Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6f/5d6ebd-a8ee-474c-b71a-a642cc85bc71/1/niN_MrrhSoH9on6ylGDDoO2jQkA.mft
File: niN_MrrhSoH9on6ylGDDoO2jQkA.mft (raw, json)
Hash identifier: Zaf+TG1XFWnRJvIFcwk9GJHFPcvQhe9pqSxR8eZpQwE=
Subject key identifier: F5:64:D5:20:03:5B:CD:8E:BB:C1:2A:40:66:D9:3C:87:FF:9A:90:16
Authority key identifier: 9E:23:7F:32:BA:E1:4A:81:FD:A2:7E:B2:94:60:C3:A0:ED:A3:42:40
Certificate issuer: /CN=9e237f32bae14a81fda27eb29460c3a0eda34240
Certificate serial: 019768BBB65ABB602CD4F5AC7690924F0866
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/niN_MrrhSoH9on6ylGDDoO2jQkA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6f/5d6ebd-a8ee-474c-b71a-a642cc85bc71/1/niN_MrrhSoH9on6ylGDDoO2jQkA.mft
Manifest number: 0D93
Signing time: Fri 13 Jun 2025 10:00:21 +0000
Manifest this update: Fri 13 Jun 2025 10:00:21 +0000
Manifest next update: Sat 14 Jun 2025 10:00:21 +0000
Files and hashes: 1: duyGpoRiUSXpX71VT4XYnZHmGlA.roa (hash: BUaqTN98K6qCPpPRz7Abj2KUlyE692OgtKSmoKCDJkM=)
2: niN_MrrhSoH9on6ylGDDoO2jQkA.crl (hash: QIwygogE8379x/eeAdGQUmqysX/4GlmCtI550IFYu8M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6f/5d6ebd-a8ee-474c-b71a-a642cc85bc71/1/niN_MrrhSoH9on6ylGDDoO2jQkA.crl
rsync://rpki.ripe.net/repository/DEFAULT/6f/5d6ebd-a8ee-474c-b71a-a642cc85bc71/1/niN_MrrhSoH9on6ylGDDoO2jQkA.mft
rsync://rpki.ripe.net/repository/DEFAULT/niN_MrrhSoH9on6ylGDDoO2jQkA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 14 Jun 2025 10:00:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:68:bb:b6:5a:bb:60:2c:d4:f5:ac:76:90:92:4f:08:66
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9e237f32bae14a81fda27eb29460c3a0eda34240
Validity
Not Before: Jun 13 10:00:21 2025 GMT
Not After : Jun 14 10:00:21 2025 GMT
Subject: CN=f564d520035bcd8ebbc12a4066d93c87ff9a9016
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:7c:e7:f7:1e:8d:18:e8:09:65:fe:f6:35:d5:
77:e1:ab:b0:c8:91:7d:45:49:c8:bc:91:b5:5d:6a:
8d:09:fc:fd:3d:df:27:26:73:05:0e:01:fa:64:f8:
63:43:5c:30:c7:c0:3d:b5:b5:e3:f5:31:57:f6:5b:
a4:37:f4:ac:60:5e:35:5d:54:9c:fe:a5:bd:71:5d:
43:a6:d7:2b:70:35:1d:9d:de:34:59:16:e0:b9:c0:
b2:49:a9:11:44:81:fd:78:f9:33:c3:75:c7:bc:f8:
88:02:11:fd:48:4f:42:85:3d:d8:6a:70:b9:f5:5e:
fa:e9:d9:22:7a:58:ac:8f:03:6d:d0:e5:02:38:cc:
51:b3:24:bc:52:3d:77:f7:19:4c:f6:04:93:61:82:
9c:0f:09:92:ec:06:d0:fb:f2:8e:d6:7b:87:a3:dd:
ca:f0:e7:f0:61:2e:0e:91:2c:90:d1:7b:fd:d5:7f:
43:11:d4:d8:0b:a0:7c:98:2e:fe:e2:af:f9:eb:88:
d6:ad:c9:21:a6:06:88:e3:06:79:1d:a3:a1:de:7a:
9c:25:b9:2e:4a:a1:c3:02:8f:ea:4b:86:a1:6f:ed:
26:0b:ba:98:a2:c9:28:23:8b:0d:95:f8:d1:63:2c:
2d:f7:78:de:07:0a:e6:ab:60:88:61:4b:62:d0:56:
a4:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:64:D5:20:03:5B:CD:8E:BB:C1:2A:40:66:D9:3C:87:FF:9A:90:16
X509v3 Authority Key Identifier:
keyid:9E:23:7F:32:BA:E1:4A:81:FD:A2:7E:B2:94:60:C3:A0:ED:A3:42:40
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/niN_MrrhSoH9on6ylGDDoO2jQkA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/5d6ebd-a8ee-474c-b71a-a642cc85bc71/1/niN_MrrhSoH9on6ylGDDoO2jQkA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/5d6ebd-a8ee-474c-b71a-a642cc85bc71/1/niN_MrrhSoH9on6ylGDDoO2jQkA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
96:b5:22:cc:8b:f8:4c:14:14:d1:8f:4b:1b:ec:09:2b:20:c8:
9f:1a:c6:a7:4a:9c:8a:8d:e4:f1:01:5f:e8:98:72:78:74:e9:
17:b8:8d:65:c0:a6:3b:08:02:46:58:9c:f0:03:58:b2:98:8b:
75:d5:07:8c:0f:17:d9:1a:99:cf:66:12:2c:33:aa:1b:59:47:
72:07:97:62:d9:37:59:91:1e:4e:84:2f:6c:5d:74:06:37:ae:
9f:52:09:14:35:54:43:a2:c5:5e:87:d5:68:90:b8:02:cc:0d:
d5:b2:23:8e:c6:db:42:e6:96:51:f0:e2:49:b2:7f:6e:da:ed:
8f:a8:e5:1a:ff:34:73:23:d5:a6:48:1e:25:09:11:23:64:eb:
6f:bf:41:38:3e:23:c9:ea:3f:11:f8:32:5d:f8:c3:df:df:49:
05:0c:90:71:f2:5e:25:ba:4d:bf:b6:4d:6b:d3:57:87:4d:57:
78:58:bb:f6:ca:de:ba:e7:2b:02:40:53:04:57:22:c5:5a:11:
6f:93:49:8f:c6:c9:e7:f0:c9:db:ac:ff:66:f0:df:d0:82:59:
12:e1:07:99:70:09:89:ad:87:f0:9c:d6:84:15:16:50:98:10:
8e:20:79:b5:ad:bf:93:a7:67:07:4a:8c:95:69:a7:2c:46:e0:
ee:47:66:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 13 19:09:59 2025 by rpki-client