Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/644501-9d42-4816-89c9-10aca3313387/1/n3LjoM10kAU1tqb4_8ZX2ToJB6Y.mft
File: n3LjoM10kAU1tqb4_8ZX2ToJB6Y.mft (raw, json)
Hash identifier: Rd5ZJfprIImHT/SEhmo3rthsXzFeG9Yk5V/7P49Fk+Y=
Subject key identifier: 5F:A7:02:DD:75:18:04:8A:02:75:64:78:58:28:78:EA:1A:B4:C0:CE
Authority key identifier: 9F:72:E3:A0:CD:74:90:05:35:B6:A6:F8:FF:C6:57:D9:3A:09:07:A6
Certificate issuer: /CN=9f72e3a0cd74900535b6a6f8ffc657d93a0907a6
Certificate serial: 01987C779B45CF7BE357BF0D27B3B3EC1C98
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/n3LjoM10kAU1tqb4_8ZX2ToJB6Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/644501-9d42-4816-89c9-10aca3313387/1/n3LjoM10kAU1tqb4_8ZX2ToJB6Y.mft
Manifest number: 0A29
Signing time: Tue 05 Aug 2025 23:01:09 +0000
Manifest this update: Tue 05 Aug 2025 23:01:09 +0000
Manifest next update: Wed 06 Aug 2025 23:01:09 +0000
Files and hashes: 1: n3LjoM10kAU1tqb4_8ZX2ToJB6Y.crl (hash: i0436gSXyT1FE6f0GDfrYRi6GhPNsduv7/QJgUFLZi4=)
2: xCIH9wp6RKlehql4M5SLCZPHQEs.roa (hash: 80w1j7Z/qMuNCNOWS8szAQAtDk98iD2/lDFP83CUU3U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bc/644501-9d42-4816-89c9-10aca3313387/1/n3LjoM10kAU1tqb4_8ZX2ToJB6Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/bc/644501-9d42-4816-89c9-10aca3313387/1/n3LjoM10kAU1tqb4_8ZX2ToJB6Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/n3LjoM10kAU1tqb4_8ZX2ToJB6Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 06 Aug 2025 23:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:7c:77:9b:45:cf:7b:e3:57:bf:0d:27:b3:b3:ec:1c:98
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9f72e3a0cd74900535b6a6f8ffc657d93a0907a6
Validity
Not Before: Aug 5 23:01:09 2025 GMT
Not After : Aug 6 23:01:09 2025 GMT
Subject: CN=5fa702dd7518048a02756478582878ea1ab4c0ce
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:47:1b:dd:d1:f3:31:95:4d:d4:79:8d:ea:b4:
40:88:e4:89:aa:d0:60:2e:7d:38:81:a1:87:4b:84:
21:56:8e:73:4c:f4:d8:ba:2d:b2:49:e1:5b:5b:08:
e2:31:0c:35:08:39:51:0a:5f:42:01:7a:10:fc:ca:
ad:a1:82:07:6e:91:b3:44:bb:26:76:62:61:1a:6c:
90:a9:2a:07:62:f2:5d:ae:90:0b:43:90:89:69:88:
fd:08:28:e4:08:9b:10:23:91:5a:83:25:24:4d:d8:
2d:aa:24:89:87:50:cc:88:69:44:8a:ba:90:bc:e8:
da:53:27:47:22:cc:d1:93:8d:8a:19:8a:4b:63:0d:
50:7a:4b:a2:72:6a:9b:0a:67:bd:d0:ae:77:4f:63:
d5:4d:51:c7:94:21:ea:09:ce:17:1b:b3:f9:45:da:
b3:b4:da:88:07:cb:cc:81:14:5f:16:0b:cd:ff:17:
90:4a:e8:1f:c3:ed:f3:65:fd:40:68:81:9c:e8:bb:
3e:2f:84:86:2e:57:89:69:02:71:89:07:84:d4:9b:
0f:32:56:20:dd:33:ef:54:54:22:4c:8b:0d:88:64:
46:32:d6:0f:86:0a:be:a3:86:d8:73:8b:d2:f1:52:
da:86:c9:91:1d:6a:82:1b:35:91:0b:12:bd:32:24:
5f:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:A7:02:DD:75:18:04:8A:02:75:64:78:58:28:78:EA:1A:B4:C0:CE
X509v3 Authority Key Identifier:
keyid:9F:72:E3:A0:CD:74:90:05:35:B6:A6:F8:FF:C6:57:D9:3A:09:07:A6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/n3LjoM10kAU1tqb4_8ZX2ToJB6Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/644501-9d42-4816-89c9-10aca3313387/1/n3LjoM10kAU1tqb4_8ZX2ToJB6Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/644501-9d42-4816-89c9-10aca3313387/1/n3LjoM10kAU1tqb4_8ZX2ToJB6Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b0:d0:3a:f6:c8:10:fa:d0:59:02:6d:a2:81:22:3c:46:f0:d6:
1d:1b:e5:3f:bd:7d:d7:ae:7c:73:9f:69:2c:a2:b2:5b:59:27:
7e:71:06:e5:55:1e:e1:a6:80:a2:8e:16:bc:d0:c3:fd:ad:e9:
5d:d5:48:c9:7c:f2:37:d4:30:3a:85:ad:64:0d:4f:6b:c1:38:
a8:30:8f:b0:7e:24:5b:e5:d7:b8:71:d3:b3:f0:04:83:fb:e1:
7c:fb:62:07:0e:0e:04:f2:0c:59:fc:2a:e5:fe:bb:ac:ad:69:
8a:44:7a:c2:54:5f:69:a7:05:09:d6:f0:e7:fe:2d:92:28:bd:
24:31:fe:f9:4d:7d:c2:d8:bc:aa:fa:70:cc:31:77:af:a7:79:
02:50:15:63:d5:da:db:14:71:1e:de:b3:72:74:e4:06:05:bb:
7c:53:de:b3:c4:e5:74:ae:06:0d:02:1e:de:31:33:ef:11:98:
a8:d1:22:8e:08:e3:dc:79:cf:1c:27:f0:f8:ae:38:77:d8:c9:
1e:76:e0:c9:44:2b:f9:9b:be:12:f7:42:05:cf:c6:6e:65:78:
ba:8e:e5:2e:a3:db:d6:56:4c:8e:05:b8:7d:8f:37:6a:c3:9c:
71:57:4d:68:00:bb:93:0d:99:78:c4:f4:d6:01:37:81:d0:06:
45:48:9f:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 07:49:55 2025 by rpki-client