Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/127684-5afe-4f18-b95d-3072503d8607/1/n_M9TzrAqIeECihM3Bq-t91kLwE.mft
File: n_M9TzrAqIeECihM3Bq-t91kLwE.mft (raw, json)
Hash identifier: OaE7mSN9jSdBkRx2tZvNvuw6jN7upyOGGLZMoWzsleQ=
Subject key identifier: D5:40:8D:F6:5A:CF:A5:9D:EC:7D:4F:63:5D:2E:81:3D:85:4F:7E:34
Authority key identifier: 9F:F3:3D:4F:3A:C0:A8:87:84:0A:28:4C:DC:1A:BE:B7:DD:64:2F:01
Certificate issuer: /CN=9ff33d4f3ac0a887840a284cdc1abeb7dd642f01
Certificate serial: 0197CDCD22A279BB869ECB1EF3459AA99C6A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/n_M9TzrAqIeECihM3Bq-t91kLwE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/127684-5afe-4f18-b95d-3072503d8607/1/n_M9TzrAqIeECihM3Bq-t91kLwE.mft
Manifest number: 0EFC
Signing time: Thu 03 Jul 2025 01:01:02 +0000
Manifest this update: Thu 03 Jul 2025 01:01:02 +0000
Manifest next update: Fri 04 Jul 2025 01:01:02 +0000
Files and hashes: 1: FVg-EXFcHktuG7QQnavEaXe-fnM.roa (hash: mi0+1itCdMO3yynnGJ5oIkWt7SrPDpOOMP9BVB9K+Jc=)
2: T3nKkG-dCBEn2EriUuJalbbWuME.roa (hash: NecAgRoxclxz3UKtAie4B0/FU5sK9TM4xXuPGjhm4Kc=)
3: n_M9TzrAqIeECihM3Bq-t91kLwE.crl (hash: Inx0izA3HliY2twRE2Z3KKLunRDVOjzXWQyBV+bX7l8=)
4: nl8-f4Y4T6rTsqYQijhuiNifL1Q.roa (hash: D8rqvsrK84p8WeU5jZAqKp61j1ey2NYKXftp+gwX6/8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/127684-5afe-4f18-b95d-3072503d8607/1/n_M9TzrAqIeECihM3Bq-t91kLwE.crl
rsync://rpki.ripe.net/repository/DEFAULT/5a/127684-5afe-4f18-b95d-3072503d8607/1/n_M9TzrAqIeECihM3Bq-t91kLwE.mft
rsync://rpki.ripe.net/repository/DEFAULT/n_M9TzrAqIeECihM3Bq-t91kLwE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 03 Jul 2025 20:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:cd:cd:22:a2:79:bb:86:9e:cb:1e:f3:45:9a:a9:9c:6a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9ff33d4f3ac0a887840a284cdc1abeb7dd642f01
Validity
Not Before: Jul 3 01:01:02 2025 GMT
Not After : Jul 4 01:01:02 2025 GMT
Subject: CN=d5408df65acfa59dec7d4f635d2e813d854f7e34
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ee:bb:f4:6c:f3:13:bd:10:4a:b8:58:82:5f:eb:
61:a8:73:89:d9:9a:c9:c9:32:ac:99:20:5c:5d:f4:
82:70:e8:d8:ab:40:e0:4c:75:9d:87:b8:5b:bb:12:
17:4a:cf:1a:3d:6b:ab:c2:0c:1a:72:d5:20:4a:58:
26:9e:fe:e6:f6:24:64:9f:69:5e:9a:8e:4b:10:97:
35:33:dd:53:85:a2:53:60:a4:b0:a5:7a:67:a6:cb:
14:6d:1a:bf:93:56:ec:01:32:dc:6a:24:4d:aa:14:
fe:b0:52:aa:7f:6b:da:c4:c2:4a:54:d1:4a:e3:4f:
bb:70:03:6e:52:4f:18:89:10:3d:77:99:8a:31:a0:
63:84:70:69:96:4d:91:bc:49:66:a6:29:0f:ef:da:
34:88:c6:5b:ab:1c:66:2e:6e:2c:78:c2:82:31:05:
62:d1:0d:e2:a9:a4:58:7f:41:d3:bd:2b:de:8c:77:
a1:be:37:ca:ac:28:79:73:1a:31:70:ea:15:e1:ab:
87:e6:a7:60:8b:48:c1:28:bd:90:90:35:5b:b6:40:
92:65:04:98:ba:c1:b4:76:eb:31:fa:97:8c:8e:9c:
a5:99:57:ab:49:88:70:e2:33:17:38:65:27:f3:3f:
ba:54:af:63:16:5e:ff:3f:2a:52:c7:f6:0e:fd:04:
9b:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:40:8D:F6:5A:CF:A5:9D:EC:7D:4F:63:5D:2E:81:3D:85:4F:7E:34
X509v3 Authority Key Identifier:
keyid:9F:F3:3D:4F:3A:C0:A8:87:84:0A:28:4C:DC:1A:BE:B7:DD:64:2F:01
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/n_M9TzrAqIeECihM3Bq-t91kLwE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/127684-5afe-4f18-b95d-3072503d8607/1/n_M9TzrAqIeECihM3Bq-t91kLwE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/127684-5afe-4f18-b95d-3072503d8607/1/n_M9TzrAqIeECihM3Bq-t91kLwE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3d:e5:8d:89:bd:24:4b:bd:28:55:e3:69:0b:5a:7f:0a:eb:ca:
f2:9e:6d:ae:ff:b4:a4:36:83:68:6f:65:b2:da:d3:34:1c:57:
fd:35:f9:14:b6:7f:98:bf:a6:ec:52:e6:f1:d2:51:66:48:c7:
2c:0e:c3:b2:78:25:54:36:40:5e:22:b5:4e:fb:3d:fd:13:7a:
ca:bc:4b:13:95:7d:d9:3a:d9:19:ff:dd:b1:65:20:90:c2:29:
6e:81:6e:1f:56:84:89:ee:ca:05:9f:6a:8e:36:50:c6:9e:5f:
64:a4:65:4b:ca:b8:84:33:c3:95:5d:39:de:21:52:07:d2:30:
de:48:45:e3:1a:a5:74:31:2a:f8:c0:6d:92:d6:84:c7:16:ec:
3e:17:13:e4:d4:19:17:9d:5c:3a:66:2a:b2:2b:b8:2f:1c:1b:
87:92:af:10:80:67:86:22:57:db:45:b5:f6:2d:8f:a4:36:dc:
b9:fc:7e:df:43:a0:12:ab:d5:14:82:7c:75:fb:89:41:c1:30:
bc:e8:12:56:dd:59:2d:ee:ab:45:01:6e:b5:c4:23:98:4f:f3:
87:34:57:a4:18:79:69:40:30:be:50:e3:b8:d4:89:9c:35:5b:
aa:1e:88:6e:69:79:d7:9e:15:0e:29:16:fa:8f:f0:c8:0d:cd:
69:38:d1:65
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZfNzSKiebuGnsse80WaqZxqMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDlmZjMzZDRmM2FjMGE4ODc4NDBhMjg0Y2RjMWFiZWI3ZGQ2
NDJmMDEwHhcNMjUwNzAzMDEwMTAyWhcNMjUwNzA0MDEwMTAyWjAzMTEwLwYDVQQD
EyhkNTQwOGRmNjVhY2ZhNTlkZWM3ZDRmNjM1ZDJlODEzZDg1NGY3ZTM0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7rv0bPMTvRBKuFiCX+thqHOJ2ZrJ
yTKsmSBcXfSCcOjYq0DgTHWdh7hbuxIXSs8aPWurwgwactUgSlgmnv7m9iRkn2le
mo5LEJc1M91ThaJTYKSwpXpnpssUbRq/k1bsATLcaiRNqhT+sFKqf2vaxMJKVNFK
40+7cANuUk8YiRA9d5mKMaBjhHBplk2RvElmpikP79o0iMZbqxxmLm4seMKCMQVi
0Q3iqaRYf0HTvSvejHehvjfKrCh5cxoxcOoV4auH5qdgi0jBKL2QkDVbtkCSZQSY
usG0dusx+peMjpylmVerSYhw4jMXOGUn8z+6VK9jFl7/PypSx/YO/QSb1QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNVAjfZaz6Wd7H1PY10ugT2FT340MB8GA1UdIwQY
MBaAFJ/zPU86wKiHhAooTNwavrfdZC8BMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbl9NOVR6ckFxSWVFQ2loTTNCcS10OTFrTHdFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81YS8xMjc2ODQtNWFmZS00ZjE4LWI5NWQt
MzA3MjUwM2Q4NjA3LzEvbl9NOVR6ckFxSWVFQ2loTTNCcS10OTFrTHdFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81YS8xMjc2ODQtNWFmZS00ZjE4LWI5NWQtMzA3MjUwM2Q4NjA3
LzEvbl9NOVR6ckFxSWVFQ2loTTNCcS10OTFrTHdFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPeWNib0k
S70oVeNpC1p/CuvK8p5trv+0pDaDaG9lstrTNBxX/TX5FLZ/mL+m7FLm8dJRZkjH
LA7DsnglVDZAXiK1Tvs9/RN6yrxLE5V92TrZGf/dsWUgkMIpboFuH1aEie7KBZ9q
jjZQxp5fZKRlS8q4hDPDlV053iFSB9Iw3khF4xqldDEq+MBtktaExxbsPhcT5NQZ
F51cOmYqsiu4Lxwbh5KvEIBnhiJX20W19i2PpDbcufx+30OgEqvVFIJ8dfuJQcEw
vOgSVt1ZLe6rRQFutcQjmE/zhzRXpBh5aUAwvlDjuNSJnDVbqh6Ibml5154VDikW
+o/wyA3NaTjRZQ==
-----END CERTIFICATE-----
Generated at Thu Jul 3 05:08:36 2025 by rpki-client