Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/208129-d086-49d4-9dc7-5a9ac7f39023/1/N3vRD32QbBMcjJ4vxzFkFt9K4iQ.mft
File: N3vRD32QbBMcjJ4vxzFkFt9K4iQ.mft (raw, json)
Hash identifier: KR5O383shiIeWPtfehBSjFiwMmuXsZoPFbr3LTmHF6I=
Subject key identifier: B5:5B:0D:59:B5:75:CE:A3:B0:7E:98:9B:3F:6E:E7:31:9C:94:41:41
Authority key identifier: 37:7B:D1:0F:7D:90:6C:13:1C:8C:9E:2F:C7:31:64:16:DF:4A:E2:24
Certificate issuer: /CN=377bd10f7d906c131c8c9e2fc7316416df4ae224
Certificate serial: 019761022E5A67CC4270AB28C12B5361FA6C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/N3vRD32QbBMcjJ4vxzFkFt9K4iQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/208129-d086-49d4-9dc7-5a9ac7f39023/1/N3vRD32QbBMcjJ4vxzFkFt9K4iQ.mft
Manifest number: 0D0F
Signing time: Wed 11 Jun 2025 22:00:22 +0000
Manifest this update: Wed 11 Jun 2025 22:00:22 +0000
Manifest next update: Thu 12 Jun 2025 22:00:22 +0000
Files and hashes: 1: N3vRD32QbBMcjJ4vxzFkFt9K4iQ.crl (hash: 5kYD+r3FgGbwu5RGC+uBAgz5w4oEVcx8l68xZDz1jJM=)
2: OMa6gi_iwh1hBu7tbqj9s02UqHs.roa (hash: MtN6hH7mkES8J6BxizWre+aErU3W714/kzoONVlpny4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/17/208129-d086-49d4-9dc7-5a9ac7f39023/1/N3vRD32QbBMcjJ4vxzFkFt9K4iQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/17/208129-d086-49d4-9dc7-5a9ac7f39023/1/N3vRD32QbBMcjJ4vxzFkFt9K4iQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/N3vRD32QbBMcjJ4vxzFkFt9K4iQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 12 Jun 2025 21:26:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:61:02:2e:5a:67:cc:42:70:ab:28:c1:2b:53:61:fa:6c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=377bd10f7d906c131c8c9e2fc7316416df4ae224
Validity
Not Before: Jun 11 22:00:22 2025 GMT
Not After : Jun 12 22:00:22 2025 GMT
Subject: CN=b55b0d59b575cea3b07e989b3f6ee7319c944141
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:71:a3:48:22:8f:48:78:ca:c0:42:d9:c3:9c:
f0:96:17:ee:f8:6a:de:0b:73:80:44:4b:2c:c6:05:
65:29:0c:d9:4e:84:33:30:18:53:9b:82:7b:d1:21:
90:3a:4f:75:a4:b8:bc:d2:cb:72:11:69:be:52:9a:
a4:e4:c3:72:f4:06:73:5e:ce:32:33:e6:60:0b:98:
b3:0b:4a:97:4f:b8:34:88:0c:64:cc:34:ab:b4:40:
29:31:e6:1b:46:16:b3:d3:3f:e1:6f:8f:0c:14:3d:
55:e8:24:9f:8c:3b:01:1b:f6:e3:7c:1e:77:9f:00:
eb:55:9a:b7:3d:7d:9f:cb:ef:b0:ed:f3:6d:f4:cf:
ed:31:2c:8b:42:d6:7d:45:9a:af:34:fc:21:95:7f:
9f:a4:45:15:79:4e:7b:67:be:70:72:a6:07:c6:f5:
04:11:9d:be:bd:ff:a8:85:43:eb:b7:d6:1c:ca:7d:
c9:72:e0:2f:0f:2e:58:b8:33:2c:f4:d8:6c:6d:59:
7d:ba:07:f7:3d:64:13:db:26:8c:39:ae:63:91:ff:
11:d8:36:c1:39:fb:c5:0d:3b:47:96:64:3e:ff:e5:
c2:f0:0a:14:67:6d:de:ac:88:f7:e5:29:0f:31:87:
fa:30:d0:3b:b9:f4:0f:1e:86:3b:14:28:d9:f7:03:
06:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:5B:0D:59:B5:75:CE:A3:B0:7E:98:9B:3F:6E:E7:31:9C:94:41:41
X509v3 Authority Key Identifier:
keyid:37:7B:D1:0F:7D:90:6C:13:1C:8C:9E:2F:C7:31:64:16:DF:4A:E2:24
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/N3vRD32QbBMcjJ4vxzFkFt9K4iQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/208129-d086-49d4-9dc7-5a9ac7f39023/1/N3vRD32QbBMcjJ4vxzFkFt9K4iQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/17/208129-d086-49d4-9dc7-5a9ac7f39023/1/N3vRD32QbBMcjJ4vxzFkFt9K4iQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
79:41:f3:76:fa:30:59:68:ca:a3:f8:fe:ae:d6:7f:b2:d7:ad:
c7:51:10:3c:c0:30:c9:7b:93:95:42:4c:36:51:69:e0:33:56:
de:92:2f:bf:c9:a1:cb:b4:89:12:93:d8:4d:d1:63:c9:18:2a:
30:c8:c4:7a:6f:51:f7:4b:16:2e:a1:a4:8b:1a:51:c6:82:e3:
0b:df:42:eb:4d:7b:89:59:01:bf:0a:e4:cb:28:99:a0:f9:80:
61:75:ee:dd:d8:1b:86:0a:48:28:ed:08:66:e7:6b:53:07:39:
64:08:44:96:09:13:b7:30:89:c8:53:94:5f:4b:e1:46:69:c7:
17:b7:ec:42:aa:0b:08:bd:5a:de:6a:44:6a:77:2e:ef:ab:83:
47:2a:b4:be:fb:a8:e4:aa:e7:6f:3f:12:dd:62:8d:37:a1:62:
04:fd:0e:8a:e8:79:9f:09:61:4f:11:1b:4a:2f:a1:9c:d8:50:
e4:d5:67:71:03:ca:7f:b2:a7:ff:9d:94:e3:2d:20:32:ed:dd:
b8:40:9f:a7:1a:75:3e:52:3c:86:10:25:1b:4a:d8:ca:7e:08:
f0:2c:9c:41:1a:ba:2a:18:52:06:ca:b3:51:c4:23:c2:17:8f:
15:f7:cc:89:19:ef:96:f0:67:22:e0:97:d5:1d:ba:63:91:c7:
24:41:b5:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 12 04:06:59 2025 by rpki-client