Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/86f93b-cd9d-4e82-bef0-9dcf6b3c0797/1/N3G9bi3aX6MFfEvCg_r3E6kVpdk.mft
File: N3G9bi3aX6MFfEvCg_r3E6kVpdk.mft (raw, json)
Hash identifier: jpJ9MiQ/urmIYcVb9GvEK08xqoeclppfuvvSH8NWses=
Subject key identifier: C8:C3:CF:74:3D:A9:2B:1E:DD:52:CD:1E:12:A2:2B:BB:2C:5D:EF:D6
Authority key identifier: 37:71:BD:6E:2D:DA:5F:A3:05:7C:4B:C2:83:FA:F7:13:A9:15:A5:D9
Certificate issuer: /CN=3771bd6e2dda5fa3057c4bc283faf713a915a5d9
Certificate serial: 019A4EF5623987E5F8484F0533381E47AA1A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/N3G9bi3aX6MFfEvCg_r3E6kVpdk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/86f93b-cd9d-4e82-bef0-9dcf6b3c0797/1/N3G9bi3aX6MFfEvCg_r3E6kVpdk.mft
Manifest number: 0C17
Signing time: Tue 04 Nov 2025 13:01:35 +0000
Manifest this update: Tue 04 Nov 2025 13:01:35 +0000
Manifest next update: Wed 05 Nov 2025 13:01:35 +0000
Files and hashes: 1: N3G9bi3aX6MFfEvCg_r3E6kVpdk.crl (hash: PWTmGTYUgtz40a9fnHDlKcWSOuBAhUfvGYGGU5cvpks=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/86f93b-cd9d-4e82-bef0-9dcf6b3c0797/1/N3G9bi3aX6MFfEvCg_r3E6kVpdk.crl
rsync://rpki.ripe.net/repository/DEFAULT/10/86f93b-cd9d-4e82-bef0-9dcf6b3c0797/1/N3G9bi3aX6MFfEvCg_r3E6kVpdk.mft
rsync://rpki.ripe.net/repository/DEFAULT/N3G9bi3aX6MFfEvCg_r3E6kVpdk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 13:01:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:f5:62:39:87:e5:f8:48:4f:05:33:38:1e:47:aa:1a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3771bd6e2dda5fa3057c4bc283faf713a915a5d9
Validity
Not Before: Nov 4 13:01:35 2025 GMT
Not After : Nov 5 13:01:35 2025 GMT
Subject: CN=c8c3cf743da92b1edd52cd1e12a22bbb2c5defd6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:cf:10:05:63:e8:60:c2:55:a1:47:ad:5c:c1:
aa:43:df:a3:c3:7a:7e:00:fd:65:73:77:b5:2b:25:
62:7a:52:d6:c9:a6:26:e9:ec:cf:03:4f:4e:df:18:
6a:57:e3:3d:87:07:18:00:38:4a:85:a5:99:a9:95:
25:a7:41:c1:26:a1:bc:56:66:0e:a1:06:2f:42:a7:
66:55:54:31:7e:9c:73:e7:f8:ff:ca:b4:93:1c:06:
b7:a4:7e:c6:1b:c5:a4:e7:f4:c0:8f:54:aa:a5:87:
57:09:e1:de:32:74:84:7e:a4:c7:de:aa:e7:b8:d3:
b0:a9:6d:77:c7:1b:75:00:78:8b:9d:7e:d0:9e:6f:
23:89:7f:f6:8f:31:d8:c5:86:68:96:e4:7e:38:9f:
99:0e:d9:bf:ab:91:d2:24:ee:18:57:77:2a:78:16:
3c:cd:af:9e:11:8b:a1:b6:cb:fa:52:24:a0:5b:bf:
26:b2:ac:20:0e:1d:91:25:5d:68:96:44:8e:f0:72:
65:66:bd:f8:99:77:75:61:d5:41:42:ad:94:d4:87:
0b:0b:51:19:e5:55:c9:53:19:2f:d4:02:0e:39:71:
f2:0f:6f:fa:f8:c3:61:d6:b1:b6:e8:29:43:0b:d9:
20:ea:73:68:d1:62:ed:13:f3:87:74:86:0f:57:1a:
ab:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:C3:CF:74:3D:A9:2B:1E:DD:52:CD:1E:12:A2:2B:BB:2C:5D:EF:D6
X509v3 Authority Key Identifier:
keyid:37:71:BD:6E:2D:DA:5F:A3:05:7C:4B:C2:83:FA:F7:13:A9:15:A5:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/N3G9bi3aX6MFfEvCg_r3E6kVpdk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/86f93b-cd9d-4e82-bef0-9dcf6b3c0797/1/N3G9bi3aX6MFfEvCg_r3E6kVpdk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/86f93b-cd9d-4e82-bef0-9dcf6b3c0797/1/N3G9bi3aX6MFfEvCg_r3E6kVpdk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
53:c0:74:15:2c:02:c7:00:f3:89:90:0a:31:89:16:d9:58:5f:
ea:71:ca:38:c0:e1:b4:b2:2b:13:c7:79:b2:5f:c1:d9:05:24:
11:0e:23:fd:f0:33:0d:74:cc:d5:f5:0d:b3:ec:9a:23:a4:46:
7f:b1:96:7f:ec:05:72:b9:ff:25:ce:a5:9e:50:fb:b3:34:53:
19:64:c3:c9:7c:f4:c4:3a:3a:19:8b:d7:c2:06:4a:3e:08:97:
6f:6a:6d:9e:05:a4:19:ea:6b:81:d4:39:f4:5b:4d:20:41:91:
fd:a4:00:ca:ce:ce:48:20:8f:fb:bd:8b:3e:81:b9:22:3a:21:
06:e5:7e:57:0c:a1:65:58:68:3c:9c:88:58:4b:5b:7e:ac:b8:
6a:fd:e3:6d:a9:1c:fb:7f:d2:1b:75:5e:c9:55:6e:4c:d1:e2:
37:f1:05:5f:b7:96:42:9f:c5:ec:fd:02:62:33:dd:07:6a:58:
74:c1:86:d5:cc:7f:58:4e:44:73:69:57:8f:98:9e:75:f2:a6:
df:e1:57:af:a6:dd:d3:94:b0:a4:f7:2b:58:a9:9d:4c:ce:7f:
27:10:97:9a:f3:93:bb:39:73:30:e5:eb:3f:4a:ed:14:c7:79:
16:de:76:7e:dd:99:be:02:fc:9c:42:51:d2:ce:29:2f:fa:ff:
ad:4c:ec:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 22:34:19 2025 by rpki-client