:c2:f9:
ae:ff:c3:7c:09:8a:ea:cf:d2:c1:fc:10:f1:a0:0e:
42:4b:6b:9e:4b:6e:86:60:3b:bc:8d:37:be:d2:8b:
3b:e3:fe:c7:10:6a:e7:b9:12:ca:ca:65:8b:2b:62:
f0:1c:e5:a8:f8:1b:a7:54:18:34:7c:bf:46:fe:86:
50:ae:b2:f1:54:96:ed:7b:c5:6e:7c:d8:8d:0b:11:
08:76:f9:ca:0f:11:4e:be:1b:dc:80:f8:8e:20:4d:
1d:11:6f:df:77:24:99:7f:0a:73:ed:22:69:70:81:
7f:a9:e9:7f:f0:37:45:af:2a:38:6a:74:60:6c:c9:
82:71:74:d1:b3:32:f3:87:5c:09:08:00:b4:1b:ac:
d8:6e:ad:c8:6f:b1:6a:f9:ee:db:a6:d0:46:d7:e0:
b6:b3:b4:64:05:76:fe:48:89:fc:82:43:29:8d:22:
48:34:85:a1:cf:1a:5e:fa:4a:ec:7b:43:09:50:97:
f4:2a:a6:40:43:98:1e:b9:4c:cf:7e:97:48:64:f3:
a6:52:e3:a3:7a:24:d9:ee:85:9a:ce:af:26:36:b0:
91:a4:0c:12:ec:7f:e2:3a:a3:c9:cc:ea:f0:13:8f:
d2:2b:86:9c:ff:40:77:30:45:ea:c5:75:e3:02:3d:
d2:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:71:D6:17:41:15:D1:E4:2C:FE:FE:5A:3B:13:11:89:05:4D:23:90
X509v3 Authority Key Identifier:
keyid:37:7C:26:4D:38:83:33:D3:42:37:29:31:AA:0D:19:2B:0F:BA:62:C1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/N3wmTTiDM9NCNykxqg0ZKw-6YsE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/3252a9-2e42-4228-b540-e6064efce2ac/1/N3wmTTiDM9NCNykxqg0ZKw-6YsE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/3252a9-2e42-4228-b540-e6064efce2ac/1/N3wmTTiDM9NCNykxqg0ZKw-6YsE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1c:2c:25:4d:22:22:55:7f:85:61:a8:8d:a2:18:7c:ca:41:94:
e8:a7:4f:2d:26:42:f9:c1:e9:5d:9c:3e:25:73:81:a1:d1:1c:
f1:1e:53:2b:9d:0a:23:71:70:ff:5b:69:86:5e:fb:ec:32:4f:
31:fb:b1:7b:bb:4f:d0:ec:c5:d4:3e:9c:85:20:ea:a3:9f:10:
73:91:56:ae:77:0e:1a:21:e7:7f:ec:8c:96:51:48:0b:7b:b0:
6c:9a:77:de:3b:17:ab:b1:0a:76:2b:38:96:13:13:11:24:b1:
1d:03:5a:32:65:c5:f3:6a:42:42:99:1d:6b:87:af:aa:8b:33:
30:0d:42:d5:a7:46:a1:1c:09:14:ba:84:a5:0f:9b:29:5b:a4:
ed:56:16:37:5e:a0:d1:0a:68:52:0f:dc:8a:7f:fa:7f:f7:2f:
e6:a4:88:f9:29:ef:49:f3:30:dc:4e:30:7f:39:e8:89:27:bd:
d0:52:b1:47:02:54:1c:61:69:a9:7f:ea:b7:a5:19:de:54:99:
30:30:2b:c9:cb:2b:83:94:06:dc:1f:7c:b2:e4:1f:2a:0a:b1:
85:4d:28:d5:c9:1a:99:b2:13:d1:af:5e:1b:03:3f:1f:2e:e8:
10:df:a8:69:52:2a:ec:91:24:eb:49:15:02:c0:8a:9e:4f:ab:
f7:42:ab:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 10:26:50 2025 by rpki-client