Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/22/0a3fff-1a42-4044-ae8f-7354a73bda7e/1/n2-3lUF5qWZrTLav40bR4h7DDkU.mft
File: n2-3lUF5qWZrTLav40bR4h7DDkU.mft (raw, json)
Hash identifier: Uv4k8AmfYZYDEn3XrP/bK9MDAzAL+1tAKXEcyFYEkvM=
Subject key identifier: F9:C0:00:78:45:ED:F7:61:90:01:96:12:DE:A6:87:2A:B3:BC:19:0F
Authority key identifier: 9F:6F:B7:95:41:79:A9:66:6B:4C:B6:AF:E3:46:D1:E2:1E:C3:0E:45
Certificate issuer: /CN=9f6fb7954179a9666b4cb6afe346d1e21ec30e45
Certificate serial: 019738E27D64C4563FD1CC76F220D0BC7209
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/n2-3lUF5qWZrTLav40bR4h7DDkU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/22/0a3fff-1a42-4044-ae8f-7354a73bda7e/1/n2-3lUF5qWZrTLav40bR4h7DDkU.mft
Manifest number: 1577
Signing time: Wed 04 Jun 2025 03:00:56 +0000
Manifest this update: Wed 04 Jun 2025 03:00:56 +0000
Manifest next update: Thu 05 Jun 2025 03:00:56 +0000
Files and hashes: 1: Jzi6jJ9SZ3rViS6uZE0u8bf720A.roa (hash: eJjmExeoetRrFmsV6X8Y7xVRrkNxyQjjkQ/pmteWEY0=)
2: cCtlVAhKMx_L9MmcKQdhGeXgd7A.roa (hash: Q1si7hVwLSegXDVNPXeui2AkeRgS0Epsk3MKoikvRr4=)
3: n2-3lUF5qWZrTLav40bR4h7DDkU.crl (hash: +wxxqztSiPbREA0+a9rjHmohL54uvBEnqvFXe0cYmLg=)
4: ozXKoKdXVNYBzwo0Mz0MILNjdCg.roa (hash: Ve119gf9TbBJ6X/Ot4F8LURtnL5ENbzhaQXEL2/zcYA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/22/0a3fff-1a42-4044-ae8f-7354a73bda7e/1/n2-3lUF5qWZrTLav40bR4h7DDkU.crl
rsync://rpki.ripe.net/repository/DEFAULT/22/0a3fff-1a42-4044-ae8f-7354a73bda7e/1/n2-3lUF5qWZrTLav40bR4h7DDkU.mft
rsync://rpki.ripe.net/repository/DEFAULT/n2-3lUF5qWZrTLav40bR4h7DDkU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 05 Jun 2025 03:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:38:e2:7d:64:c4:56:3f:d1:cc:76:f2:20:d0:bc:72:09
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9f6fb7954179a9666b4cb6afe346d1e21ec30e45
Validity
Not Before: Jun 4 03:00:56 2025 GMT
Not After : Jun 5 03:00:56 2025 GMT
Subject: CN=f9c0007845edf76190019612dea6872ab3bc190f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:31:05:43:fe:bf:78:ac:8c:5d:7d:fd:2d:fe:
fa:89:50:dd:ef:03:8c:1b:f1:89:91:95:05:d6:46:
4f:6d:d1:b6:49:7b:67:97:0a:f5:a7:7c:3d:22:d4:
a0:ba:1a:a8:a6:5c:14:c3:b4:41:34:ef:7f:85:da:
68:90:1c:66:4d:06:39:82:a4:49:0d:51:98:8c:bf:
4b:2d:a6:0f:d9:bc:30:71:a4:f9:d1:eb:57:a0:b0:
07:48:4e:b1:93:dc:a9:a2:ac:98:58:fd:df:e6:db:
7c:66:5b:65:05:e2:5e:87:40:7f:98:b8:3b:b2:c6:
24:df:9f:ef:ae:4e:9c:93:14:68:7d:eb:b9:7f:19:
71:1e:55:fe:0f:41:19:ad:24:bb:6a:da:1b:59:96:
df:42:54:84:71:33:74:c7:b5:e0:59:63:e3:b7:70:
89:42:c2:4a:2f:f9:b4:c2:3b:f4:b5:97:58:2e:25:
e1:09:93:b1:23:25:22:71:16:8d:9e:a6:cf:40:a6:
8d:e4:9a:ef:3a:3b:4d:32:29:5c:f2:c9:5b:d2:09:
b6:49:81:8e:0f:b1:60:87:53:ad:8c:47:5f:ba:14:
5f:e1:08:08:86:08:20:ac:38:ff:c0:9a:8d:27:b6:
b6:2b:4e:30:b8:0b:f1:e4:4a:43:aa:ab:47:70:61:
45:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:C0:00:78:45:ED:F7:61:90:01:96:12:DE:A6:87:2A:B3:BC:19:0F
X509v3 Authority Key Identifier:
keyid:9F:6F:B7:95:41:79:A9:66:6B:4C:B6:AF:E3:46:D1:E2:1E:C3:0E:45
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/n2-3lUF5qWZrTLav40bR4h7DDkU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/0a3fff-1a42-4044-ae8f-7354a73bda7e/1/n2-3lUF5qWZrTLav40bR4h7DDkU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/22/0a3fff-1a42-4044-ae8f-7354a73bda7e/1/n2-3lUF5qWZrTLav40bR4h7DDkU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
10:db:39:b3:48:37:c6:3b:47:67:5f:c1:d5:44:6d:8e:00:e7:
f4:71:3d:df:fa:b9:47:b1:ab:ba:6a:4d:fa:d4:e7:7b:d8:19:
39:fa:c1:9a:21:98:0c:c8:d1:3d:e7:74:16:f2:a5:fc:47:10:
20:69:db:d6:fb:2a:ba:4f:d0:5d:45:68:f2:0b:33:d4:77:fa:
63:52:8e:bd:1b:61:05:17:cf:0b:02:75:7c:a4:1b:71:f2:49:
c8:ee:b2:14:49:0b:f3:a8:0d:35:cf:11:23:e6:4b:45:d8:6e:
e1:6e:c5:0f:7d:ff:b2:78:f8:59:44:4f:99:a6:39:de:14:ce:
29:14:fc:a8:13:b9:2f:16:e7:fd:95:f0:f4:2f:13:6c:a2:d7:
fc:64:91:8f:25:dc:79:6a:ce:59:76:c6:2c:dc:0b:e5:9f:91:
d2:25:37:50:d3:4b:38:f4:56:c6:eb:36:28:26:20:4f:22:e0:
2c:99:d2:18:72:fd:46:e3:1a:9e:5c:8c:ce:7e:d0:55:01:68:
02:62:fa:0c:b8:63:d7:06:4f:02:9a:5e:7c:00:fd:c8:57:df:
45:8b:3e:79:9d:da:61:b8:05:8c:c7:9e:c3:86:84:40:af:9e:
9a:50:c0:53:91:12:58:c2:24:58:f7:be:50:4b:72:6d:d2:33:
87:ed:e4:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 4 11:30:24 2025 by rpki-client