Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/3252a9-2e42-4228-b540-e6064efce2ac/1/N3wmTTiDM9NCNykxqg0ZKw-6YsE.mft
File: N3wmTTiDM9NCNykxqg0ZKw-6YsE.mft (raw, json)
Hash identifier: yqK/0jJy0qyVR61DUbZeE4xTmdr6I78fSjjB3z0lzJ0=
Subject key identifier: 89:FD:45:84:AE:BA:54:E5:8E:BD:53:67:A6:DA:AF:00:8B:AE:8A:5D
Authority key identifier: 37:7C:26:4D:38:83:33:D3:42:37:29:31:AA:0D:19:2B:0F:BA:62:C1
Certificate issuer: /CN=377c264d388333d342372931aa0d192b0fba62c1
Certificate serial: 019851C353099E841975DB112A3A36B667D2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/N3wmTTiDM9NCNykxqg0ZKw-6YsE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/3252a9-2e42-4228-b540-e6064efce2ac/1/N3wmTTiDM9NCNykxqg0ZKw-6YsE.mft
Manifest number: 1603
Signing time: Mon 28 Jul 2025 16:00:11 +0000
Manifest this update: Mon 28 Jul 2025 16:00:11 +0000
Manifest next update: Tue 29 Jul 2025 16:00:11 +0000
Files and hashes: 1: N3wmTTiDM9NCNykxqg0ZKw-6YsE.crl (hash: VvkG62XkgRJSG+NoKbAolfXKk7eZthy/VNLWKN461R4=)
2: kDvrCZDJUN6ltTbVicwTRbgkORo.roa (hash: ZU7fz2rjwPLJnVqFmW3M/TsgnCWukDOaodixRDMDm4E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/eb/3252a9-2e42-4228-b540-e6064efce2ac/1/N3wmTTiDM9NCNykxqg0ZKw-6YsE.crl
rsync://rpki.ripe.net/repository/DEFAULT/eb/3252a9-2e42-4228-b540-e6064efce2ac/1/N3wmTTiDM9NCNykxqg0ZKw-6YsE.mft
rsync://rpki.ripe.net/repository/DEFAULT/N3wmTTiDM9NCNykxqg0ZKw-6YsE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Jul 2025 14:37:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:51:c3:53:09:9e:84:19:75:db:11:2a:3a:36:b6:67:d2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=377c264d388333d342372931aa0d192b0fba62c1
Validity
Not Before: Jul 28 16:00:11 2025 GMT
Not After : Jul 29 16:00:11 2025 GMT
Subject: CN=89fd4584aeba54e58ebd5367a6daaf008bae8a5d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:c2:6f:c6:35:60:5e:27:9a:3e:40:51:cc:a6:
99:59:ba:11:59:5f:f0:e8:7a:a1:c3:bb:30:ab:6b:
e8:c8:ce:74:92:e1:03:51:6a:32:af:69:5e:72:fb:
05:ef:d3:0d:1b:1f:99:ce:ee:d1:e0:98:6b:25:e0:
2c:80:61:d1:58:f0:be:6d:27:8c:66:3c:9c:e0:59:
6a:44:96:cb:07:c2:76:a4:55:fb:cb:b3:56:cd:ca:
7c:33:96:97:8a:86:29:bd:b5:e5:e3:5f:a3:53:2b:
07:78:89:b0:ce:7f:42:09:4a:33:2e:9b:fe:12:41:
96:47:5f:0b:04:9a:19:51:88:19:3c:f8:45:d5:a2:
03:53:9a:3a:e4:3f:a5:c5:08:db:de:c2:b2:a7:2e:
fb:ec:24:a0:d5:9b:7a:19:a7:c1:53:59:29:39:07:
93:03:7a:88:a9:49:76:b5:58:91:67:1a:0d:f3:b9:
fa:4c:63:2c:a1:d8:a1:d5:67:62:d4:5b:2a:45:a7:
c7:02:a2:32:bc:64:fe:26:ed:3c:0a:cc:6a:31:97:
f6:a7:1b:2f:51:29:4d:55:a0:02:c5:62:ff:d3:e8:
8d:20:17:a1:51:07:73:ce:91:04:39:24:cc:64:8d:
2b:f4:f2:07:4b:10:01:6e:84:58:4c:27:16:b8:92:
e9:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:FD:45:84:AE:BA:54:E5:8E:BD:53:67:A6:DA:AF:00:8B:AE:8A:5D
X509v3 Authority Key Identifier:
keyid:37:7C:26:4D:38:83:33:D3:42:37:29:31:AA:0D:19:2B:0F:BA:62:C1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/N3wmTTiDM9NCNykxqg0ZKw-6YsE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/3252a9-2e42-4228-b540-e6064efce2ac/1/N3wmTTiDM9NCNykxqg0ZKw-6YsE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/3252a9-2e42-4228-b540-e6064efce2ac/1/N3wmTTiDM9NCNykxqg0ZKw-6YsE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
56:97:8c:6f:83:88:d4:62:05:ac:84:9e:48:91:1d:77:33:42:
4c:85:56:3d:bb:74:be:fc:63:9d:26:4e:ee:9d:39:a8:f7:03:
95:53:25:ee:af:40:7a:ad:80:6e:c0:55:d3:bb:da:cc:a9:2b:
69:09:ce:68:35:3c:c0:c7:21:3d:59:25:10:24:98:d7:0e:c1:
03:a1:30:45:70:f3:32:1f:5c:64:f1:47:cc:0d:00:99:7d:2d:
9e:cb:11:96:2f:94:c4:e6:12:be:3d:d0:5c:73:bc:d7:48:72:
7f:3a:97:41:40:6c:96:32:6d:7c:34:2d:a0:1b:7d:7a:3f:eb:
77:cf:6c:1d:6a:40:e6:56:cb:72:d4:cf:b6:b8:ab:08:be:5b:
e0:77:e8:0e:1a:9d:2a:7f:84:bc:83:3b:93:9c:2e:ae:46:44:
bb:53:25:46:29:02:8e:ee:56:56:cd:96:ff:ed:9f:08:a1:0e:
0d:70:c1:e0:e5:88:b0:45:92:22:9c:31:3c:5b:d6:18:69:88:
c2:84:6d:9e:b9:e8:dc:79:44:84:99:1f:94:37:c8:04:b4:1f:
cd:71:53:94:31:d8:0d:77:f6:0a:3b:9c:c7:dc:e4:8c:12:af:
b9:c3:ff:a0:96:2e:6b:63:a3:7e:24:00:f3:59:1b:82:56:13:
a8:fb:0b:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 28 21:42:09 2025 by rpki-client