
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/86f93b-cd9d-4e82-bef0-9dcf6b3c0797/1/N3G9bi3aX6MFfEvCg_r3E6kVpdk.mft
File: N3G9bi3aX6MFfEvCg_r3E6kVpdk.mft (raw, json)
Hash identifier: LAP7R840Hej1Le79LiZiaslG9ynWm9hm4821RzsoeIM=
Subject key identifier: 02:C4:B9:ED:58:24:11:A4:9F:9B:77:2C:2F:6F:97:91:41:C7:38:B8
Authority key identifier: 37:71:BD:6E:2D:DA:5F:A3:05:7C:4B:C2:83:FA:F7:13:A9:15:A5:D9
Certificate issuer: /CN=3771bd6e2dda5fa3057c4bc283faf713a915a5d9
Certificate serial: 019873E320ED2F502E42F4EEA902D039FF4D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/N3G9bi3aX6MFfEvCg_r3E6kVpdk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/86f93b-cd9d-4e82-bef0-9dcf6b3c0797/1/N3G9bi3aX6MFfEvCg_r3E6kVpdk.mft
Manifest number: 0B21
Signing time: Mon 04 Aug 2025 07:02:01 +0000
Manifest this update: Mon 04 Aug 2025 07:02:01 +0000
Manifest next update: Tue 05 Aug 2025 07:02:01 +0000
Files and hashes: 1: N3G9bi3aX6MFfEvCg_r3E6kVpdk.crl (hash: dz5e8je08KrIFKrFYoEKmcPTgNbAx6KwJatgzlS5V3c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/86f93b-cd9d-4e82-bef0-9dcf6b3c0797/1/N3G9bi3aX6MFfEvCg_r3E6kVpdk.crl
rsync://rpki.ripe.net/repository/DEFAULT/10/86f93b-cd9d-4e82-bef0-9dcf6b3c0797/1/N3G9bi3aX6MFfEvCg_r3E6kVpdk.mft
rsync://rpki.ripe.net/repository/DEFAULT/N3G9bi3aX6MFfEvCg_r3E6kVpdk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 03:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:73:e3:20:ed:2f:50:2e:42:f4:ee:a9:02:d0:39:ff:4d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3771bd6e2dda5fa3057c4bc283faf713a915a5d9
Validity
Not Before: Aug 4 07:02:01 2025 GMT
Not After : Aug 5 07:02:01 2025 GMT
Subject: CN=02c4b9ed582411a49f9b772c2f6f979141c738b8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:81:5e:3b:07:e6:0f:a3:f1:8c:a6:6a:5a:a4:
a6:8e:f0:74:74:a2:2a:8c:a2:87:28:fd:f6:6d:4e:
a2:50:23:9c:84:fd:92:d9:22:ee:fc:c9:28:7d:e4:
fe:d6:22:9f:f0:30:b6:10:28:ed:1a:f8:27:b8:b9:
68:f2:06:e0:f3:80:d1:6e:37:96:cf:83:36:cc:ba:
e2:8b:fa:fe:52:02:87:54:79:be:57:5a:69:70:83:
59:b8:b9:a6:b9:4f:6b:42:75:08:af:9d:5b:ad:12:
c7:1b:b7:c0:6e:f9:35:c7:05:5c:1a:f5:ca:35:1d:
35:5d:98:51:19:a5:c1:62:34:24:18:f1:37:5b:25:
6f:6d:06:5f:87:7f:38:e3:b3:9f:4b:54:8d:b7:88:
6e:e3:5f:27:82:ce:41:d6:d3:dd:36:cc:f6:c0:b1:
ec:fb:c2:71:d8:1b:65:b9:ec:67:cf:68:be:d6:e9:
fd:3c:86:51:7d:ec:55:fd:51:ec:ed:b3:38:37:f1:
6a:45:54:e8:7e:81:a5:ac:4e:d7:76:79:92:df:8c:
cc:19:ea:24:ca:55:c7:36:4b:45:93:54:c2:9d:ad:
ea:b9:b3:79:36:d5:ee:f1:0b:75:4f:c0:8d:1b:07:
21:9c:b7:5b:60:36:1e:a9:91:6d:53:2a:39:2e:80:
70:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:C4:B9:ED:58:24:11:A4:9F:9B:77:2C:2F:6F:97:91:41:C7:38:B8
X509v3 Authority Key Identifier:
keyid:37:71:BD:6E:2D:DA:5F:A3:05:7C:4B:C2:83:FA:F7:13:A9:15:A5:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/N3G9bi3aX6MFfEvCg_r3E6kVpdk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/86f93b-cd9d-4e82-bef0-9dcf6b3c0797/1/N3G9bi3aX6MFfEvCg_r3E6kVpdk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/86f93b-cd9d-4e82-bef0-9dcf6b3c0797/1/N3G9bi3aX6MFfEvCg_r3E6kVpdk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
89:ff:df:ff:0d:ef:89:53:5d:27:20:02:43:43:8e:c1:6c:1f:
d0:f2:00:11:e5:5c:69:4d:8b:67:2f:f6:84:4a:5f:7d:bc:3a:
79:74:de:4b:35:e4:51:f1:25:ea:77:47:c8:79:b8:12:b4:68:
43:bc:df:43:18:28:4f:8b:07:9f:16:6a:72:49:d8:d2:b8:06:
5e:1e:10:79:39:35:4b:20:b4:63:b2:c9:6c:90:df:51:27:74:
bc:50:27:49:8c:60:9d:c4:44:1f:56:ec:e5:35:94:32:74:86:
7b:7f:33:b9:2e:4e:0a:2c:28:b6:95:7e:fa:ce:67:94:17:11:
2b:23:14:0f:5b:ea:cf:16:76:97:fa:9b:68:ec:a5:ee:d7:d3:
24:fb:ec:bd:1d:79:6f:8e:a1:51:56:42:1d:69:5a:8e:31:df:
e1:22:c0:d6:8c:a6:cd:ab:f5:48:61:13:2f:46:68:51:01:82:
60:3e:0a:38:29:9c:34:c1:0f:f8:75:1a:43:e9:cb:b8:01:58:
17:b9:68:60:eb:57:46:dc:29:fc:44:21:49:a6:1f:0f:f3:e4:
5e:3f:d3:f5:09:32:12:12:06:10:1e:6a:87:3c:85:89:26:81:
b1:d5:7e:a8:ab:49:bc:c2:3f:b2:1e:0d:e5:19:7f:b7:a2:d6:
e7:4e:f4:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 11:04:42 2025 by rpki-client