Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/86f93b-cd9d-4e82-bef0-9dcf6b3c0797/1/N3G9bi3aX6MFfEvCg_r3E6kVpdk.mft
File: N3G9bi3aX6MFfEvCg_r3E6kVpdk.mft (raw, json)
Hash identifier: 5impCVrunS3g1dtZ+1oNwxDSoly5BQLkSPmIQ6Vx2PU=
Subject key identifier: AE:AB:A5:AE:49:94:66:7D:71:48:DD:D1:C5:9A:C8:DF:4C:0A:81:9F
Authority key identifier: 37:71:BD:6E:2D:DA:5F:A3:05:7C:4B:C2:83:FA:F7:13:A9:15:A5:D9
Certificate issuer: /CN=3771bd6e2dda5fa3057c4bc283faf713a915a5d9
Certificate serial: 01976D3D4BC73293FD674113CE2E4707843D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/N3G9bi3aX6MFfEvCg_r3E6kVpdk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/86f93b-cd9d-4e82-bef0-9dcf6b3c0797/1/N3G9bi3aX6MFfEvCg_r3E6kVpdk.mft
Manifest number: 0A99
Signing time: Sat 14 Jun 2025 07:00:23 +0000
Manifest this update: Sat 14 Jun 2025 07:00:23 +0000
Manifest next update: Sun 15 Jun 2025 07:00:23 +0000
Files and hashes: 1: N3G9bi3aX6MFfEvCg_r3E6kVpdk.crl (hash: l2buVKoGtrFJQGgzgYaD2qpBdPt3FEsp/PdHsYknQ90=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/86f93b-cd9d-4e82-bef0-9dcf6b3c0797/1/N3G9bi3aX6MFfEvCg_r3E6kVpdk.crl
rsync://rpki.ripe.net/repository/DEFAULT/10/86f93b-cd9d-4e82-bef0-9dcf6b3c0797/1/N3G9bi3aX6MFfEvCg_r3E6kVpdk.mft
rsync://rpki.ripe.net/repository/DEFAULT/N3G9bi3aX6MFfEvCg_r3E6kVpdk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 01:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6d:3d:4b:c7:32:93:fd:67:41:13:ce:2e:47:07:84:3d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3771bd6e2dda5fa3057c4bc283faf713a915a5d9
Validity
Not Before: Jun 14 07:00:23 2025 GMT
Not After : Jun 15 07:00:23 2025 GMT
Subject: CN=aeaba5ae4994667d7148ddd1c59ac8df4c0a819f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:c5:c3:90:60:46:dc:49:64:0d:9f:5b:f3:e7:
67:97:74:df:9d:3f:7f:76:d6:e3:de:4f:ea:c5:ad:
67:34:a2:ef:5d:f2:ba:1f:9d:56:a1:a0:dc:9a:3d:
09:74:28:29:20:9f:02:26:c0:02:8e:7c:83:60:57:
75:69:76:ef:bc:02:75:a0:24:30:eb:09:65:e4:7e:
9c:fe:d8:f5:58:fd:38:16:99:e5:be:69:c2:7b:e3:
60:28:cb:f7:0d:9c:32:4e:cb:53:ab:f7:69:82:39:
d7:35:d7:92:d2:6b:26:3a:6d:4b:37:7b:12:96:4d:
a1:6a:48:8f:8c:a9:f5:e2:5b:b0:a6:06:06:e8:81:
73:0f:b5:d8:fd:08:71:8c:d7:59:90:9b:f1:74:78:
a0:a7:48:33:4a:cf:6f:a3:cc:f3:20:ce:ce:7a:f6:
9c:c6:98:1b:16:0f:e8:5d:b2:87:28:1d:37:d8:9d:
fd:a1:4b:d3:57:3d:ca:17:87:48:51:c4:63:a2:de:
3a:5f:92:5c:d3:c2:06:35:16:25:09:68:fc:b4:33:
d4:c5:01:2b:cd:50:2b:38:f0:1f:ec:08:c9:90:f9:
4e:2c:0f:bd:70:09:7b:4b:81:02:b6:32:df:cc:c5:
17:12:0c:12:c8:e3:c4:af:bd:e7:02:f5:b6:33:4d:
08:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:AB:A5:AE:49:94:66:7D:71:48:DD:D1:C5:9A:C8:DF:4C:0A:81:9F
X509v3 Authority Key Identifier:
keyid:37:71:BD:6E:2D:DA:5F:A3:05:7C:4B:C2:83:FA:F7:13:A9:15:A5:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/N3G9bi3aX6MFfEvCg_r3E6kVpdk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/86f93b-cd9d-4e82-bef0-9dcf6b3c0797/1/N3G9bi3aX6MFfEvCg_r3E6kVpdk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/86f93b-cd9d-4e82-bef0-9dcf6b3c0797/1/N3G9bi3aX6MFfEvCg_r3E6kVpdk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6d:85:71:de:d0:67:fd:30:19:3a:b5:27:ea:33:08:7a:f6:86:
c0:9f:c2:4b:c1:b3:a6:6f:9c:33:a4:69:ff:e1:61:0e:c1:3e:
0b:5a:af:ec:e3:95:a3:cf:31:9b:f9:38:50:21:46:b9:01:90:
f3:5e:33:c6:f8:e6:f0:98:bc:6d:ee:16:7d:64:b3:0f:a8:05:
93:5c:61:cf:59:02:60:6c:7f:20:ba:05:69:2d:89:a1:6b:bd:
35:2b:fa:09:b4:59:fb:f5:2f:37:ac:19:36:c2:02:a7:22:b4:
cf:a4:6e:14:8f:5d:d6:a9:c5:62:f3:4b:e4:9b:44:23:b7:e7:
05:8b:a4:ae:97:e8:48:3b:cd:28:25:c9:73:8b:99:46:02:0b:
f4:14:93:d8:c7:75:27:1f:18:f1:9b:ae:a4:b8:93:c0:6c:83:
db:41:29:ca:13:28:dd:45:ce:86:ad:cc:7a:7c:32:85:30:81:
8a:c1:f5:30:c6:9b:37:6e:28:57:1c:b5:9f:33:bc:53:bc:cf:
a7:e4:97:2d:e6:f2:c9:49:bd:90:ba:2b:4b:b3:87:e3:46:12:
9f:39:13:64:52:ec:8e:6c:f7:96:9a:a3:67:79:b6:d6:54:e7:
21:5d:c5:d4:66:ff:14:80:cb:06:46:5b:c8:a2:2f:63:1b:80:
b2:11:9a:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 09:11:37 2025 by rpki-client