Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/127684-5afe-4f18-b95d-3072503d8607/1/n_M9TzrAqIeECihM3Bq-t91kLwE.mft
File: n_M9TzrAqIeECihM3Bq-t91kLwE.mft (raw, json)
Hash identifier: O1U0B+L4h81NKATqxNb/WjMoaP5vjQjgilQ+DRtv3A0=
Subject key identifier: 8F:86:A7:4B:F1:62:E9:02:4F:17:7F:0B:4F:47:50:B5:CB:91:67:C0
Authority key identifier: 9F:F3:3D:4F:3A:C0:A8:87:84:0A:28:4C:DC:1A:BE:B7:DD:64:2F:01
Certificate issuer: /CN=9ff33d4f3ac0a887840a284cdc1abeb7dd642f01
Certificate serial: 01992F353DC2BE363BCA9C46C83AB22CFB24
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/n_M9TzrAqIeECihM3Bq-t91kLwE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/127684-5afe-4f18-b95d-3072503d8607/1/n_M9TzrAqIeECihM3Bq-t91kLwE.mft
Manifest number: 0FB3
Signing time: Tue 09 Sep 2025 16:00:42 +0000
Manifest this update: Tue 09 Sep 2025 16:00:42 +0000
Manifest next update: Wed 10 Sep 2025 16:00:42 +0000
Files and hashes: 1: FVg-EXFcHktuG7QQnavEaXe-fnM.roa (hash: mi0+1itCdMO3yynnGJ5oIkWt7SrPDpOOMP9BVB9K+Jc=)
2: T3nKkG-dCBEn2EriUuJalbbWuME.roa (hash: NecAgRoxclxz3UKtAie4B0/FU5sK9TM4xXuPGjhm4Kc=)
3: n_M9TzrAqIeECihM3Bq-t91kLwE.crl (hash: MGg3kxNdekCSNmZfgwHDEqk7KboQgh7Dd9fxgehHPtw=)
4: nl8-f4Y4T6rTsqYQijhuiNifL1Q.roa (hash: D8rqvsrK84p8WeU5jZAqKp61j1ey2NYKXftp+gwX6/8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/127684-5afe-4f18-b95d-3072503d8607/1/n_M9TzrAqIeECihM3Bq-t91kLwE.crl
rsync://rpki.ripe.net/repository/DEFAULT/5a/127684-5afe-4f18-b95d-3072503d8607/1/n_M9TzrAqIeECihM3Bq-t91kLwE.mft
rsync://rpki.ripe.net/repository/DEFAULT/n_M9TzrAqIeECihM3Bq-t91kLwE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 10 Sep 2025 15:12:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:2f:35:3d:c2:be:36:3b:ca:9c:46:c8:3a:b2:2c:fb:24
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9ff33d4f3ac0a887840a284cdc1abeb7dd642f01
Validity
Not Before: Sep 9 16:00:42 2025 GMT
Not After : Sep 10 16:00:42 2025 GMT
Subject: CN=8f86a74bf162e9024f177f0b4f4750b5cb9167c0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:91:b4:fa:60:f5:83:c2:35:fc:bf:40:c8:81:
54:28:c5:23:cc:ce:09:a7:c2:70:46:15:80:e6:07:
3c:2c:5a:fa:b5:6a:e5:c1:b3:b8:a8:04:96:a0:26:
b9:89:fd:e4:18:bf:d7:b5:01:16:20:60:00:08:b2:
44:01:65:e2:61:50:a1:42:d5:e1:5c:1a:86:18:00:
aa:d6:d5:3b:fe:5f:f6:bd:6f:1e:f3:bb:3c:8a:98:
39:c6:39:b4:bc:5e:08:82:ac:28:be:e8:c2:10:d3:
c4:a6:db:7e:6a:16:ca:90:e0:f1:5c:b1:9a:99:f8:
51:34:68:01:67:07:56:36:68:bc:0f:8a:bc:9d:96:
e6:77:ab:9c:2c:59:07:dc:52:ba:85:cc:27:bc:f6:
83:42:fc:2b:82:b1:ff:cd:d6:a2:fa:24:3c:7c:7a:
15:84:a6:b4:1d:39:ba:c1:24:92:8a:06:0b:14:11:
00:16:93:de:f3:5b:6f:60:7f:34:04:91:85:68:09:
c7:36:38:9b:12:f0:82:40:85:b7:50:9f:3b:d1:20:
70:74:d5:5f:f5:eb:34:1f:7b:cc:7f:29:1d:5c:ed:
15:80:2e:79:b2:8c:2c:34:da:0a:28:ad:9f:61:97:
a7:11:c5:37:1a:3c:50:75:65:87:f6:7b:f8:0f:56:
b4:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:86:A7:4B:F1:62:E9:02:4F:17:7F:0B:4F:47:50:B5:CB:91:67:C0
X509v3 Authority Key Identifier:
keyid:9F:F3:3D:4F:3A:C0:A8:87:84:0A:28:4C:DC:1A:BE:B7:DD:64:2F:01
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/n_M9TzrAqIeECihM3Bq-t91kLwE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/127684-5afe-4f18-b95d-3072503d8607/1/n_M9TzrAqIeECihM3Bq-t91kLwE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/127684-5afe-4f18-b95d-3072503d8607/1/n_M9TzrAqIeECihM3Bq-t91kLwE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1d:e5:ac:75:3d:cb:65:31:ba:bb:ec:bc:e8:2e:af:10:96:5d:
e2:0b:db:0b:47:0f:19:fe:19:74:fd:d7:40:92:c4:ad:56:3d:
bc:3a:2e:ad:71:47:58:37:3c:86:53:ae:f0:19:ed:65:96:07:
ef:9e:b3:d2:c8:30:92:45:d9:f0:6e:e1:56:b8:02:81:fb:b4:
80:ea:e2:69:49:0d:aa:8d:c0:f7:9a:b7:c5:5c:32:62:48:56:
0a:0c:3c:bb:22:6c:e5:47:7c:3f:9c:14:b4:91:e1:96:56:c4:
9d:3d:48:50:6d:49:45:f3:d4:6b:f3:0a:b9:88:7a:cf:83:2e:
ae:ec:95:e9:9c:be:46:44:3b:c3:f1:73:4a:fb:ba:b6:50:30:
56:1c:0e:9d:5a:e1:c9:ff:66:87:81:cb:d9:89:2a:8b:12:09:
f4:05:42:e5:b9:0d:91:f3:c4:6f:01:fe:59:30:ac:2c:0b:94:
5f:31:05:68:aa:20:62:6f:28:87:7e:51:10:3f:4a:9d:67:08:
28:b2:7e:d6:01:b3:e6:60:9d:9e:a6:d4:de:5b:a9:0c:c8:6c:
59:b6:cd:25:9f:94:2d:ca:a0:70:b1:67:23:c9:82:99:b3:ae:
e2:e0:99:0b:af:55:cc:4e:ed:8f:f0:a4:9f:2b:77:25:36:b9:
38:e7:33:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 9 18:55:52 2025 by rpki-client