Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/79/cdbd0a-68ec-487d-8fea-619281380bc2/1/n2m9-bvSpFl-Js4gv-E4YkytM9w.mft
File: n2m9-bvSpFl-Js4gv-E4YkytM9w.mft (raw, json)
Hash identifier: 1PvMFnOC3Uu+HaVPOubfSrA1DD2mme4TZIVJKo/qbnU=
Subject key identifier: CE:AE:3F:19:94:94:8A:92:21:9B:E3:8E:D4:AB:0A:98:86:3F:10:F4
Authority key identifier: 9F:69:BD:F9:BB:D2:A4:59:7E:26:CE:20:BF:E1:38:62:4C:AD:33:DC
Certificate issuer: /CN=9f69bdf9bbd2a4597e26ce20bfe138624cad33dc
Certificate serial: 01975121C01B07F3FFF0A68B2C0923C3B52C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/n2m9-bvSpFl-Js4gv-E4YkytM9w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/79/cdbd0a-68ec-487d-8fea-619281380bc2/1/n2m9-bvSpFl-Js4gv-E4YkytM9w.mft
Manifest number: 1580
Signing time: Sun 08 Jun 2025 20:00:55 +0000
Manifest this update: Sun 08 Jun 2025 20:00:55 +0000
Manifest next update: Mon 09 Jun 2025 20:00:55 +0000
Files and hashes: 1: Q-k4eP71XDc11_L4_l_xUnKRF5E.roa (hash: LRoS7+b3eCmFJlD9TdL/ZA7RouROtd2Rd2SIPOdtZjI=)
2: n2m9-bvSpFl-Js4gv-E4YkytM9w.crl (hash: mkV9178cWu6wYa7C5tedwVBvEqCX+2hoWdPBZ3u/AFo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/79/cdbd0a-68ec-487d-8fea-619281380bc2/1/n2m9-bvSpFl-Js4gv-E4YkytM9w.crl
rsync://rpki.ripe.net/repository/DEFAULT/79/cdbd0a-68ec-487d-8fea-619281380bc2/1/n2m9-bvSpFl-Js4gv-E4YkytM9w.mft
rsync://rpki.ripe.net/repository/DEFAULT/n2m9-bvSpFl-Js4gv-E4YkytM9w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 09 Jun 2025 20:00:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:51:21:c0:1b:07:f3:ff:f0:a6:8b:2c:09:23:c3:b5:2c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9f69bdf9bbd2a4597e26ce20bfe138624cad33dc
Validity
Not Before: Jun 8 20:00:55 2025 GMT
Not After : Jun 9 20:00:55 2025 GMT
Subject: CN=ceae3f1994948a92219be38ed4ab0a98863f10f4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:0f:62:24:13:e1:68:75:a6:2b:d8:90:66:53:
5f:23:3b:73:d0:e1:48:f9:f5:59:b5:64:58:c9:e2:
ed:2b:0c:36:0d:78:0a:23:5e:37:c2:c2:53:a7:6b:
53:a5:43:ef:61:bc:75:80:d9:43:5f:ee:01:9b:01:
27:bd:ff:fd:5b:6f:08:66:b6:cb:0a:a1:3b:49:cd:
a5:20:03:5e:c6:bd:d9:9e:ba:0d:83:e8:78:19:13:
e0:37:d8:df:ae:64:ef:b1:17:0a:1a:63:84:ef:88:
2e:6d:d4:f7:c8:c4:a1:0b:2f:9a:f7:96:0e:62:61:
1a:20:54:da:ea:02:cf:34:b9:1a:79:ca:c6:51:a0:
2b:90:8f:1f:91:45:90:47:5c:99:54:1e:0e:14:83:
8a:e3:15:d9:b8:70:b9:fb:37:7d:d6:a2:8c:c5:2b:
21:68:00:9d:b7:32:a0:63:cd:1f:63:d2:68:0e:0d:
78:99:15:ff:62:83:7f:83:24:09:40:b0:93:1c:e4:
f3:7b:c1:3b:b5:3b:29:59:66:b1:28:ce:eb:bf:e1:
3e:55:ce:94:76:91:8b:37:bb:be:56:8c:b3:89:b2:
78:84:0f:ce:32:cb:7a:dc:0a:0d:14:ca:b4:79:1c:
d5:be:e7:e4:e7:95:54:7d:e2:9c:e9:20:aa:12:45:
7e:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:AE:3F:19:94:94:8A:92:21:9B:E3:8E:D4:AB:0A:98:86:3F:10:F4
X509v3 Authority Key Identifier:
keyid:9F:69:BD:F9:BB:D2:A4:59:7E:26:CE:20:BF:E1:38:62:4C:AD:33:DC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/n2m9-bvSpFl-Js4gv-E4YkytM9w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/79/cdbd0a-68ec-487d-8fea-619281380bc2/1/n2m9-bvSpFl-Js4gv-E4YkytM9w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/79/cdbd0a-68ec-487d-8fea-619281380bc2/1/n2m9-bvSpFl-Js4gv-E4YkytM9w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
86:df:db:5d:9b:cb:f1:bf:01:42:5d:66:b2:e8:00:2f:e4:74:
d3:4d:b9:c5:91:d0:f2:b7:a1:10:8c:73:db:3b:0b:7d:af:49:
ea:fd:ce:27:e0:a5:93:29:ea:f2:96:ae:5f:3b:e8:6e:2f:f6:
fc:5a:aa:33:60:10:8b:f4:b9:cc:31:5f:f2:27:8f:cb:7e:2a:
b2:08:58:3f:27:d7:81:de:72:b2:4f:eb:da:72:25:7f:22:bf:
d6:ce:62:61:50:a2:fb:1d:9f:e4:47:9b:a9:1d:60:43:57:64:
c5:27:23:13:40:84:5c:3a:54:8a:c0:5e:b0:e4:9e:92:84:0b:
2c:bd:31:02:97:75:07:1c:8a:16:28:55:b0:2f:a7:ec:b7:e4:
e7:b3:9f:49:51:8c:32:67:eb:0d:8e:2d:42:2e:d9:e9:ec:ea:
1f:f5:77:bb:fe:10:ce:63:d6:bd:30:52:da:13:d9:ff:5a:0c:
96:9c:7b:f3:f5:e8:ef:e8:07:41:c6:45:a5:29:14:04:be:1e:
0b:34:8c:00:d8:f4:30:7f:a4:f5:65:7b:94:19:b0:c5:d3:35:
2e:0f:15:92:53:c8:e1:7e:2a:f7:4c:0c:5c:6f:ec:7b:de:25:
ca:e7:9f:59:bd:1b:8d:8b:11:a7:8b:26:49:f8:49:5f:21:38:
14:4c:52:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 9 04:54:27 2025 by rpki-client