Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/48/f5ed1c-3797-400d-b72f-804cda5243b3/1/n2yY1Ze3gbehDH4O2xxI9rgaX4s.mft
File: n2yY1Ze3gbehDH4O2xxI9rgaX4s.mft (raw, json)
Hash identifier: pcq+HV6XphZPUurGRTns+NqPsHcd1WpGdXMWqcxlxGw=
Subject key identifier: 88:D0:50:AA:64:2C:E4:DB:83:0C:FE:FD:77:31:79:C1:3B:93:98:87
Authority key identifier: 9F:6C:98:D5:97:B7:81:B7:A1:0C:7E:0E:DB:1C:48:F6:B8:1A:5F:8B
Certificate issuer: /CN=9f6c98d597b781b7a10c7e0edb1c48f6b81a5f8b
Certificate serial: 01964067681E24B63A43BB83D102912E489C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/n2yY1Ze3gbehDH4O2xxI9rgaX4s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/48/f5ed1c-3797-400d-b72f-804cda5243b3/1/n2yY1Ze3gbehDH4O2xxI9rgaX4s.mft
Manifest number: 02A1
Signing time: Wed 16 Apr 2025 21:00:40 +0000
Manifest this update: Wed 16 Apr 2025 21:00:40 +0000
Manifest next update: Thu 17 Apr 2025 21:00:40 +0000
Files and hashes: 1: 1uWXPJauvtvifVbThumN2raM6U0.roa (hash: Y17nAyKVcY518yw8/uPGoyc32qYJ3ixC6oOmJrlY3aE=)
2: n2yY1Ze3gbehDH4O2xxI9rgaX4s.crl (hash: q6Ty9+8iv6Khu5owz/RPBP1e+/Q9DLo5Dq9ENsZbNd8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/48/f5ed1c-3797-400d-b72f-804cda5243b3/1/n2yY1Ze3gbehDH4O2xxI9rgaX4s.crl
rsync://rpki.ripe.net/repository/DEFAULT/48/f5ed1c-3797-400d-b72f-804cda5243b3/1/n2yY1Ze3gbehDH4O2xxI9rgaX4s.mft
rsync://rpki.ripe.net/repository/DEFAULT/n2yY1Ze3gbehDH4O2xxI9rgaX4s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 17 Apr 2025 13:16:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:40:67:68:1e:24:b6:3a:43:bb:83:d1:02:91:2e:48:9c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9f6c98d597b781b7a10c7e0edb1c48f6b81a5f8b
Validity
Not Before: Apr 16 21:00:40 2025 GMT
Not After : Apr 17 21:00:40 2025 GMT
Subject: CN=88d050aa642ce4db830cfefd773179c13b939887
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:7a:f5:5f:48:2f:af:1e:e7:10:9b:09:8e:16:
58:40:07:08:50:cf:f0:21:1d:b4:d8:e0:56:f8:95:
13:de:bf:c2:e1:e8:41:ee:be:6e:6b:1c:4a:68:0e:
3e:00:07:fd:44:7c:c1:ea:cd:98:e1:8e:fa:10:2f:
68:d5:d8:5a:e3:84:6b:c9:74:32:2e:9c:8a:b7:eb:
45:90:32:d5:93:c6:92:20:fb:01:1b:0c:c6:41:cd:
47:a5:d9:47:69:ef:0b:3b:e3:c2:13:8f:e4:c3:ff:
9e:2f:ed:76:72:0f:25:0f:d2:60:75:ae:ac:bd:c6:
4b:4c:2b:b0:60:92:26:24:44:ae:2e:1d:6c:da:3f:
58:63:da:ff:2a:be:40:2b:9a:98:b9:ab:96:c6:ef:
35:7c:0b:f1:e0:a4:ed:d3:7f:39:94:7b:30:6b:6b:
2e:04:5f:1a:23:51:21:be:05:c8:c4:19:41:89:2a:
e7:2e:74:ec:9f:f7:13:94:63:11:30:ce:7f:31:a4:
72:a0:7c:62:71:8a:75:cb:68:6a:aa:3b:98:35:0c:
de:be:11:56:51:63:a7:66:54:f5:a6:71:54:16:72:
c7:b6:f8:be:e6:1f:80:55:2d:c3:f8:7c:83:8b:3f:
27:b8:c2:44:0c:2a:3d:1c:5a:bb:8f:02:d6:24:87:
d7:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:D0:50:AA:64:2C:E4:DB:83:0C:FE:FD:77:31:79:C1:3B:93:98:87
X509v3 Authority Key Identifier:
keyid:9F:6C:98:D5:97:B7:81:B7:A1:0C:7E:0E:DB:1C:48:F6:B8:1A:5F:8B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/n2yY1Ze3gbehDH4O2xxI9rgaX4s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/48/f5ed1c-3797-400d-b72f-804cda5243b3/1/n2yY1Ze3gbehDH4O2xxI9rgaX4s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/48/f5ed1c-3797-400d-b72f-804cda5243b3/1/n2yY1Ze3gbehDH4O2xxI9rgaX4s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
62:ee:a9:31:9a:80:bb:62:8b:46:03:be:b6:f9:73:86:34:25:
86:d0:02:f3:c4:0b:b2:2b:ce:54:c2:c2:f5:78:c5:96:68:be:
91:2e:ad:e2:f1:fe:e9:0e:9d:0b:99:04:c8:fb:b2:d4:f9:d9:
6c:15:1b:44:42:6d:43:02:92:46:e2:3b:51:70:b7:8c:f6:9e:
9c:d4:b2:c2:e9:81:5c:57:78:b8:95:8b:7f:d4:5f:51:bd:cc:
d4:a9:11:9c:e2:65:9c:ab:af:86:28:cd:69:67:1c:30:c6:d0:
34:82:79:ac:96:c7:29:37:5d:34:5a:0c:ed:9b:97:20:cf:a6:
64:87:5f:90:fb:4b:f0:76:d3:ca:0a:16:79:59:e3:f5:4d:3b:
60:0d:36:43:70:58:2a:2c:33:6e:e6:1c:cb:f5:eb:09:7d:92:
07:b6:46:e4:2f:a5:d5:b9:80:72:de:bd:15:ec:42:9a:3a:7f:
96:f1:f4:7f:c6:1c:89:3e:5a:f1:42:14:74:fe:00:f8:7a:1a:
02:07:68:0d:1e:d4:af:65:7c:cb:84:cf:22:98:9d:cc:b0:e2:
9c:09:dd:76:e8:09:e0:c6:71:7f:25:0a:bd:ef:e0:49:2e:22:
23:8f:05:a0:9c:ac:df:41:b1:9c:ab:3c:6f:f5:50:84:e9:17:
b4:98:64:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 17 05:41:58 2025 by rpki-client