Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/069008-2e4f-4323-b6a2-e8d6c2f071df/1/n6eFncOdRzYULPHiKcisS-YjuQM.mft
File: n6eFncOdRzYULPHiKcisS-YjuQM.mft (raw, json)
Hash identifier: D9fZ8WbFNmeccOi8AegYukprO5TjKSKBMcXd4O7e7Eg=
Subject key identifier: E3:B2:08:91:CF:BC:CF:32:9F:50:EF:BA:18:B2:7F:98:A6:A9:15:D9
Authority key identifier: 9F:A7:85:9D:C3:9D:47:36:14:2C:F1:E2:29:C8:AC:4B:E6:23:B9:03
Certificate issuer: /CN=9fa7859dc39d4736142cf1e229c8ac4be623b903
Certificate serial: 0197B6A1B519C59C44D0252DBA73E0B7B826
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/n6eFncOdRzYULPHiKcisS-YjuQM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/069008-2e4f-4323-b6a2-e8d6c2f071df/1/n6eFncOdRzYULPHiKcisS-YjuQM.mft
Manifest number: 1251
Signing time: Sat 28 Jun 2025 13:02:20 +0000
Manifest this update: Sat 28 Jun 2025 13:02:20 +0000
Manifest next update: Sun 29 Jun 2025 13:02:20 +0000
Files and hashes: 1: n6eFncOdRzYULPHiKcisS-YjuQM.crl (hash: +kdKNXk1DcGyr+lu0FvzrA2IkQuh1vAdhe360zkDv+Q=)
2: ntwiuM95uFBi26vUIqSDj4sApAM.roa (hash: O4PdrlvcDhug5zKVlwkRZGJ/JkjzqqLTd2w+uWOsXH4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/34/069008-2e4f-4323-b6a2-e8d6c2f071df/1/n6eFncOdRzYULPHiKcisS-YjuQM.crl
rsync://rpki.ripe.net/repository/DEFAULT/34/069008-2e4f-4323-b6a2-e8d6c2f071df/1/n6eFncOdRzYULPHiKcisS-YjuQM.mft
rsync://rpki.ripe.net/repository/DEFAULT/n6eFncOdRzYULPHiKcisS-YjuQM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 13:02:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:a1:b5:19:c5:9c:44:d0:25:2d:ba:73:e0:b7:b8:26
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9fa7859dc39d4736142cf1e229c8ac4be623b903
Validity
Not Before: Jun 28 13:02:20 2025 GMT
Not After : Jun 29 13:02:20 2025 GMT
Subject: CN=e3b20891cfbccf329f50efba18b27f98a6a915d9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:b2:86:b2:8d:34:75:c3:32:dc:5d:a0:d4:9a:
ba:a4:89:28:a8:72:5b:69:3e:38:3c:03:fe:58:8d:
8f:7b:50:65:ff:4e:cf:45:5c:1d:82:43:43:ef:e0:
a1:de:92:b8:67:0f:50:d4:07:22:73:7b:44:f8:62:
f6:d2:53:1c:3b:32:93:60:ab:2d:9f:c3:10:fd:df:
94:f5:6b:4e:11:29:64:c9:21:fe:8a:e8:66:ca:9e:
93:bb:a5:3e:39:eb:1a:9e:e4:5c:ea:80:d6:3d:c0:
ec:91:b2:16:49:61:89:a7:ca:c3:f2:8a:f7:02:a1:
be:c6:80:08:86:06:df:3a:e8:23:91:a6:08:04:c3:
3a:b2:2a:19:8d:cc:55:75:7f:93:a6:37:8a:94:0d:
27:80:c9:3b:c7:a2:76:ea:16:14:78:43:e1:5b:5e:
3d:d8:51:7b:8b:16:b7:ca:ec:df:85:3e:ce:19:22:
9d:6a:fa:71:84:24:22:21:a1:68:94:7c:e8:d4:52:
36:9c:47:f8:25:7f:66:65:92:10:b7:bf:e9:07:8c:
c5:f8:72:d9:09:fe:d6:c5:e8:ec:a1:f2:5b:35:7a:
32:a0:b7:17:7a:b0:df:ba:59:69:1b:a9:6b:27:74:
2d:fe:47:ae:65:a6:d5:96:74:e5:3a:32:e8:96:a7:
bb:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:B2:08:91:CF:BC:CF:32:9F:50:EF:BA:18:B2:7F:98:A6:A9:15:D9
X509v3 Authority Key Identifier:
keyid:9F:A7:85:9D:C3:9D:47:36:14:2C:F1:E2:29:C8:AC:4B:E6:23:B9:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/n6eFncOdRzYULPHiKcisS-YjuQM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/069008-2e4f-4323-b6a2-e8d6c2f071df/1/n6eFncOdRzYULPHiKcisS-YjuQM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/34/069008-2e4f-4323-b6a2-e8d6c2f071df/1/n6eFncOdRzYULPHiKcisS-YjuQM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6b:a4:84:f2:2c:76:74:ad:15:29:47:7c:9a:f9:28:ea:16:e7:
b5:c1:46:96:6e:ee:84:81:fb:33:65:8a:53:ac:c2:f7:d8:7b:
60:fe:ce:76:09:4f:ed:2b:d7:07:f9:1b:85:4d:7c:f9:36:b7:
99:08:23:4f:55:38:6c:6b:43:31:a8:a2:92:fd:d9:1c:e7:2f:
91:34:5f:4c:6f:9c:e8:92:e5:0c:b2:8e:b3:4a:e1:bc:06:c4:
38:dc:ea:c1:c6:2d:32:3d:cc:40:13:d2:34:57:c0:db:8f:6a:
0b:8e:40:79:94:72:38:b2:f8:d0:0b:fb:4f:07:2e:3f:89:c2:
32:2b:49:f0:d0:11:cc:65:ea:d5:b0:b7:46:98:75:fd:fc:43:
2b:74:81:6c:cd:33:9b:d7:98:b7:17:26:80:98:d9:b3:cb:80:
4c:88:e9:c2:6b:16:5f:9a:de:dc:ab:bc:06:43:25:d1:81:75:
b5:07:91:8e:ab:54:7b:84:c8:c7:9f:52:a8:e2:d0:5a:66:a8:
43:8b:4e:8f:f7:a8:7c:07:f4:b9:de:bd:fd:2a:c6:f5:fa:44:
84:1f:d4:d6:fb:96:ff:a9:96:e4:74:cc:f5:80:67:03:f9:4a:
a3:f8:09:e1:df:98:6c:99:a4:c7:d5:47:3c:bb:14:f1:08:01:
fe:d1:6b:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 22:36:25 2025 by rpki-client