Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0a/f033f1-2f5d-46d1-9194-63f301889486/1/aN2-9_HN2K0ScWDyDqCj9rc_pKI.mft
File: aN2-9_HN2K0ScWDyDqCj9rc_pKI.mft (raw, json)
Hash identifier: pFGmQK8KmeWV81ti9TE4OBl5zDRzbLzGwsQE37046VY=
Subject key identifier: 71:8F:46:65:F4:4D:49:79:49:DB:66:BD:A7:4D:11:A5:85:5E:D7:6A
Authority key identifier: 68:DD:BE:F7:F1:CD:D8:AD:12:71:60:F2:0E:A0:A3:F6:B7:3F:A4:A2
Certificate issuer: /CN=68ddbef7f1cdd8ad127160f20ea0a3f6b73fa4a2
Certificate serial: 01965EA89E61FF61C3972BB201A1DD2B7015
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aN2-9_HN2K0ScWDyDqCj9rc_pKI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0a/f033f1-2f5d-46d1-9194-63f301889486/1/aN2-9_HN2K0ScWDyDqCj9rc_pKI.mft
Manifest number: 0784
Signing time: Tue 22 Apr 2025 18:00:31 +0000
Manifest this update: Tue 22 Apr 2025 18:00:31 +0000
Manifest next update: Wed 23 Apr 2025 18:00:31 +0000
Files and hashes: 1: aN2-9_HN2K0ScWDyDqCj9rc_pKI.crl (hash: OKltho8ksGszhfpt5gQNaHgja/Vy2vaxpkNxtfxw32M=)
2: uPEejKeFHwtXb-AtaoWRNmQjDGA.roa (hash: v3yjbG7P5ZTU4wRZpuwJQttHEpL//NSRVp6n0qXaPGc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0a/f033f1-2f5d-46d1-9194-63f301889486/1/aN2-9_HN2K0ScWDyDqCj9rc_pKI.crl
rsync://rpki.ripe.net/repository/DEFAULT/0a/f033f1-2f5d-46d1-9194-63f301889486/1/aN2-9_HN2K0ScWDyDqCj9rc_pKI.mft
rsync://rpki.ripe.net/repository/DEFAULT/aN2-9_HN2K0ScWDyDqCj9rc_pKI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Apr 2025 14:46:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:5e:a8:9e:61:ff:61:c3:97:2b:b2:01:a1:dd:2b:70:15
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=68ddbef7f1cdd8ad127160f20ea0a3f6b73fa4a2
Validity
Not Before: Apr 22 18:00:31 2025 GMT
Not After : Apr 23 18:00:31 2025 GMT
Subject: CN=718f4665f44d497949db66bda74d11a5855ed76a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:c2:e3:e4:f9:d9:59:53:fd:ab:4f:66:e5:93:
78:c5:e4:0b:17:e8:05:b4:91:f3:81:a3:97:d3:45:
ca:b4:af:f5:7b:31:d6:e9:be:9d:74:f6:ac:ad:ed:
c4:38:cd:69:ac:77:fe:fa:09:84:f4:56:3d:d5:6f:
f6:c4:5e:fe:b4:7e:53:1f:28:02:73:be:b5:08:64:
02:2f:7c:31:56:96:69:d9:20:4e:ac:c4:9f:10:7e:
a3:8b:8e:48:9e:81:e0:41:7d:24:4f:31:17:70:5c:
3b:cf:53:60:1e:ad:78:a5:74:15:bc:95:53:62:96:
36:22:00:f1:dc:07:f2:1e:fb:7a:dd:35:e2:17:e5:
d4:52:96:87:92:7f:24:4e:6e:a0:b5:33:e0:ba:ec:
33:88:11:bc:7a:b5:2e:fb:9a:cb:5b:5c:04:e9:3c:
05:38:49:a2:61:5e:4a:ee:73:4c:25:fb:e1:dc:e7:
59:00:70:0b:a0:ed:b9:c4:9c:a6:3c:7b:b4:56:84:
37:32:b5:18:24:e0:e0:56:5f:62:5e:63:fa:62:5f:
f8:ec:11:3f:46:a7:86:cd:b3:bf:58:81:8e:34:86:
1a:c6:6a:8b:a6:1f:67:0c:a0:3f:c3:6a:a5:dc:aa:
0e:83:92:b2:95:45:08:75:18:09:2c:bf:12:0a:d6:
2f:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:8F:46:65:F4:4D:49:79:49:DB:66:BD:A7:4D:11:A5:85:5E:D7:6A
X509v3 Authority Key Identifier:
keyid:68:DD:BE:F7:F1:CD:D8:AD:12:71:60:F2:0E:A0:A3:F6:B7:3F:A4:A2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aN2-9_HN2K0ScWDyDqCj9rc_pKI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/f033f1-2f5d-46d1-9194-63f301889486/1/aN2-9_HN2K0ScWDyDqCj9rc_pKI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/f033f1-2f5d-46d1-9194-63f301889486/1/aN2-9_HN2K0ScWDyDqCj9rc_pKI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
02:54:32:9a:e2:bb:ed:c8:70:83:f4:40:da:28:db:51:f0:a6:
13:df:3c:a9:bf:62:3a:e9:3a:65:f7:a0:8f:85:24:01:1a:96:
ec:76:6a:01:d5:42:6c:b2:d2:02:ac:15:95:68:f6:e4:f5:7d:
42:99:d8:b3:fe:f5:75:77:28:34:22:cc:2c:83:b2:21:a9:c4:
73:57:7a:ac:72:05:f8:88:39:76:a5:3f:d2:4d:2a:f8:79:d4:
f7:d0:75:d7:f0:73:36:01:d2:8c:ea:5d:58:47:7e:08:1d:0f:
fd:d2:cc:04:14:af:e0:49:88:28:75:c9:c3:15:39:b3:87:d2:
69:21:f0:07:26:13:5b:06:89:61:ec:9a:c0:b8:b8:70:1c:10:
4e:91:3b:88:69:8b:9d:a3:b2:1d:7d:51:cd:3d:ec:ad:11:0d:
c9:c6:ef:b1:90:e7:c2:51:44:e1:5f:aa:af:00:b3:80:45:52:
6a:12:9a:b7:e9:3f:a2:80:ac:df:1c:83:3e:3a:f0:7c:a9:cf:
30:16:17:9a:fb:b2:9e:bd:7f:70:05:66:90:ab:81:84:d9:80:
d1:a0:51:21:6a:46:5f:3a:da:fe:bd:8f:16:74:80:1d:c2:f1:
2e:46:57:b9:20:d6:20:0e:e9:03:35:a2:c9:23:d8:92:50:27:
7a:fe:be:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 21:06:18 2025 by rpki-client