Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/208129-d086-49d4-9dc7-5a9ac7f39023/1/N3vRD32QbBMcjJ4vxzFkFt9K4iQ.mft
File: N3vRD32QbBMcjJ4vxzFkFt9K4iQ.mft (raw, json)
Hash identifier: M8IAr09fH+boW06p7syrzwO1hQ5sZz6yqshnwriEUzk=
Subject key identifier: 34:B7:7F:B5:B5:4E:90:79:48:84:BE:CA:E6:94:9B:2A:13:6C:27:99
Authority key identifier: 37:7B:D1:0F:7D:90:6C:13:1C:8C:9E:2F:C7:31:64:16:DF:4A:E2:24
Certificate issuer: /CN=377bd10f7d906c131c8c9e2fc7316416df4ae224
Certificate serial: 019768BC07B44030E79F180EFE446B9942C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/N3vRD32QbBMcjJ4vxzFkFt9K4iQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/208129-d086-49d4-9dc7-5a9ac7f39023/1/N3vRD32QbBMcjJ4vxzFkFt9K4iQ.mft
Manifest number: 0D13
Signing time: Fri 13 Jun 2025 10:00:42 +0000
Manifest this update: Fri 13 Jun 2025 10:00:42 +0000
Manifest next update: Sat 14 Jun 2025 10:00:42 +0000
Files and hashes: 1: N3vRD32QbBMcjJ4vxzFkFt9K4iQ.crl (hash: qYRvuXjUeQMD3/UHKsmgLGQicil2nx2sacd0NLSd0Cs=)
2: OMa6gi_iwh1hBu7tbqj9s02UqHs.roa (hash: MtN6hH7mkES8J6BxizWre+aErU3W714/kzoONVlpny4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/17/208129-d086-49d4-9dc7-5a9ac7f39023/1/N3vRD32QbBMcjJ4vxzFkFt9K4iQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/17/208129-d086-49d4-9dc7-5a9ac7f39023/1/N3vRD32QbBMcjJ4vxzFkFt9K4iQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/N3vRD32QbBMcjJ4vxzFkFt9K4iQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 14 Jun 2025 07:00:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:68:bc:07:b4:40:30:e7:9f:18:0e:fe:44:6b:99:42:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=377bd10f7d906c131c8c9e2fc7316416df4ae224
Validity
Not Before: Jun 13 10:00:42 2025 GMT
Not After : Jun 14 10:00:42 2025 GMT
Subject: CN=34b77fb5b54e90794884becae6949b2a136c2799
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:39:37:1d:e7:1e:60:57:2a:67:15:fd:0b:61:
da:e8:4b:84:f3:61:0f:85:c0:21:8c:d6:de:f1:3a:
ce:81:7d:97:9b:84:24:b6:01:9e:72:d3:9b:35:78:
5b:8f:cb:28:18:5e:8e:18:df:78:e1:d8:1b:34:78:
5a:e7:24:d8:b1:e4:6e:d4:5d:28:e7:f4:5d:2f:49:
b7:0e:ed:70:90:cd:d4:2e:e1:5a:d6:26:1a:16:de:
a9:2d:27:77:23:01:01:62:00:a6:2b:0d:5b:8e:d4:
0f:9f:f2:a8:7e:b9:5f:54:97:d8:a1:7e:83:00:02:
39:f6:0d:b9:56:07:6d:02:8b:86:69:9d:ae:b3:f1:
a9:70:c3:8b:01:87:4d:be:ed:8e:e5:c6:d7:7d:0f:
d3:4a:90:bc:bf:c5:61:4b:a2:fe:a4:6c:15:12:66:
b5:52:a8:f5:42:a3:df:18:bc:69:7b:56:fb:d6:c5:
9e:5f:12:28:a3:65:a4:23:ca:6d:83:5f:c0:69:d1:
9b:96:3f:57:14:7b:3e:db:6b:77:85:12:f9:9a:36:
a4:bc:12:0b:fc:94:f5:f7:e2:30:8c:2f:e5:a8:f9:
5c:89:04:50:e8:19:5b:0e:49:2e:b6:c4:85:58:a5:
2d:2e:29:44:71:3c:bc:92:f1:3e:28:3d:d9:90:67:
38:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:B7:7F:B5:B5:4E:90:79:48:84:BE:CA:E6:94:9B:2A:13:6C:27:99
X509v3 Authority Key Identifier:
keyid:37:7B:D1:0F:7D:90:6C:13:1C:8C:9E:2F:C7:31:64:16:DF:4A:E2:24
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/N3vRD32QbBMcjJ4vxzFkFt9K4iQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/208129-d086-49d4-9dc7-5a9ac7f39023/1/N3vRD32QbBMcjJ4vxzFkFt9K4iQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/17/208129-d086-49d4-9dc7-5a9ac7f39023/1/N3vRD32QbBMcjJ4vxzFkFt9K4iQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
87:58:94:f6:f3:bd:62:99:ba:eb:2a:7b:30:15:de:dc:7b:19:
4d:56:90:84:ae:55:e7:b7:3c:2d:59:f9:3d:90:5c:35:fe:10:
56:67:b7:5d:1b:45:7e:c5:fb:b7:f7:1c:83:9e:7d:5e:6d:9c:
ba:92:fb:28:c5:86:2b:e2:fd:98:2a:c8:d3:c4:f4:f3:47:c8:
18:74:06:ab:a8:0d:08:2e:5a:69:09:06:9d:cf:19:b1:74:4a:
52:45:88:82:db:24:5c:e4:8b:a8:f4:1b:4a:b7:78:dd:ea:84:
42:b5:ab:0d:7e:8c:7e:ac:be:3b:38:c1:ba:24:cd:27:e9:59:
e4:9a:a0:2b:7c:b6:75:7d:1e:26:c6:4c:92:2b:0e:75:6e:27:
8a:ff:56:c9:8d:27:4b:52:52:d6:21:9b:01:fe:e0:52:db:68:
92:0c:f6:54:ce:12:46:96:32:0a:e9:43:43:86:88:e9:5a:97:
79:47:c4:59:a2:95:37:f6:69:e8:3c:89:52:a8:64:df:15:99:
ab:ab:cb:40:63:06:6e:1e:2e:ef:23:e8:27:16:22:f2:35:ca:
46:cc:d2:18:b0:32:de:78:12:0b:ec:83:a9:3c:40:76:6b:91:
0c:fb:32:72:08:9d:03:3b:01:78:52:7d:85:44:9f:33:d7:8c:
02:4d:8a:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 13 17:40:01 2025 by rpki-client