Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/2f3229-a130-4dc8-a47b-2dc26dc4bc11/1/n2PP8kRuzsvr4BJGNpgLR-CyD6Y.mft
File: n2PP8kRuzsvr4BJGNpgLR-CyD6Y.mft (raw, json)
Hash identifier: 0iO+tLxpg4I6f1GJ/QLMK9r+DIpr9DqyVZwcNqRXGyM=
Subject key identifier: E7:A8:10:EF:D9:9C:A4:11:7F:E9:59:D2:AA:34:C1:B1:B5:B1:D2:00
Authority key identifier: 9F:63:CF:F2:44:6E:CE:CB:EB:E0:12:46:36:98:0B:47:E0:B2:0F:A6
Certificate issuer: /CN=9f63cff2446ececbebe0124636980b47e0b20fa6
Certificate serial: 01986AA7EEEEC3D03B20D4801719705E0808
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/n2PP8kRuzsvr4BJGNpgLR-CyD6Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/02/2f3229-a130-4dc8-a47b-2dc26dc4bc11/1/n2PP8kRuzsvr4BJGNpgLR-CyD6Y.mft
Manifest number: 0D81
Signing time: Sat 02 Aug 2025 12:00:47 +0000
Manifest this update: Sat 02 Aug 2025 12:00:47 +0000
Manifest next update: Sun 03 Aug 2025 12:00:47 +0000
Files and hashes: 1: 3PWYGF7PsxnPXxj5QLlwFzdRhbc.roa (hash: aJRxgQh7BxmkL4a1Mj0Fr2c3xjK5a/VBrY9HD8oJxXw=)
2: Zui9qtQV4KiP1G1w7-U9vy20ZFM.roa (hash: wpcPrt+AyPc1ASjLftJfcLWQI1C4woYgXnX5ExSKCJw=)
3: n2PP8kRuzsvr4BJGNpgLR-CyD6Y.crl (hash: HcpPZHgK3ZAl2de/GGC8LJe72H9PzDAxpeRiH+k7D10=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/02/2f3229-a130-4dc8-a47b-2dc26dc4bc11/1/n2PP8kRuzsvr4BJGNpgLR-CyD6Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/02/2f3229-a130-4dc8-a47b-2dc26dc4bc11/1/n2PP8kRuzsvr4BJGNpgLR-CyD6Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/n2PP8kRuzsvr4BJGNpgLR-CyD6Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 03 Aug 2025 09:20:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:6a:a7:ee:ee:c3:d0:3b:20:d4:80:17:19:70:5e:08:08
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9f63cff2446ececbebe0124636980b47e0b20fa6
Validity
Not Before: Aug 2 12:00:47 2025 GMT
Not After : Aug 3 12:00:47 2025 GMT
Subject: CN=e7a810efd99ca4117fe959d2aa34c1b1b5b1d200
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:ad:10:69:23:15:df:5d:3f:85:ff:71:05:0d:
72:1d:27:8d:03:3e:d2:ed:df:37:06:7e:a0:a3:26:
40:5c:ab:8e:40:c1:f4:25:4f:fc:2d:a9:5b:cd:2d:
58:0f:83:9f:df:97:a2:82:d3:ca:3d:30:e3:7a:5d:
31:23:24:38:7b:96:a8:76:ef:53:89:c6:1f:cf:2b:
ea:7d:60:28:39:94:a5:ac:fc:71:6b:54:40:68:37:
eb:b7:52:10:6f:94:6e:fc:78:87:e2:1c:b8:a1:6c:
2e:cf:a1:9e:c9:88:58:78:ce:b8:fd:40:70:5f:58:
b3:f9:ab:62:11:07:90:70:c0:6f:0f:b7:da:f7:e9:
63:37:94:bb:1b:32:bc:ef:c2:8b:17:32:53:5e:eb:
7d:00:8a:94:2b:a7:69:6b:e1:86:14:c1:e6:75:de:
a5:22:4d:cb:31:c5:93:20:c6:79:65:d4:97:4c:94:
3c:44:d8:32:4d:3e:f6:b2:2e:77:35:17:ab:88:d7:
05:25:63:5c:ae:40:f6:fe:05:41:c9:b6:41:a1:06:
d9:cc:85:3b:a9:31:c3:21:17:0a:28:67:e9:ea:67:
6d:33:ce:52:d0:5d:4c:e4:4a:09:5a:da:76:80:23:
88:9a:bc:a7:a6:40:2b:8e:1c:5f:d1:27:aa:35:48:
7f:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:A8:10:EF:D9:9C:A4:11:7F:E9:59:D2:AA:34:C1:B1:B5:B1:D2:00
X509v3 Authority Key Identifier:
keyid:9F:63:CF:F2:44:6E:CE:CB:EB:E0:12:46:36:98:0B:47:E0:B2:0F:A6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/n2PP8kRuzsvr4BJGNpgLR-CyD6Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/2f3229-a130-4dc8-a47b-2dc26dc4bc11/1/n2PP8kRuzsvr4BJGNpgLR-CyD6Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/02/2f3229-a130-4dc8-a47b-2dc26dc4bc11/1/n2PP8kRuzsvr4BJGNpgLR-CyD6Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4a:3a:fc:88:73:de:72:55:7e:bd:5b:fe:c0:3c:74:6d:10:ea:
62:46:16:8d:32:fe:95:ff:67:bb:8a:f1:bc:8f:60:17:d3:dc:
48:90:be:b1:0a:44:a8:27:83:92:2f:a2:a0:03:6d:8e:c3:83:
e5:13:db:02:07:d4:7e:4f:13:10:c4:a4:ed:de:a7:90:3e:9a:
b5:a5:59:dd:68:ab:d3:27:1c:a1:f1:85:eb:cd:59:22:c3:54:
e0:6b:95:9a:8a:3e:89:60:8f:8e:fa:d8:21:01:99:f0:d7:39:
da:b3:8a:82:a1:f4:5b:ed:d5:31:bb:2a:97:2c:39:05:fc:c2:
dc:c9:ff:02:72:eb:c5:7b:25:f1:84:ff:cd:38:d1:23:87:92:
df:4a:5a:ba:c9:fc:73:ae:4b:f3:51:67:b3:73:32:49:ef:ba:
67:de:49:1f:5a:fb:6e:ef:fd:5c:10:07:e4:a4:e2:92:9c:cf:
67:79:e0:ff:b0:19:d9:93:6b:a3:96:ad:ea:de:54:34:8d:7e:
5c:68:fb:11:07:52:fb:72:f0:63:cf:00:10:e1:1b:29:d5:55:
cb:30:cc:fd:97:60:de:55:0c:f8:61:e3:fa:5c:52:f9:73:49:
98:c6:f9:12:99:d1:ae:63:4f:38:ca:ab:a4:70:74:4a:87:85:
68:81:cc:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 2 18:15:18 2025 by rpki-client