Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/dc76ff-2b35-42be-ab56-5df2de08b695/1/N9Zwai4nDLSGu0ckNGPMu_n01co.mft
File: N9Zwai4nDLSGu0ckNGPMu_n01co.mft (raw, json)
Hash identifier: kqV7bdzQaom4r96sEgV0ir9Df9Q10v+wqGqup7r++8A=
Subject key identifier: 2A:54:8C:5A:18:67:D0:EA:40:E9:A6:E4:F0:7C:DD:75:66:36:14:D1
Authority key identifier: 37:D6:70:6A:2E:27:0C:B4:86:BB:47:24:34:63:CC:BB:F9:F4:D5:CA
Certificate issuer: /CN=37d6706a2e270cb486bb47243463ccbbf9f4d5ca
Certificate serial: 01975D5D0EBC2C45CD410303C29E34BF31C4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/N9Zwai4nDLSGu0ckNGPMu_n01co.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f6/dc76ff-2b35-42be-ab56-5df2de08b695/1/N9Zwai4nDLSGu0ckNGPMu_n01co.mft
Manifest number: 128B
Signing time: Wed 11 Jun 2025 05:01:09 +0000
Manifest this update: Wed 11 Jun 2025 05:01:09 +0000
Manifest next update: Thu 12 Jun 2025 05:01:09 +0000
Files and hashes: 1: 7YrGIJ8Lq47CmtHh_aA30VmkPjo.roa (hash: hoLOmqh1vosQ/NxuWEBoizkiy56HJ0MD/vugBLaASkY=)
2: N9Zwai4nDLSGu0ckNGPMu_n01co.crl (hash: U+EMgby52LYHSFoL1H8qrHlxXl2Uj6URvlqngYa54NM=)
3: bWi2Mkf_arohbIgqpZEaCaewlho.roa (hash: o4YIfYScSNSPxx9rfmbXoBu7Bh9velBEqxyrfd2MDmI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f6/dc76ff-2b35-42be-ab56-5df2de08b695/1/N9Zwai4nDLSGu0ckNGPMu_n01co.crl
rsync://rpki.ripe.net/repository/DEFAULT/f6/dc76ff-2b35-42be-ab56-5df2de08b695/1/N9Zwai4nDLSGu0ckNGPMu_n01co.mft
rsync://rpki.ripe.net/repository/DEFAULT/N9Zwai4nDLSGu0ckNGPMu_n01co.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 12 Jun 2025 05:01:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:5d:5d:0e:bc:2c:45:cd:41:03:03:c2:9e:34:bf:31:c4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=37d6706a2e270cb486bb47243463ccbbf9f4d5ca
Validity
Not Before: Jun 11 05:01:09 2025 GMT
Not After : Jun 12 05:01:09 2025 GMT
Subject: CN=2a548c5a1867d0ea40e9a6e4f07cdd75663614d1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:9a:33:26:59:48:ae:0b:de:d5:93:dc:2d:34:
af:62:78:23:a4:af:33:71:43:d6:90:dd:62:85:4c:
44:4d:be:3a:ff:26:59:4c:cf:ec:37:23:12:a1:d8:
dd:05:b4:ff:07:8d:76:f0:59:7d:d3:ef:9d:63:c9:
5e:a4:b7:89:44:cd:26:54:68:80:10:23:5e:a4:d0:
1a:ea:b9:a8:fc:3e:e1:af:f7:08:3d:dc:88:ed:d2:
6c:66:4e:3c:cf:d2:09:a9:52:0e:94:67:30:3e:34:
b9:fa:e6:54:f0:1a:17:0c:68:93:48:4d:d1:5e:77:
3b:c6:3d:07:c2:c3:69:ce:c3:21:fd:49:97:de:61:
4f:50:27:53:7a:99:2e:3b:9e:5d:ca:b9:30:b7:4d:
ef:f2:99:86:2e:77:6a:e8:ed:1d:70:8c:d1:01:3d:
d8:15:2c:31:8f:81:01:36:8c:cd:91:1f:84:4f:bc:
fa:d8:d6:33:70:ab:d3:ed:4e:ad:46:84:26:61:7b:
90:82:e2:58:1f:91:f9:73:78:70:91:28:b9:39:74:
f5:07:10:a3:55:e3:ba:12:67:e0:ef:e9:35:88:91:
65:9e:75:ff:1f:16:0d:44:6b:17:e5:74:21:c7:a6:
50:1b:32:a7:03:47:86:04:ab:5f:7d:68:3c:38:6d:
ba:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:54:8C:5A:18:67:D0:EA:40:E9:A6:E4:F0:7C:DD:75:66:36:14:D1
X509v3 Authority Key Identifier:
keyid:37:D6:70:6A:2E:27:0C:B4:86:BB:47:24:34:63:CC:BB:F9:F4:D5:CA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/N9Zwai4nDLSGu0ckNGPMu_n01co.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/dc76ff-2b35-42be-ab56-5df2de08b695/1/N9Zwai4nDLSGu0ckNGPMu_n01co.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/dc76ff-2b35-42be-ab56-5df2de08b695/1/N9Zwai4nDLSGu0ckNGPMu_n01co.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
35:50:64:51:75:2f:44:00:dc:64:8d:c9:2f:15:90:d6:94:ab:
c1:74:d6:a5:dd:13:1e:ae:da:7b:9f:b3:c2:ca:44:66:5c:50:
e6:48:bc:11:4c:5f:21:aa:5d:e4:ab:3f:65:e6:f7:76:26:9b:
b5:e7:ff:d7:96:3c:54:4e:fa:45:6f:0d:59:1b:dc:95:30:66:
03:73:40:10:ec:41:74:df:e2:ca:e1:f5:4a:a1:bb:da:e0:d3:
2a:0e:11:b5:2d:7d:2a:8a:8e:b9:c0:0c:04:ab:bf:57:09:7e:
fc:33:6f:3b:f4:63:3d:1d:e1:96:90:88:e3:fe:c5:9b:ef:ce:
73:89:4c:bd:d7:a1:92:f9:92:c8:56:3a:2e:6b:e6:e5:84:a2:
f1:c8:3a:10:fe:ca:67:52:bf:eb:99:7a:5c:b6:48:0c:c7:ab:
40:02:83:7b:0d:3b:bc:3b:6e:13:bc:d9:75:c9:22:96:49:a2:
a2:26:05:b1:6e:1d:89:9f:6b:d6:98:4c:ff:91:1b:93:ef:4a:
81:5f:5d:5c:6a:a6:25:61:db:9f:69:b5:63:6f:37:48:ea:50:
3d:55:8a:8d:0e:52:8d:f8:76:ba:c3:a8:c1:e1:5a:01:a3:c0:
27:89:1a:5b:c8:59:a5:b7:c7:4c:8b:1f:e5:e1:92:68:eb:90:
78:a7:bf:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 11 14:41:44 2025 by rpki-client