Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d6/caf466-6e6c-4009-a55a-5fa9da03f570/1/n78C8E7EMIy1tgeL0GoXywDYM2k.mft
File: n78C8E7EMIy1tgeL0GoXywDYM2k.mft (raw, json)
Hash identifier: 7szf/mc2XEvwGH+aQVVQh74my8ChIABMnQj30kFBsUg=
Subject key identifier: 9D:74:85:C7:64:52:FA:A1:C4:C9:FC:04:A0:0D:7F:1F:BE:18:44:C1
Authority key identifier: 9F:BF:02:F0:4E:C4:30:8C:B5:B6:07:8B:D0:6A:17:CB:00:D8:33:69
Certificate issuer: /CN=9fbf02f04ec4308cb5b6078bd06a17cb00d83369
Certificate serial: 0198819DD970E3E1E3CF398E80D6972CDBDD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/n78C8E7EMIy1tgeL0GoXywDYM2k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d6/caf466-6e6c-4009-a55a-5fa9da03f570/1/n78C8E7EMIy1tgeL0GoXywDYM2k.mft
Manifest number: AD
Signing time: Wed 06 Aug 2025 23:01:02 +0000
Manifest this update: Wed 06 Aug 2025 23:01:02 +0000
Manifest next update: Thu 07 Aug 2025 23:01:02 +0000
Files and hashes: 1: lB6tM26XvybAjC_i9gyukbY90Gs.roa (hash: QCUB0nbnI7vfbQcfu12QO8f17dboTNQ2oQD6KvaVOOo=)
2: n78C8E7EMIy1tgeL0GoXywDYM2k.crl (hash: OAHT9O1bMRJiF+DuxNmcUwUQZ+KWos6AOKuzu0izfGk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d6/caf466-6e6c-4009-a55a-5fa9da03f570/1/n78C8E7EMIy1tgeL0GoXywDYM2k.crl
rsync://rpki.ripe.net/repository/DEFAULT/d6/caf466-6e6c-4009-a55a-5fa9da03f570/1/n78C8E7EMIy1tgeL0GoXywDYM2k.mft
rsync://rpki.ripe.net/repository/DEFAULT/n78C8E7EMIy1tgeL0GoXywDYM2k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 07 Aug 2025 20:46:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:81:9d:d9:70:e3:e1:e3:cf:39:8e:80:d6:97:2c:db:dd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9fbf02f04ec4308cb5b6078bd06a17cb00d83369
Validity
Not Before: Aug 6 23:01:02 2025 GMT
Not After : Aug 7 23:01:02 2025 GMT
Subject: CN=9d7485c76452faa1c4c9fc04a00d7f1fbe1844c1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:a0:61:b0:e1:a2:09:52:f7:1e:41:7b:7a:77:
13:e7:b6:44:2b:0d:4a:6d:e9:94:61:30:64:92:df:
75:bc:f8:49:d9:27:6d:55:05:ed:18:94:ff:33:d6:
0d:fd:dd:10:56:17:ac:df:23:88:a7:dc:32:3f:6b:
5a:cd:ac:b3:a1:1b:b0:9b:5f:2d:e8:a4:ea:6a:30:
4a:8e:ee:02:f0:d0:82:4b:d1:18:a7:1c:70:c9:65:
c5:fb:0a:8b:b0:89:20:58:75:c8:36:77:05:41:3c:
eb:49:c1:2a:5a:3d:fd:60:06:af:23:3d:cf:4a:b1:
ee:1a:6b:20:87:df:7a:87:41:f5:92:78:15:b1:d9:
0d:70:9f:86:9c:de:b9:0c:99:7d:96:27:bf:b9:5c:
13:94:64:25:47:c8:fa:f7:59:c3:f7:0c:24:70:73:
12:8c:dd:60:e1:fb:f8:17:ee:ca:d5:80:85:d1:a3:
49:70:50:33:cb:53:27:47:ae:65:c1:34:df:b6:cd:
ca:2d:51:60:11:61:9f:64:0a:0b:e4:23:09:29:b9:
b0:ff:b3:1a:c6:28:62:a1:1d:9f:2d:22:4d:ab:5a:
40:0f:3f:ec:d7:ce:b2:f2:9d:c0:e9:a7:d0:9e:b2:
1a:87:e9:41:3d:69:e3:09:31:f5:6c:b2:9c:d6:3d:
62:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:74:85:C7:64:52:FA:A1:C4:C9:FC:04:A0:0D:7F:1F:BE:18:44:C1
X509v3 Authority Key Identifier:
keyid:9F:BF:02:F0:4E:C4:30:8C:B5:B6:07:8B:D0:6A:17:CB:00:D8:33:69
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/n78C8E7EMIy1tgeL0GoXywDYM2k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/caf466-6e6c-4009-a55a-5fa9da03f570/1/n78C8E7EMIy1tgeL0GoXywDYM2k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/caf466-6e6c-4009-a55a-5fa9da03f570/1/n78C8E7EMIy1tgeL0GoXywDYM2k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
69:e6:b2:d9:9e:50:ed:35:a5:d7:56:95:79:9c:e0:3f:5e:97:
2c:8f:07:f7:29:81:34:3c:16:2c:7d:ca:bb:02:a4:50:2a:72:
34:44:80:ac:f4:ad:6c:46:41:3f:e7:ee:ab:f4:cd:33:9a:76:
63:3f:97:ce:c4:13:48:6c:46:ae:59:1c:74:22:a2:3e:80:d0:
d3:66:56:e6:d4:43:7f:a1:d3:82:40:83:fc:08:cf:e1:93:df:
7c:4f:62:74:c2:85:a0:65:4b:37:97:fb:a8:7f:e4:f0:6e:a0:
ad:3c:07:79:6a:a3:d3:a7:b7:0e:79:6b:a7:34:41:14:ab:bf:
bc:1a:49:51:ed:fa:a0:80:18:ed:f2:88:f8:ff:54:fb:c8:f4:
d9:f9:ba:ba:4b:77:90:c7:de:36:76:3e:34:67:16:fe:f9:c3:
00:5b:24:b1:e9:ef:74:71:49:ec:02:f8:72:60:17:3d:cc:41:
dd:d8:6c:d4:b8:e5:5e:69:46:b1:35:4b:40:c8:b7:1c:de:37:
fb:aa:9c:98:d1:e3:db:8f:35:0b:8c:89:c9:67:89:2e:97:13:
84:44:4b:ab:a9:a9:e6:36:2d:f0:25:80:f6:31:1a:41:7f:f3:
fc:b7:0a:84:85:cd:24:31:c3:fd:ce:25:a9:1c:07:9a:2c:91:
1b:0f:5f:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 7 05:01:21 2025 by rpki-client