Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/02400f-7802-44e7-8527-8b291e26d1d9/1/n7bU2YfQBKAPopfmnCaOt189mkA.mft
File: n7bU2YfQBKAPopfmnCaOt189mkA.mft (raw, json)
Hash identifier: rMJClcBehAmBZjO/9jP1nzWsjRS8kYS5t6D0+9cMlCU=
Subject key identifier: E4:65:B3:A5:80:85:44:0E:62:AC:ED:2F:1D:9D:12:EA:DF:82:28:61
Authority key identifier: 9F:B6:D4:D9:87:D0:04:A0:0F:A2:97:E6:9C:26:8E:B7:5F:3D:9A:40
Certificate issuer: /CN=9fb6d4d987d004a00fa297e69c268eb75f3d9a40
Certificate serial: 01974DB28C3506CCE4C73BA58A51EDBE99E4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/n7bU2YfQBKAPopfmnCaOt189mkA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/18/02400f-7802-44e7-8527-8b291e26d1d9/1/n7bU2YfQBKAPopfmnCaOt189mkA.mft
Manifest number: 0D5D
Signing time: Sun 08 Jun 2025 04:00:36 +0000
Manifest this update: Sun 08 Jun 2025 04:00:36 +0000
Manifest next update: Mon 09 Jun 2025 04:00:36 +0000
Files and hashes: 1: 5ZNOGBQ9w8dTp0XQhpuUk8zzApg.roa (hash: 1/+Fm1r/KA+hNLAy+y/H8/1fP0WyouANNJuTvhP3iNk=)
2: n7bU2YfQBKAPopfmnCaOt189mkA.crl (hash: /H13I9rftdn41E9vx/ctiX1IJ4DR+atyuplLzcq4sHA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/18/02400f-7802-44e7-8527-8b291e26d1d9/1/n7bU2YfQBKAPopfmnCaOt189mkA.crl
rsync://rpki.ripe.net/repository/DEFAULT/18/02400f-7802-44e7-8527-8b291e26d1d9/1/n7bU2YfQBKAPopfmnCaOt189mkA.mft
rsync://rpki.ripe.net/repository/DEFAULT/n7bU2YfQBKAPopfmnCaOt189mkA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 09 Jun 2025 03:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4d:b2:8c:35:06:cc:e4:c7:3b:a5:8a:51:ed:be:99:e4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9fb6d4d987d004a00fa297e69c268eb75f3d9a40
Validity
Not Before: Jun 8 04:00:36 2025 GMT
Not After : Jun 9 04:00:36 2025 GMT
Subject: CN=e465b3a58085440e62aced2f1d9d12eadf822861
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:b4:6e:de:39:84:a1:a6:9a:0a:9e:91:88:ff:
1b:06:7d:5f:b2:b6:7e:f6:fa:71:81:34:7f:b8:65:
c6:bd:db:2f:eb:55:ed:94:72:26:0c:55:45:10:c6:
ba:c5:6a:3a:7f:cb:b0:89:df:73:50:6b:0d:23:c8:
93:7a:ef:1b:70:0f:2b:86:a8:bf:9b:f9:4d:ff:80:
48:36:74:b1:51:95:8a:db:ea:98:4e:50:bc:57:c1:
27:11:42:bb:b9:16:3b:c9:c4:e3:43:1c:99:21:33:
c0:e0:0f:94:ab:52:55:0a:ed:c0:64:45:0c:08:35:
63:f6:40:ac:e3:23:9f:1e:37:f8:8b:87:74:9d:8b:
07:9d:5d:d8:5e:d2:a8:ed:d2:fc:ca:92:87:1e:50:
3e:7c:bc:4e:90:25:18:13:76:e2:b3:b4:3c:83:c5:
50:fb:d3:7a:33:49:c3:72:7b:95:f5:d3:aa:3e:c2:
5b:aa:c9:06:cc:f7:0a:51:04:da:72:be:76:97:08:
95:2c:7b:80:a4:4a:c8:17:24:d3:f5:73:7c:c9:dc:
cf:cf:69:55:7a:ec:65:43:4d:f1:fa:fb:7a:71:5e:
e1:65:a8:35:16:6b:ff:95:f2:ab:b3:86:d5:1e:61:
8e:f8:68:ee:64:99:c2:04:f2:7e:41:12:d4:18:0c:
33:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:65:B3:A5:80:85:44:0E:62:AC:ED:2F:1D:9D:12:EA:DF:82:28:61
X509v3 Authority Key Identifier:
keyid:9F:B6:D4:D9:87:D0:04:A0:0F:A2:97:E6:9C:26:8E:B7:5F:3D:9A:40
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/n7bU2YfQBKAPopfmnCaOt189mkA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/02400f-7802-44e7-8527-8b291e26d1d9/1/n7bU2YfQBKAPopfmnCaOt189mkA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/18/02400f-7802-44e7-8527-8b291e26d1d9/1/n7bU2YfQBKAPopfmnCaOt189mkA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5a:32:c3:c2:d4:32:68:2b:1b:9b:89:7e:82:79:b3:4f:c6:dc:
32:17:fa:1a:7f:3a:ca:07:af:76:03:b0:83:2b:88:e0:11:ea:
23:39:7f:3c:44:d6:95:8a:02:ea:d1:68:00:de:1b:1d:75:89:
eb:93:29:c9:d7:28:95:70:a2:30:ac:4c:60:4a:2c:ae:bd:a3:
47:9a:c0:64:1d:07:4e:90:ab:62:50:b1:4e:0e:2d:d7:53:e5:
8d:dc:37:a5:79:56:c2:2e:84:2d:36:a4:e9:5f:fd:68:27:88:
10:ba:bf:fb:de:05:23:c0:9d:3d:70:1a:4b:53:bd:b4:83:0c:
41:fc:ba:e2:45:65:5c:64:e9:05:1a:90:dd:64:cf:e4:01:c2:
e9:2e:7a:70:02:0b:c7:dc:49:9f:4e:4b:2b:76:80:ee:bf:9a:
ee:a0:f7:d3:48:09:cb:e2:73:e8:7f:5d:b6:62:49:dc:38:1b:
8e:85:c4:60:be:5d:03:9d:37:7b:dc:bd:ae:e7:51:67:a9:ff:
66:82:8e:da:cf:43:d1:14:0e:2e:f5:38:9e:a8:01:7d:1e:b6:
bd:83:37:d9:54:ec:49:cc:3e:19:62:38:51:90:d1:c1:63:a3:
9e:b9:48:3a:83:5c:29:f4:98:b9:cf:f8:c0:e1:13:4b:78:f4:
86:03:78:b8
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdNsow1BszkxzulilHtvpnkMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDlmYjZkNGQ5ODdkMDA0YTAwZmEyOTdlNjljMjY4ZWI3NWYz
ZDlhNDAwHhcNMjUwNjA4MDQwMDM2WhcNMjUwNjA5MDQwMDM2WjAzMTEwLwYDVQQD
EyhlNDY1YjNhNTgwODU0NDBlNjJhY2VkMmYxZDlkMTJlYWRmODIyODYxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtLRu3jmEoaaaCp6RiP8bBn1fsrZ+
9vpxgTR/uGXGvdsv61XtlHImDFVFEMa6xWo6f8uwid9zUGsNI8iTeu8bcA8rhqi/
m/lN/4BINnSxUZWK2+qYTlC8V8EnEUK7uRY7ycTjQxyZITPA4A+Uq1JVCu3AZEUM
CDVj9kCs4yOfHjf4i4d0nYsHnV3YXtKo7dL8ypKHHlA+fLxOkCUYE3bis7Q8g8VQ
+9N6M0nDcnuV9dOqPsJbqskGzPcKUQTacr52lwiVLHuApErIFyTT9XN8ydzPz2lV
euxlQ03x+vt6cV7hZag1Fmv/lfKrs4bVHmGO+GjuZJnCBPJ+QRLUGAwzdQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFORls6WAhUQOYqztLx2dEurfgihhMB8GA1UdIwQY
MBaAFJ+21NmH0ASgD6KX5pwmjrdfPZpAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbjdiVTJZZlFCS0FQb3BmbW5DYU90MTg5bWtBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xOC8wMjQwMGYtNzgwMi00NGU3LTg1Mjct
OGIyOTFlMjZkMWQ5LzEvbjdiVTJZZlFCS0FQb3BmbW5DYU90MTg5bWtBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xOC8wMjQwMGYtNzgwMi00NGU3LTg1MjctOGIyOTFlMjZkMWQ5
LzEvbjdiVTJZZlFCS0FQb3BmbW5DYU90MTg5bWtBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWjLDwtQy
aCsbm4l+gnmzT8bcMhf6Gn86ygevdgOwgyuI4BHqIzl/PETWlYoC6tFoAN4bHXWJ
65MpydcolXCiMKxMYEosrr2jR5rAZB0HTpCrYlCxTg4t11Pljdw3pXlWwi6ELTak
6V/9aCeIELq/+94FI8CdPXAaS1O9tIMMQfy64kVlXGTpBRqQ3WTP5AHC6S56cAIL
x9xJn05LK3aA7r+a7qD300gJy+Jz6H9dtmJJ3DgbjoXEYL5dA503e9y9rudRZ6n/
ZoKO2s9D0RQOLvU4nqgBfR62vYM32VTsScw+GWI4UZDRwWOjnrlIOoNcKfSYuc/4
wOETS3j0hgN4uA==
-----END CERTIFICATE-----
Generated at Sun Jun 8 07:35:47 2025 by rpki-client