Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d2/4cae10-37a5-40ef-89d5-5701d01c1e87/1/n1_z3hCjG79XAcC9smxlCAF9oso.mft
File: n1_z3hCjG79XAcC9smxlCAF9oso.mft (raw, json)
Hash identifier: UtQ+1GayrG/MMz8AxOtgz4vdr8h7ttuyycW5NQfDeRs=
Subject key identifier: 3B:92:5A:A0:52:9F:6B:39:50:5E:4D:01:80:AE:08:82:F1:E8:E0:E3
Authority key identifier: 9F:5F:F3:DE:10:A3:1B:BF:57:01:C0:BD:B2:6C:65:08:01:7D:A2:CA
Certificate issuer: /CN=9f5ff3de10a31bbf5701c0bdb26c6508017da2ca
Certificate serial: 0197C0ED92262D6E17B6F49309A06AEE4957
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/n1_z3hCjG79XAcC9smxlCAF9oso.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d2/4cae10-37a5-40ef-89d5-5701d01c1e87/1/n1_z3hCjG79XAcC9smxlCAF9oso.mft
Manifest number: 0BC1
Signing time: Mon 30 Jun 2025 13:01:24 +0000
Manifest this update: Mon 30 Jun 2025 13:01:24 +0000
Manifest next update: Tue 01 Jul 2025 13:01:24 +0000
Files and hashes: 1: bY74pa2C3Js_pk8zrLxwAIuld50.roa (hash: hw+4FaOxGozuL2NvwyX/np4qCkqg+xjCV1sHwedmazg=)
2: n1_z3hCjG79XAcC9smxlCAF9oso.crl (hash: wmS9GVPT3dghL4pN3r6keFWg9UwggjAi9lB5fBpBoAI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d2/4cae10-37a5-40ef-89d5-5701d01c1e87/1/n1_z3hCjG79XAcC9smxlCAF9oso.crl
rsync://rpki.ripe.net/repository/DEFAULT/d2/4cae10-37a5-40ef-89d5-5701d01c1e87/1/n1_z3hCjG79XAcC9smxlCAF9oso.mft
rsync://rpki.ripe.net/repository/DEFAULT/n1_z3hCjG79XAcC9smxlCAF9oso.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 01 Jul 2025 13:01:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:c0:ed:92:26:2d:6e:17:b6:f4:93:09:a0:6a:ee:49:57
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9f5ff3de10a31bbf5701c0bdb26c6508017da2ca
Validity
Not Before: Jun 30 13:01:24 2025 GMT
Not After : Jul 1 13:01:24 2025 GMT
Subject: CN=3b925aa0529f6b39505e4d0180ae0882f1e8e0e3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f4:7d:17:e4:b2:d1:73:82:79:d4:a2:69:42:bc:
0c:67:84:86:59:42:96:8a:66:aa:9b:e2:61:5d:d3:
83:89:f2:ac:4c:98:e7:2f:b9:8e:ab:ad:45:cb:14:
d4:72:69:6b:69:83:97:fc:c4:46:6d:12:f7:0e:85:
cb:1d:19:06:bd:d3:df:62:2c:88:05:e0:6b:f5:b5:
90:96:6c:6e:42:00:27:d6:88:a0:bd:94:a7:36:54:
e2:88:98:fc:c4:4c:a7:4d:5e:f0:80:e2:50:ef:7a:
3e:63:c1:a8:73:77:08:75:c9:00:6a:b0:ce:4e:23:
d2:b2:20:d6:e9:76:98:d0:bb:81:de:15:e4:85:47:
83:65:d6:78:4a:22:c5:ba:62:00:79:0a:79:42:e7:
ee:47:a6:ba:02:05:be:85:34:c0:a8:8b:6c:37:1c:
46:e1:9c:4e:ed:e6:42:74:87:d7:1f:f9:0d:7a:cb:
d1:63:49:08:40:20:fc:dc:b0:4a:a6:f1:e5:92:e5:
26:3d:6e:af:a6:df:32:54:90:51:9a:c0:08:7c:78:
16:9b:eb:92:b0:99:bc:c5:3d:df:9f:c3:59:86:46:
5f:88:0b:c1:9b:94:62:96:e0:32:b7:b8:2c:5e:69:
f9:89:85:e3:c6:cd:05:4d:f0:5d:00:f0:2d:48:40:
80:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:92:5A:A0:52:9F:6B:39:50:5E:4D:01:80:AE:08:82:F1:E8:E0:E3
X509v3 Authority Key Identifier:
keyid:9F:5F:F3:DE:10:A3:1B:BF:57:01:C0:BD:B2:6C:65:08:01:7D:A2:CA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/n1_z3hCjG79XAcC9smxlCAF9oso.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/4cae10-37a5-40ef-89d5-5701d01c1e87/1/n1_z3hCjG79XAcC9smxlCAF9oso.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/4cae10-37a5-40ef-89d5-5701d01c1e87/1/n1_z3hCjG79XAcC9smxlCAF9oso.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
28:7f:81:c4:39:64:45:ff:cc:59:ab:2b:ae:4e:c3:76:4f:56:
72:bc:a9:78:cb:b7:d7:ce:f0:85:c7:33:2b:a2:3b:4c:70:4d:
68:ba:e3:cc:cb:0d:f2:00:ea:31:a4:b5:12:6f:b0:cd:53:c4:
bd:2f:f9:ad:39:e3:82:64:c3:3b:9b:25:27:6c:31:bf:a5:ca:
3a:54:57:a7:70:67:c4:e0:66:40:25:73:69:53:cf:32:93:42:
79:66:84:4d:b6:76:33:f9:eb:94:43:21:5b:6a:bf:ba:02:53:
ae:5d:b8:a2:8c:68:09:49:50:81:8e:8c:6d:76:95:03:93:dc:
fd:dd:82:2e:56:cf:94:1f:7e:0d:8e:01:6d:1d:49:26:07:07:
c9:d6:07:20:dc:94:56:22:08:c5:a4:a6:24:94:9d:56:f2:db:
72:ae:fb:68:11:bf:95:ed:22:2a:3f:95:4c:a4:36:33:d9:37:
30:02:7f:3d:b9:5b:7f:9e:d7:7c:84:4b:43:ca:bf:ad:5a:3d:
8e:5a:53:f6:85:95:33:ba:2f:63:6c:3d:b0:36:f4:cc:b7:34:
80:b2:5e:d9:52:ed:b5:07:28:7a:bf:d6:d1:c3:b3:63:f0:76:
8e:14:0b:e6:e1:4e:9f:4e:bb:93:55:86:ab:d1:f0:c9:d7:9c:
6b:d2:c9:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 30 21:42:15 2025 by rpki-client