Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/dc76ff-2b35-42be-ab56-5df2de08b695/1/N9Zwai4nDLSGu0ckNGPMu_n01co.mft
File: N9Zwai4nDLSGu0ckNGPMu_n01co.mft (raw, json)
Hash identifier: fP8KgBi4DmFli82nMRtXPpjPPQvisrxxcm8bz3dcvJA=
Subject key identifier: CF:83:36:67:38:C4:76:11:0B:07:1C:81:DA:2F:0A:AC:1F:AD:17:64
Authority key identifier: 37:D6:70:6A:2E:27:0C:B4:86:BB:47:24:34:63:CC:BB:F9:F4:D5:CA
Certificate issuer: /CN=37d6706a2e270cb486bb47243463ccbbf9f4d5ca
Certificate serial: 0197CB70CD374ACF40FDC1498C76CFED8149
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/N9Zwai4nDLSGu0ckNGPMu_n01co.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f6/dc76ff-2b35-42be-ab56-5df2de08b695/1/N9Zwai4nDLSGu0ckNGPMu_n01co.mft
Manifest number: 12C4
Signing time: Wed 02 Jul 2025 14:00:56 +0000
Manifest this update: Wed 02 Jul 2025 14:00:56 +0000
Manifest next update: Thu 03 Jul 2025 14:00:56 +0000
Files and hashes: 1: 7YrGIJ8Lq47CmtHh_aA30VmkPjo.roa (hash: hoLOmqh1vosQ/NxuWEBoizkiy56HJ0MD/vugBLaASkY=)
2: N9Zwai4nDLSGu0ckNGPMu_n01co.crl (hash: Xfpre1D8WWrMSybsBOQlaejxYycvcPAS5nFxTFwq60w=)
3: bWi2Mkf_arohbIgqpZEaCaewlho.roa (hash: o4YIfYScSNSPxx9rfmbXoBu7Bh9velBEqxyrfd2MDmI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f6/dc76ff-2b35-42be-ab56-5df2de08b695/1/N9Zwai4nDLSGu0ckNGPMu_n01co.crl
rsync://rpki.ripe.net/repository/DEFAULT/f6/dc76ff-2b35-42be-ab56-5df2de08b695/1/N9Zwai4nDLSGu0ckNGPMu_n01co.mft
rsync://rpki.ripe.net/repository/DEFAULT/N9Zwai4nDLSGu0ckNGPMu_n01co.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 03 Jul 2025 14:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:cb:70:cd:37:4a:cf:40:fd:c1:49:8c:76:cf:ed:81:49
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=37d6706a2e270cb486bb47243463ccbbf9f4d5ca
Validity
Not Before: Jul 2 14:00:56 2025 GMT
Not After : Jul 3 14:00:56 2025 GMT
Subject: CN=cf83366738c476110b071c81da2f0aac1fad1764
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:4c:d6:e9:c8:bf:d5:a9:ab:e3:cd:40:1b:7d:
b0:5c:1a:b6:7c:46:ef:26:4e:18:48:e1:02:ed:59:
9b:15:85:12:cf:ea:6c:56:c0:e2:1a:b4:ab:d3:ee:
28:a3:a7:9f:83:32:53:76:27:99:f8:3a:3e:50:08:
d1:d8:41:75:c0:13:57:c4:d6:0f:d8:54:78:82:a7:
c3:ec:a3:3a:f1:90:73:22:e0:57:e9:03:cb:3a:a0:
f4:60:cc:3f:0c:15:21:10:77:97:17:75:12:48:60:
29:ee:e7:4c:93:a2:3f:9a:d5:15:88:24:54:be:27:
85:d0:b1:02:ca:43:2e:5a:ce:40:30:67:c1:ee:4c:
da:cf:7b:2a:08:79:b5:44:c7:95:6f:03:a4:ec:fb:
cf:7e:c4:fe:e4:c6:03:fe:30:37:30:a5:70:38:5f:
46:d5:03:4a:97:ab:3c:1a:94:8d:61:2d:88:ba:14:
e3:a0:ab:0f:b9:8e:e4:50:14:fd:f2:61:be:28:5f:
71:82:d2:03:96:12:2c:cc:b2:1c:bc:44:ba:ba:d8:
2e:4a:f5:67:95:9b:c7:7d:b8:71:06:36:21:6f:2f:
29:fe:bd:ee:1a:d4:a2:e5:5d:78:ab:01:ba:20:6d:
67:79:3e:f1:fc:5d:f9:82:fd:6a:00:76:75:1a:ad:
02:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:83:36:67:38:C4:76:11:0B:07:1C:81:DA:2F:0A:AC:1F:AD:17:64
X509v3 Authority Key Identifier:
keyid:37:D6:70:6A:2E:27:0C:B4:86:BB:47:24:34:63:CC:BB:F9:F4:D5:CA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/N9Zwai4nDLSGu0ckNGPMu_n01co.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/dc76ff-2b35-42be-ab56-5df2de08b695/1/N9Zwai4nDLSGu0ckNGPMu_n01co.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/dc76ff-2b35-42be-ab56-5df2de08b695/1/N9Zwai4nDLSGu0ckNGPMu_n01co.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
23:20:a1:4d:d3:49:93:8b:f4:33:51:40:56:35:a9:3b:c2:ae:
14:ca:62:61:c0:8d:a4:88:80:79:de:78:22:84:d7:ad:fa:43:
5b:cf:ca:ad:08:43:c2:69:fa:9b:53:63:82:9e:65:68:95:0c:
69:0f:0c:7a:d3:c9:34:38:12:eb:3b:58:5b:7f:ae:de:9d:2e:
89:7f:45:ef:23:bf:74:75:08:88:7a:0f:1c:95:e9:b2:26:40:
68:a7:bf:78:96:b0:81:c3:dd:5b:33:b9:b7:92:a3:9c:a0:25:
06:88:d2:ab:4a:e9:e6:a4:33:f7:f5:0b:bf:70:8c:88:56:19:
6b:b3:c0:69:42:73:3c:b0:d8:77:5d:df:7b:48:a4:68:0e:23:
41:a1:c1:5e:0b:8a:38:c9:f9:ce:a8:7f:a9:fd:65:c7:1e:d1:
91:1a:3b:dc:f4:2a:59:40:88:ed:b7:46:a7:16:5c:8f:bc:9a:
e9:42:47:e7:f7:bc:d7:ea:0c:e2:14:70:d2:bb:48:de:a1:b7:
fb:7c:a8:67:2b:70:80:a5:8c:42:41:04:9c:8c:70:10:e2:be:
24:8a:61:d9:77:e6:06:73:9c:4b:f8:5c:c9:97:6e:3b:d7:70:
95:af:35:c3:c2:fc:14:95:6b:75:c9:9e:f4:7e:ba:cf:2f:bd:
6e:d1:01:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 2 23:36:34 2025 by rpki-client