Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3f/205c19-b73a-48fe-a086-356c09380887/1/n4535zgxPmVwaE3RUsLihDMrLFs.mft
File: n4535zgxPmVwaE3RUsLihDMrLFs.mft (raw, json)
Hash identifier: vKNZRKxZUpBZ/8R6VDFusNJGgvOkXlvKkRVnkQgMav8=
Subject key identifier: 89:6E:7F:32:A9:49:D4:C1:F2:BD:38:62:A8:46:33:63:C5:D2:1E:84
Authority key identifier: 9F:8E:77:E7:38:31:3E:65:70:68:4D:D1:52:C2:E2:84:33:2B:2C:5B
Certificate issuer: /CN=9f8e77e738313e6570684dd152c2e284332b2c5b
Certificate serial: 0197B77CDAE4906D58FB11281F355C97E34D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/n4535zgxPmVwaE3RUsLihDMrLFs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3f/205c19-b73a-48fe-a086-356c09380887/1/n4535zgxPmVwaE3RUsLihDMrLFs.mft
Manifest number: 0E62
Signing time: Sat 28 Jun 2025 17:01:42 +0000
Manifest this update: Sat 28 Jun 2025 17:01:42 +0000
Manifest next update: Sun 29 Jun 2025 17:01:42 +0000
Files and hashes: 1: C5MhC96HxaJKMKNS_jY_WLtyOQI.roa (hash: ESPNEcm8ABrBz0nfnXDJUwVTxpctLOm0CbjyoAr2waU=)
2: n4535zgxPmVwaE3RUsLihDMrLFs.crl (hash: 942OX+vUru3aXpgp69PrBhWgIJQ78RiinkQpPjk5qXw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3f/205c19-b73a-48fe-a086-356c09380887/1/n4535zgxPmVwaE3RUsLihDMrLFs.crl
rsync://rpki.ripe.net/repository/DEFAULT/3f/205c19-b73a-48fe-a086-356c09380887/1/n4535zgxPmVwaE3RUsLihDMrLFs.mft
rsync://rpki.ripe.net/repository/DEFAULT/n4535zgxPmVwaE3RUsLihDMrLFs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:7c:da:e4:90:6d:58:fb:11:28:1f:35:5c:97:e3:4d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9f8e77e738313e6570684dd152c2e284332b2c5b
Validity
Not Before: Jun 28 17:01:42 2025 GMT
Not After : Jun 29 17:01:42 2025 GMT
Subject: CN=896e7f32a949d4c1f2bd3862a8463363c5d21e84
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:37:38:46:ec:18:bd:06:ec:bb:d7:32:11:b6:
15:85:9a:0d:82:f6:a2:0d:5d:c7:78:c3:4a:53:66:
1d:3b:0e:b1:a6:c6:48:f3:7e:e9:eb:ef:66:0a:ee:
0c:d4:06:26:35:a5:f2:5f:5f:05:de:ff:9a:04:01:
a8:0c:12:35:ea:c5:ed:29:de:eb:52:e0:33:e0:88:
2e:2f:5a:8d:b8:4c:73:e5:8f:73:ff:51:5c:20:a7:
8b:72:3e:e8:9d:39:f6:31:5e:04:7d:1f:30:ce:ac:
4c:63:94:d7:5a:66:74:2f:99:8e:02:b5:40:9f:f0:
29:ad:56:d7:ea:fc:d9:c0:02:70:7e:a9:3b:23:d9:
7c:41:44:3c:fc:b1:16:ab:42:ed:f8:d5:be:58:b1:
82:72:a3:8a:00:8f:fd:32:f2:51:2c:33:92:e3:61:
17:68:8f:ff:d5:96:c4:62:ce:d5:4a:26:3f:ad:8e:
45:e8:68:e6:d1:52:06:05:d5:17:0a:c8:93:16:6f:
62:f6:fa:18:d6:87:1f:ea:06:83:f7:ad:c5:85:77:
f2:e4:73:04:fa:00:07:bd:04:44:18:c9:51:76:77:
0e:bf:db:84:88:7a:99:ed:2e:a3:f6:5a:cf:9d:72:
0c:5f:f4:a7:95:c7:4b:bf:a7:d1:2d:7b:59:12:10:
13:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:6E:7F:32:A9:49:D4:C1:F2:BD:38:62:A8:46:33:63:C5:D2:1E:84
X509v3 Authority Key Identifier:
keyid:9F:8E:77:E7:38:31:3E:65:70:68:4D:D1:52:C2:E2:84:33:2B:2C:5B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/n4535zgxPmVwaE3RUsLihDMrLFs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/205c19-b73a-48fe-a086-356c09380887/1/n4535zgxPmVwaE3RUsLihDMrLFs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/205c19-b73a-48fe-a086-356c09380887/1/n4535zgxPmVwaE3RUsLihDMrLFs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
18:f5:74:e2:f4:b5:69:09:5e:69:05:e6:6a:3c:7d:a3:bc:9e:
6d:33:4e:8a:bf:c2:77:f7:58:d9:bc:3a:33:95:e2:98:2d:f3:
bf:c1:32:df:1f:a1:c8:b1:c0:40:79:37:5c:ca:8b:4f:2e:f9:
30:71:8a:0e:57:55:d9:38:f0:3d:6c:e4:26:27:b0:38:d3:30:
7c:d8:64:80:02:5b:54:34:92:ba:45:4e:85:d0:af:5d:3a:5d:
79:f3:bc:08:69:1b:53:da:90:ba:85:0b:6e:69:dc:52:35:28:
7c:fd:3a:04:73:ab:e5:b3:50:81:96:b1:aa:01:66:59:a5:6c:
e2:7d:a9:79:61:d6:86:cf:2c:e3:4e:9e:03:e3:a3:41:72:00:
06:f1:9b:9a:c8:07:9a:cd:63:75:c1:f2:0e:66:d5:9e:10:e1:
21:9a:57:15:ce:11:93:d3:42:11:3c:85:24:dd:4a:6a:dd:21:
a3:d1:f5:95:54:4d:74:ef:de:00:e0:4c:d7:36:31:d9:b4:69:
af:03:2f:24:e2:43:11:4b:cb:30:a9:31:29:a0:18:c5:1c:76:
e2:71:51:2e:90:d3:08:f6:c9:b8:5b:55:25:05:36:e3:a5:27:
b4:b8:af:a9:99:f3:e1:97:c3:a1:1e:1c:a3:bf:1e:7e:b6:de:
5d:f6:f3:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 22:46:35 2025 by rpki-client