Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/916917-88c5-4e7b-811e-7d32ca065b66/1/n1ZG99ivwKkz-zMzPzcBPYOgTQA.mft
File: n1ZG99ivwKkz-zMzPzcBPYOgTQA.mft (raw, json)
Hash identifier: Eys2eheRj7VufeIKnMw1PwYIh4fx0rlpbrkprP2VUgk=
Subject key identifier: 0D:3D:5A:06:35:20:0E:37:FA:4B:C2:63:E8:B7:FB:8E:24:9B:97:C7
Authority key identifier: 9F:56:46:F7:D8:AF:C0:A9:33:FB:33:33:3F:37:01:3D:83:A0:4D:00
Certificate issuer: /CN=9f5646f7d8afc0a933fb33333f37013d83a04d00
Certificate serial: 0198511EFE4EC837025A4FA7CD0E05669E8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/n1ZG99ivwKkz-zMzPzcBPYOgTQA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/02/916917-88c5-4e7b-811e-7d32ca065b66/1/n1ZG99ivwKkz-zMzPzcBPYOgTQA.mft
Manifest number: 1608
Signing time: Mon 28 Jul 2025 13:00:42 +0000
Manifest this update: Mon 28 Jul 2025 13:00:42 +0000
Manifest next update: Tue 29 Jul 2025 13:00:42 +0000
Files and hashes: 1: 4OydZQEJVaj8JF-uoTmGENGb7Is.roa (hash: a1svWgU+LYKwh9ujA37IlIq254s7oEhH/xm68kQfTL0=)
2: WbLB1D5MYx_PgfcFWuvA_-UUgKg.roa (hash: 1LjofbnkllkaD2D3HBXrE3UcL9Erxo+FTPhwZWfcOlk=)
3: Xdap8lWOk_OPrPnAHjZrax0V0YY.roa (hash: 36jUlYBcRqreAxC1qFacFfo9gII7DpsC+iKcaU5I/sQ=)
4: n1ZG99ivwKkz-zMzPzcBPYOgTQA.crl (hash: LmO/HAjHrgLVVap8GHbxus82AIYRTevL8DoaN8U50Ts=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/02/916917-88c5-4e7b-811e-7d32ca065b66/1/n1ZG99ivwKkz-zMzPzcBPYOgTQA.crl
rsync://rpki.ripe.net/repository/DEFAULT/02/916917-88c5-4e7b-811e-7d32ca065b66/1/n1ZG99ivwKkz-zMzPzcBPYOgTQA.mft
rsync://rpki.ripe.net/repository/DEFAULT/n1ZG99ivwKkz-zMzPzcBPYOgTQA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Jul 2025 13:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:51:1e:fe:4e:c8:37:02:5a:4f:a7:cd:0e:05:66:9e:8c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9f5646f7d8afc0a933fb33333f37013d83a04d00
Validity
Not Before: Jul 28 13:00:42 2025 GMT
Not After : Jul 29 13:00:42 2025 GMT
Subject: CN=0d3d5a0635200e37fa4bc263e8b7fb8e249b97c7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:ad:e0:d6:2f:f6:79:2d:20:47:76:67:b4:91:
51:c2:8b:6d:1f:43:d5:b7:35:b7:68:18:b4:d2:51:
bb:9d:22:68:64:af:4f:d5:1c:8a:46:65:21:43:9a:
f2:73:e5:51:4b:36:92:9e:9f:fe:73:2b:22:60:29:
09:cc:14:79:0c:1e:ee:3d:2f:45:60:f5:27:4d:6c:
9f:2a:1d:4b:67:97:f7:0f:44:5b:18:61:81:1f:7a:
4b:82:3f:6a:da:e0:55:27:c6:1f:10:4f:a6:84:34:
2b:53:20:d6:1b:7e:77:04:48:95:c8:59:cf:b7:74:
2f:bf:dd:7a:3e:a0:68:7d:1a:09:45:a7:45:5f:78:
df:27:fd:23:93:99:10:10:56:b3:d0:37:12:63:d8:
e2:db:3c:ea:54:6f:96:7b:a7:b7:81:40:a4:17:98:
04:51:5e:23:5a:bb:b8:3e:47:cc:46:81:27:9a:80:
c1:71:53:72:bb:88:95:3b:e4:54:0e:75:1a:4b:1a:
bf:01:13:69:36:2b:c2:1c:88:d4:44:1c:9f:4b:62:
bd:02:74:4a:65:0e:80:00:16:e1:ca:2a:0d:f0:0b:
ed:13:6e:4c:f2:d0:4b:44:4d:ed:47:d4:17:25:7f:
20:41:80:d7:57:2e:ec:5f:8b:95:f1:fb:5f:45:64:
e6:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:3D:5A:06:35:20:0E:37:FA:4B:C2:63:E8:B7:FB:8E:24:9B:97:C7
X509v3 Authority Key Identifier:
keyid:9F:56:46:F7:D8:AF:C0:A9:33:FB:33:33:3F:37:01:3D:83:A0:4D:00
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/n1ZG99ivwKkz-zMzPzcBPYOgTQA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/916917-88c5-4e7b-811e-7d32ca065b66/1/n1ZG99ivwKkz-zMzPzcBPYOgTQA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/02/916917-88c5-4e7b-811e-7d32ca065b66/1/n1ZG99ivwKkz-zMzPzcBPYOgTQA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
56:62:24:50:d9:c2:3b:a8:35:17:96:42:6b:2c:9d:b0:b3:1d:
97:a3:d6:5e:52:5d:13:40:30:65:fa:a4:ae:88:04:a6:d8:b7:
17:d0:42:fc:8c:bd:a6:5d:2f:3d:7a:43:94:8a:0c:a6:4a:f5:
cd:cd:01:c8:ec:2b:c4:26:7b:3f:a1:e7:c0:0a:2b:79:27:07:
20:ee:7c:13:54:0e:34:bf:b5:91:83:d4:e6:97:9a:03:ad:73:
a6:91:d6:d3:63:48:fc:75:8b:e9:1d:5e:4d:23:c8:79:03:70:
2a:fd:d6:b5:4a:e5:6a:3d:a2:f7:d0:bc:dc:39:cc:a3:b6:91:
1d:4e:35:6f:b2:99:f8:40:09:71:16:a5:dd:98:0c:ed:77:c8:
46:b6:e7:01:1b:60:3f:c8:16:a7:f7:3e:22:a2:90:5d:ab:ac:
a2:6f:ea:07:fc:71:f0:9d:83:d9:c5:4e:d6:d9:e9:c4:a7:82:
bb:e0:97:60:60:a2:ad:a5:cb:b2:7b:ed:4f:4c:59:27:9c:4e:
48:42:8c:4d:66:65:00:b3:30:6e:22:3c:32:2d:f8:d1:4d:c4:
96:ef:b3:6a:6f:a8:5c:40:50:bd:b3:52:44:35:90:b9:52:3e:
69:07:da:f8:52:58:63:da:b4:ae:b3:8e:78:6e:f8:c7:59:90:
97:f6:95:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 28 20:11:45 2025 by rpki-client