Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4f/8d1167-0c4d-488f-9a83-c0177dfda847/1/N09vPjy5c7rIpD9sC4BrPRHJrcM.mft
File: N09vPjy5c7rIpD9sC4BrPRHJrcM.mft (raw, json)
Hash identifier: hgvzpUs+LlP1q9vzVEazXL3lvg8zzsdW0TuyQFQ7oLI=
Subject key identifier: C9:66:19:3C:F4:D1:B4:A0:97:0B:A7:6D:D3:1C:1B:5B:51:39:4D:DD
Authority key identifier: 37:4F:6F:3E:3C:B9:73:BA:C8:A4:3F:6C:0B:80:6B:3D:11:C9:AD:C3
Certificate issuer: /CN=374f6f3e3cb973bac8a43f6c0b806b3d11c9adc3
Certificate serial: 019748C2DA2D2103993428DF1EE6356DD0BF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/N09vPjy5c7rIpD9sC4BrPRHJrcM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4f/8d1167-0c4d-488f-9a83-c0177dfda847/1/N09vPjy5c7rIpD9sC4BrPRHJrcM.mft
Manifest number: 0530
Signing time: Sat 07 Jun 2025 05:00:18 +0000
Manifest this update: Sat 07 Jun 2025 05:00:18 +0000
Manifest next update: Sun 08 Jun 2025 05:00:18 +0000
Files and hashes: 1: EVhtzzYjK-7A1-FFXkSZygpmCzs.roa (hash: donTZTGqv/27HvndsP4MHOdeXIlkLJEwHJlrZ1dm4VI=)
2: N09vPjy5c7rIpD9sC4BrPRHJrcM.crl (hash: o6AgO6ioJ+ujLcawYg5W3swVkuh4WE65CKCHCDChyto=)
3: qfnG_e86V0mqyvP7hB8G6R3EaEQ.roa (hash: ZDOFrngSukki8Z+3+0Se2IUikxMo18wvSpXj/whXJG8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4f/8d1167-0c4d-488f-9a83-c0177dfda847/1/N09vPjy5c7rIpD9sC4BrPRHJrcM.crl
rsync://rpki.ripe.net/repository/DEFAULT/4f/8d1167-0c4d-488f-9a83-c0177dfda847/1/N09vPjy5c7rIpD9sC4BrPRHJrcM.mft
rsync://rpki.ripe.net/repository/DEFAULT/N09vPjy5c7rIpD9sC4BrPRHJrcM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 05:00:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:48:c2:da:2d:21:03:99:34:28:df:1e:e6:35:6d:d0:bf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=374f6f3e3cb973bac8a43f6c0b806b3d11c9adc3
Validity
Not Before: Jun 7 05:00:18 2025 GMT
Not After : Jun 8 05:00:18 2025 GMT
Subject: CN=c966193cf4d1b4a0970ba76dd31c1b5b51394ddd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:31:ba:ce:22:95:73:d2:18:f8:bc:4f:32:a1:
67:2e:25:bb:66:b2:9e:cc:03:55:0d:ba:be:f7:02:
ad:a8:ec:e4:0a:5f:a1:60:be:69:64:f0:cd:19:b2:
14:a3:a4:c3:f2:68:98:07:0a:e7:0d:9d:09:e5:86:
22:42:01:59:0b:ac:cc:69:a4:93:64:ef:34:ce:1b:
ac:e6:cb:4c:31:2e:57:53:35:7f:a8:ac:2d:39:87:
59:92:4c:8b:75:c9:4d:ab:2f:e6:06:02:58:eb:f3:
34:f0:53:d8:77:14:f5:e7:d2:2f:47:f1:1a:c4:88:
af:56:8e:59:4f:5c:e8:35:c5:57:7f:ce:9d:89:50:
b5:8c:e2:0d:ca:58:30:f6:e2:a3:59:dc:4b:97:87:
e5:2f:5b:74:dc:36:4b:af:36:ca:24:3f:04:a6:93:
02:0f:46:03:3f:71:b1:d6:00:eb:4a:02:1b:4b:40:
2d:27:02:d5:7f:6a:66:99:d8:4c:fe:4e:79:4b:a2:
7b:42:d6:7a:f9:55:fb:56:1c:5a:b2:bd:e8:e4:11:
d8:53:a4:8c:44:63:2e:49:99:ff:df:c3:d7:dd:10:
e3:1f:fa:1b:ee:11:87:dc:ef:cd:48:0e:f2:b6:db:
fc:15:c6:34:58:2e:3e:5c:f1:b8:be:d5:c7:62:37:
9c:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:66:19:3C:F4:D1:B4:A0:97:0B:A7:6D:D3:1C:1B:5B:51:39:4D:DD
X509v3 Authority Key Identifier:
keyid:37:4F:6F:3E:3C:B9:73:BA:C8:A4:3F:6C:0B:80:6B:3D:11:C9:AD:C3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/N09vPjy5c7rIpD9sC4BrPRHJrcM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/8d1167-0c4d-488f-9a83-c0177dfda847/1/N09vPjy5c7rIpD9sC4BrPRHJrcM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/8d1167-0c4d-488f-9a83-c0177dfda847/1/N09vPjy5c7rIpD9sC4BrPRHJrcM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
37:ea:a8:b0:fd:7c:89:a6:48:72:94:11:c5:6f:ff:94:61:d7:
90:93:31:19:06:2c:56:95:6b:69:1a:52:8f:48:5d:d5:a9:78:
84:3a:05:9d:f1:75:5e:38:69:37:2e:15:fa:1e:0c:97:bd:c1:
cb:87:1f:50:0d:11:ad:7a:dc:06:27:cd:f6:ff:b6:38:1d:e9:
f9:8f:e1:9a:3e:ce:27:e5:4a:5c:03:49:45:4e:b5:e8:4d:9c:
be:9a:0a:1c:44:eb:94:1e:c1:c5:77:de:c2:46:36:61:dd:3f:
d4:e5:89:fb:75:1a:cd:0b:c7:4d:67:13:ba:9d:48:b0:97:9f:
97:66:a0:4c:98:1d:4a:5f:91:92:ee:51:37:69:29:39:12:32:
a8:5f:39:74:43:c9:61:e5:1a:57:21:2f:0b:3f:c9:bf:f3:25:
49:d8:7b:7b:e1:0d:3e:bc:12:9a:93:0d:02:8c:95:4a:3f:01:
5a:d4:ce:7f:e3:6e:6a:06:4b:d4:02:bd:f3:3d:73:3f:1a:1d:
d2:86:8b:2c:3b:cc:c7:9b:01:3a:57:ce:33:c5:49:b9:d8:14:
e4:3b:1f:6f:ff:9b:d1:59:eb:11:6a:fa:fb:35:66:00:44:d0:
48:95:22:ce:d4:16:a7:7f:a4:04:7a:b2:52:d8:b1:1c:83:51:
9d:b2:97:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 15:31:36 2025 by rpki-client