Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/dc76ff-2b35-42be-ab56-5df2de08b695/1/N9Zwai4nDLSGu0ckNGPMu_n01co.mft
File: N9Zwai4nDLSGu0ckNGPMu_n01co.mft (raw, json)
Hash identifier: LzK3k3ogYnIWdZlHk/Sa0Mn4of7cAGmS7i74hesykHY=
Subject key identifier: 9D:16:CF:0D:44:AE:BC:99:72:3F:AA:BB:4D:31:48:B8:6C:D2:D3:73
Authority key identifier: 37:D6:70:6A:2E:27:0C:B4:86:BB:47:24:34:63:CC:BB:F9:F4:D5:CA
Certificate issuer: /CN=37d6706a2e270cb486bb47243463ccbbf9f4d5ca
Certificate serial: 0197597FB93A59AAB2E4D407844048A5A962
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/N9Zwai4nDLSGu0ckNGPMu_n01co.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f6/dc76ff-2b35-42be-ab56-5df2de08b695/1/N9Zwai4nDLSGu0ckNGPMu_n01co.mft
Manifest number: 1289
Signing time: Tue 10 Jun 2025 11:00:32 +0000
Manifest this update: Tue 10 Jun 2025 11:00:32 +0000
Manifest next update: Wed 11 Jun 2025 11:00:32 +0000
Files and hashes: 1: 7YrGIJ8Lq47CmtHh_aA30VmkPjo.roa (hash: hoLOmqh1vosQ/NxuWEBoizkiy56HJ0MD/vugBLaASkY=)
2: N9Zwai4nDLSGu0ckNGPMu_n01co.crl (hash: VGhpmRZOkYYBnUAnAQfk94cMuaKHeOYVspRlO2ag9ho=)
3: bWi2Mkf_arohbIgqpZEaCaewlho.roa (hash: o4YIfYScSNSPxx9rfmbXoBu7Bh9velBEqxyrfd2MDmI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f6/dc76ff-2b35-42be-ab56-5df2de08b695/1/N9Zwai4nDLSGu0ckNGPMu_n01co.crl
rsync://rpki.ripe.net/repository/DEFAULT/f6/dc76ff-2b35-42be-ab56-5df2de08b695/1/N9Zwai4nDLSGu0ckNGPMu_n01co.mft
rsync://rpki.ripe.net/repository/DEFAULT/N9Zwai4nDLSGu0ckNGPMu_n01co.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 11 Jun 2025 09:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:59:7f:b9:3a:59:aa:b2:e4:d4:07:84:40:48:a5:a9:62
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=37d6706a2e270cb486bb47243463ccbbf9f4d5ca
Validity
Not Before: Jun 10 11:00:32 2025 GMT
Not After : Jun 11 11:00:32 2025 GMT
Subject: CN=9d16cf0d44aebc99723faabb4d3148b86cd2d373
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:d7:66:52:fc:3d:80:cb:3b:8e:a6:fb:81:6b:
1b:0f:5c:6c:40:a0:77:dc:d1:f8:db:2d:45:9e:47:
24:2e:95:4e:ab:d1:3d:e7:04:0c:eb:0f:3e:6f:1c:
06:8e:bc:f6:d9:67:56:26:b2:96:5b:fd:23:d2:2c:
cd:71:f6:99:44:3c:bb:da:ef:62:07:42:85:bc:bd:
f9:96:20:ce:ea:af:bf:36:3f:a5:1a:b0:ac:fb:8d:
94:a0:3d:ba:57:4d:57:b2:db:d5:a1:34:e7:93:3b:
33:b7:a9:a6:ba:c9:84:f8:fa:07:1c:36:69:22:05:
43:d8:1e:4e:61:81:f8:13:ec:4f:9f:7f:ac:50:d7:
11:b5:77:c0:6b:04:78:7e:9d:57:4f:0c:61:83:26:
52:0f:83:6f:c5:be:1f:d5:8c:0c:0f:d7:dd:d0:3f:
cc:aa:03:d5:1f:d8:8c:e4:36:3b:a5:09:9b:15:eb:
10:4d:8d:c6:55:1d:7e:87:99:8e:6e:a0:2e:45:be:
94:da:9b:9a:d1:de:5c:80:3a:77:c7:ea:c9:9c:dc:
07:c3:22:56:e7:2d:cd:e2:89:89:e0:95:2f:54:5d:
cc:4c:1c:aa:28:5e:3f:11:b6:8c:64:63:8b:82:91:
92:e2:cb:12:f5:10:12:2c:06:29:9f:0c:97:3d:f0:
ee:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:16:CF:0D:44:AE:BC:99:72:3F:AA:BB:4D:31:48:B8:6C:D2:D3:73
X509v3 Authority Key Identifier:
keyid:37:D6:70:6A:2E:27:0C:B4:86:BB:47:24:34:63:CC:BB:F9:F4:D5:CA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/N9Zwai4nDLSGu0ckNGPMu_n01co.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/dc76ff-2b35-42be-ab56-5df2de08b695/1/N9Zwai4nDLSGu0ckNGPMu_n01co.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/dc76ff-2b35-42be-ab56-5df2de08b695/1/N9Zwai4nDLSGu0ckNGPMu_n01co.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
74:8f:84:1a:1c:d1:9e:78:57:55:95:07:dc:20:49:31:5f:96:
6c:dc:70:08:1b:66:03:25:d1:5b:d2:91:53:0b:5e:5e:14:41:
c7:f4:9a:33:ee:de:4b:99:f9:24:97:6c:0b:7c:50:c4:39:2d:
35:79:93:92:e3:97:24:db:0b:04:04:a5:b7:cb:28:76:ca:a6:
ae:6e:ab:af:ee:15:fc:dc:34:a4:46:99:2a:9a:17:23:53:a6:
41:8b:14:f0:f5:53:8d:4d:91:d1:0a:08:97:cb:ea:1c:5e:d5:
71:48:b0:b6:ff:65:3a:e0:9b:77:d3:d7:60:5a:4e:dc:24:9c:
4d:a3:bf:a1:e9:56:d8:b9:c6:95:17:bb:57:19:41:2c:57:b7:
92:ac:2e:1a:b1:d0:4d:b9:6e:41:ae:9e:31:f3:d7:1a:d9:9d:
67:91:47:21:2e:75:bf:22:f0:3e:c5:a5:5b:7d:65:48:9f:f9:
83:a2:0c:4e:b2:2c:15:00:16:42:1a:6c:f4:d3:2e:5f:c7:76:
1d:9a:fe:9c:62:83:67:0f:62:04:d6:b0:bf:36:52:f7:09:24:
4e:76:49:00:47:36:de:e4:cb:a8:cc:f6:1f:78:d7:0c:d8:d3:
ee:21:15:59:53:49:84:f7:35:f5:a5:d5:cc:49:c7:76:32:be:
a9:4d:c0:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 10 15:55:11 2025 by rpki-client