Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/208129-d086-49d4-9dc7-5a9ac7f39023/1/N3vRD32QbBMcjJ4vxzFkFt9K4iQ.mft
File: N3vRD32QbBMcjJ4vxzFkFt9K4iQ.mft (raw, json)
Hash identifier: DsATd8DrbXfOUpeelvTLq0fTVkfARVXpV9MFvY3QakY=
Subject key identifier: 7E:BA:EC:6B:B6:08:06:F9:F4:A7:E3:F8:C2:1E:D5:98:1F:11:D1:E2
Authority key identifier: 37:7B:D1:0F:7D:90:6C:13:1C:8C:9E:2F:C7:31:64:16:DF:4A:E2:24
Certificate issuer: /CN=377bd10f7d906c131c8c9e2fc7316416df4ae224
Certificate serial: 019897EE5E43BFF8C946DC4EAD963359D366
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/N3vRD32QbBMcjJ4vxzFkFt9K4iQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/208129-d086-49d4-9dc7-5a9ac7f39023/1/N3vRD32QbBMcjJ4vxzFkFt9K4iQ.mft
Manifest number: 0DB0
Signing time: Mon 11 Aug 2025 07:00:37 +0000
Manifest this update: Mon 11 Aug 2025 07:00:37 +0000
Manifest next update: Tue 12 Aug 2025 07:00:37 +0000
Files and hashes: 1: N3vRD32QbBMcjJ4vxzFkFt9K4iQ.crl (hash: 9XfARFIuOgigeZPo9ASfoWKb1YZKURbocx2m7zLVKag=)
2: OMa6gi_iwh1hBu7tbqj9s02UqHs.roa (hash: MtN6hH7mkES8J6BxizWre+aErU3W714/kzoONVlpny4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/17/208129-d086-49d4-9dc7-5a9ac7f39023/1/N3vRD32QbBMcjJ4vxzFkFt9K4iQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/17/208129-d086-49d4-9dc7-5a9ac7f39023/1/N3vRD32QbBMcjJ4vxzFkFt9K4iQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/N3vRD32QbBMcjJ4vxzFkFt9K4iQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 12 Aug 2025 02:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:97:ee:5e:43:bf:f8:c9:46:dc:4e:ad:96:33:59:d3:66
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=377bd10f7d906c131c8c9e2fc7316416df4ae224
Validity
Not Before: Aug 11 07:00:37 2025 GMT
Not After : Aug 12 07:00:37 2025 GMT
Subject: CN=7ebaec6bb60806f9f4a7e3f8c21ed5981f11d1e2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:5e:e6:aa:c8:e9:8b:a7:93:61:40:3d:73:9a:
01:79:5f:f6:4e:22:b3:e2:cb:f3:e9:50:0b:21:43:
44:50:8c:fd:42:f4:dc:f3:db:a6:b8:67:e9:b3:51:
1a:7a:48:94:45:55:38:03:06:37:0e:94:60:96:74:
b5:f3:88:b2:6d:a4:68:2c:57:b1:d8:ab:95:e3:5f:
0f:5a:d8:eb:16:8c:5a:02:22:70:82:a2:68:10:58:
12:e4:1e:d9:e2:43:c4:f1:ab:dd:ef:9f:28:1c:cf:
d1:85:07:57:83:2a:ff:0b:47:41:90:54:79:2b:f3:
b9:ca:d2:ff:52:fa:26:b9:db:cd:ab:69:5f:1c:71:
33:5c:08:93:e8:b1:32:bf:04:0e:1d:63:e5:4c:49:
e8:a7:ea:41:3d:74:3a:a2:4c:b3:b4:34:bc:e2:65:
ed:44:59:8a:23:50:5b:9a:d4:d0:ac:ae:8f:0d:88:
df:eb:c0:17:97:fa:c6:1c:a7:fc:f1:2e:41:2b:a5:
79:cc:7a:fa:60:10:ac:3a:47:26:82:56:b7:27:b6:
db:59:09:a6:7c:4f:8a:45:26:99:d9:f2:71:74:e2:
14:70:a5:e1:41:cb:30:cd:f0:db:7b:ca:39:dd:43:
64:7a:11:09:b2:59:ab:24:95:59:33:57:2b:52:8f:
04:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:BA:EC:6B:B6:08:06:F9:F4:A7:E3:F8:C2:1E:D5:98:1F:11:D1:E2
X509v3 Authority Key Identifier:
keyid:37:7B:D1:0F:7D:90:6C:13:1C:8C:9E:2F:C7:31:64:16:DF:4A:E2:24
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/N3vRD32QbBMcjJ4vxzFkFt9K4iQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/208129-d086-49d4-9dc7-5a9ac7f39023/1/N3vRD32QbBMcjJ4vxzFkFt9K4iQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/17/208129-d086-49d4-9dc7-5a9ac7f39023/1/N3vRD32QbBMcjJ4vxzFkFt9K4iQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
54:aa:df:d7:8e:b6:f5:11:40:13:16:85:79:34:36:6a:43:50:
c8:19:35:52:cc:9b:32:f6:61:2b:86:9e:8c:ba:28:55:b1:b1:
28:63:98:e7:94:74:e9:4d:4a:e2:1e:05:83:38:72:56:54:ef:
e4:4a:36:60:a4:fc:d9:b9:6d:42:fc:17:bf:39:dd:ec:cb:05:
91:92:d7:b6:af:a7:9b:34:d6:b5:c8:e4:44:73:62:33:65:c6:
03:2f:bc:ac:e8:f0:01:f5:f9:65:16:0d:b4:88:65:70:29:ea:
92:1f:63:9c:76:60:e2:3d:4f:60:cb:ad:fe:36:c1:6c:56:d3:
9d:17:32:4f:12:77:b8:a5:f4:b9:95:0d:b4:9f:5c:84:02:b8:
1f:fb:de:35:d9:0a:5e:ee:2d:8d:7f:68:60:f8:67:f4:4c:50:
4b:80:05:8b:c3:97:c4:d9:88:ea:f8:4d:bd:25:e4:c5:e7:3e:
9f:ca:c6:89:93:c4:ff:19:34:73:60:c4:f3:7d:82:4c:9b:25:
44:99:27:2f:23:15:12:e2:62:85:4f:cb:ff:45:5f:b9:8a:4f:
cd:eb:01:fa:b9:4d:c6:2a:69:2a:fd:23:b7:32:86:4e:57:34:
bf:22:d2:6d:d1:66:8f:e6:c8:58:3f:4f:0d:08:d1:c3:30:8e:
59:e1:0b:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 11 10:30:30 2025 by rpki-client