
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/4a7901-85d8-43ea-adb2-799910c1545f/1/n11bf3kmRP9wcqQ6zJyGUZS-Stw.mft
File: n11bf3kmRP9wcqQ6zJyGUZS-Stw.mft (raw, json)
Hash identifier: hMTiAG+oDLr1fHo9WhgLFAkzzdE+3+tiFDrZIkTkabo=
Subject key identifier: 31:C8:8C:12:14:D3:E8:59:57:F9:AC:E4:4F:9A:BB:76:6D:79:E9:A4
Authority key identifier: 9F:5D:5B:7F:79:26:44:FF:70:72:A4:3A:CC:9C:86:51:94:BE:4A:DC
Certificate issuer: /CN=9f5d5b7f792644ff7072a43acc9c865194be4adc
Certificate serial: 01984A77AD4A7F013CD10906EF5E5DD16165
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/n11bf3kmRP9wcqQ6zJyGUZS-Stw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fa/4a7901-85d8-43ea-adb2-799910c1545f/1/n11bf3kmRP9wcqQ6zJyGUZS-Stw.mft
Manifest number: 1603
Signing time: Sun 27 Jul 2025 06:00:13 +0000
Manifest this update: Sun 27 Jul 2025 06:00:13 +0000
Manifest next update: Mon 28 Jul 2025 06:00:13 +0000
Files and hashes: 1: 1J8y1mQKbllZPdpNvAX7bscmWlI.roa (hash: jhx/+OmQQVqiCuyQX4gR49r4SoPl20ExxxakSlp8D6M=)
2: WBEZkdOtzqubY4jYGPTdt89fcs0.roa (hash: YzzD8M9BLKgLshmZ4kyXFcT1vvqCniPNKBqVVUae9sY=)
3: n11bf3kmRP9wcqQ6zJyGUZS-Stw.crl (hash: PUFOi5R3yykj1syFo4kCv1zlR9W2imWaND4aa+JHWyU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fa/4a7901-85d8-43ea-adb2-799910c1545f/1/n11bf3kmRP9wcqQ6zJyGUZS-Stw.crl
rsync://rpki.ripe.net/repository/DEFAULT/fa/4a7901-85d8-43ea-adb2-799910c1545f/1/n11bf3kmRP9wcqQ6zJyGUZS-Stw.mft
rsync://rpki.ripe.net/repository/DEFAULT/n11bf3kmRP9wcqQ6zJyGUZS-Stw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 00:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:4a:77:ad:4a:7f:01:3c:d1:09:06:ef:5e:5d:d1:61:65
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9f5d5b7f792644ff7072a43acc9c865194be4adc
Validity
Not Before: Jul 27 06:00:13 2025 GMT
Not After : Jul 28 06:00:13 2025 GMT
Subject: CN=31c88c1214d3e85957f9ace44f9abb766d79e9a4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:38:e4:ab:1a:a5:c9:ac:d7:82:84:c8:01:c2:
b5:45:23:ef:3c:6e:af:9d:99:90:42:93:6c:2e:a8:
de:28:77:a7:9d:0b:d6:3f:d7:77:9f:f6:c3:e0:b7:
1c:b6:6b:ea:ac:d8:81:4a:61:b1:3e:cf:36:9c:be:
97:2c:cf:cf:e6:c0:87:02:09:05:5a:cb:31:40:76:
d3:dc:9e:37:7d:67:23:14:49:5f:42:01:fb:0f:4f:
56:23:b5:bd:59:6a:8b:5c:50:7b:6c:ae:2b:7b:fb:
f7:99:1f:e6:cf:66:f2:73:37:a2:14:e3:31:31:6a:
73:11:bc:c9:c8:00:1d:e3:1f:47:cc:96:a4:59:64:
77:3c:7c:58:a0:3f:3a:74:fd:e1:bf:5c:c3:0a:9a:
64:c1:7c:08:73:0a:b8:41:1c:06:e5:bd:2c:98:e9:
17:99:35:96:0a:0d:6f:f3:84:ca:f0:92:ec:e2:59:
cc:09:52:7d:d4:61:14:60:b8:87:b7:4c:e1:08:f4:
31:62:73:dd:10:b8:3c:0e:3c:e5:bb:ff:bd:dc:a1:
d0:b4:3e:c7:7c:f7:aa:98:ed:db:41:be:c7:5c:34:
7c:d0:b3:aa:6a:25:a1:72:9c:03:20:f8:5b:69:c7:
82:88:05:8f:95:a5:fb:f3:9f:34:99:40:69:07:5d:
85:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:C8:8C:12:14:D3:E8:59:57:F9:AC:E4:4F:9A:BB:76:6D:79:E9:A4
X509v3 Authority Key Identifier:
keyid:9F:5D:5B:7F:79:26:44:FF:70:72:A4:3A:CC:9C:86:51:94:BE:4A:DC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/n11bf3kmRP9wcqQ6zJyGUZS-Stw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/4a7901-85d8-43ea-adb2-799910c1545f/1/n11bf3kmRP9wcqQ6zJyGUZS-Stw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/4a7901-85d8-43ea-adb2-799910c1545f/1/n11bf3kmRP9wcqQ6zJyGUZS-Stw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9e:78:42:59:63:13:89:ba:f1:9d:60:46:df:4c:c7:20:15:1e:
d3:31:53:c1:65:62:58:39:a7:4e:8d:b3:85:cc:96:3c:35:4f:
35:b3:f8:ea:9e:d0:44:65:fd:ed:90:5a:5d:7c:31:db:5c:4d:
44:bd:e5:96:5f:1f:a2:d9:1f:ab:3e:6a:5c:20:26:63:cd:f7:
c6:d0:41:21:d1:5d:c3:61:e6:cd:5c:95:82:5c:4b:7e:4e:61:
18:4c:bc:38:a5:93:e8:89:c5:a5:4c:28:a8:52:49:40:dc:fb:
b2:52:c6:26:f4:34:b2:d8:9e:95:89:4d:b0:07:96:91:46:6c:
09:71:33:3c:57:d6:fc:58:61:67:01:52:95:ef:b3:a1:09:e1:
09:2b:b6:fb:ff:7c:14:f3:fa:6c:65:a5:12:96:d1:13:0d:69:
c9:27:75:c2:8b:ad:ea:3a:f7:5e:69:b3:d1:8c:50:76:ab:81:
57:da:18:0e:f3:89:63:16:56:46:92:74:04:02:7e:d2:04:07:
bf:61:6e:d8:8a:40:68:98:ef:67:8c:09:7d:3b:c4:3f:d8:ab:
bb:b1:4d:49:ee:43:c8:d3:5e:7b:b3:c0:f5:82:9d:db:31:e0:
c7:83:09:1d:1c:fa:a7:58:9e:14:96:48:a9:51:e5:1e:35:1a:
d2:42:5e:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 08:44:03 2025 by rpki-client