Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/86/35dee5-d8db-48e3-b7bb-0810d16bcc87/1/n9aPGyQUI9qXZHuZIkUwOG0laYw.mft
File: n9aPGyQUI9qXZHuZIkUwOG0laYw.mft (raw, json)
Hash identifier: HOciTbECuFwUQNET27ex1fFgLF1S+bl68ZJznXPbp2E=
Subject key identifier: 4C:FB:EB:AB:C4:70:2E:EB:B6:0E:18:8F:2E:A0:86:02:FB:CF:F7:08
Authority key identifier: 9F:D6:8F:1B:24:14:23:DA:97:64:7B:99:22:45:30:38:6D:25:69:8C
Certificate issuer: /CN=9fd68f1b241423da97647b99224530386d25698c
Certificate serial: 0196B2FCA0CA696962C5A573618BB58F3D3A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/n9aPGyQUI9qXZHuZIkUwOG0laYw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/86/35dee5-d8db-48e3-b7bb-0810d16bcc87/1/n9aPGyQUI9qXZHuZIkUwOG0laYw.mft
Manifest number: 152F
Signing time: Fri 09 May 2025 03:00:22 +0000
Manifest this update: Fri 09 May 2025 03:00:22 +0000
Manifest next update: Sat 10 May 2025 03:00:22 +0000
Files and hashes: 1: 6zp8k7ws-z1aCcsmWGLYmfVsv4E.roa (hash: bUIQEUVAIaujbjPg7okGrEKCeQdfL4efouwX9EGneXc=)
2: n9aPGyQUI9qXZHuZIkUwOG0laYw.crl (hash: dwS0DcBWAloCEDG8y3fW7/W9NAckA/1qU5wheDdOY0E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/86/35dee5-d8db-48e3-b7bb-0810d16bcc87/1/n9aPGyQUI9qXZHuZIkUwOG0laYw.crl
rsync://rpki.ripe.net/repository/DEFAULT/86/35dee5-d8db-48e3-b7bb-0810d16bcc87/1/n9aPGyQUI9qXZHuZIkUwOG0laYw.mft
rsync://rpki.ripe.net/repository/DEFAULT/n9aPGyQUI9qXZHuZIkUwOG0laYw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 10 May 2025 03:00:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:b2:fc:a0:ca:69:69:62:c5:a5:73:61:8b:b5:8f:3d:3a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9fd68f1b241423da97647b99224530386d25698c
Validity
Not Before: May 9 03:00:22 2025 GMT
Not After : May 10 03:00:22 2025 GMT
Subject: CN=4cfbebabc4702eebb60e188f2ea08602fbcff708
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:89:ac:1f:8f:1b:ab:a1:db:28:99:4a:cd:0a:
44:bb:0b:f6:86:47:c4:86:39:26:a7:b7:bc:79:bc:
0e:19:64:80:5f:a7:9b:60:18:f8:52:5b:38:35:e0:
ef:98:1b:12:83:1e:40:9a:fb:36:59:b4:56:1d:7f:
0d:e3:fd:f4:6f:cc:b5:e9:d9:ea:f4:50:6b:fe:ae:
81:8f:b9:59:cf:e3:49:86:fd:43:8a:89:03:8c:66:
ea:f1:61:c0:de:73:9b:ee:7a:fa:9c:ff:a0:20:bb:
56:a5:1e:47:ad:50:d6:c8:64:c1:81:26:32:85:25:
65:c4:a0:e2:b8:c0:87:94:34:79:0f:df:59:51:0b:
6e:90:77:86:7e:d1:27:d2:f3:ff:ee:86:a2:a0:34:
ba:d7:c2:37:fb:00:ec:bd:51:a0:63:88:be:fe:07:
a8:89:1a:e0:4f:73:e4:15:5e:2f:51:02:dd:df:f8:
b8:37:c2:9b:39:2c:69:63:00:80:5a:42:f3:08:12:
25:32:39:a6:f0:2b:df:a4:60:a0:34:33:48:4c:48:
7c:81:43:d7:cc:3d:2e:22:ea:a3:38:42:14:f0:ea:
78:b7:7b:4a:f2:de:e3:a9:a8:8c:24:96:bb:cc:5a:
74:39:8d:2f:27:6b:45:de:8f:19:62:c3:69:a7:cc:
b7:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:FB:EB:AB:C4:70:2E:EB:B6:0E:18:8F:2E:A0:86:02:FB:CF:F7:08
X509v3 Authority Key Identifier:
keyid:9F:D6:8F:1B:24:14:23:DA:97:64:7B:99:22:45:30:38:6D:25:69:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/n9aPGyQUI9qXZHuZIkUwOG0laYw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/35dee5-d8db-48e3-b7bb-0810d16bcc87/1/n9aPGyQUI9qXZHuZIkUwOG0laYw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/86/35dee5-d8db-48e3-b7bb-0810d16bcc87/1/n9aPGyQUI9qXZHuZIkUwOG0laYw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
32:b3:86:8a:37:1a:27:87:69:71:63:2b:0f:23:bb:50:35:ef:
00:36:a3:d5:a6:c0:fe:78:c3:3d:27:09:9a:ba:28:e4:15:73:
e2:27:1b:d6:43:d4:c7:d7:ef:83:cf:8b:17:bf:db:61:f8:bf:
34:8b:77:ba:71:5c:6c:43:e1:8f:e7:55:ee:2f:e6:fa:fc:4f:
89:1e:97:fe:dc:6d:7f:cd:51:e0:b8:fb:a3:ad:dd:a3:90:cc:
48:26:86:05:e2:d5:82:81:f2:68:cf:e0:f7:f0:1b:dc:81:3c:
33:dc:c8:97:11:a6:db:1e:a3:59:0a:db:be:81:03:56:08:03:
2f:ef:8b:b9:a4:a5:39:57:1f:ba:01:0c:da:dc:7f:55:14:91:
e5:27:83:5a:58:89:6c:3f:4a:9d:a9:f1:d7:fb:09:44:8f:57:
a6:7c:17:f1:2d:55:07:41:49:e6:07:a5:b9:71:12:9f:7c:5e:
53:86:a9:15:b3:1e:04:d3:99:e3:c7:71:db:5a:a4:59:db:74:
eb:ad:2b:4e:6f:09:7d:72:77:e9:84:bd:06:25:24:2c:d8:04:
b3:f2:ef:72:70:fa:90:e9:bd:79:41:90:08:3f:82:ee:18:8a:
21:f5:4b:3d:16:52:67:3d:f5:ca:50:24:7f:d6:23:27:d4:38:
d6:bd:20:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 9 11:59:13 2025 by rpki-client