Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d6/caf466-6e6c-4009-a55a-5fa9da03f570/1/n78C8E7EMIy1tgeL0GoXywDYM2k.mft
File: n78C8E7EMIy1tgeL0GoXywDYM2k.mft (raw, json)
Hash identifier: roYoSPURgXNcYy5ftCndYCFgGuv+qEDICfMr1FgIVpg=
Subject key identifier: D7:D6:2D:72:83:BC:4C:6C:5B:4B:30:41:1B:85:DB:A2:D4:D2:4C:4C
Authority key identifier: 9F:BF:02:F0:4E:C4:30:8C:B5:B6:07:8B:D0:6A:17:CB:00:D8:33:69
Certificate issuer: /CN=9fbf02f04ec4308cb5b6078bd06a17cb00d83369
Certificate serial: 01984B8A47F61447036B79B6C09BCCC6FE83
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/n78C8E7EMIy1tgeL0GoXywDYM2k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d6/caf466-6e6c-4009-a55a-5fa9da03f570/1/n78C8E7EMIy1tgeL0GoXywDYM2k.mft
Manifest number: 91
Signing time: Sun 27 Jul 2025 11:00:09 +0000
Manifest this update: Sun 27 Jul 2025 11:00:09 +0000
Manifest next update: Mon 28 Jul 2025 11:00:09 +0000
Files and hashes: 1: lB6tM26XvybAjC_i9gyukbY90Gs.roa (hash: QCUB0nbnI7vfbQcfu12QO8f17dboTNQ2oQD6KvaVOOo=)
2: n78C8E7EMIy1tgeL0GoXywDYM2k.crl (hash: qdlXzgBtLVmAEs/8adDxaKKoyRQ2I9h8+pFLj9wqmjE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d6/caf466-6e6c-4009-a55a-5fa9da03f570/1/n78C8E7EMIy1tgeL0GoXywDYM2k.crl
rsync://rpki.ripe.net/repository/DEFAULT/d6/caf466-6e6c-4009-a55a-5fa9da03f570/1/n78C8E7EMIy1tgeL0GoXywDYM2k.mft
rsync://rpki.ripe.net/repository/DEFAULT/n78C8E7EMIy1tgeL0GoXywDYM2k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 05:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:4b:8a:47:f6:14:47:03:6b:79:b6:c0:9b:cc:c6:fe:83
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9fbf02f04ec4308cb5b6078bd06a17cb00d83369
Validity
Not Before: Jul 27 11:00:09 2025 GMT
Not After : Jul 28 11:00:09 2025 GMT
Subject: CN=d7d62d7283bc4c6c5b4b30411b85dba2d4d24c4c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:ca:de:25:7d:00:80:3d:ac:e0:09:5e:d5:b6:
86:45:4b:91:3d:93:4e:9a:94:a6:72:97:6f:88:cc:
a0:ec:ce:93:14:01:48:82:d5:a6:f8:9a:4e:ab:e8:
82:7f:c0:9a:a0:6c:cf:4b:a7:5f:fd:8b:d6:a9:da:
1c:4f:e9:06:14:4f:14:2c:97:2c:60:e1:da:41:42:
8a:33:34:c3:eb:e4:ee:93:53:43:67:71:c4:34:0e:
e5:09:e6:46:a7:94:28:84:28:f8:73:bb:c3:52:41:
f4:c4:02:fa:86:f5:69:8c:9c:b3:0a:4f:6f:86:7b:
bf:6e:8e:23:e7:13:5d:76:05:38:d9:69:0f:36:34:
f2:db:53:50:36:14:2f:e9:5c:1a:ee:49:fa:c8:98:
4d:3b:2b:e8:57:21:d7:18:46:8d:b0:77:cf:99:08:
8f:f7:1d:d9:a6:3f:86:bf:90:1b:f5:69:67:84:ad:
72:91:07:11:f1:37:ae:0c:90:b0:20:40:29:89:5c:
e2:db:71:3e:c2:54:a7:8f:e5:8e:09:82:bc:ec:c2:
15:c4:c7:45:e0:24:ef:81:29:bb:93:74:67:ce:f2:
52:2b:4f:bb:16:fa:68:16:e0:e4:8b:4c:9c:1e:a4:
0b:2e:de:0f:e7:e0:5c:35:d4:c2:b1:c2:c2:f6:3c:
90:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:D6:2D:72:83:BC:4C:6C:5B:4B:30:41:1B:85:DB:A2:D4:D2:4C:4C
X509v3 Authority Key Identifier:
keyid:9F:BF:02:F0:4E:C4:30:8C:B5:B6:07:8B:D0:6A:17:CB:00:D8:33:69
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/n78C8E7EMIy1tgeL0GoXywDYM2k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/caf466-6e6c-4009-a55a-5fa9da03f570/1/n78C8E7EMIy1tgeL0GoXywDYM2k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/caf466-6e6c-4009-a55a-5fa9da03f570/1/n78C8E7EMIy1tgeL0GoXywDYM2k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1c:2b:8d:46:50:50:ba:b5:fb:58:8a:73:39:71:78:d9:d4:17:
de:b3:3e:20:fb:82:10:88:04:6d:3e:4f:8f:51:14:4f:9d:81:
6b:f5:2c:da:d9:12:37:77:5b:33:36:6f:d8:e5:e3:b2:7a:cb:
5d:0f:25:bf:ab:a8:43:58:c3:7b:a8:98:9d:d9:2a:d1:ed:b1:
74:fd:45:ad:4d:bf:fc:79:35:97:1b:2a:3e:89:d7:69:d1:bb:
c4:7c:ec:31:2f:57:8c:bd:20:3f:32:43:66:a0:03:0f:0b:6e:
b4:de:b9:6d:1d:f2:4c:16:dc:41:9e:95:70:9c:3b:a4:87:aa:
da:09:cd:82:81:6c:98:84:94:07:b5:95:d0:37:6e:42:bb:db:
18:6e:2f:95:a7:51:9e:07:ed:7e:7b:8e:e7:49:20:cd:f0:fe:
9b:93:3d:f4:bf:17:ab:98:b0:04:41:ff:f5:99:c5:08:fc:cb:
3f:33:8f:fa:cc:74:87:1e:a6:69:f0:53:16:54:db:da:b2:9c:
7d:24:e4:19:d0:62:24:3d:84:cb:45:8a:3b:c9:a3:23:1c:56:
d5:ea:1d:dd:ac:ef:3f:2f:dd:18:39:90:18:00:00:a5:8a:0a:
27:12:71:52:ae:c7:8a:30:a2:2f:03:87:1e:3e:79:ee:56:83:
15:f2:d9:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 12:32:39 2025 by rpki-client