Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/86/35dee5-d8db-48e3-b7bb-0810d16bcc87/1/n9aPGyQUI9qXZHuZIkUwOG0laYw.mft
File: n9aPGyQUI9qXZHuZIkUwOG0laYw.mft (raw, json)
Hash identifier: iaUP/fQBy4OYeOu28KIdPksGHYV5Bnqa7v5mkiigT9o=
Subject key identifier: 31:D7:BB:E6:AC:B6:82:76:BA:76:BF:5D:A2:63:4C:B8:82:B7:F5:BA
Authority key identifier: 9F:D6:8F:1B:24:14:23:DA:97:64:7B:99:22:45:30:38:6D:25:69:8C
Certificate issuer: /CN=9fd68f1b241423da97647b99224530386d25698c
Certificate serial: 01974B8D866C50CC9832EACBD71E0A8F27EC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/n9aPGyQUI9qXZHuZIkUwOG0laYw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/86/35dee5-d8db-48e3-b7bb-0810d16bcc87/1/n9aPGyQUI9qXZHuZIkUwOG0laYw.mft
Manifest number: 157E
Signing time: Sat 07 Jun 2025 18:00:55 +0000
Manifest this update: Sat 07 Jun 2025 18:00:55 +0000
Manifest next update: Sun 08 Jun 2025 18:00:55 +0000
Files and hashes: 1: 6zp8k7ws-z1aCcsmWGLYmfVsv4E.roa (hash: bUIQEUVAIaujbjPg7okGrEKCeQdfL4efouwX9EGneXc=)
2: n9aPGyQUI9qXZHuZIkUwOG0laYw.crl (hash: boI3Tcrva/NDLqPIf4hfuE7bIu5tK0RsFbLKuf4+Ctc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/86/35dee5-d8db-48e3-b7bb-0810d16bcc87/1/n9aPGyQUI9qXZHuZIkUwOG0laYw.crl
rsync://rpki.ripe.net/repository/DEFAULT/86/35dee5-d8db-48e3-b7bb-0810d16bcc87/1/n9aPGyQUI9qXZHuZIkUwOG0laYw.mft
rsync://rpki.ripe.net/repository/DEFAULT/n9aPGyQUI9qXZHuZIkUwOG0laYw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 18:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4b:8d:86:6c:50:cc:98:32:ea:cb:d7:1e:0a:8f:27:ec
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9fd68f1b241423da97647b99224530386d25698c
Validity
Not Before: Jun 7 18:00:55 2025 GMT
Not After : Jun 8 18:00:55 2025 GMT
Subject: CN=31d7bbe6acb68276ba76bf5da2634cb882b7f5ba
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:03:f3:3c:d1:b5:fb:b8:86:50:3c:f0:43:ea:
c3:81:3c:a2:a0:87:ab:bc:96:45:77:48:59:a5:e1:
e4:d1:42:81:1a:ba:66:c6:5a:8b:cc:02:1b:f1:02:
fd:6a:40:ec:9e:f0:4f:c3:76:e8:26:e8:34:a0:fd:
b6:b3:94:70:6f:93:2a:82:fa:e9:9a:5c:ad:1e:a0:
38:44:b3:bf:ef:cf:04:fc:c8:b0:8b:d0:d5:da:d2:
5a:1b:5c:55:66:04:07:f6:ed:d8:41:f0:01:2d:dd:
e6:70:58:84:7e:59:18:d7:e3:83:31:8e:4f:fa:8c:
0a:40:04:6c:60:06:0b:28:7a:db:d3:a6:c0:85:a4:
87:db:3a:2a:a1:bc:73:57:b3:94:86:f1:30:9d:1a:
20:97:d3:1c:36:cb:e1:f2:5a:bd:92:98:a3:23:c6:
12:4d:cb:2c:ae:80:a5:7e:99:a1:8f:6f:36:ad:ff:
b6:e8:7d:25:e0:d6:ed:e9:ea:d7:2f:be:06:3d:c5:
f1:e1:92:e0:dc:bb:a8:2a:c5:69:8c:78:90:f1:c2:
cd:91:b8:cd:4d:84:1c:2b:a3:76:d9:8b:7a:83:9a:
a2:52:c0:2e:10:72:56:73:32:23:b7:78:86:8d:9a:
34:df:d6:a3:28:8e:b2:7c:f3:98:84:4e:92:14:f7:
2f:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:D7:BB:E6:AC:B6:82:76:BA:76:BF:5D:A2:63:4C:B8:82:B7:F5:BA
X509v3 Authority Key Identifier:
keyid:9F:D6:8F:1B:24:14:23:DA:97:64:7B:99:22:45:30:38:6D:25:69:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/n9aPGyQUI9qXZHuZIkUwOG0laYw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/35dee5-d8db-48e3-b7bb-0810d16bcc87/1/n9aPGyQUI9qXZHuZIkUwOG0laYw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/86/35dee5-d8db-48e3-b7bb-0810d16bcc87/1/n9aPGyQUI9qXZHuZIkUwOG0laYw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6d:f2:f7:20:32:4d:59:bc:4b:df:4e:c2:03:01:0d:48:e3:a6:
dd:60:0e:22:85:b5:66:e9:0a:d7:cc:89:e7:67:5e:fd:2b:aa:
c3:9b:ea:cb:f2:72:40:1e:b5:51:b1:86:0b:3e:b6:20:0b:b2:
19:fa:df:6d:fc:84:2e:c9:62:f3:53:67:fe:f3:1d:bb:76:df:
7b:17:27:5b:9d:38:45:ff:a5:c2:47:05:25:fc:9a:82:ed:30:
e1:01:e0:e2:53:9d:94:e4:f5:28:5b:2b:f1:f7:e7:08:d1:53:
98:8e:89:fa:43:1e:cf:1f:ec:fe:34:27:b4:c0:07:49:65:63:
cf:f5:81:12:08:fb:0e:fd:55:46:56:e1:85:1c:02:06:9b:2f:
28:c8:6a:0b:55:e7:bc:39:f4:44:c8:ea:a1:20:6a:a6:4d:2d:
87:8a:a8:73:d0:16:7a:ff:dd:a9:47:ef:30:16:7b:52:5c:72:
f7:3c:6f:a6:03:67:5c:3a:ce:85:8c:d1:b9:cb:83:57:1e:21:
8d:8c:cd:d9:1d:79:b4:1d:cb:2f:f3:0e:ad:d5:73:da:89:a9:
5b:c0:2d:f8:0e:44:0b:f2:cb:5d:52:bf:18:41:92:b3:06:7e:
ee:e2:00:9c:7a:9e:18:79:16:d2:b8:de:5b:aa:00:dd:e1:dd:
91:41:61:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 00:26:12 2025 by rpki-client