Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/9b1928-9929-4ee8-9f35-077b29730ce6/1/N5D3H6pDya9aDc9gP9Cyp4wiSpM.mft
File: N5D3H6pDya9aDc9gP9Cyp4wiSpM.mft (raw, json)
Hash identifier: b9gLy4yGLmmmJnypItPtiGcureJfYvSJVrr794q8sm4=
Subject key identifier: 45:96:69:3E:31:28:1F:3C:AE:41:BD:E9:1F:7C:CD:EA:F0:E4:99:F0
Authority key identifier: 37:90:F7:1F:AA:43:C9:AF:5A:0D:CF:60:3F:D0:B2:A7:8C:22:4A:93
Certificate issuer: /CN=3790f71faa43c9af5a0dcf603fd0b2a78c224a93
Certificate serial: 0199228CC0C86951AD71F38BBCA3E402F325
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/N5D3H6pDya9aDc9gP9Cyp4wiSpM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/62/9b1928-9929-4ee8-9f35-077b29730ce6/1/N5D3H6pDya9aDc9gP9Cyp4wiSpM.mft
Manifest number: 0BFC
Signing time: Sun 07 Sep 2025 05:01:13 +0000
Manifest this update: Sun 07 Sep 2025 05:01:13 +0000
Manifest next update: Mon 08 Sep 2025 05:01:13 +0000
Files and hashes: 1: N5D3H6pDya9aDc9gP9Cyp4wiSpM.crl (hash: apvvaDbsc3cbhOfeeJMGoTYmlc4KGnXXyREmsP2+Gd0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/62/9b1928-9929-4ee8-9f35-077b29730ce6/1/N5D3H6pDya9aDc9gP9Cyp4wiSpM.crl
rsync://rpki.ripe.net/repository/DEFAULT/62/9b1928-9929-4ee8-9f35-077b29730ce6/1/N5D3H6pDya9aDc9gP9Cyp4wiSpM.mft
rsync://rpki.ripe.net/repository/DEFAULT/N5D3H6pDya9aDc9gP9Cyp4wiSpM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 05:01:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:22:8c:c0:c8:69:51:ad:71:f3:8b:bc:a3:e4:02:f3:25
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3790f71faa43c9af5a0dcf603fd0b2a78c224a93
Validity
Not Before: Sep 7 05:01:13 2025 GMT
Not After : Sep 8 05:01:13 2025 GMT
Subject: CN=4596693e31281f3cae41bde91f7ccdeaf0e499f0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:a5:a3:16:73:b3:e2:4d:71:e0:a3:9d:10:a3:
1a:97:eb:9c:95:06:a9:ae:c5:75:46:db:a6:19:be:
aa:30:c8:1e:a6:e1:0c:84:ff:cd:06:0a:5f:85:df:
e7:78:a8:e1:15:90:a3:28:f9:70:59:db:62:e5:ed:
c5:d9:b7:39:bb:98:05:11:53:b2:04:46:cf:43:96:
db:fe:6c:b3:39:db:1f:ae:e2:82:6e:6b:72:ac:23:
c6:1e:70:d1:64:92:66:87:67:65:df:5f:ed:c5:67:
21:1d:95:67:5f:0f:97:c2:4d:a7:5a:31:1f:72:e5:
da:9b:5c:c2:9c:56:06:ee:0a:74:bb:c3:46:c8:3c:
82:83:c7:6e:2f:a4:7f:02:25:d1:a2:35:4f:42:78:
f3:dd:2d:a0:68:06:83:2d:06:5c:b9:8f:5c:54:9a:
e5:9a:38:c6:59:71:cc:b1:ee:16:24:02:f4:21:6b:
06:33:e9:0a:eb:af:88:fe:d1:33:4b:d2:13:72:91:
8b:c7:25:e8:cf:53:15:3f:73:1c:b9:ff:0f:4a:0a:
31:fe:72:07:27:95:31:63:81:ea:57:ae:6a:1c:29:
8d:90:31:42:14:41:c9:90:80:7c:8f:54:e6:10:c0:
7c:5b:23:48:85:23:38:65:2d:1f:29:53:07:ee:26:
69:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:96:69:3E:31:28:1F:3C:AE:41:BD:E9:1F:7C:CD:EA:F0:E4:99:F0
X509v3 Authority Key Identifier:
keyid:37:90:F7:1F:AA:43:C9:AF:5A:0D:CF:60:3F:D0:B2:A7:8C:22:4A:93
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/N5D3H6pDya9aDc9gP9Cyp4wiSpM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/9b1928-9929-4ee8-9f35-077b29730ce6/1/N5D3H6pDya9aDc9gP9Cyp4wiSpM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/62/9b1928-9929-4ee8-9f35-077b29730ce6/1/N5D3H6pDya9aDc9gP9Cyp4wiSpM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7c:a2:21:d1:4c:ce:8f:39:07:5e:68:ba:cd:7d:2c:1a:f7:bd:
4e:db:67:94:da:dd:b9:29:6e:00:1a:0d:79:a8:01:bd:99:93:
2d:89:8a:b3:28:d4:77:40:df:ac:da:03:0c:da:67:5d:c8:c1:
b1:34:84:81:64:3b:49:37:09:f1:27:15:b5:49:24:ce:77:a3:
9a:44:f5:ea:2b:f5:80:6a:33:f4:de:ad:a4:03:fe:19:67:93:
7c:b9:49:c8:ad:13:6d:22:76:86:ee:cd:75:ba:62:c0:c5:85:
b8:e9:03:ac:d4:85:c2:3c:4b:88:02:b9:cc:63:ee:ff:87:a2:
d9:c5:88:d7:43:98:ae:21:25:8d:8f:97:de:f1:9a:c8:38:0e:
98:5b:ec:50:fe:4c:c6:97:68:2c:c5:3d:bc:45:38:d2:95:9e:
75:c8:3b:0f:c7:1c:fd:16:41:78:52:b4:52:95:d9:55:aa:2d:
f9:38:08:eb:80:05:b7:bb:e3:4e:3e:d8:6f:20:65:0a:5f:16:
68:69:01:77:80:ff:af:c4:8a:61:16:b6:a3:cb:bf:d5:68:63:
f7:12:5a:f3:e6:7c:97:38:48:a6:73:3e:82:1f:8a:3f:c7:ec:
ae:2d:bc:77:2f:22:20:a6:49:c7:75:0f:db:8d:53:17:a5:2f:
01:44:f2:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 13:52:38 2025 by rpki-client