Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b3/e9fb61-b566-4f36-95c9-f975ea4e3674/1/n-GzNgF3oAvD3FdD4CYyhGBPm3Q.mft
File: n-GzNgF3oAvD3FdD4CYyhGBPm3Q.mft (raw, json)
Hash identifier: tnfHHIsl1X3y7SxzJxjBiZ2rFvmXj2Bj/Q7D+Xv5mBs=
Subject key identifier: CA:18:36:8E:7D:F2:C5:2E:D9:54:2E:1C:D4:BD:28:81:A3:26:32:50
Authority key identifier: 9F:E1:B3:36:01:77:A0:0B:C3:DC:57:43:E0:26:32:84:60:4F:9B:74
Certificate issuer: /CN=9fe1b3360177a00bc3dc5743e0263284604f9b74
Certificate serial: 019923315A4AF59E52F3AFA3636C45E7A170
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/n-GzNgF3oAvD3FdD4CYyhGBPm3Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b3/e9fb61-b566-4f36-95c9-f975ea4e3674/1/n-GzNgF3oAvD3FdD4CYyhGBPm3Q.mft
Manifest number: 0416
Signing time: Sun 07 Sep 2025 08:01:00 +0000
Manifest this update: Sun 07 Sep 2025 08:01:00 +0000
Manifest next update: Mon 08 Sep 2025 08:01:00 +0000
Files and hashes: 1: n-GzNgF3oAvD3FdD4CYyhGBPm3Q.crl (hash: lsJd73F82+6qe31whw6lpFLrvhv/dVUvcrL/ySP+F94=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b3/e9fb61-b566-4f36-95c9-f975ea4e3674/1/n-GzNgF3oAvD3FdD4CYyhGBPm3Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/b3/e9fb61-b566-4f36-95c9-f975ea4e3674/1/n-GzNgF3oAvD3FdD4CYyhGBPm3Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/n-GzNgF3oAvD3FdD4CYyhGBPm3Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 07:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:23:31:5a:4a:f5:9e:52:f3:af:a3:63:6c:45:e7:a1:70
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9fe1b3360177a00bc3dc5743e0263284604f9b74
Validity
Not Before: Sep 7 08:01:00 2025 GMT
Not After : Sep 8 08:01:00 2025 GMT
Subject: CN=ca18368e7df2c52ed9542e1cd4bd2881a3263250
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:ae:c8:e7:f6:2f:74:d8:83:ad:72:92:4f:99:
d0:ef:a1:54:97:fa:a0:b9:aa:4e:90:ed:24:54:76:
b1:3c:cb:56:fe:a0:cd:d2:e2:1c:24:d9:f9:14:8f:
ff:88:1e:43:4f:f6:f2:29:f5:00:38:f7:15:3b:37:
82:14:20:95:58:69:a0:4d:3c:04:71:0e:52:e3:21:
e5:0b:c1:2a:b8:75:16:bc:5b:06:79:1e:81:3f:1a:
12:4b:c7:29:82:19:b5:81:71:bb:d1:7b:b9:15:6c:
1d:fd:45:da:92:3e:ba:b3:60:53:ff:85:69:6d:ad:
05:95:df:15:d9:97:7f:74:21:fb:dc:55:d3:f6:c8:
7f:64:ee:16:52:b1:7f:b9:c9:a1:07:67:b7:09:98:
c0:91:52:9e:60:c0:61:17:7f:af:5d:40:63:45:1e:
c5:1f:d3:f6:0e:7a:93:2a:83:31:4c:1b:ef:ba:b3:
9b:7d:04:d1:37:76:70:de:72:a2:5d:af:1c:13:c3:
ce:f5:87:01:89:e2:e2:4c:a8:0e:4d:17:85:3e:f3:
ea:2e:4e:4a:b7:6c:b5:00:26:a9:8f:02:6e:42:8e:
c4:03:e9:7c:f2:91:86:1a:38:71:c6:e7:98:57:a6:
07:bd:20:2d:4c:52:fe:0c:40:e7:45:ac:31:07:61:
5a:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:18:36:8E:7D:F2:C5:2E:D9:54:2E:1C:D4:BD:28:81:A3:26:32:50
X509v3 Authority Key Identifier:
keyid:9F:E1:B3:36:01:77:A0:0B:C3:DC:57:43:E0:26:32:84:60:4F:9B:74
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/n-GzNgF3oAvD3FdD4CYyhGBPm3Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/e9fb61-b566-4f36-95c9-f975ea4e3674/1/n-GzNgF3oAvD3FdD4CYyhGBPm3Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/e9fb61-b566-4f36-95c9-f975ea4e3674/1/n-GzNgF3oAvD3FdD4CYyhGBPm3Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
37:84:0a:de:b6:b9:78:69:1c:f5:87:17:66:9f:34:ac:8f:b0:
d3:0e:5f:85:96:de:18:cd:0a:8b:bd:00:1d:58:f1:a9:35:37:
ef:85:a0:9c:e0:b9:b5:d6:69:8c:00:ed:ae:77:e2:df:5d:ab:
90:d7:d6:d9:c4:a2:de:44:3f:6a:a7:ab:01:f6:01:7d:f0:55:
f3:7e:d8:f2:1f:80:e2:b6:83:1b:9a:0d:1b:b8:cc:df:b5:3f:
40:55:73:fa:9a:49:5a:ea:e5:53:62:74:b0:6a:82:0c:41:b6:
1b:66:84:ee:7d:38:14:73:32:01:26:eb:2b:4b:4d:36:cf:52:
1e:10:d6:9e:b6:c3:eb:c9:54:f2:bf:3c:cc:04:c8:ce:ad:62:
92:0b:6b:51:50:ba:b0:04:73:b6:7f:a5:26:49:81:86:72:51:
9b:d6:13:23:91:e8:69:c2:16:c2:37:f7:ed:28:3c:81:e6:db:
15:72:d7:8e:12:af:a4:aa:5c:65:18:f3:37:6e:3b:6e:a7:18:
9c:c8:97:53:d4:f0:69:d6:7d:c0:64:fb:e5:70:c7:92:6e:ab:
ef:3c:f5:b9:5d:2a:a2:09:46:eb:96:08:24:7c:4f:06:d3:57:
b2:41:42:3d:84:51:a1:9a:d9:f1:4f:75:ef:fc:e5:8a:76:87:
28:88:3d:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 13:52:41 2025 by rpki-client