Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0a/9f6872-581b-4d47-bc6a-eba0cd57c020/1/n9mIbi2ycJ2yI2TjNNOeLuSI024.mft
File: n9mIbi2ycJ2yI2TjNNOeLuSI024.mft (raw, json)
Hash identifier: 0BTDnx4pnHp4IHA7Syzs8rUND+BwtsZIkJSerx8UTO4=
Subject key identifier: B0:EA:BF:CD:69:36:1F:BA:3C:EF:DA:96:9E:4C:CD:8A:B4:9D:E7:9F
Authority key identifier: 9F:D9:88:6E:2D:B2:70:9D:B2:23:64:E3:34:D3:9E:2E:E4:88:D3:6E
Certificate issuer: /CN=9fd9886e2db2709db22364e334d39e2ee488d36e
Certificate serial: 0197C425ECA97D8C1720ED6D8C4BE8EB7B88
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/n9mIbi2ycJ2yI2TjNNOeLuSI024.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0a/9f6872-581b-4d47-bc6a-eba0cd57c020/1/n9mIbi2ycJ2yI2TjNNOeLuSI024.mft
Manifest number: 037A
Signing time: Tue 01 Jul 2025 04:01:49 +0000
Manifest this update: Tue 01 Jul 2025 04:01:49 +0000
Manifest next update: Wed 02 Jul 2025 04:01:49 +0000
Files and hashes: 1: Rjc45YVuDrAMQdY8qgjKUXqz9To.roa (hash: VkM0hIqEPGBmrXo8E00kzKR2aWKMeDBdfCqKvjZR58E=)
2: n9mIbi2ycJ2yI2TjNNOeLuSI024.crl (hash: kCELO+jC2AgrSEIJerYOYxrVi3wdq0RhyktMCuCe2S4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0a/9f6872-581b-4d47-bc6a-eba0cd57c020/1/n9mIbi2ycJ2yI2TjNNOeLuSI024.crl
rsync://rpki.ripe.net/repository/DEFAULT/0a/9f6872-581b-4d47-bc6a-eba0cd57c020/1/n9mIbi2ycJ2yI2TjNNOeLuSI024.mft
rsync://rpki.ripe.net/repository/DEFAULT/n9mIbi2ycJ2yI2TjNNOeLuSI024.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 02 Jul 2025 04:01:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:c4:25:ec:a9:7d:8c:17:20:ed:6d:8c:4b:e8:eb:7b:88
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9fd9886e2db2709db22364e334d39e2ee488d36e
Validity
Not Before: Jul 1 04:01:49 2025 GMT
Not After : Jul 2 04:01:49 2025 GMT
Subject: CN=b0eabfcd69361fba3cefda969e4ccd8ab49de79f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:a5:9e:b7:cc:80:00:13:e2:b3:8f:1b:0d:c6:
66:5d:da:e2:41:53:c6:af:01:e6:61:a7:5c:b5:50:
7b:ec:e2:fc:4f:80:94:73:17:9c:7c:75:9c:1f:25:
de:ce:e2:3b:77:91:83:db:4c:e6:f4:71:88:da:71:
ca:7b:21:1c:77:c5:bd:4c:69:7a:25:1c:55:75:d9:
df:ea:0b:5b:38:7b:e7:09:f5:1e:ca:b9:64:a8:37:
ca:c2:b1:4f:04:55:fb:f9:55:73:7a:41:35:d6:cc:
b9:16:b8:82:a2:c0:a9:f0:fb:3b:6f:61:cd:b8:3f:
4e:ab:c6:81:9a:2b:3e:dc:30:69:45:b6:f8:42:ea:
25:e8:45:df:76:c5:a6:89:ab:ba:50:a2:60:2a:61:
f4:26:17:c5:d2:a2:09:eb:6e:82:3e:4f:c2:07:78:
cb:57:4b:a3:95:38:49:e1:09:b5:db:6d:af:fa:1a:
71:53:cb:0c:0e:c3:b8:00:5c:03:5e:40:19:c0:30:
26:60:40:61:74:b5:c1:9f:85:10:a9:22:0c:f7:c0:
c5:06:d3:e9:f2:77:2d:44:b6:b8:b2:61:87:dc:46:
8b:a5:f0:91:59:0d:ee:b8:75:19:1e:e5:61:9a:68:
3c:67:2b:9e:30:0d:9f:40:9f:a6:e0:b2:7e:3c:82:
a7:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:EA:BF:CD:69:36:1F:BA:3C:EF:DA:96:9E:4C:CD:8A:B4:9D:E7:9F
X509v3 Authority Key Identifier:
keyid:9F:D9:88:6E:2D:B2:70:9D:B2:23:64:E3:34:D3:9E:2E:E4:88:D3:6E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/n9mIbi2ycJ2yI2TjNNOeLuSI024.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/9f6872-581b-4d47-bc6a-eba0cd57c020/1/n9mIbi2ycJ2yI2TjNNOeLuSI024.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/9f6872-581b-4d47-bc6a-eba0cd57c020/1/n9mIbi2ycJ2yI2TjNNOeLuSI024.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
89:78:b7:f0:d8:f3:7f:67:39:b7:0f:93:5d:42:83:af:59:33:
a3:00:02:8f:3f:09:67:77:51:ad:e6:22:80:99:e6:3e:51:78:
eb:be:6a:87:8d:ee:89:3f:6a:a5:e7:34:be:4e:06:d4:9a:f0:
c9:a8:f6:fd:41:98:4d:45:68:a2:7a:09:7e:4e:8d:0e:28:1f:
05:a5:b5:a7:04:79:08:21:99:77:11:8d:b4:09:ba:27:59:88:
81:9d:11:58:d4:71:ba:ca:d6:4a:9b:e9:c9:ac:2c:99:4c:50:
c3:d2:5a:08:66:c2:bc:e8:65:55:ee:1b:93:bb:38:40:23:77:
41:c9:b6:68:1a:e1:b3:2b:9f:c1:69:93:f0:39:c0:b8:d0:65:
5e:fe:12:9c:78:f8:ea:06:8f:5f:cc:25:33:6c:52:84:4d:fc:
a6:b6:ac:53:1a:18:fd:6b:28:18:ca:52:2d:88:fe:67:c1:ab:
5e:58:0f:de:07:29:5f:b2:6a:34:ea:be:f6:bc:9c:69:b5:bd:
bf:04:59:77:4a:54:5f:45:26:95:3d:69:8d:1e:06:3c:0d:b2:
88:e8:fb:dd:6c:91:35:66:e4:0b:c0:67:f1:26:29:78:53:c9:
bb:4c:79:01:d9:06:7d:67:eb:33:5a:20:15:8e:af:c9:5b:42:
e2:42:ed:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 1 10:04:21 2025 by rpki-client