Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/208129-d086-49d4-9dc7-5a9ac7f39023/1/N3vRD32QbBMcjJ4vxzFkFt9K4iQ.mft
File: N3vRD32QbBMcjJ4vxzFkFt9K4iQ.mft (raw, json)
Hash identifier: wfPtgpzj/kAJyusx2eP6PVzulmsFymh4Hvkwwj2Qs/E=
Subject key identifier: 3C:67:BF:C2:8D:73:52:60:4E:56:7E:C8:FB:78:CE:E8:E9:E4:2D:32
Authority key identifier: 37:7B:D1:0F:7D:90:6C:13:1C:8C:9E:2F:C7:31:64:16:DF:4A:E2:24
Certificate issuer: /CN=377bd10f7d906c131c8c9e2fc7316416df4ae224
Certificate serial: 01975D255ED41FED9CF226BC5E7BC882210E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/N3vRD32QbBMcjJ4vxzFkFt9K4iQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/208129-d086-49d4-9dc7-5a9ac7f39023/1/N3vRD32QbBMcjJ4vxzFkFt9K4iQ.mft
Manifest number: 0D0D
Signing time: Wed 11 Jun 2025 04:00:19 +0000
Manifest this update: Wed 11 Jun 2025 04:00:19 +0000
Manifest next update: Thu 12 Jun 2025 04:00:19 +0000
Files and hashes: 1: N3vRD32QbBMcjJ4vxzFkFt9K4iQ.crl (hash: VUTSW+JZs498yw9EvydyFaoCSXc+lY1mRFmKrioXr1A=)
2: OMa6gi_iwh1hBu7tbqj9s02UqHs.roa (hash: MtN6hH7mkES8J6BxizWre+aErU3W714/kzoONVlpny4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/17/208129-d086-49d4-9dc7-5a9ac7f39023/1/N3vRD32QbBMcjJ4vxzFkFt9K4iQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/17/208129-d086-49d4-9dc7-5a9ac7f39023/1/N3vRD32QbBMcjJ4vxzFkFt9K4iQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/N3vRD32QbBMcjJ4vxzFkFt9K4iQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 12 Jun 2025 04:00:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:5d:25:5e:d4:1f:ed:9c:f2:26:bc:5e:7b:c8:82:21:0e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=377bd10f7d906c131c8c9e2fc7316416df4ae224
Validity
Not Before: Jun 11 04:00:19 2025 GMT
Not After : Jun 12 04:00:19 2025 GMT
Subject: CN=3c67bfc28d7352604e567ec8fb78cee8e9e42d32
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:b3:57:05:4c:d4:54:35:97:33:8a:3d:34:46:
0f:1c:cf:d1:8c:a7:ee:2c:ce:bc:b5:ee:55:32:15:
92:99:89:9a:d8:e9:dd:ef:fe:fd:e4:56:44:1f:0c:
48:e8:de:85:5e:7b:2a:03:c9:d5:bb:5e:99:b8:e3:
9c:85:f1:ad:7e:94:ee:6f:57:ef:0c:2c:91:b3:65:
ad:44:2a:a8:be:69:31:04:66:fa:35:19:dd:cd:3b:
a1:eb:e9:16:b7:62:fe:87:a1:e3:7e:bb:57:ae:3a:
9f:92:ab:5f:66:3e:1b:c5:a7:e4:71:f8:64:17:c2:
df:5b:d4:23:8b:5c:a6:e4:7b:9d:5d:5d:c9:6d:3d:
89:4d:1d:c2:c1:d0:c5:fe:b8:e2:6d:62:6b:0b:03:
17:2b:d2:6e:e3:96:db:67:dd:2c:ed:60:0d:26:8e:
9e:e4:93:44:aa:6a:5c:ff:4e:77:09:3b:be:d3:f6:
f7:75:88:63:08:db:fd:48:52:2b:de:47:d9:b1:bc:
7f:e0:10:91:9d:76:79:30:38:12:b4:a1:b6:b5:bb:
47:d4:4a:0b:f7:4b:a5:68:3b:4d:ef:23:ea:fc:fe:
41:0e:6b:86:e6:f0:7c:57:0b:93:7f:e1:7e:36:f0:
d0:9f:9d:5c:f2:92:f6:fd:52:62:86:b8:90:d6:8d:
7a:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:67:BF:C2:8D:73:52:60:4E:56:7E:C8:FB:78:CE:E8:E9:E4:2D:32
X509v3 Authority Key Identifier:
keyid:37:7B:D1:0F:7D:90:6C:13:1C:8C:9E:2F:C7:31:64:16:DF:4A:E2:24
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/N3vRD32QbBMcjJ4vxzFkFt9K4iQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/208129-d086-49d4-9dc7-5a9ac7f39023/1/N3vRD32QbBMcjJ4vxzFkFt9K4iQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/17/208129-d086-49d4-9dc7-5a9ac7f39023/1/N3vRD32QbBMcjJ4vxzFkFt9K4iQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
89:c1:1b:cb:3e:5c:c4:48:c8:19:01:f0:3f:4b:86:04:d0:ac:
ec:5a:54:0d:ba:24:ae:b0:66:e4:b0:a5:f3:93:23:fd:20:64:
8a:9e:64:80:cb:52:3b:95:30:0c:70:12:68:49:eb:ab:e9:81:
c1:f7:f1:0e:58:26:00:ca:f6:14:8d:e7:80:d2:6f:73:9f:7f:
0f:98:c0:6f:16:41:6b:ec:8e:29:56:82:d1:12:74:b1:17:01:
8e:a9:fa:3e:a9:09:02:67:4c:6a:ca:ad:34:ef:44:3b:b8:32:
d5:b0:48:df:13:fe:93:0a:b2:a6:9f:4d:e6:ae:93:56:74:af:
4c:ba:24:b1:cb:0f:55:e5:43:eb:24:35:9c:c0:2e:cb:dd:bc:
75:d5:ea:2f:6f:b6:01:5c:e5:44:ce:32:7a:d4:53:70:ac:47:
cb:1f:ff:ae:9f:3c:96:60:c4:63:df:3a:4b:7d:16:9b:80:4f:
71:2c:04:99:4b:12:1c:a8:bd:1c:b1:8c:58:2f:82:74:46:22:
55:d4:45:e6:93:93:bb:5c:33:4d:ce:86:27:2d:47:b6:b5:ad:
97:49:46:d1:31:32:fa:51:ef:2f:c0:d6:74:e9:e4:89:56:02:
c8:fa:f4:c4:80:61:60:ae:3b:01:50:1a:cf:48:2e:d9:6e:81:
f5:6b:65:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 11 12:54:03 2025 by rpki-client