Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/127684-5afe-4f18-b95d-3072503d8607/1/n_M9TzrAqIeECihM3Bq-t91kLwE.mft
File: n_M9TzrAqIeECihM3Bq-t91kLwE.mft (raw, json)
Hash identifier: /sAQZISGpi66vHijs9+xYXStZoScfZOyBUlvq+LG660=
Subject key identifier: 7B:38:12:3E:F3:F8:84:38:93:88:20:32:40:58:05:65:B9:F2:BF:CE
Authority key identifier: 9F:F3:3D:4F:3A:C0:A8:87:84:0A:28:4C:DC:1A:BE:B7:DD:64:2F:01
Certificate issuer: /CN=9ff33d4f3ac0a887840a284cdc1abeb7dd642f01
Certificate serial: 0198458952F221681622EF4576DD68528826
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/n_M9TzrAqIeECihM3Bq-t91kLwE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/127684-5afe-4f18-b95d-3072503d8607/1/n_M9TzrAqIeECihM3Bq-t91kLwE.mft
Manifest number: 0F3A
Signing time: Sat 26 Jul 2025 07:01:24 +0000
Manifest this update: Sat 26 Jul 2025 07:01:24 +0000
Manifest next update: Sun 27 Jul 2025 07:01:24 +0000
Files and hashes: 1: FVg-EXFcHktuG7QQnavEaXe-fnM.roa (hash: mi0+1itCdMO3yynnGJ5oIkWt7SrPDpOOMP9BVB9K+Jc=)
2: T3nKkG-dCBEn2EriUuJalbbWuME.roa (hash: NecAgRoxclxz3UKtAie4B0/FU5sK9TM4xXuPGjhm4Kc=)
3: n_M9TzrAqIeECihM3Bq-t91kLwE.crl (hash: caV9/0SnFwQqj+0q8R2UfmZbw72vaDzPMhn20V4J+Pk=)
4: nl8-f4Y4T6rTsqYQijhuiNifL1Q.roa (hash: D8rqvsrK84p8WeU5jZAqKp61j1ey2NYKXftp+gwX6/8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/127684-5afe-4f18-b95d-3072503d8607/1/n_M9TzrAqIeECihM3Bq-t91kLwE.crl
rsync://rpki.ripe.net/repository/DEFAULT/5a/127684-5afe-4f18-b95d-3072503d8607/1/n_M9TzrAqIeECihM3Bq-t91kLwE.mft
rsync://rpki.ripe.net/repository/DEFAULT/n_M9TzrAqIeECihM3Bq-t91kLwE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 06:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:45:89:52:f2:21:68:16:22:ef:45:76:dd:68:52:88:26
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9ff33d4f3ac0a887840a284cdc1abeb7dd642f01
Validity
Not Before: Jul 26 07:01:24 2025 GMT
Not After : Jul 27 07:01:24 2025 GMT
Subject: CN=7b38123ef3f884389388203240580565b9f2bfce
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:21:08:c0:61:af:e5:e8:4e:43:80:dd:a4:eb:
fc:a5:58:8d:92:d9:c3:42:20:5d:b5:2d:ed:50:af:
a4:22:c2:a6:e6:13:09:37:59:db:0e:1a:2e:8c:cb:
31:51:a8:e2:06:77:2e:bf:f3:8d:7d:0c:c4:d2:24:
79:2d:4b:3c:ec:55:4d:80:73:92:91:30:e1:4b:50:
8f:d3:43:ec:59:af:a9:c7:70:19:b9:cc:76:01:1e:
6b:c8:44:1c:24:3c:eb:39:51:06:78:52:32:08:59:
58:9a:c9:17:23:ce:16:fc:a7:a9:0c:15:b6:0d:91:
92:d5:e3:7f:b5:85:3c:5d:24:6e:bf:e1:f9:f5:ff:
2d:f8:d0:b0:7d:a2:55:1d:91:3e:4d:00:c9:a2:60:
c6:87:52:c0:03:fa:dc:56:f3:e9:83:1b:1d:d3:95:
ba:6a:a4:96:e7:1e:66:1e:5d:49:b5:43:65:9b:3f:
c3:21:ed:a0:10:ba:ca:82:72:f9:81:06:f8:5f:0f:
c0:c3:25:e7:75:67:18:72:82:49:bd:65:e8:df:2e:
16:ba:04:79:0b:01:19:1b:7e:31:06:08:7e:4e:cd:
6a:83:0d:9e:c0:fd:97:74:fe:06:53:c0:27:a9:d2:
8a:46:71:8a:19:a9:41:a8:19:76:99:8f:64:a9:7e:
d9:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:38:12:3E:F3:F8:84:38:93:88:20:32:40:58:05:65:B9:F2:BF:CE
X509v3 Authority Key Identifier:
keyid:9F:F3:3D:4F:3A:C0:A8:87:84:0A:28:4C:DC:1A:BE:B7:DD:64:2F:01
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/n_M9TzrAqIeECihM3Bq-t91kLwE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/127684-5afe-4f18-b95d-3072503d8607/1/n_M9TzrAqIeECihM3Bq-t91kLwE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/127684-5afe-4f18-b95d-3072503d8607/1/n_M9TzrAqIeECihM3Bq-t91kLwE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
89:a2:83:89:6f:7c:69:66:b8:54:2e:c0:4a:dc:dd:4f:d5:73:
93:39:2a:e7:df:cf:41:c0:e6:ae:07:96:e3:f1:71:32:59:92:
6c:b6:4c:e8:24:f3:fa:57:2e:85:e0:5f:f4:3b:86:0a:05:c2:
cf:5a:18:ea:eb:73:22:f0:74:23:18:ee:e5:3b:cc:88:49:8a:
58:85:03:a9:ce:57:99:4b:74:1b:9f:fa:8f:5f:06:fd:58:67:
50:84:b9:3f:6e:74:2f:14:97:41:9e:21:41:cf:e4:b5:cb:ca:
ae:74:91:1a:f4:08:c8:2b:5b:0a:6d:5e:5b:6b:40:a7:be:19:
b1:84:37:78:df:ed:87:f5:55:d9:c8:59:08:1c:0e:1b:3b:45:
77:af:34:3a:3a:a3:02:65:01:29:6c:ec:a7:b1:b5:6a:d6:3d:
25:4d:b2:a0:ff:3f:c4:e8:3c:74:b1:06:9a:f8:a3:97:67:c9:
6e:e2:b5:0f:dc:74:27:41:c4:96:6f:43:7a:58:d1:61:6a:35:
d0:25:27:28:3b:30:c6:a2:3d:1a:d1:ac:f6:7a:46:68:5a:31:
bd:af:35:c3:c9:5d:94:aa:bc:9f:45:43:16:aa:e5:92:b5:ea:
a0:13:f0:fe:1a:9c:16:3e:a5:62:f8:35:0a:58:6f:3a:39:76:
e8:ac:43:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 26 15:20:33 2025 by rpki-client