Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/4a7901-85d8-43ea-adb2-799910c1545f/1/n11bf3kmRP9wcqQ6zJyGUZS-Stw.mft
File: n11bf3kmRP9wcqQ6zJyGUZS-Stw.mft (raw, json)
Hash identifier: cj8xJMn66WFeezkKXCHQ5iNhGYwemZ26yctLzfLWWbY=
Subject key identifier: D5:AD:98:79:0E:EF:50:E9:01:01:3C:FF:59:20:EC:FA:D3:50:C0:F4
Authority key identifier: 9F:5D:5B:7F:79:26:44:FF:70:72:A4:3A:CC:9C:86:51:94:BE:4A:DC
Certificate issuer: /CN=9f5d5b7f792644ff7072a43acc9c865194be4adc
Certificate serial: 019781A04406C143D4A05E7150FE9A412A8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/n11bf3kmRP9wcqQ6zJyGUZS-Stw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fa/4a7901-85d8-43ea-adb2-799910c1545f/1/n11bf3kmRP9wcqQ6zJyGUZS-Stw.mft
Manifest number: 159B
Signing time: Wed 18 Jun 2025 06:00:53 +0000
Manifest this update: Wed 18 Jun 2025 06:00:53 +0000
Manifest next update: Thu 19 Jun 2025 06:00:53 +0000
Files and hashes: 1: 1J8y1mQKbllZPdpNvAX7bscmWlI.roa (hash: jhx/+OmQQVqiCuyQX4gR49r4SoPl20ExxxakSlp8D6M=)
2: WBEZkdOtzqubY4jYGPTdt89fcs0.roa (hash: YzzD8M9BLKgLshmZ4kyXFcT1vvqCniPNKBqVVUae9sY=)
3: n11bf3kmRP9wcqQ6zJyGUZS-Stw.crl (hash: ZajHYpMcJZI3A9DkXH23C6KdJA2UfKuUK8yqQNdeOj0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fa/4a7901-85d8-43ea-adb2-799910c1545f/1/n11bf3kmRP9wcqQ6zJyGUZS-Stw.crl
rsync://rpki.ripe.net/repository/DEFAULT/fa/4a7901-85d8-43ea-adb2-799910c1545f/1/n11bf3kmRP9wcqQ6zJyGUZS-Stw.mft
rsync://rpki.ripe.net/repository/DEFAULT/n11bf3kmRP9wcqQ6zJyGUZS-Stw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 19 Jun 2025 06:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:81:a0:44:06:c1:43:d4:a0:5e:71:50:fe:9a:41:2a:8c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9f5d5b7f792644ff7072a43acc9c865194be4adc
Validity
Not Before: Jun 18 06:00:53 2025 GMT
Not After : Jun 19 06:00:53 2025 GMT
Subject: CN=d5ad98790eef50e901013cff5920ecfad350c0f4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:7c:8f:c2:da:29:6b:cd:83:fc:c0:ea:35:3c:
6b:76:38:63:47:3a:53:6c:af:36:5d:ce:e1:75:40:
32:48:3f:b1:7e:dc:0f:25:b0:14:f5:64:71:8c:3a:
9b:96:a2:56:6e:2e:01:7d:52:ca:da:0d:90:4d:fa:
67:97:f0:57:9a:5c:f3:79:18:88:27:7a:4a:37:18:
ad:fa:25:c4:6f:e3:b2:5e:e9:81:a9:af:9a:95:26:
63:72:cb:29:ca:fb:ae:0b:81:5e:e4:7f:cb:b7:07:
3d:d9:27:2f:d3:25:ee:b7:8b:b4:b3:c3:19:94:89:
4d:0e:a0:26:e6:88:9f:ec:a7:54:70:22:f1:d4:e6:
c4:11:78:4e:11:05:2d:44:b1:c3:6d:55:ad:37:41:
41:1d:21:f5:99:af:61:1e:3d:eb:cf:2f:f8:3a:49:
46:84:14:ee:55:75:8b:8a:de:29:0d:10:d8:87:0d:
0d:d2:5b:78:b6:0d:d5:24:6f:68:64:fd:d8:f5:47:
c3:41:a2:1c:77:65:eb:87:db:44:07:98:38:55:fc:
de:f1:0d:7e:fd:58:b3:20:b6:be:f6:12:1b:7c:c1:
c8:61:b9:a0:11:49:5e:58:1c:ce:0d:92:2a:12:d7:
6c:1f:d3:16:c5:9e:a4:6c:70:bc:6b:5d:9c:32:23:
22:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:AD:98:79:0E:EF:50:E9:01:01:3C:FF:59:20:EC:FA:D3:50:C0:F4
X509v3 Authority Key Identifier:
keyid:9F:5D:5B:7F:79:26:44:FF:70:72:A4:3A:CC:9C:86:51:94:BE:4A:DC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/n11bf3kmRP9wcqQ6zJyGUZS-Stw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/4a7901-85d8-43ea-adb2-799910c1545f/1/n11bf3kmRP9wcqQ6zJyGUZS-Stw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/4a7901-85d8-43ea-adb2-799910c1545f/1/n11bf3kmRP9wcqQ6zJyGUZS-Stw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
67:be:9e:9b:fc:38:50:e0:ee:a7:98:be:93:6f:3c:fa:cf:48:
95:56:8a:b1:29:1f:05:af:2c:8d:36:20:44:84:b7:b2:a9:b9:
68:b6:66:9c:77:b5:41:23:39:91:ea:75:ec:01:c9:6d:f9:95:
73:c9:0b:bf:4c:63:c5:a0:9e:8e:5f:fa:de:16:b8:2b:ed:b1:
49:92:11:b9:1f:2d:31:3c:10:c9:63:de:14:0c:3f:96:4c:55:
0e:79:c4:ce:cd:29:31:c6:50:c5:39:a3:80:81:69:be:f1:7e:
ad:55:5c:c2:d3:26:f4:41:27:90:87:e0:50:28:55:bb:55:68:
24:1e:87:13:83:fd:9b:5c:3b:2a:be:a3:73:68:c4:30:78:17:
0f:3e:e9:d5:96:94:5d:e4:8e:4f:50:d2:43:66:eb:87:7a:de:
91:f1:5a:ad:59:f2:73:57:17:e8:92:22:18:2f:6a:56:e1:16:
b5:22:2b:18:57:8d:56:e8:82:4c:c0:81:47:8b:79:b9:fe:dd:
8d:80:42:ba:28:4c:60:64:8f:fb:49:32:32:95:71:49:f7:2f:
be:57:aa:24:b7:76:33:e9:9d:52:46:ff:e4:d8:5d:26:77:1d:
9a:eb:17:2f:12:f2:0f:f1:2c:90:1f:46:d4:54:e8:98:d9:25:
bd:74:09:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 18 11:13:49 2025 by rpki-client