Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ea/c77833-31ae-4412-b049-70a4a8d7c43f/1/n4kf80d-1_2qz64uPw36ZP2SrAw.mft
File: n4kf80d-1_2qz64uPw36ZP2SrAw.mft (raw, json)
Hash identifier: /VV1vXWL74fOUEHCYkhsyTyU/LaelLRfLkE+AJf2zTI=
Subject key identifier: 0D:09:43:2C:54:6D:F5:4C:46:53:60:D3:5E:AC:7A:E5:64:F0:86:6F
Authority key identifier: 9F:89:1F:F3:47:7E:D7:FD:AA:CF:AE:2E:3F:0D:FA:64:FD:92:AC:0C
Certificate issuer: /CN=9f891ff3477ed7fdaacfae2e3f0dfa64fd92ac0c
Certificate serial: 0197B6A1DAF8ADB7A5157291126E71874B9F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/n4kf80d-1_2qz64uPw36ZP2SrAw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ea/c77833-31ae-4412-b049-70a4a8d7c43f/1/n4kf80d-1_2qz64uPw36ZP2SrAw.mft
Manifest number: 09F3
Signing time: Sat 28 Jun 2025 13:02:29 +0000
Manifest this update: Sat 28 Jun 2025 13:02:29 +0000
Manifest next update: Sun 29 Jun 2025 13:02:29 +0000
Files and hashes: 1: D3yjJU5h_FTDERrGNrsGZ8LgMxc.roa (hash: zDBANuUPdW/jRqqSGkjw8mcyfQtAQBZkgjZavcu4Hqg=)
2: n4kf80d-1_2qz64uPw36ZP2SrAw.crl (hash: o7B/BXaQLu15dDnGNyGJhxnJQBBFkiYQGFT25JGu5jM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ea/c77833-31ae-4412-b049-70a4a8d7c43f/1/n4kf80d-1_2qz64uPw36ZP2SrAw.crl
rsync://rpki.ripe.net/repository/DEFAULT/ea/c77833-31ae-4412-b049-70a4a8d7c43f/1/n4kf80d-1_2qz64uPw36ZP2SrAw.mft
rsync://rpki.ripe.net/repository/DEFAULT/n4kf80d-1_2qz64uPw36ZP2SrAw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 13:02:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:a1:da:f8:ad:b7:a5:15:72:91:12:6e:71:87:4b:9f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9f891ff3477ed7fdaacfae2e3f0dfa64fd92ac0c
Validity
Not Before: Jun 28 13:02:29 2025 GMT
Not After : Jun 29 13:02:29 2025 GMT
Subject: CN=0d09432c546df54c465360d35eac7ae564f0866f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:c6:79:10:48:34:34:6c:9c:38:5e:6a:4e:86:
d5:75:39:c0:53:ea:85:dd:20:3f:04:41:47:54:04:
4d:c9:52:56:c1:f9:b8:49:53:e5:85:dd:79:85:bb:
e0:30:12:c3:d0:20:1a:f5:57:be:35:4a:14:f8:7c:
10:93:84:af:b7:f2:47:5b:f6:e7:49:63:e7:cb:eb:
58:b6:0d:bd:40:49:5d:70:d4:2c:18:78:72:15:1d:
aa:2f:35:11:0e:bc:a1:ae:e8:ef:e0:f6:c9:10:29:
89:05:7b:83:e9:71:22:1d:82:3c:93:9c:5e:ca:73:
3b:72:85:63:4d:c8:5c:db:0a:a0:3c:17:59:ec:af:
95:ec:ba:b2:67:e1:37:48:30:11:eb:f7:4a:10:2c:
86:d3:bc:f3:e5:30:d7:90:e5:2f:80:88:af:2e:31:
32:66:d1:f2:21:48:28:98:78:3e:80:53:28:31:56:
d6:98:2b:2a:94:3c:58:65:07:6a:c6:2f:83:ca:ac:
71:77:2b:c6:34:68:30:6b:ac:f1:02:44:eb:1d:53:
fd:85:74:87:b3:53:21:fb:b3:bf:3d:b3:92:c2:ae:
cc:6b:b4:8e:13:e7:b3:35:23:37:71:93:65:ea:ef:
c7:dd:cb:5c:70:85:43:dc:ad:6f:e1:e2:20:ac:51:
f4:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:09:43:2C:54:6D:F5:4C:46:53:60:D3:5E:AC:7A:E5:64:F0:86:6F
X509v3 Authority Key Identifier:
keyid:9F:89:1F:F3:47:7E:D7:FD:AA:CF:AE:2E:3F:0D:FA:64:FD:92:AC:0C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/n4kf80d-1_2qz64uPw36ZP2SrAw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/c77833-31ae-4412-b049-70a4a8d7c43f/1/n4kf80d-1_2qz64uPw36ZP2SrAw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/c77833-31ae-4412-b049-70a4a8d7c43f/1/n4kf80d-1_2qz64uPw36ZP2SrAw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5e:a2:c9:1b:93:3c:d9:db:6a:04:6b:a3:aa:f8:c6:6f:d7:44:
51:9c:fc:60:37:df:b9:c8:9e:b7:a8:ba:bb:d7:5f:64:52:54:
fb:c1:01:9c:a4:49:a4:ea:6c:a7:7d:42:8b:e6:c0:6b:5b:f9:
fe:8c:7d:dd:b3:52:9e:66:09:0e:95:91:3f:27:b5:08:b5:6a:
46:56:27:19:e0:a6:c6:80:cd:b1:1f:d8:ee:f7:4c:bb:27:cb:
67:8c:69:e8:c2:74:ef:b8:17:b6:b3:22:f5:a7:e0:18:b9:92:
98:b3:21:dc:fb:ce:32:00:d6:43:91:93:13:83:09:ae:64:82:
64:b1:48:79:f9:dd:5b:b4:2a:c5:f9:4c:7c:bd:8a:d8:b7:8b:
fc:cf:f2:cd:75:1c:4d:a1:a2:76:0f:2c:7f:a5:c8:cf:51:bc:
8b:4f:16:4e:e7:82:c1:23:a9:9a:c9:5d:1b:88:dc:2a:81:52:
e3:30:2b:17:da:a1:3c:85:d0:a3:c6:51:04:89:22:c1:ac:39:
b5:24:45:49:4b:61:f0:82:e7:fd:13:5d:9d:1c:57:28:2b:00:
e2:9b:b2:41:c0:91:4d:27:35:2e:b7:f1:b7:3a:3b:93:03:cd:
2e:cc:d5:50:52:a8:a7:5e:49:b1:af:ca:22:56:30:f7:5e:9d:
d2:01:a5:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 22:41:24 2025 by rpki-client