Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/87/bd7dce-0ddc-4368-b04d-13f34b09ae61/1/N9IJppWeI1T3POLyuUEib4MpDIw.mft
File: N9IJppWeI1T3POLyuUEib4MpDIw.mft (raw, json)
Hash identifier: rhOahvVYSmy0cdm/iOlOG36h/dcgcovVO7QVleinqI4=
Subject key identifier: 27:0D:0D:93:31:75:E0:F0:60:1C:5A:11:7C:E5:FE:E4:77:B6:1B:1F
Authority key identifier: 37:D2:09:A6:95:9E:23:54:F7:3C:E2:F2:B9:41:22:6F:83:29:0C:8C
Certificate issuer: /CN=37d209a6959e2354f73ce2f2b941226f83290c8c
Certificate serial: 01993124E07F665CEEDEF73D77C76F8A6989
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/N9IJppWeI1T3POLyuUEib4MpDIw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/87/bd7dce-0ddc-4368-b04d-13f34b09ae61/1/N9IJppWeI1T3POLyuUEib4MpDIw.mft
Manifest number: 012E
Signing time: Wed 10 Sep 2025 01:02:04 +0000
Manifest this update: Wed 10 Sep 2025 01:02:04 +0000
Manifest next update: Thu 11 Sep 2025 01:02:04 +0000
Files and hashes: 1: N9IJppWeI1T3POLyuUEib4MpDIw.crl (hash: 56EQ8Q+arw/CrlfFr1reI1Vtf56/gGM5cDG38dU0gj8=)
2: p02sjha6oluTWKotOKPITJ53VlU.roa (hash: rLFuslHglQh990YEEpEUg7xz9pfaxlb0KsezlTb7ZC4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/87/bd7dce-0ddc-4368-b04d-13f34b09ae61/1/N9IJppWeI1T3POLyuUEib4MpDIw.crl
rsync://rpki.ripe.net/repository/DEFAULT/87/bd7dce-0ddc-4368-b04d-13f34b09ae61/1/N9IJppWeI1T3POLyuUEib4MpDIw.mft
rsync://rpki.ripe.net/repository/DEFAULT/N9IJppWeI1T3POLyuUEib4MpDIw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 10 Sep 2025 21:45:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:31:24:e0:7f:66:5c:ee:de:f7:3d:77:c7:6f:8a:69:89
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=37d209a6959e2354f73ce2f2b941226f83290c8c
Validity
Not Before: Sep 10 01:02:04 2025 GMT
Not After : Sep 11 01:02:04 2025 GMT
Subject: CN=270d0d933175e0f0601c5a117ce5fee477b61b1f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:c1:a5:bd:95:6a:f1:81:e1:c1:14:d2:b1:89:
66:a3:5f:f6:60:e5:48:aa:e7:2d:06:de:27:60:97:
f6:50:e3:33:9a:a5:3c:db:e2:62:ff:5e:b3:64:dd:
8b:82:ee:7c:4e:f5:68:6f:a0:41:05:29:94:cf:ea:
c5:52:c4:22:56:a7:2c:8e:9b:89:ba:88:e9:86:e2:
9b:4d:45:f4:7f:96:7c:87:36:07:ff:ec:ac:a6:c1:
c3:21:f6:c3:13:d8:5d:ca:95:ba:10:08:62:dc:4c:
54:13:9f:dd:9b:28:4e:9b:7d:5c:7d:35:26:04:db:
c6:c0:7d:05:bf:48:74:d2:3f:3e:15:f6:bd:c5:bd:
65:23:df:8d:59:ab:a3:f5:31:98:ce:03:e0:d0:41:
fb:44:b8:0d:7f:73:bd:ea:30:b1:c0:ed:d4:61:df:
8f:55:31:ec:61:44:38:0e:29:af:2a:d6:7e:0b:5c:
50:42:a9:19:e0:2a:20:d2:02:83:ba:01:58:4a:c0:
0d:42:b7:09:7f:74:d8:e3:db:fd:72:0f:a3:fa:38:
68:19:bd:4e:54:cf:c3:31:10:f0:88:06:3e:af:36:
85:ae:93:4f:ff:51:55:d2:d0:f0:04:1d:93:72:7e:
d9:87:a0:f5:e2:6f:45:a2:70:0a:24:b7:18:89:cb:
e2:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:0D:0D:93:31:75:E0:F0:60:1C:5A:11:7C:E5:FE:E4:77:B6:1B:1F
X509v3 Authority Key Identifier:
keyid:37:D2:09:A6:95:9E:23:54:F7:3C:E2:F2:B9:41:22:6F:83:29:0C:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/N9IJppWeI1T3POLyuUEib4MpDIw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/bd7dce-0ddc-4368-b04d-13f34b09ae61/1/N9IJppWeI1T3POLyuUEib4MpDIw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/87/bd7dce-0ddc-4368-b04d-13f34b09ae61/1/N9IJppWeI1T3POLyuUEib4MpDIw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
94:9c:8a:cf:a9:ba:19:6c:5c:c6:8e:9e:22:90:46:2b:6b:ec:
f8:f4:5d:bf:e1:c0:23:09:09:94:c6:7f:46:64:de:d8:0e:21:
07:2e:c3:33:5a:d3:8b:7c:26:fa:41:47:e3:19:e7:71:57:fb:
fe:3f:3e:e8:3d:59:ee:47:61:62:6d:df:b1:43:cf:d7:27:14:
53:1e:12:fa:61:30:c1:e1:d1:2a:66:41:70:a6:a3:d6:04:29:
df:fa:e5:1e:9f:f6:80:df:d5:8d:c5:5f:84:fc:0a:41:68:c3:
3f:b1:98:16:66:db:95:5c:fc:00:e8:97:14:96:9a:66:2a:c3:
78:86:ef:6f:59:30:ae:a3:1d:97:b6:99:54:8e:20:92:3b:b5:
09:57:1d:d0:81:35:31:fe:08:7d:39:cb:2a:49:b9:1a:6e:d7:
83:f5:e5:1c:83:67:1b:cf:17:45:4c:99:f0:eb:ec:d0:73:5b:
61:7c:1e:62:76:93:91:2d:4c:a1:49:91:dd:09:f8:83:fa:20:
e4:ea:dd:a5:b7:78:a1:df:1e:cd:1a:fb:99:0f:ed:54:2b:bf:
f2:92:4c:cc:7e:0e:7e:d0:60:2a:a9:35:2c:f8:76:0d:c2:db:
92:44:17:31:3e:4a:42:1d:0e:57:be:ff:db:86:ec:5e:52:57:
c8:0c:9f:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 10 05:48:46 2025 by rpki-client