Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ff/d8c58d-8d24-4280-91fd-48b1664d40d5/1/N9J_wkRD_N1LG2XPyAeMShQon54.mft
File: N9J_wkRD_N1LG2XPyAeMShQon54.mft (raw, json)
Hash identifier: Wuk+bfA/xVJNl98IIPlyk7q/UQgz9VYgdoE3h1xegM0=
Subject key identifier: 1F:97:96:A2:A4:96:AD:97:C5:8D:5D:58:2D:87:DF:9C:E8:0C:D9:66
Authority key identifier: 37:D2:7F:C2:44:43:FC:DD:4B:1B:65:CF:C8:07:8C:4A:14:28:9F:9E
Certificate issuer: /CN=37d27fc24443fcdd4b1b65cfc8078c4a14289f9e
Certificate serial: 0197767798358D830DD5946C8E610AB19795
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/N9J_wkRD_N1LG2XPyAeMShQon54.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ff/d8c58d-8d24-4280-91fd-48b1664d40d5/1/N9J_wkRD_N1LG2XPyAeMShQon54.mft
Manifest number: 1595
Signing time: Mon 16 Jun 2025 02:00:38 +0000
Manifest this update: Mon 16 Jun 2025 02:00:38 +0000
Manifest next update: Tue 17 Jun 2025 02:00:38 +0000
Files and hashes: 1: N9J_wkRD_N1LG2XPyAeMShQon54.crl (hash: tgC3Js3pvG7hoK4LZhp9tv3Vl5yPA4RcS690PvDFOSU=)
2: TLZrPYGbv3OSz3l-n9m1uFTtYyY.roa (hash: BAfT0SDdeatk44A0MoM3KqLiELOkYEeVNpqrfHgFPvo=)
3: fTuGHUDbLXIf1K1JGZkDmgp4h30.roa (hash: CE5/seUejdLKBZqDs568ZVcYXPKEXW1OP4zxVz04Gmo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ff/d8c58d-8d24-4280-91fd-48b1664d40d5/1/N9J_wkRD_N1LG2XPyAeMShQon54.crl
rsync://rpki.ripe.net/repository/DEFAULT/ff/d8c58d-8d24-4280-91fd-48b1664d40d5/1/N9J_wkRD_N1LG2XPyAeMShQon54.mft
rsync://rpki.ripe.net/repository/DEFAULT/N9J_wkRD_N1LG2XPyAeMShQon54.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Jun 2025 20:59:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:76:77:98:35:8d:83:0d:d5:94:6c:8e:61:0a:b1:97:95
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=37d27fc24443fcdd4b1b65cfc8078c4a14289f9e
Validity
Not Before: Jun 16 02:00:38 2025 GMT
Not After : Jun 17 02:00:38 2025 GMT
Subject: CN=1f9796a2a496ad97c58d5d582d87df9ce80cd966
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f7:21:a9:70:2a:48:13:6a:be:ef:f1:9c:57:80:
d7:cb:f0:e2:74:6f:6b:79:62:25:9f:95:00:73:c1:
23:b2:9c:d7:fc:2b:28:da:9c:a7:6b:9e:76:ab:fe:
69:6f:a8:e4:bf:a3:b9:a0:e6:12:e8:e8:0c:2e:be:
61:56:60:bb:bf:b3:b8:a5:63:19:36:bf:2a:1b:08:
a8:9a:64:05:a5:34:39:80:6e:c2:88:eb:ba:98:1b:
33:f3:f6:51:53:0f:71:a8:eb:6b:de:ec:d9:d1:e0:
3f:79:a6:ca:20:b5:8c:f7:b4:e4:05:70:80:11:0b:
b5:99:73:a8:c7:19:45:21:e1:b8:e2:44:1a:38:04:
23:fc:5f:b4:7a:ce:2f:13:fb:31:b6:0e:da:dc:d8:
d3:9c:56:3f:36:e6:ca:1a:7f:29:dd:31:5a:20:c5:
bf:72:c6:08:d5:c3:3a:a1:b3:65:fb:6d:69:0b:68:
b8:1d:cc:54:a0:b3:10:a9:de:bc:fa:a4:7c:ec:3c:
1f:35:9d:c3:1a:32:29:85:48:fe:c5:b7:bf:2d:25:
b8:af:a8:dc:6e:b9:af:08:59:63:26:4e:06:16:86:
58:dd:f0:9d:61:c1:e0:25:be:cc:e8:4a:bf:68:38:
7a:f3:0c:be:fd:b5:62:7e:c1:24:19:3a:aa:50:0c:
45:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:97:96:A2:A4:96:AD:97:C5:8D:5D:58:2D:87:DF:9C:E8:0C:D9:66
X509v3 Authority Key Identifier:
keyid:37:D2:7F:C2:44:43:FC:DD:4B:1B:65:CF:C8:07:8C:4A:14:28:9F:9E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/N9J_wkRD_N1LG2XPyAeMShQon54.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/d8c58d-8d24-4280-91fd-48b1664d40d5/1/N9J_wkRD_N1LG2XPyAeMShQon54.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/d8c58d-8d24-4280-91fd-48b1664d40d5/1/N9J_wkRD_N1LG2XPyAeMShQon54.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a3:df:04:6f:4a:35:5c:1d:81:36:45:e3:05:04:a3:1a:bd:2e:
b3:e0:40:66:a6:9e:06:6f:0b:f3:4a:f3:8e:f3:04:2b:57:c2:
84:0b:90:81:9d:fe:64:80:ad:44:56:76:4b:a4:ae:06:59:38:
53:a3:d0:fb:ae:63:4a:aa:09:64:e3:09:73:5d:0f:34:01:97:
ed:c6:f0:b7:cb:90:03:76:fe:c3:59:5a:52:35:36:a3:5e:f5:
4f:df:e6:40:62:14:c9:4c:de:ee:1f:77:39:40:7b:c4:27:e1:
24:b1:df:62:36:69:b3:de:cd:46:f7:c0:81:30:9c:58:4b:b3:
c1:0b:b8:e2:ec:20:b3:dc:5f:66:72:11:cc:fa:1a:10:4d:e5:
ec:47:d2:b9:e6:27:49:8b:15:09:10:7d:53:68:72:d0:09:2f:
79:cf:18:44:5f:35:25:4a:ba:95:5d:19:35:3b:c3:48:a0:8c:
3f:49:d0:0f:f0:19:34:d7:46:29:69:b4:43:5b:a1:d4:2e:bd:
81:35:fb:27:0a:89:50:f9:1b:42:71:fc:3e:77:e0:17:a3:26:
8c:09:10:5d:1a:99:77:ec:81:10:09:38:b0:a9:4c:d6:cf:de:
10:8b:41:21:57:0d:d3:83:28:29:e7:44:29:11:b3:06:a8:18:
37:d9:2f:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 05:14:35 2025 by rpki-client