Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b3/e9fb61-b566-4f36-95c9-f975ea4e3674/1/n-GzNgF3oAvD3FdD4CYyhGBPm3Q.mft
File: n-GzNgF3oAvD3FdD4CYyhGBPm3Q.mft (raw, json)
Hash identifier: rsh2F+4eQsGvGQGXCIlsX2dtHmzg+ufoRZMUX44bL68=
Subject key identifier: 32:EF:6C:13:43:20:3E:F8:28:54:1A:AE:8B:DF:E7:5F:B4:2C:92:27
Authority key identifier: 9F:E1:B3:36:01:77:A0:0B:C3:DC:57:43:E0:26:32:84:60:4F:9B:74
Certificate issuer: /CN=9fe1b3360177a00bc3dc5743e0263284604f9b74
Certificate serial: 019A7338280A02D72AE58DE7E4FC8992B0FF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/n-GzNgF3oAvD3FdD4CYyhGBPm3Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b3/e9fb61-b566-4f36-95c9-f975ea4e3674/1/n-GzNgF3oAvD3FdD4CYyhGBPm3Q.mft
Manifest number: 04C4
Signing time: Tue 11 Nov 2025 14:00:51 +0000
Manifest this update: Tue 11 Nov 2025 14:00:51 +0000
Manifest next update: Wed 12 Nov 2025 14:00:51 +0000
Files and hashes: 1: n-GzNgF3oAvD3FdD4CYyhGBPm3Q.crl (hash: sDuM3lMWUlUfdlk+6QfdT/4JGVSrbjPSOkzt118eGEk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b3/e9fb61-b566-4f36-95c9-f975ea4e3674/1/n-GzNgF3oAvD3FdD4CYyhGBPm3Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/b3/e9fb61-b566-4f36-95c9-f975ea4e3674/1/n-GzNgF3oAvD3FdD4CYyhGBPm3Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/n-GzNgF3oAvD3FdD4CYyhGBPm3Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:73:38:28:0a:02:d7:2a:e5:8d:e7:e4:fc:89:92:b0:ff
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9fe1b3360177a00bc3dc5743e0263284604f9b74
Validity
Not Before: Nov 11 14:00:51 2025 GMT
Not After : Nov 12 14:00:51 2025 GMT
Subject: CN=32ef6c1343203ef828541aae8bdfe75fb42c9227
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:e4:1d:bf:e3:2e:63:41:0e:bb:2f:7e:af:51:
5f:ad:22:a5:3e:4c:22:dc:a6:93:4b:6b:e9:9b:27:
72:0a:7a:90:97:cb:78:b1:60:86:b8:13:1c:82:51:
6f:61:f6:ea:36:1a:ab:7b:6b:84:7b:8a:3b:63:c7:
69:69:ed:0f:45:df:30:f8:c9:0d:87:61:a5:7e:a8:
ca:30:44:5f:5b:a0:b5:4b:30:63:03:8f:31:3f:99:
99:7c:97:e0:2a:0e:8e:74:ab:3b:7c:cb:46:a0:09:
3d:19:14:43:d5:8e:fc:32:78:f5:d6:19:b9:9a:e1:
fc:9d:c6:00:6e:0e:ed:7f:ed:7e:e6:e3:25:b7:67:
26:f4:6b:57:f9:24:87:31:eb:2e:f2:2a:eb:6e:07:
33:6f:98:c3:f1:ea:3f:a9:94:e3:7d:a6:3b:bb:4e:
63:f0:61:9b:b6:61:67:90:64:cc:c6:47:66:4b:10:
c9:07:16:46:7e:24:be:ca:47:4c:b4:98:3e:50:d1:
e7:f6:de:95:6a:7b:e1:2e:95:0c:10:83:04:06:7f:
cc:46:ea:73:2b:da:55:20:7e:9c:5c:06:31:d4:9c:
19:4c:ef:c8:ab:b0:84:5d:45:fb:62:fe:25:af:dd:
c0:0b:4e:2d:eb:d0:d0:e3:8b:9b:7e:5b:19:30:09:
00:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:EF:6C:13:43:20:3E:F8:28:54:1A:AE:8B:DF:E7:5F:B4:2C:92:27
X509v3 Authority Key Identifier:
keyid:9F:E1:B3:36:01:77:A0:0B:C3:DC:57:43:E0:26:32:84:60:4F:9B:74
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/n-GzNgF3oAvD3FdD4CYyhGBPm3Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/e9fb61-b566-4f36-95c9-f975ea4e3674/1/n-GzNgF3oAvD3FdD4CYyhGBPm3Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/e9fb61-b566-4f36-95c9-f975ea4e3674/1/n-GzNgF3oAvD3FdD4CYyhGBPm3Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
08:e9:1d:52:25:02:c5:d2:48:57:14:6a:fb:28:de:aa:1a:0b:
ca:ed:5a:2e:d0:fb:b2:1f:2c:b6:cc:a4:da:33:c2:53:a7:dc:
f8:2b:5c:9d:66:35:8f:5a:3e:3a:9e:9a:4e:59:73:b5:a1:1e:
0c:d9:ed:1c:09:f2:b4:9b:8b:8d:39:c6:b8:59:9a:0b:df:3b:
d0:c2:48:91:1f:24:ff:7a:8d:ee:a7:dd:bf:99:ff:44:5b:1e:
c3:68:ec:d7:ec:ff:b8:43:74:60:a5:5b:93:00:24:79:7e:52:
01:0a:c9:d2:60:f4:46:16:7e:7e:af:4c:1a:80:ab:07:dd:3b:
7b:b9:ce:e2:f1:53:73:94:9a:47:cf:f7:e1:3a:51:da:d1:a1:
87:bb:50:bc:65:23:a7:39:20:cd:30:38:59:43:25:46:fd:67:
9e:99:77:a9:25:29:69:89:b8:43:9b:21:3a:84:3a:e7:58:46:
11:9b:d2:3d:97:00:63:ca:34:46:5f:7a:88:ab:30:87:49:c7:
0a:5d:c2:f7:7a:60:b6:cd:0a:cc:7e:69:bb:0f:23:0a:80:25:
e9:1d:dc:7a:e2:af:ba:17:82:d8:7c:16:c5:9c:d8:bc:c2:54:
54:24:e5:61:97:48:6b:67:ca:4c:1b:23:71:3a:59:f7:79:37:
54:49:51:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 15:48:05 2025 by rpki-client