Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/644501-9d42-4816-89c9-10aca3313387/1/n3LjoM10kAU1tqb4_8ZX2ToJB6Y.mft
File: n3LjoM10kAU1tqb4_8ZX2ToJB6Y.mft (raw, json)
Hash identifier: y44cLNKGlU8wX+BJ7j3ySRlCMGekY3IFtA8YjKh5yrQ=
Subject key identifier: D8:18:09:BC:22:6E:A8:37:95:5C:63:6D:CC:D9:7D:7A:DE:6C:25:3B
Authority key identifier: 9F:72:E3:A0:CD:74:90:05:35:B6:A6:F8:FF:C6:57:D9:3A:09:07:A6
Certificate issuer: /CN=9f72e3a0cd74900535b6a6f8ffc657d93a0907a6
Certificate serial: 0198485314B68F3FFB8686F24B0256F826DD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/n3LjoM10kAU1tqb4_8ZX2ToJB6Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/644501-9d42-4816-89c9-10aca3313387/1/n3LjoM10kAU1tqb4_8ZX2ToJB6Y.mft
Manifest number: 0A0E
Signing time: Sat 26 Jul 2025 20:01:00 +0000
Manifest this update: Sat 26 Jul 2025 20:01:00 +0000
Manifest next update: Sun 27 Jul 2025 20:01:00 +0000
Files and hashes: 1: n3LjoM10kAU1tqb4_8ZX2ToJB6Y.crl (hash: 7epvaNbftimJYScNoVeI46/6adCSS/eGnRUUw/n8y88=)
2: xCIH9wp6RKlehql4M5SLCZPHQEs.roa (hash: 80w1j7Z/qMuNCNOWS8szAQAtDk98iD2/lDFP83CUU3U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bc/644501-9d42-4816-89c9-10aca3313387/1/n3LjoM10kAU1tqb4_8ZX2ToJB6Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/bc/644501-9d42-4816-89c9-10aca3313387/1/n3LjoM10kAU1tqb4_8ZX2ToJB6Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/n3LjoM10kAU1tqb4_8ZX2ToJB6Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 20:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:48:53:14:b6:8f:3f:fb:86:86:f2:4b:02:56:f8:26:dd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9f72e3a0cd74900535b6a6f8ffc657d93a0907a6
Validity
Not Before: Jul 26 20:01:00 2025 GMT
Not After : Jul 27 20:01:00 2025 GMT
Subject: CN=d81809bc226ea837955c636dccd97d7ade6c253b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f0:ab:8f:74:18:63:c4:eb:b3:b4:cd:f2:a2:24:
5b:a3:90:72:6b:f1:bd:29:b3:bb:ca:2b:ff:44:2d:
e2:5b:f9:8b:eb:fe:70:f1:56:6d:56:1b:7f:86:b0:
55:5e:b1:31:35:f3:e9:34:e4:76:a9:e1:63:19:93:
4c:94:a3:fa:60:b6:b2:30:5f:75:fb:62:7e:6b:ad:
9b:4f:99:fd:f1:95:04:2e:bc:4e:8e:45:44:1a:6b:
f2:fe:0d:7e:3d:03:f3:d6:f3:d6:26:88:e5:96:cd:
72:4c:7c:f2:12:21:27:25:cd:99:0a:4b:9b:42:d2:
5a:33:c4:9d:e6:0f:7b:71:42:fa:47:44:f1:0e:ee:
ac:5b:fd:57:59:4b:ea:bd:5c:cd:6c:5d:02:47:61:
0c:4c:95:8e:b6:80:07:0d:f2:be:f8:9b:03:cf:47:
cb:00:fc:c6:35:eb:5c:e0:41:4c:7c:4d:12:c7:f3:
7a:c4:8b:e5:b8:07:61:b7:21:06:14:01:32:b4:c2:
8d:18:cf:44:d1:25:3d:92:8d:e4:62:2c:e4:d0:5f:
45:df:68:a3:2f:bc:eb:a9:bf:3a:43:b8:26:ff:70:
56:a2:73:a6:15:b4:54:6b:ea:25:9a:bd:a9:d9:75:
ab:77:25:41:db:a2:35:fc:31:9d:88:a0:a6:b3:3e:
de:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:18:09:BC:22:6E:A8:37:95:5C:63:6D:CC:D9:7D:7A:DE:6C:25:3B
X509v3 Authority Key Identifier:
keyid:9F:72:E3:A0:CD:74:90:05:35:B6:A6:F8:FF:C6:57:D9:3A:09:07:A6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/n3LjoM10kAU1tqb4_8ZX2ToJB6Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/644501-9d42-4816-89c9-10aca3313387/1/n3LjoM10kAU1tqb4_8ZX2ToJB6Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/644501-9d42-4816-89c9-10aca3313387/1/n3LjoM10kAU1tqb4_8ZX2ToJB6Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2a:2b:01:ae:a1:54:aa:04:3a:aa:c2:f0:96:ba:75:45:1b:94:
52:e4:ff:99:c8:d5:0f:6b:d7:03:ee:f0:3f:bd:22:38:75:5b:
de:8c:4e:71:63:a6:7b:96:f4:a9:45:6e:44:69:22:4d:12:29:
25:41:e7:d9:56:41:08:ed:b9:43:66:e4:34:78:83:74:a8:56:
68:ba:9f:4a:96:d2:95:58:ed:7e:9f:55:4c:32:36:2f:56:0e:
45:5e:6a:18:e0:1b:18:b5:b8:f2:a5:6d:da:16:3d:d5:7b:ac:
3d:86:83:aa:75:e8:7e:3a:19:5b:16:5b:c0:e4:d6:45:50:7b:
8e:e3:96:ae:ff:3f:2c:9b:fc:b8:17:37:c2:ef:67:0d:2d:db:
66:64:c6:94:90:08:d9:a9:79:b2:cd:0f:5a:3e:26:92:2d:b1:
83:5d:5b:3e:f9:ee:97:f7:e9:2e:03:75:37:49:17:34:50:29:
ae:e8:67:86:ef:1c:68:4f:48:02:4d:13:3b:96:77:ff:23:71:
31:d8:11:8c:5c:bf:9b:68:69:44:cc:08:61:b9:f4:18:7c:53:
02:ef:39:bd:61:54:2b:5d:5c:98:aa:2f:3a:2d:69:cd:fc:9b:
d7:b9:2e:24:15:52:77:94:a1:b6:ff:30:6e:46:71:e4:ca:aa:
1d:32:cb:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 04:49:17 2025 by rpki-client