Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ff/d8c58d-8d24-4280-91fd-48b1664d40d5/1/N9J_wkRD_N1LG2XPyAeMShQon54.mft
File: N9J_wkRD_N1LG2XPyAeMShQon54.mft (raw, json)
Hash identifier: o0we60UjEeKayjhljK+hZc5QX0XwpBYlbtvKTEAoelI=
Subject key identifier: 1D:A0:D3:6A:0E:6E:99:F4:2E:5D:8F:FE:B8:B7:C1:35:5A:2B:FC:92
Authority key identifier: 37:D2:7F:C2:44:43:FC:DD:4B:1B:65:CF:C8:07:8C:4A:14:28:9F:9E
Certificate issuer: /CN=37d27fc24443fcdd4b1b65cfc8078c4a14289f9e
Certificate serial: 0197481E259FFDD148FACC302D670EE6EEEA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/N9J_wkRD_N1LG2XPyAeMShQon54.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ff/d8c58d-8d24-4280-91fd-48b1664d40d5/1/N9J_wkRD_N1LG2XPyAeMShQon54.mft
Manifest number: 157D
Signing time: Sat 07 Jun 2025 02:00:24 +0000
Manifest this update: Sat 07 Jun 2025 02:00:24 +0000
Manifest next update: Sun 08 Jun 2025 02:00:24 +0000
Files and hashes: 1: N9J_wkRD_N1LG2XPyAeMShQon54.crl (hash: QB/D1Am8q4rdRr5PlGOuco8RHR40bLAUTI8SkjBWYTE=)
2: TLZrPYGbv3OSz3l-n9m1uFTtYyY.roa (hash: BAfT0SDdeatk44A0MoM3KqLiELOkYEeVNpqrfHgFPvo=)
3: fTuGHUDbLXIf1K1JGZkDmgp4h30.roa (hash: CE5/seUejdLKBZqDs568ZVcYXPKEXW1OP4zxVz04Gmo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ff/d8c58d-8d24-4280-91fd-48b1664d40d5/1/N9J_wkRD_N1LG2XPyAeMShQon54.crl
rsync://rpki.ripe.net/repository/DEFAULT/ff/d8c58d-8d24-4280-91fd-48b1664d40d5/1/N9J_wkRD_N1LG2XPyAeMShQon54.mft
rsync://rpki.ripe.net/repository/DEFAULT/N9J_wkRD_N1LG2XPyAeMShQon54.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 02:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:48:1e:25:9f:fd:d1:48:fa:cc:30:2d:67:0e:e6:ee:ea
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=37d27fc24443fcdd4b1b65cfc8078c4a14289f9e
Validity
Not Before: Jun 7 02:00:24 2025 GMT
Not After : Jun 8 02:00:24 2025 GMT
Subject: CN=1da0d36a0e6e99f42e5d8ffeb8b7c1355a2bfc92
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:e8:f6:a2:ab:8d:7f:5a:7f:8d:b5:8e:4d:89:
3f:b5:da:02:b4:63:f2:c5:cb:24:c9:84:e1:78:2f:
c7:9e:ae:dd:0c:d3:72:4b:29:c4:e6:24:b1:0d:cf:
8a:42:7a:6d:c0:29:db:91:31:f0:44:37:fd:35:81:
fc:58:4a:80:04:93:a7:f2:2b:ad:4c:c1:9b:08:1f:
12:bc:76:80:37:42:f9:89:f5:7f:84:b8:60:dc:2b:
9d:f5:20:c2:2d:c9:d5:1e:a3:1a:ca:22:b4:92:d4:
15:f1:5b:ff:d8:33:6b:a8:02:03:20:73:1f:40:c5:
d7:58:19:a3:40:b1:a5:33:10:b2:30:46:7e:3f:c4:
b1:de:fa:1a:79:e2:90:2c:5b:d6:8c:04:67:a2:b4:
0f:44:83:7d:cd:f5:fc:fc:f0:1f:fe:63:72:d5:bd:
fc:24:61:0e:94:fe:f2:33:63:b8:66:3a:15:fd:85:
e5:4e:33:52:ba:59:be:ca:7b:cd:72:07:52:8a:22:
77:f4:32:2c:6a:97:af:b9:0b:18:04:b5:46:98:a7:
22:ae:f6:09:c5:2a:3d:4a:97:29:44:76:c0:e1:59:
02:3a:2e:56:63:08:67:c1:c6:d8:3f:d0:56:40:1a:
6d:6e:f4:82:bc:61:bf:bf:7e:a2:94:d5:c0:4f:67:
a2:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:A0:D3:6A:0E:6E:99:F4:2E:5D:8F:FE:B8:B7:C1:35:5A:2B:FC:92
X509v3 Authority Key Identifier:
keyid:37:D2:7F:C2:44:43:FC:DD:4B:1B:65:CF:C8:07:8C:4A:14:28:9F:9E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/N9J_wkRD_N1LG2XPyAeMShQon54.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/d8c58d-8d24-4280-91fd-48b1664d40d5/1/N9J_wkRD_N1LG2XPyAeMShQon54.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/d8c58d-8d24-4280-91fd-48b1664d40d5/1/N9J_wkRD_N1LG2XPyAeMShQon54.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
79:2e:a3:3d:6a:16:58:4f:96:25:b4:4d:92:d9:93:46:43:b8:
b5:c0:5f:f2:dc:d9:f3:d1:25:61:21:f7:16:75:69:d5:e5:ff:
f5:7a:3c:10:01:0a:ca:65:96:94:e9:4b:02:5c:17:cc:4c:f7:
30:de:10:76:42:9f:27:da:da:0a:46:ea:90:ca:64:8d:ff:a0:
44:b4:11:d8:68:bd:9d:6a:92:78:20:56:5b:bb:6c:86:c8:3e:
9c:2c:7b:68:49:9c:c7:4d:20:7b:0f:4c:b8:70:84:96:9b:b6:
61:7e:70:69:bb:b3:a7:32:55:c6:fb:d5:71:7c:5c:0f:3b:d7:
94:31:9b:cc:37:42:61:96:49:7e:27:3f:45:72:5d:e2:b4:1a:
57:4a:14:f2:96:7b:0a:1e:26:c7:d3:98:35:7a:e8:ac:cf:29:
97:0c:84:bf:a3:58:07:f4:91:ce:95:3f:6c:f8:f7:d2:78:3e:
84:bc:02:86:e0:1b:bd:e8:91:a1:df:44:2e:c3:5b:20:7e:64:
9b:e7:e1:b3:19:2c:03:10:2f:ad:ce:55:77:b6:f5:5a:a4:2a:
27:04:87:39:ae:5c:94:07:7a:82:9a:8a:94:70:24:88:a1:fe:
a0:cb:84:39:88:be:91:21:5d:ed:50:a5:3d:20:23:ce:d4:14:
d7:4a:d5:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 10:46:10 2025 by rpki-client