Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d2/4cae10-37a5-40ef-89d5-5701d01c1e87/1/n1_z3hCjG79XAcC9smxlCAF9oso.mft
File: n1_z3hCjG79XAcC9smxlCAF9oso.mft (raw, json)
Hash identifier: vXWndYrMMhSSiERBA8bgdv0VwHJcfgq0VpTxvTifaZU=
Subject key identifier: C1:99:45:77:19:F5:96:69:F4:AE:5A:93:FA:C8:3E:D5:59:AE:B3:43
Authority key identifier: 9F:5F:F3:DE:10:A3:1B:BF:57:01:C0:BD:B2:6C:65:08:01:7D:A2:CA
Certificate issuer: /CN=9f5ff3de10a31bbf5701c0bdb26c6508017da2ca
Certificate serial: 01974EFC2781B1B7B9738888A58D7093D470
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/n1_z3hCjG79XAcC9smxlCAF9oso.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d2/4cae10-37a5-40ef-89d5-5701d01c1e87/1/n1_z3hCjG79XAcC9smxlCAF9oso.mft
Manifest number: 0B86
Signing time: Sun 08 Jun 2025 10:00:37 +0000
Manifest this update: Sun 08 Jun 2025 10:00:37 +0000
Manifest next update: Mon 09 Jun 2025 10:00:37 +0000
Files and hashes: 1: bY74pa2C3Js_pk8zrLxwAIuld50.roa (hash: hw+4FaOxGozuL2NvwyX/np4qCkqg+xjCV1sHwedmazg=)
2: n1_z3hCjG79XAcC9smxlCAF9oso.crl (hash: BwYCb3GH18qAVp+Xj3iZnZY2rwMK7gHxEZnYOXXQBpU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d2/4cae10-37a5-40ef-89d5-5701d01c1e87/1/n1_z3hCjG79XAcC9smxlCAF9oso.crl
rsync://rpki.ripe.net/repository/DEFAULT/d2/4cae10-37a5-40ef-89d5-5701d01c1e87/1/n1_z3hCjG79XAcC9smxlCAF9oso.mft
rsync://rpki.ripe.net/repository/DEFAULT/n1_z3hCjG79XAcC9smxlCAF9oso.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 09 Jun 2025 10:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4e:fc:27:81:b1:b7:b9:73:88:88:a5:8d:70:93:d4:70
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9f5ff3de10a31bbf5701c0bdb26c6508017da2ca
Validity
Not Before: Jun 8 10:00:37 2025 GMT
Not After : Jun 9 10:00:37 2025 GMT
Subject: CN=c199457719f59669f4ae5a93fac83ed559aeb343
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:bb:c8:80:80:93:d1:5c:ff:3b:6f:e0:64:3f:
24:7a:cd:45:6d:a5:f5:5e:c5:ed:a4:19:56:f2:19:
e9:48:08:0f:1d:3a:47:09:3a:63:e3:7e:ba:1e:43:
08:9e:81:0f:89:a9:38:f4:3f:7a:30:5f:c5:b7:fe:
b5:ba:a1:6d:c3:ab:d4:60:96:12:91:a5:0c:8a:d3:
9c:33:2c:75:b9:ce:d1:9c:3d:79:e8:2f:6b:fd:9f:
58:8b:62:23:c2:b0:7e:9a:30:f8:53:98:a1:52:7d:
f0:f4:13:0b:0a:5f:77:c4:24:8e:ef:62:a2:ee:9b:
55:c0:bd:bb:57:5f:fa:cf:16:f7:0e:26:b7:d0:d6:
eb:15:a9:1c:b0:c0:a1:72:71:5f:78:57:54:8f:ce:
80:a5:53:3a:30:c3:69:aa:43:5d:0b:d2:20:a6:39:
a6:6b:8e:88:4d:a9:c1:14:54:c6:9c:c2:f8:03:9a:
eb:5b:83:4e:ca:10:78:15:98:a2:f0:7b:d5:e9:ce:
b0:41:ce:ed:b1:3c:9e:be:bc:6b:c6:82:4b:7d:8a:
47:a4:07:6a:d7:4c:c6:56:07:1f:2d:41:e3:9f:00:
80:78:77:94:3f:a5:12:db:88:2d:1a:4c:17:4b:1b:
8e:a2:b7:34:a0:79:5f:c8:26:fd:26:db:a8:eb:76:
bf:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:99:45:77:19:F5:96:69:F4:AE:5A:93:FA:C8:3E:D5:59:AE:B3:43
X509v3 Authority Key Identifier:
keyid:9F:5F:F3:DE:10:A3:1B:BF:57:01:C0:BD:B2:6C:65:08:01:7D:A2:CA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/n1_z3hCjG79XAcC9smxlCAF9oso.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/4cae10-37a5-40ef-89d5-5701d01c1e87/1/n1_z3hCjG79XAcC9smxlCAF9oso.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/4cae10-37a5-40ef-89d5-5701d01c1e87/1/n1_z3hCjG79XAcC9smxlCAF9oso.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4e:2a:54:c9:e7:4c:f3:25:47:b7:1c:91:05:c7:ec:51:c4:34:
87:af:af:e0:70:12:0c:59:76:cf:5c:77:01:c1:7e:4e:54:98:
8e:60:09:3a:dd:99:c0:08:cc:a5:f4:6d:12:5b:d8:d5:fa:fe:
1f:c8:f7:fc:42:49:2e:d7:74:25:1b:d8:88:e0:b7:00:22:c1:
05:d3:c1:f4:58:0a:54:e2:34:6f:7c:d8:05:f3:28:81:42:d2:
38:8e:5f:77:5f:5f:f7:27:18:97:8a:e5:8f:7a:63:8d:b4:db:
3c:ad:bf:00:6e:f8:ad:fd:aa:f8:c1:19:51:d8:33:12:62:f6:
a1:b7:08:65:59:b0:d6:80:9e:d2:1a:96:1e:df:3a:e2:2d:dd:
e1:6b:f6:65:a4:ac:24:a7:5b:f4:14:47:ae:79:96:70:24:47:
34:6a:24:8d:7d:7b:55:0d:b7:58:fb:4f:63:68:e3:8d:61:33:
d8:a3:41:2e:07:f2:2f:c2:e0:e6:9b:54:ce:1e:ff:a9:0e:dd:
ad:ca:29:a9:8c:40:ce:11:a6:eb:7c:8e:89:7b:60:0a:cb:a6:
3b:dd:40:18:26:3d:08:61:c8:c1:c7:8e:a3:8c:55:32:c8:d4:
c5:2b:65:04:30:63:59:7c:82:f0:55:ba:45:3b:1b:24:a9:59:
4c:9a:6d:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 16:41:47 2025 by rpki-client