Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d6/caf466-6e6c-4009-a55a-5fa9da03f570/1/n78C8E7EMIy1tgeL0GoXywDYM2k.mft
File: n78C8E7EMIy1tgeL0GoXywDYM2k.mft (raw, json)
Hash identifier: InxWDGTdbtqGDtJxXWawAJHNOrDVnD6bHN1x0wq2rrI=
Subject key identifier: 00:B5:7D:ED:D8:D7:EC:4A:70:03:EB:1F:3D:AF:F3:FE:D7:41:E6:D0
Authority key identifier: 9F:BF:02:F0:4E:C4:30:8C:B5:B6:07:8B:D0:6A:17:CB:00:D8:33:69
Certificate issuer: /CN=9fbf02f04ec4308cb5b6078bd06a17cb00d83369
Certificate serial: 0197B8C5A71242FA6BCD76C382BFA840B44D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/n78C8E7EMIy1tgeL0GoXywDYM2k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d6/caf466-6e6c-4009-a55a-5fa9da03f570/1/n78C8E7EMIy1tgeL0GoXywDYM2k.mft
Manifest number: 45
Signing time: Sat 28 Jun 2025 23:00:50 +0000
Manifest this update: Sat 28 Jun 2025 23:00:50 +0000
Manifest next update: Sun 29 Jun 2025 23:00:50 +0000
Files and hashes: 1: lB6tM26XvybAjC_i9gyukbY90Gs.roa (hash: QCUB0nbnI7vfbQcfu12QO8f17dboTNQ2oQD6KvaVOOo=)
2: n78C8E7EMIy1tgeL0GoXywDYM2k.crl (hash: YFzlfTDHoP2rBliduR6TjwHvx5qPMQDac2a3FkStRjg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d6/caf466-6e6c-4009-a55a-5fa9da03f570/1/n78C8E7EMIy1tgeL0GoXywDYM2k.crl
rsync://rpki.ripe.net/repository/DEFAULT/d6/caf466-6e6c-4009-a55a-5fa9da03f570/1/n78C8E7EMIy1tgeL0GoXywDYM2k.mft
rsync://rpki.ripe.net/repository/DEFAULT/n78C8E7EMIy1tgeL0GoXywDYM2k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 19:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b8:c5:a7:12:42:fa:6b:cd:76:c3:82:bf:a8:40:b4:4d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9fbf02f04ec4308cb5b6078bd06a17cb00d83369
Validity
Not Before: Jun 28 23:00:50 2025 GMT
Not After : Jun 29 23:00:50 2025 GMT
Subject: CN=00b57dedd8d7ec4a7003eb1f3daff3fed741e6d0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:9f:7a:a8:bb:87:35:7f:e1:15:c8:96:45:61:
6d:0c:02:ef:61:8e:14:87:26:4a:ae:19:f9:5e:9d:
da:87:d8:e2:b1:85:1f:cb:dd:63:0e:0d:9b:0b:ed:
e0:49:6b:44:53:be:ac:d7:8c:cf:dc:4d:1d:d2:b5:
1a:6d:2b:78:e6:29:57:1e:fa:3a:60:f5:38:4c:e7:
47:57:b8:cb:3f:47:a3:33:c1:1a:3b:0a:2e:79:a7:
a2:b2:b4:2e:e2:ec:32:bd:7e:84:b6:35:5d:40:9a:
a5:60:55:e2:ab:58:eb:fb:ee:82:d4:d1:78:68:42:
94:14:42:d6:2c:72:cb:6b:07:86:f7:45:1c:ec:00:
a1:da:cc:54:88:4b:a8:de:3b:e4:2b:af:c2:75:00:
28:3a:a1:be:48:69:fe:ed:9f:2a:c9:96:df:1d:ba:
a2:a0:4d:48:0a:dc:6e:d7:dc:5f:a0:37:61:1f:53:
22:dc:d4:f6:2d:8b:24:91:c3:25:5d:bc:8a:7d:db:
e3:e1:81:2b:7b:64:b0:f7:25:32:bb:0c:46:23:53:
f1:91:15:0c:1c:6f:92:cf:30:51:9b:7b:11:d0:48:
e9:a4:eb:be:47:52:25:b2:46:9c:b1:33:1a:8a:1e:
dc:34:88:dd:dc:c5:61:8a:bd:22:24:5e:fb:ea:9c:
07:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:B5:7D:ED:D8:D7:EC:4A:70:03:EB:1F:3D:AF:F3:FE:D7:41:E6:D0
X509v3 Authority Key Identifier:
keyid:9F:BF:02:F0:4E:C4:30:8C:B5:B6:07:8B:D0:6A:17:CB:00:D8:33:69
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/n78C8E7EMIy1tgeL0GoXywDYM2k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/caf466-6e6c-4009-a55a-5fa9da03f570/1/n78C8E7EMIy1tgeL0GoXywDYM2k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/caf466-6e6c-4009-a55a-5fa9da03f570/1/n78C8E7EMIy1tgeL0GoXywDYM2k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c5:1f:c8:77:56:92:21:5e:b5:63:71:a6:20:f1:9e:91:27:99:
4a:96:9b:7b:bd:60:d3:d1:88:ba:d4:01:55:28:60:83:23:81:
16:6d:d4:a9:20:3b:d0:45:24:68:cd:d2:e9:19:32:3f:69:b3:
f5:f0:c2:d2:5b:f5:3e:84:98:59:13:e8:8f:86:22:b6:9a:06:
78:70:b2:3c:ad:c7:79:86:a9:b7:d9:db:ee:1e:30:29:23:db:
9c:44:c0:55:91:40:bd:a5:47:52:74:f5:b5:89:be:d2:da:74:
2d:78:48:5a:76:bd:e8:e2:fe:0a:e3:5b:fe:14:78:64:f4:85:
44:52:23:48:99:85:1c:5a:ba:e5:ea:19:9a:9a:2c:f9:8b:87:
87:e2:65:48:20:95:ce:47:46:7c:ec:1e:c1:bf:56:15:ed:c5:
99:b7:4f:00:4e:8e:4a:e3:b5:4a:74:aa:99:a4:a7:03:07:83:
02:b7:02:5a:a7:44:0c:fd:69:3f:e0:a5:9a:5d:37:94:9b:98:
6d:b8:5c:1d:d2:1a:d6:9d:dc:28:02:33:8e:a8:0f:a5:5c:d0:
33:53:7a:81:e6:59:c2:84:c5:5a:7e:a8:41:52:ce:94:c7:e4:
73:d0:5e:a3:58:2e:8a:1c:00:d2:58:9e:75:5b:7c:71:2e:b4:
91:c5:8a:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 04:27:20 2025 by rpki-client