Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/27/3e069a-3421-40ab-9e0c-45cc2dd6e491/1/n73cYxPvxLZyp-KzKuPESE_l9jA.mft
File: n73cYxPvxLZyp-KzKuPESE_l9jA.mft (raw, json)
Hash identifier: PCoka4fOx8ZvB4apsz1AGjflNXA16FPYP7biuLV+zdo=
Subject key identifier: 72:49:9D:12:D0:60:7E:97:7B:33:2C:B7:3B:B7:BE:86:EF:0E:19:50
Authority key identifier: 9F:BD:DC:63:13:EF:C4:B6:72:A7:E2:B3:2A:E3:C4:48:4F:E5:F6:30
Certificate issuer: /CN=9fbddc6313efc4b672a7e2b32ae3c4484fe5f630
Certificate serial: 0197C9F0C6125FC575B10E4DAD9FB19C9A91
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/n73cYxPvxLZyp-KzKuPESE_l9jA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/27/3e069a-3421-40ab-9e0c-45cc2dd6e491/1/n73cYxPvxLZyp-KzKuPESE_l9jA.mft
Manifest number: 1129
Signing time: Wed 02 Jul 2025 07:01:29 +0000
Manifest this update: Wed 02 Jul 2025 07:01:29 +0000
Manifest next update: Thu 03 Jul 2025 07:01:29 +0000
Files and hashes: 1: boDA4PQiCnDxp3aC4mFfCKLLJrE.roa (hash: qzJMKZb9GADDw4cKKxLUhJ/VrvT205N7vn0KRws/PGE=)
2: n73cYxPvxLZyp-KzKuPESE_l9jA.crl (hash: j9MdrxWXLfDLVciS8FrIYHV3PIDkcHVjRBrZvwOe9BA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/27/3e069a-3421-40ab-9e0c-45cc2dd6e491/1/n73cYxPvxLZyp-KzKuPESE_l9jA.crl
rsync://rpki.ripe.net/repository/DEFAULT/27/3e069a-3421-40ab-9e0c-45cc2dd6e491/1/n73cYxPvxLZyp-KzKuPESE_l9jA.mft
rsync://rpki.ripe.net/repository/DEFAULT/n73cYxPvxLZyp-KzKuPESE_l9jA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 03 Jul 2025 07:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:c9:f0:c6:12:5f:c5:75:b1:0e:4d:ad:9f:b1:9c:9a:91
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9fbddc6313efc4b672a7e2b32ae3c4484fe5f630
Validity
Not Before: Jul 2 07:01:29 2025 GMT
Not After : Jul 3 07:01:29 2025 GMT
Subject: CN=72499d12d0607e977b332cb73bb7be86ef0e1950
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:a6:ad:cc:0c:67:0b:f0:db:48:f0:9b:ec:13:
b5:64:6d:19:61:b9:e6:23:4d:71:10:ee:66:a9:23:
fc:b0:b1:60:1b:c4:1f:5a:fd:20:62:ad:cb:ef:34:
47:30:56:06:44:33:da:f4:83:78:82:ce:fe:3b:d6:
9f:22:03:eb:b6:0e:23:1b:c9:d9:00:50:9e:6e:7b:
25:78:48:4a:80:d4:7f:82:d8:1a:41:7a:07:49:40:
f6:b6:37:b2:c2:23:e4:30:d2:91:3f:24:42:f1:59:
67:4b:3d:e5:1a:4a:64:5a:63:60:01:71:61:cb:52:
60:aa:f3:8c:c9:61:49:14:aa:f8:23:fc:bc:d9:c5:
fe:41:ce:7e:82:f7:92:04:d8:51:d3:1c:7d:2c:e3:
54:8e:66:aa:87:27:be:46:a1:d7:df:a2:f5:ee:e3:
e5:77:21:aa:75:c8:28:7b:93:dd:5a:7b:89:b3:82:
5e:46:ce:ee:b4:8b:a2:94:1e:ad:a0:86:e5:7a:b3:
89:bc:6c:0b:0e:61:1b:b8:79:0a:41:14:3b:bb:2b:
1d:79:ef:72:9e:d9:8d:2e:96:6b:ee:88:3d:ff:91:
bb:e5:bf:a1:b7:9d:0f:fc:2e:f3:36:60:a0:b4:53:
f4:f6:78:4a:5c:ed:36:69:09:19:ff:ac:e6:23:e5:
22:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:49:9D:12:D0:60:7E:97:7B:33:2C:B7:3B:B7:BE:86:EF:0E:19:50
X509v3 Authority Key Identifier:
keyid:9F:BD:DC:63:13:EF:C4:B6:72:A7:E2:B3:2A:E3:C4:48:4F:E5:F6:30
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/n73cYxPvxLZyp-KzKuPESE_l9jA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/3e069a-3421-40ab-9e0c-45cc2dd6e491/1/n73cYxPvxLZyp-KzKuPESE_l9jA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/27/3e069a-3421-40ab-9e0c-45cc2dd6e491/1/n73cYxPvxLZyp-KzKuPESE_l9jA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7c:f4:81:5d:1b:9c:14:f6:40:74:8a:28:2c:86:08:c6:f9:84:
29:81:f6:8f:a0:12:42:1f:8a:c8:da:c5:bb:c5:c9:6e:f5:a1:
fe:bb:ca:c2:37:cd:66:50:4d:d6:51:f6:f5:7d:c8:26:df:be:
b7:df:db:c2:a9:08:b3:c8:11:d2:e4:97:90:75:4b:c9:5e:91:
db:ca:fa:5c:12:4b:37:48:b2:fe:53:e1:07:c9:51:05:7c:d6:
cf:63:ec:d7:67:9e:0b:16:42:44:0d:d6:89:90:27:ef:08:6f:
8a:0e:ae:42:40:05:e2:ca:e2:4b:f4:78:58:a9:8d:b7:af:4f:
81:df:ec:68:e3:61:26:cb:87:7f:32:1c:5d:56:de:5e:fe:0e:
4a:03:4f:d5:6b:c2:4e:bb:ed:81:1e:84:8a:8e:cb:6f:56:a0:
f3:b5:ee:18:68:0a:f5:62:b1:81:58:79:ca:40:b6:da:dc:2c:
ca:a8:91:f7:62:ac:b2:0a:dc:c8:4d:1e:5f:ab:6a:da:5c:70:
16:bd:e4:d8:4a:c2:38:1c:09:2c:6e:07:6a:19:bf:5a:9f:f8:
7f:14:2d:f9:78:93:50:da:93:ee:6a:c3:a8:d5:49:dd:10:d3:
e2:61:01:0b:e0:25:13:75:ea:13:2d:af:78:9c:eb:09:97:7d:
e2:65:e1:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 2 15:10:34 2025 by rpki-client