Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/127684-5afe-4f18-b95d-3072503d8607/1/n_M9TzrAqIeECihM3Bq-t91kLwE.mft
File: n_M9TzrAqIeECihM3Bq-t91kLwE.mft (raw, json)
Hash identifier: bx4kZ3CglGbjWttaQ1OTVPHE3Jz2Bzn75XYIpVPrbvg=
Subject key identifier: 00:D4:AF:0E:78:1B:9F:0C:B4:F5:F7:B9:20:11:D1:6F:D8:D4:CC:FF
Authority key identifier: 9F:F3:3D:4F:3A:C0:A8:87:84:0A:28:4C:DC:1A:BE:B7:DD:64:2F:01
Certificate issuer: /CN=9ff33d4f3ac0a887840a284cdc1abeb7dd642f01
Certificate serial: 019758001461C4AA8A86F1931DF13D90114D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/n_M9TzrAqIeECihM3Bq-t91kLwE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/127684-5afe-4f18-b95d-3072503d8607/1/n_M9TzrAqIeECihM3Bq-t91kLwE.mft
Manifest number: 0EBF
Signing time: Tue 10 Jun 2025 04:01:29 +0000
Manifest this update: Tue 10 Jun 2025 04:01:29 +0000
Manifest next update: Wed 11 Jun 2025 04:01:29 +0000
Files and hashes: 1: FVg-EXFcHktuG7QQnavEaXe-fnM.roa (hash: mi0+1itCdMO3yynnGJ5oIkWt7SrPDpOOMP9BVB9K+Jc=)
2: T3nKkG-dCBEn2EriUuJalbbWuME.roa (hash: NecAgRoxclxz3UKtAie4B0/FU5sK9TM4xXuPGjhm4Kc=)
3: n_M9TzrAqIeECihM3Bq-t91kLwE.crl (hash: FnAnuJc5dV8icX64KNagpEYue4/+95F8MmPLUQf22m4=)
4: nl8-f4Y4T6rTsqYQijhuiNifL1Q.roa (hash: D8rqvsrK84p8WeU5jZAqKp61j1ey2NYKXftp+gwX6/8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/127684-5afe-4f18-b95d-3072503d8607/1/n_M9TzrAqIeECihM3Bq-t91kLwE.crl
rsync://rpki.ripe.net/repository/DEFAULT/5a/127684-5afe-4f18-b95d-3072503d8607/1/n_M9TzrAqIeECihM3Bq-t91kLwE.mft
rsync://rpki.ripe.net/repository/DEFAULT/n_M9TzrAqIeECihM3Bq-t91kLwE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 11 Jun 2025 04:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:58:00:14:61:c4:aa:8a:86:f1:93:1d:f1:3d:90:11:4d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9ff33d4f3ac0a887840a284cdc1abeb7dd642f01
Validity
Not Before: Jun 10 04:01:29 2025 GMT
Not After : Jun 11 04:01:29 2025 GMT
Subject: CN=00d4af0e781b9f0cb4f5f7b92011d16fd8d4ccff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:97:dc:31:5d:ff:ad:e4:8c:9f:57:7b:91:ed:
36:63:c8:49:2e:14:6b:ea:ac:af:e2:b7:53:83:fc:
24:da:b1:5f:12:fb:17:57:cc:50:b2:2e:d6:cd:42:
6f:ea:d8:35:2e:e5:25:fe:94:4d:ef:ac:85:9e:b9:
69:9a:9d:78:ef:cc:7e:ff:e1:ae:de:48:93:46:32:
83:cc:92:60:e5:15:7d:2c:cd:76:85:e0:ff:19:a7:
ae:24:f3:a7:a0:16:c3:ea:e7:d4:cd:4c:f2:6c:c1:
e4:fb:83:f3:2a:08:4f:58:8b:70:29:3a:c6:6b:0c:
52:43:08:47:ea:11:a1:c5:2d:96:5a:a9:12:8d:5f:
3e:4e:ea:5f:2e:f3:e7:1a:8c:8f:63:ab:44:f5:e6:
59:84:45:d0:15:c5:df:13:cb:b1:e4:f9:9b:8f:09:
94:3a:52:0f:30:a4:40:df:24:61:af:a7:12:7e:52:
97:05:98:cf:b7:7d:88:62:c6:31:2c:ee:11:0c:8f:
da:c8:cc:56:f9:81:42:21:36:14:e1:76:8c:b4:05:
52:fe:bc:be:a1:c1:3f:48:b6:02:6a:84:d5:cf:8f:
8e:5a:56:e4:e1:cc:f8:52:3d:bd:09:81:16:5d:36:
6c:06:1c:da:a7:11:8b:e9:af:a7:82:1e:6b:ff:9f:
d0:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:D4:AF:0E:78:1B:9F:0C:B4:F5:F7:B9:20:11:D1:6F:D8:D4:CC:FF
X509v3 Authority Key Identifier:
keyid:9F:F3:3D:4F:3A:C0:A8:87:84:0A:28:4C:DC:1A:BE:B7:DD:64:2F:01
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/n_M9TzrAqIeECihM3Bq-t91kLwE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/127684-5afe-4f18-b95d-3072503d8607/1/n_M9TzrAqIeECihM3Bq-t91kLwE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/127684-5afe-4f18-b95d-3072503d8607/1/n_M9TzrAqIeECihM3Bq-t91kLwE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
14:b6:e0:fc:95:c2:cd:c6:7d:ac:a3:95:96:c2:fa:14:2e:c5:
4a:4f:dd:2d:77:c6:6f:4b:2b:92:94:18:59:38:85:a0:13:f5:
6d:0b:0e:a8:4f:76:3e:84:fb:e5:41:5b:e5:aa:a0:d7:8c:e1:
0d:3f:1a:5e:7d:d2:01:8a:a4:a1:45:27:67:4f:ac:64:4c:6a:
93:99:71:05:ca:da:14:ce:bc:15:3b:af:c7:a1:3e:8c:2c:7c:
ff:ff:84:88:94:d9:6f:7b:8d:3f:a5:e4:7e:74:ea:a3:a3:88:
0b:1b:90:8a:2b:fb:95:35:06:fe:1e:96:3a:e3:34:b6:10:9f:
cc:69:23:95:a3:60:89:a9:f0:c7:a5:f0:77:86:a3:3b:00:dd:
65:ab:bb:be:a9:76:5b:f4:65:cd:45:d1:b9:64:9f:bc:9f:69:
07:20:3f:4d:3e:65:16:1b:34:f7:a4:54:b4:0a:8f:fd:01:1a:
5d:21:86:6f:b1:b8:6d:3b:da:76:c4:6f:1c:6c:83:ff:58:9f:
65:83:46:4c:3f:9d:9a:ec:5f:40:27:f4:67:84:bf:3c:2f:9c:
b3:77:54:4b:04:8b:83:ff:44:ff:d5:42:71:21:6e:d4:0c:07:
82:37:e2:2b:e9:24:51:97:9c:16:3d:86:b2:6b:41:cd:90:2a:
c6:c8:7e:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 10 16:04:05 2025 by rpki-client