Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/4a7901-85d8-43ea-adb2-799910c1545f/1/n11bf3kmRP9wcqQ6zJyGUZS-Stw.mft
File: n11bf3kmRP9wcqQ6zJyGUZS-Stw.mft (raw, json)
Hash identifier: dvAE8TrdoAk7JwboWrjmlqHURiwiTCHHJB8lghA4OYw=
Subject key identifier: 9A:CC:F8:4A:F8:88:2C:7D:7D:CE:30:29:DD:75:41:7F:AA:A9:83:40
Authority key identifier: 9F:5D:5B:7F:79:26:44:FF:70:72:A4:3A:CC:9C:86:51:94:BE:4A:DC
Certificate issuer: /CN=9f5d5b7f792644ff7072a43acc9c865194be4adc
Certificate serial: 019888445EE65E82AC17EB284CB16E8D5B30
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/n11bf3kmRP9wcqQ6zJyGUZS-Stw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fa/4a7901-85d8-43ea-adb2-799910c1545f/1/n11bf3kmRP9wcqQ6zJyGUZS-Stw.mft
Manifest number: 1623
Signing time: Fri 08 Aug 2025 06:00:38 +0000
Manifest this update: Fri 08 Aug 2025 06:00:38 +0000
Manifest next update: Sat 09 Aug 2025 06:00:38 +0000
Files and hashes: 1: 1J8y1mQKbllZPdpNvAX7bscmWlI.roa (hash: jhx/+OmQQVqiCuyQX4gR49r4SoPl20ExxxakSlp8D6M=)
2: WBEZkdOtzqubY4jYGPTdt89fcs0.roa (hash: YzzD8M9BLKgLshmZ4kyXFcT1vvqCniPNKBqVVUae9sY=)
3: n11bf3kmRP9wcqQ6zJyGUZS-Stw.crl (hash: paqgqBCG+67fO1eYJJD7VJjq9P2lh2g05ez1y/loEgc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fa/4a7901-85d8-43ea-adb2-799910c1545f/1/n11bf3kmRP9wcqQ6zJyGUZS-Stw.crl
rsync://rpki.ripe.net/repository/DEFAULT/fa/4a7901-85d8-43ea-adb2-799910c1545f/1/n11bf3kmRP9wcqQ6zJyGUZS-Stw.mft
rsync://rpki.ripe.net/repository/DEFAULT/n11bf3kmRP9wcqQ6zJyGUZS-Stw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 09 Aug 2025 06:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:88:44:5e:e6:5e:82:ac:17:eb:28:4c:b1:6e:8d:5b:30
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9f5d5b7f792644ff7072a43acc9c865194be4adc
Validity
Not Before: Aug 8 06:00:38 2025 GMT
Not After : Aug 9 06:00:38 2025 GMT
Subject: CN=9accf84af8882c7d7dce3029dd75417faaa98340
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:c7:04:06:93:9b:85:51:a2:99:fd:06:1f:94:
2a:6d:32:b5:5b:5a:56:c5:31:52:b4:11:0d:15:55:
21:42:fb:fa:0a:5c:59:6e:97:cd:5b:18:55:2b:d6:
07:26:da:c0:80:ea:77:e7:ec:c1:e0:bc:89:26:5b:
6b:17:f9:19:f7:4c:35:d0:de:4c:a8:07:01:d0:f4:
b0:48:b9:d9:aa:6a:44:78:32:18:1c:b2:a0:7f:6f:
f8:62:4d:0e:96:58:06:3d:74:48:dd:40:7e:d0:d3:
15:4e:f4:a0:89:e9:02:1f:95:28:fd:1e:d5:ec:94:
02:a8:fd:d6:e0:6d:e2:e4:66:1a:5f:3a:8d:30:b8:
73:c9:05:3d:6e:95:7d:eb:fb:00:2f:bf:58:6a:ba:
d7:a0:5d:80:5f:ac:66:f6:47:c4:3f:c3:73:81:cd:
fb:a0:a2:d2:18:98:ef:b4:35:51:e1:0f:57:85:bb:
0c:a4:a5:fe:e7:30:41:a2:33:3b:f4:b3:3e:75:7f:
04:0c:a5:5e:5d:80:22:14:97:be:50:5e:c9:0c:12:
07:19:9a:f9:98:09:f8:d2:5d:31:17:92:11:9a:9f:
17:e1:6d:56:44:71:0f:12:f9:7e:76:0e:cb:60:1f:
de:f6:fa:36:5b:0d:d5:f7:8b:c0:fd:aa:e1:00:db:
69:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:CC:F8:4A:F8:88:2C:7D:7D:CE:30:29:DD:75:41:7F:AA:A9:83:40
X509v3 Authority Key Identifier:
keyid:9F:5D:5B:7F:79:26:44:FF:70:72:A4:3A:CC:9C:86:51:94:BE:4A:DC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/n11bf3kmRP9wcqQ6zJyGUZS-Stw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/4a7901-85d8-43ea-adb2-799910c1545f/1/n11bf3kmRP9wcqQ6zJyGUZS-Stw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/4a7901-85d8-43ea-adb2-799910c1545f/1/n11bf3kmRP9wcqQ6zJyGUZS-Stw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
23:0b:dc:82:ae:80:cb:5a:c4:10:54:7c:0a:2e:d4:8c:8f:65:
b4:e9:4a:22:c5:e4:f1:b9:72:cc:7d:a5:c2:52:96:67:fa:36:
e3:65:b8:78:49:78:dc:93:35:67:a4:f2:1f:ef:b8:69:da:20:
5d:68:14:84:34:f1:63:0e:0f:96:ab:ad:12:35:fa:2f:3b:b6:
92:52:24:f2:c6:37:fc:88:2f:ac:b2:c9:9b:bf:a0:47:51:7b:
b3:52:87:24:00:ce:42:88:03:b6:c5:d3:c6:d0:f8:d1:20:ba:
99:6f:7a:de:07:36:be:ed:4f:0b:e1:a2:8a:84:4a:26:d1:9d:
4e:fd:ee:a8:bc:1d:9e:33:90:04:71:84:a1:38:33:ee:f6:2f:
a4:f9:c0:e3:b0:51:3c:f4:9d:8c:2f:4d:3a:a9:30:86:15:84:
6a:28:b0:71:01:75:15:64:b8:45:01:b1:25:2e:fd:7c:c3:fc:
ae:2f:9b:eb:14:d0:c5:2c:be:91:05:97:24:91:cc:c0:7d:d8:
87:a5:50:26:e1:d4:6d:07:c8:12:cb:07:5d:c4:36:8a:81:73:
43:64:c2:51:ec:24:92:63:b2:8b:95:fc:d4:a8:7f:07:fc:6b:
99:74:1a:0a:d6:57:2d:4a:17:53:ae:e2:f7:d7:d8:27:7f:9a:
be:be:66:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 8 13:10:36 2025 by rpki-client