
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/86/35dee5-d8db-48e3-b7bb-0810d16bcc87/1/n9aPGyQUI9qXZHuZIkUwOG0laYw.mft
File: n9aPGyQUI9qXZHuZIkUwOG0laYw.mft (raw, json)
Hash identifier: 4nU6F/GLucUCxebkbP73ymUotXECXeTL3nKQjwxOIzY=
Subject key identifier: 11:84:BE:B4:6D:B6:AF:F9:C6:B7:09:D0:29:E5:AB:E4:0C:96:D6:D4
Authority key identifier: 9F:D6:8F:1B:24:14:23:DA:97:64:7B:99:22:45:30:38:6D:25:69:8C
Certificate issuer: /CN=9fd68f1b241423da97647b99224530386d25698c
Certificate serial: 0197B7B2EFA37F1E237D6F4269F17442140B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/n9aPGyQUI9qXZHuZIkUwOG0laYw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/86/35dee5-d8db-48e3-b7bb-0810d16bcc87/1/n9aPGyQUI9qXZHuZIkUwOG0laYw.mft
Manifest number: 15B6
Signing time: Sat 28 Jun 2025 18:00:46 +0000
Manifest this update: Sat 28 Jun 2025 18:00:46 +0000
Manifest next update: Sun 29 Jun 2025 18:00:46 +0000
Files and hashes: 1: 6zp8k7ws-z1aCcsmWGLYmfVsv4E.roa (hash: bUIQEUVAIaujbjPg7okGrEKCeQdfL4efouwX9EGneXc=)
2: n9aPGyQUI9qXZHuZIkUwOG0laYw.crl (hash: zrOJp9Ek5tib2F7QbMpXZ+tpL9cKvbPc79DKi8D53C0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/86/35dee5-d8db-48e3-b7bb-0810d16bcc87/1/n9aPGyQUI9qXZHuZIkUwOG0laYw.crl
rsync://rpki.ripe.net/repository/DEFAULT/86/35dee5-d8db-48e3-b7bb-0810d16bcc87/1/n9aPGyQUI9qXZHuZIkUwOG0laYw.mft
rsync://rpki.ripe.net/repository/DEFAULT/n9aPGyQUI9qXZHuZIkUwOG0laYw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 18:00:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:b2:ef:a3:7f:1e:23:7d:6f:42:69:f1:74:42:14:0b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9fd68f1b241423da97647b99224530386d25698c
Validity
Not Before: Jun 28 18:00:46 2025 GMT
Not After : Jun 29 18:00:46 2025 GMT
Subject: CN=1184beb46db6aff9c6b709d029e5abe40c96d6d4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:77:3f:36:61:48:06:65:b6:8e:d8:a6:5f:c2:
26:37:0a:87:da:8c:95:a2:83:6f:6c:43:7f:57:ce:
0e:a2:23:f2:29:08:c7:f4:e8:6a:7a:c5:2c:4b:4b:
4b:ea:95:92:90:b7:fe:09:50:a2:ba:22:44:67:0b:
6a:df:6e:82:08:f0:c0:ac:f4:a3:82:9b:2f:e9:65:
b4:eb:1c:9e:3c:aa:29:04:f0:ee:aa:68:01:30:d4:
af:7b:fc:09:af:6b:1f:25:a5:b6:31:9c:25:9a:46:
3e:1e:c2:55:bc:48:03:8f:86:a9:f6:f1:3e:f4:14:
9e:4b:c1:cd:92:b0:70:b2:d2:44:fd:1f:da:28:eb:
d9:a8:39:a5:85:cb:ea:d0:ab:36:fe:fa:31:d0:83:
58:c4:14:81:a0:a8:81:e3:be:34:09:c3:6e:c6:8a:
19:10:73:e6:05:f4:69:17:ed:96:2b:3e:de:84:d5:
76:d4:c0:08:6d:d9:9e:66:ca:ac:b2:ef:6f:2d:93:
87:e2:53:f3:76:a5:4a:3e:2d:8b:38:03:54:5e:6d:
84:80:85:18:20:71:ee:6d:85:0d:62:b4:ea:11:47:
a8:8d:61:be:ca:0b:d4:5a:96:3e:22:74:08:3f:84:
8c:87:7d:90:46:64:7e:ed:92:5d:a3:0a:20:a0:6c:
6a:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:84:BE:B4:6D:B6:AF:F9:C6:B7:09:D0:29:E5:AB:E4:0C:96:D6:D4
X509v3 Authority Key Identifier:
keyid:9F:D6:8F:1B:24:14:23:DA:97:64:7B:99:22:45:30:38:6D:25:69:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/n9aPGyQUI9qXZHuZIkUwOG0laYw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/35dee5-d8db-48e3-b7bb-0810d16bcc87/1/n9aPGyQUI9qXZHuZIkUwOG0laYw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/86/35dee5-d8db-48e3-b7bb-0810d16bcc87/1/n9aPGyQUI9qXZHuZIkUwOG0laYw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1c:3c:69:85:47:f5:b8:08:5c:10:a1:cf:a9:16:cd:e2:62:0b:
d9:47:81:22:ff:1d:30:5f:7a:e2:0d:4e:f1:0e:4e:36:81:ed:
a0:f8:80:6c:32:01:1c:3f:4e:ef:74:5a:05:65:6a:93:f6:79:
ec:ca:0c:03:65:c9:7b:8b:ef:d0:60:5b:1a:11:3f:48:58:2f:
24:6e:97:91:8a:cc:f5:56:f9:4d:bc:da:69:c5:9b:f9:32:eb:
b8:be:a4:9d:1c:ad:d3:88:51:ea:30:4c:ba:39:47:aa:32:57:
48:04:20:a1:ae:68:44:19:f7:16:ee:0a:51:75:c5:58:ab:1c:
e1:7f:66:08:bf:2c:38:65:10:a9:39:95:6a:33:54:70:c1:c8:
28:d9:db:da:71:6d:c8:f4:52:cc:a2:d6:6c:76:3d:18:0e:b6:
9e:4a:d8:40:0e:ff:dc:e4:3f:2d:b1:0d:0c:5e:d0:85:33:33:
d5:e8:f3:9e:cb:a7:57:5d:11:99:93:dc:1f:d6:55:8c:be:00:
90:a1:14:15:d5:1a:aa:5f:d0:c6:e7:e2:cd:33:8e:35:c3:5f:
41:0b:6e:5a:b1:8c:d3:17:d1:3a:92:21:86:7b:52:a2:c6:de:
e9:27:b1:80:60:e1:22:31:09:4f:30:a4:80:62:a7:6b:3e:d9:
de:44:e1:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 01:47:03 2025 by rpki-client