Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/2f3229-a130-4dc8-a47b-2dc26dc4bc11/1/n2PP8kRuzsvr4BJGNpgLR-CyD6Y.mft
File: n2PP8kRuzsvr4BJGNpgLR-CyD6Y.mft (raw, json)
Hash identifier: jY7Mzo6izXBUqhxLjgBZD73qR2L+pztKnS2fjgUMYjA=
Subject key identifier: DE:8E:8E:2A:40:50:BA:45:E6:08:1F:6F:86:97:CF:AB:0C:6D:97:78
Authority key identifier: 9F:63:CF:F2:44:6E:CE:CB:EB:E0:12:46:36:98:0B:47:E0:B2:0F:A6
Certificate issuer: /CN=9f63cff2446ececbebe0124636980b47e0b20fa6
Certificate serial: 0197470B9CFD7F80F5FA084508F6EF431DC1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/n2PP8kRuzsvr4BJGNpgLR-CyD6Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/02/2f3229-a130-4dc8-a47b-2dc26dc4bc11/1/n2PP8kRuzsvr4BJGNpgLR-CyD6Y.mft
Manifest number: 0CEA
Signing time: Fri 06 Jun 2025 21:00:32 +0000
Manifest this update: Fri 06 Jun 2025 21:00:32 +0000
Manifest next update: Sat 07 Jun 2025 21:00:32 +0000
Files and hashes: 1: 3PWYGF7PsxnPXxj5QLlwFzdRhbc.roa (hash: aJRxgQh7BxmkL4a1Mj0Fr2c3xjK5a/VBrY9HD8oJxXw=)
2: Zui9qtQV4KiP1G1w7-U9vy20ZFM.roa (hash: wpcPrt+AyPc1ASjLftJfcLWQI1C4woYgXnX5ExSKCJw=)
3: n2PP8kRuzsvr4BJGNpgLR-CyD6Y.crl (hash: JRmWCpovMkSBaQKouWJbfoOnRUftH63ZFOu0kwb7tjA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/02/2f3229-a130-4dc8-a47b-2dc26dc4bc11/1/n2PP8kRuzsvr4BJGNpgLR-CyD6Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/02/2f3229-a130-4dc8-a47b-2dc26dc4bc11/1/n2PP8kRuzsvr4BJGNpgLR-CyD6Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/n2PP8kRuzsvr4BJGNpgLR-CyD6Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 07 Jun 2025 21:00:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:47:0b:9c:fd:7f:80:f5:fa:08:45:08:f6:ef:43:1d:c1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9f63cff2446ececbebe0124636980b47e0b20fa6
Validity
Not Before: Jun 6 21:00:32 2025 GMT
Not After : Jun 7 21:00:32 2025 GMT
Subject: CN=de8e8e2a4050ba45e6081f6f8697cfab0c6d9778
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:4e:f5:53:7e:c1:4f:20:44:45:b7:a6:cf:37:
8f:c5:03:d9:32:c1:b7:73:b8:cb:88:e4:95:d0:c6:
78:a0:3d:f2:5a:2c:06:38:4d:b3:c8:74:ff:45:69:
43:85:b4:1a:13:c1:9b:2c:e7:c6:89:a0:96:dd:c1:
ed:70:c9:f7:59:ad:0c:a4:0e:ca:93:1a:1d:41:b8:
30:1b:a0:a5:d2:e4:36:3b:3a:dd:fe:00:83:b2:0e:
6d:48:2a:da:b1:2b:23:0d:52:eb:77:97:f7:e2:f3:
a4:f8:99:6b:64:f8:87:64:44:8a:57:95:49:99:cf:
f7:05:91:52:53:b0:83:0b:83:19:72:0f:53:83:b0:
de:76:36:fe:12:21:d5:61:a5:df:3c:c6:eb:03:1b:
b4:7a:f9:2c:68:41:c5:31:d8:54:d4:6f:b2:bd:83:
83:3b:77:3b:ea:e7:77:d9:53:c9:e5:f7:1d:7d:3e:
a5:00:f1:66:c9:e7:6d:9c:98:f9:ea:da:58:8e:36:
a2:d5:a3:c3:65:ac:fc:b6:b1:19:e4:75:ae:15:0b:
5d:f6:5f:1e:a6:03:f9:5a:7d:6e:5f:75:e0:c2:85:
66:9e:a1:b0:1f:26:35:00:ba:6f:61:6b:41:f8:4f:
53:a1:1a:d0:e1:2c:77:ae:75:14:8c:2c:28:28:80:
ea:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:8E:8E:2A:40:50:BA:45:E6:08:1F:6F:86:97:CF:AB:0C:6D:97:78
X509v3 Authority Key Identifier:
keyid:9F:63:CF:F2:44:6E:CE:CB:EB:E0:12:46:36:98:0B:47:E0:B2:0F:A6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/n2PP8kRuzsvr4BJGNpgLR-CyD6Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/2f3229-a130-4dc8-a47b-2dc26dc4bc11/1/n2PP8kRuzsvr4BJGNpgLR-CyD6Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/02/2f3229-a130-4dc8-a47b-2dc26dc4bc11/1/n2PP8kRuzsvr4BJGNpgLR-CyD6Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8c:dc:8f:78:c5:9c:66:d1:1a:f0:5a:7e:34:d3:fa:11:fc:2e:
ce:ce:d2:8f:32:59:85:70:28:fc:f3:45:c3:99:46:b3:11:4c:
72:9e:8c:7b:30:13:18:b0:07:28:41:d7:7e:ae:9f:b8:4f:5c:
f3:f8:9f:1d:e8:21:78:d0:1b:90:fd:5e:f9:40:61:f5:ff:a0:
d7:2b:57:7a:a0:a3:cb:6f:59:98:cf:e2:b6:af:0c:12:4a:fc:
68:0a:fc:0f:4c:84:05:a5:5f:2a:6b:64:a1:0f:eb:cb:40:ca:
e2:a8:f5:eb:77:3d:23:d0:c4:ab:55:53:c0:95:65:3e:cd:61:
d3:27:8f:59:53:99:33:87:8d:08:d1:56:1b:8c:0b:74:a3:8e:
74:88:e2:4e:41:68:fd:17:50:5d:b7:15:03:7a:d6:0e:6b:d7:
7b:3e:4e:2a:fe:37:9c:8a:17:aa:1d:93:83:ae:d1:2c:23:82:
94:c3:2c:18:e1:ff:7a:e9:a8:8c:bb:84:cf:10:9e:87:c1:e2:
f6:07:49:3c:86:f3:e2:f2:dd:62:7d:98:f2:1e:ee:09:3e:80:
ce:68:33:c0:22:f9:5f:19:05:61:c1:1c:79:76:ed:0c:e6:01:
ba:3a:81:8a:c8:a5:39:91:42:94:8c:f2:88:2a:0b:f5:ce:e7:
14:a4:e9:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 02:36:54 2025 by rpki-client