Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/127684-5afe-4f18-b95d-3072503d8607/1/n_M9TzrAqIeECihM3Bq-t91kLwE.mft
File: n_M9TzrAqIeECihM3Bq-t91kLwE.mft (raw, json)
Hash identifier: NbX4fD6haTYOdtTdvv3fFi5ydtYWOa/gWIa76JvPHi0=
Subject key identifier: D6:A6:08:CA:78:C2:F2:1B:67:71:9A:F1:66:40:92:30:0C:29:74:BC
Authority key identifier: 9F:F3:3D:4F:3A:C0:A8:87:84:0A:28:4C:DC:1A:BE:B7:DD:64:2F:01
Certificate issuer: /CN=9ff33d4f3ac0a887840a284cdc1abeb7dd642f01
Certificate serial: 01978847B95D6A144D3B66DB77CE497B19AE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/n_M9TzrAqIeECihM3Bq-t91kLwE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/127684-5afe-4f18-b95d-3072503d8607/1/n_M9TzrAqIeECihM3Bq-t91kLwE.mft
Manifest number: 0ED8
Signing time: Thu 19 Jun 2025 13:01:31 +0000
Manifest this update: Thu 19 Jun 2025 13:01:31 +0000
Manifest next update: Fri 20 Jun 2025 13:01:31 +0000
Files and hashes: 1: FVg-EXFcHktuG7QQnavEaXe-fnM.roa (hash: mi0+1itCdMO3yynnGJ5oIkWt7SrPDpOOMP9BVB9K+Jc=)
2: T3nKkG-dCBEn2EriUuJalbbWuME.roa (hash: NecAgRoxclxz3UKtAie4B0/FU5sK9TM4xXuPGjhm4Kc=)
3: n_M9TzrAqIeECihM3Bq-t91kLwE.crl (hash: 5e7FYZATj46Tw7L+sb6cMA8bX6hhuap7QW2xTMn6/DM=)
4: nl8-f4Y4T6rTsqYQijhuiNifL1Q.roa (hash: D8rqvsrK84p8WeU5jZAqKp61j1ey2NYKXftp+gwX6/8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/127684-5afe-4f18-b95d-3072503d8607/1/n_M9TzrAqIeECihM3Bq-t91kLwE.crl
rsync://rpki.ripe.net/repository/DEFAULT/5a/127684-5afe-4f18-b95d-3072503d8607/1/n_M9TzrAqIeECihM3Bq-t91kLwE.mft
rsync://rpki.ripe.net/repository/DEFAULT/n_M9TzrAqIeECihM3Bq-t91kLwE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 20 Jun 2025 10:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:88:47:b9:5d:6a:14:4d:3b:66:db:77:ce:49:7b:19:ae
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9ff33d4f3ac0a887840a284cdc1abeb7dd642f01
Validity
Not Before: Jun 19 13:01:31 2025 GMT
Not After : Jun 20 13:01:31 2025 GMT
Subject: CN=d6a608ca78c2f21b67719af1664092300c2974bc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:2a:44:27:12:55:29:00:fa:3f:5e:eb:6c:0e:
5e:ed:c2:14:bd:b7:42:8f:c5:cc:87:15:8e:79:d1:
08:61:d1:b3:28:39:85:1a:c3:e5:03:b2:92:77:fb:
f8:9d:de:2e:20:92:5a:09:8a:95:ca:e4:8c:63:0b:
6d:3f:32:f7:4e:08:59:23:e2:82:13:99:d1:d5:95:
e7:b2:ff:5a:80:1f:dc:8c:20:56:ae:89:e5:47:d3:
41:b8:60:af:07:01:19:df:4f:b7:26:8d:f6:a9:4c:
b5:31:20:0d:54:47:82:d3:77:f8:23:7c:b8:4b:43:
70:d0:18:40:26:32:df:28:d5:c3:d8:1a:53:6d:c0:
4c:47:8b:4f:ca:11:ad:7a:c1:50:5d:9e:28:d3:5a:
90:53:8c:79:50:d0:f4:53:95:9b:f2:c4:66:ea:85:
7a:71:57:2e:f4:05:fe:ab:ae:53:5a:86:b2:fc:f7:
db:2e:18:8f:da:b8:06:d3:87:ba:f9:74:d4:74:49:
cf:32:48:d5:cb:84:ce:b7:8c:be:52:f5:34:6e:b6:
03:70:60:75:1e:07:10:d9:cb:03:4c:7f:8c:dc:d9:
76:ef:ee:85:1d:15:29:b6:52:5a:f1:ae:3b:5e:4f:
93:0d:54:27:e6:fe:52:4c:62:7d:76:08:a0:d6:e3:
4b:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:A6:08:CA:78:C2:F2:1B:67:71:9A:F1:66:40:92:30:0C:29:74:BC
X509v3 Authority Key Identifier:
keyid:9F:F3:3D:4F:3A:C0:A8:87:84:0A:28:4C:DC:1A:BE:B7:DD:64:2F:01
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/n_M9TzrAqIeECihM3Bq-t91kLwE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/127684-5afe-4f18-b95d-3072503d8607/1/n_M9TzrAqIeECihM3Bq-t91kLwE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/127684-5afe-4f18-b95d-3072503d8607/1/n_M9TzrAqIeECihM3Bq-t91kLwE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
56:c2:07:9f:ac:5f:37:2a:80:5a:ab:b5:ba:11:e8:7b:67:a7:
df:2c:73:5d:5e:70:bb:71:c0:b4:44:14:89:82:88:77:64:76:
5f:5e:eb:2b:37:d2:08:8b:a2:28:c7:e3:94:4f:38:b7:bb:26:
39:05:3e:6b:ec:c6:6b:d6:88:d1:22:90:4f:f0:f7:a0:d2:df:
d8:57:4b:c4:b1:a9:76:3c:ad:9f:34:26:f3:8a:26:b9:a5:2a:
52:e1:ce:2f:74:46:99:2d:3f:95:a3:3b:52:b4:ca:86:33:f2:
58:1f:c2:8f:ed:d4:23:55:c5:a8:ad:51:ff:28:16:e6:93:05:
84:f3:c5:8f:7f:a8:0e:da:88:12:7e:72:23:73:14:5e:0a:b8:
82:5b:df:54:ad:13:ed:cc:71:a5:ca:ee:f5:a5:e5:d0:00:0b:
6a:e2:c0:a4:a8:ef:f4:35:1d:f0:02:70:17:db:9a:f4:7a:90:
43:76:1a:8a:60:62:0d:fc:40:a5:fa:b1:67:9e:51:36:4d:68:
4c:c5:a4:66:f3:13:e5:82:ea:78:3b:7b:9e:fa:3c:51:5d:78:
ff:80:00:8e:33:20:ca:ca:b3:a3:36:1b:37:4f:41:fe:a0:07:
10:9c:c7:83:a8:62:4a:80:4f:63:37:f8:de:29:aa:3a:27:fb:
57:b9:b8:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 19 15:09:06 2025 by rpki-client