Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0a/9f6872-581b-4d47-bc6a-eba0cd57c020/1/n9mIbi2ycJ2yI2TjNNOeLuSI024.mft
File: n9mIbi2ycJ2yI2TjNNOeLuSI024.mft (raw, json)
Hash identifier: 5gFiGwYTLdf8BClKjVrWBCLdSZWImOXYjwMF4P67Wr4=
Subject key identifier: C1:75:B8:9D:C2:A1:CB:C5:F6:70:5A:2C:02:CB:0B:EC:D1:3D:72:8D
Authority key identifier: 9F:D9:88:6E:2D:B2:70:9D:B2:23:64:E3:34:D3:9E:2E:E4:88:D3:6E
Certificate issuer: /CN=9fd9886e2db2709db22364e334d39e2ee488d36e
Certificate serial: 0198530D4A1AFD35D4C54DF7F3F4234DA18E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/n9mIbi2ycJ2yI2TjNNOeLuSI024.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0a/9f6872-581b-4d47-bc6a-eba0cd57c020/1/n9mIbi2ycJ2yI2TjNNOeLuSI024.mft
Manifest number: 03C4
Signing time: Mon 28 Jul 2025 22:00:36 +0000
Manifest this update: Mon 28 Jul 2025 22:00:36 +0000
Manifest next update: Tue 29 Jul 2025 22:00:36 +0000
Files and hashes: 1: Rjc45YVuDrAMQdY8qgjKUXqz9To.roa (hash: VkM0hIqEPGBmrXo8E00kzKR2aWKMeDBdfCqKvjZR58E=)
2: n9mIbi2ycJ2yI2TjNNOeLuSI024.crl (hash: DmVQP9MEvOCmTD+6npimCO7MfThphAwlLzcw6Vgppu0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0a/9f6872-581b-4d47-bc6a-eba0cd57c020/1/n9mIbi2ycJ2yI2TjNNOeLuSI024.crl
rsync://rpki.ripe.net/repository/DEFAULT/0a/9f6872-581b-4d47-bc6a-eba0cd57c020/1/n9mIbi2ycJ2yI2TjNNOeLuSI024.mft
rsync://rpki.ripe.net/repository/DEFAULT/n9mIbi2ycJ2yI2TjNNOeLuSI024.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Jul 2025 22:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:53:0d:4a:1a:fd:35:d4:c5:4d:f7:f3:f4:23:4d:a1:8e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9fd9886e2db2709db22364e334d39e2ee488d36e
Validity
Not Before: Jul 28 22:00:36 2025 GMT
Not After : Jul 29 22:00:36 2025 GMT
Subject: CN=c175b89dc2a1cbc5f6705a2c02cb0becd13d728d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:01:60:a7:8a:6f:7e:30:82:f0:e8:02:f0:2c:
c2:b4:3e:6a:9b:c1:2d:c1:41:09:e6:71:b2:f0:f4:
cb:c8:19:0f:41:b6:95:c5:b1:73:6f:00:f8:08:17:
23:17:3e:1a:fe:95:8b:d0:38:ac:74:c2:5b:9e:de:
04:3d:33:fb:78:e4:a1:e3:1c:33:08:fc:3a:93:be:
c5:8d:36:88:21:d2:6d:d1:60:0c:f9:b6:ba:cb:21:
e7:7a:f3:63:88:fc:37:94:d0:19:e3:52:ac:58:20:
93:9c:1b:94:e2:36:f0:15:c4:cb:5c:29:09:6d:60:
a9:5d:5a:07:c4:d5:a7:2f:6f:f1:71:73:d6:d5:c0:
9a:c7:14:99:5a:0c:f5:08:72:5f:91:4a:3b:c2:de:
3f:c8:50:93:e2:f3:24:18:43:fd:eb:fe:05:e2:d0:
fc:7e:8d:e7:6a:e2:d1:65:c6:20:62:10:49:e3:dd:
3c:f4:91:96:23:b8:b4:7b:fd:12:d3:50:53:de:4a:
24:4f:c4:35:ce:21:72:29:2d:9f:6f:c1:05:1f:68:
9e:ad:16:4f:10:0c:5c:7b:a3:f7:a3:71:3d:97:3a:
a3:4e:c0:e3:ed:aa:1e:20:06:41:40:56:3a:6b:d1:
3c:85:2f:46:1c:8a:c0:e7:2f:8c:2d:1f:e2:4a:d7:
a8:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:75:B8:9D:C2:A1:CB:C5:F6:70:5A:2C:02:CB:0B:EC:D1:3D:72:8D
X509v3 Authority Key Identifier:
keyid:9F:D9:88:6E:2D:B2:70:9D:B2:23:64:E3:34:D3:9E:2E:E4:88:D3:6E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/n9mIbi2ycJ2yI2TjNNOeLuSI024.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/9f6872-581b-4d47-bc6a-eba0cd57c020/1/n9mIbi2ycJ2yI2TjNNOeLuSI024.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/9f6872-581b-4d47-bc6a-eba0cd57c020/1/n9mIbi2ycJ2yI2TjNNOeLuSI024.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
22:4a:b6:1b:3a:8c:84:9a:d5:7e:69:36:da:2a:e3:c5:07:7a:
f8:ab:59:94:ee:09:df:be:30:12:62:00:8f:91:a6:2a:de:96:
dc:df:dd:e1:54:65:23:bc:06:0a:90:97:74:27:ef:dd:c2:c7:
00:5a:56:c4:43:c0:6b:f8:2a:07:83:a9:bf:5d:d8:9e:4c:bd:
ed:c2:89:f5:9f:95:47:da:6c:f4:74:81:5e:67:b4:72:a0:ab:
ac:8f:0d:bf:91:e5:df:8b:96:7e:30:cd:11:ca:95:6c:b1:64:
8e:59:c8:7c:9e:5e:43:c0:71:b6:7f:28:f1:6d:2e:f9:be:6a:
8e:1a:88:72:7d:d6:c9:2f:9d:a4:70:47:33:a9:3d:1d:b6:22:
fe:59:4e:b8:a6:e9:14:e7:ac:97:c8:a0:e2:1a:c7:3f:f9:9e:
d4:08:b7:2e:6b:8e:17:24:24:37:39:04:f4:8c:1d:ea:e1:50:
b0:19:c4:8d:f6:69:41:ad:6c:82:40:30:51:9c:1b:09:d6:3a:
88:97:82:bd:ba:9a:cf:4f:3b:5b:10:4a:33:53:28:57:b4:5e:
a9:0d:42:14:54:a3:b7:13:47:b0:03:04:4a:96:fd:a5:fc:04:
e2:56:26:27:b5:88:4b:a1:01:7b:25:51:cc:aa:09:cd:f0:2c:
47:49:da:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 29 06:18:37 2025 by rpki-client