Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/48/f5ed1c-3797-400d-b72f-804cda5243b3/1/n2yY1Ze3gbehDH4O2xxI9rgaX4s.mft
File: n2yY1Ze3gbehDH4O2xxI9rgaX4s.mft (raw, json)
Hash identifier: 4K3L0KFlG/6zRqHq4V41kwkZzECHzdKTcbtkIGJzjXI=
Subject key identifier: 43:B4:0A:DE:6F:E7:68:14:F1:6F:2C:13:C6:3F:7B:8F:7E:26:00:2C
Authority key identifier: 9F:6C:98:D5:97:B7:81:B7:A1:0C:7E:0E:DB:1C:48:F6:B8:1A:5F:8B
Certificate issuer: /CN=9f6c98d597b781b7a10c7e0edb1c48f6b81a5f8b
Certificate serial: 01974EC5F16A4F6493A9FAC93301B78E401B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/n2yY1Ze3gbehDH4O2xxI9rgaX4s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/48/f5ed1c-3797-400d-b72f-804cda5243b3/1/n2yY1Ze3gbehDH4O2xxI9rgaX4s.mft
Manifest number: 032D
Signing time: Sun 08 Jun 2025 09:01:24 +0000
Manifest this update: Sun 08 Jun 2025 09:01:24 +0000
Manifest next update: Mon 09 Jun 2025 09:01:24 +0000
Files and hashes: 1: 1uWXPJauvtvifVbThumN2raM6U0.roa (hash: Y17nAyKVcY518yw8/uPGoyc32qYJ3ixC6oOmJrlY3aE=)
2: n2yY1Ze3gbehDH4O2xxI9rgaX4s.crl (hash: YJ6LPXAKzC4FkjR4rk61BNp0L0Oy83KQoeBBq70n5a8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/48/f5ed1c-3797-400d-b72f-804cda5243b3/1/n2yY1Ze3gbehDH4O2xxI9rgaX4s.crl
rsync://rpki.ripe.net/repository/DEFAULT/48/f5ed1c-3797-400d-b72f-804cda5243b3/1/n2yY1Ze3gbehDH4O2xxI9rgaX4s.mft
rsync://rpki.ripe.net/repository/DEFAULT/n2yY1Ze3gbehDH4O2xxI9rgaX4s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 09 Jun 2025 03:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4e:c5:f1:6a:4f:64:93:a9:fa:c9:33:01:b7:8e:40:1b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9f6c98d597b781b7a10c7e0edb1c48f6b81a5f8b
Validity
Not Before: Jun 8 09:01:24 2025 GMT
Not After : Jun 9 09:01:24 2025 GMT
Subject: CN=43b40ade6fe76814f16f2c13c63f7b8f7e26002c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:77:ee:4f:a5:1b:dd:62:0a:31:34:9e:b8:84:
09:1c:a3:2f:22:5b:58:59:5d:15:84:1f:ad:07:ed:
a6:7a:a1:3d:97:12:e8:5d:27:7a:fe:8d:60:81:53:
b0:34:82:b0:57:93:5e:7d:f0:4a:e6:3c:e4:ef:24:
36:2e:62:9f:73:25:88:ff:21:26:44:e1:18:55:69:
dc:e4:70:83:b3:c9:fb:d5:d9:58:65:91:9f:c6:3c:
72:ef:c5:93:50:e5:61:16:e1:2a:ad:f4:34:91:b9:
89:95:72:e0:f7:ec:9b:df:63:36:f4:9d:ad:a0:ee:
71:bb:ea:cd:df:64:71:16:c6:fb:d2:3e:af:0b:e4:
fd:b2:b0:4b:bc:bf:62:cc:b7:48:07:82:d6:54:97:
6a:1a:88:a5:fe:f7:eb:6f:1d:e0:d0:9f:e6:99:8e:
75:b3:de:b4:8a:d7:c6:c9:94:68:bf:c3:8c:e8:b9:
d4:2b:02:7f:8f:31:63:40:de:ac:06:85:c3:b1:90:
2c:dc:7f:ae:4a:66:ee:40:b4:5d:40:67:03:f6:eb:
db:81:b6:d6:85:2c:96:f8:db:14:35:35:3e:21:87:
de:fb:42:d1:60:ae:2b:da:4b:6f:63:e1:68:ec:3e:
a6:d6:12:01:3d:60:c9:04:e9:42:a5:9c:2e:ce:ac:
97:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:B4:0A:DE:6F:E7:68:14:F1:6F:2C:13:C6:3F:7B:8F:7E:26:00:2C
X509v3 Authority Key Identifier:
keyid:9F:6C:98:D5:97:B7:81:B7:A1:0C:7E:0E:DB:1C:48:F6:B8:1A:5F:8B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/n2yY1Ze3gbehDH4O2xxI9rgaX4s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/48/f5ed1c-3797-400d-b72f-804cda5243b3/1/n2yY1Ze3gbehDH4O2xxI9rgaX4s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/48/f5ed1c-3797-400d-b72f-804cda5243b3/1/n2yY1Ze3gbehDH4O2xxI9rgaX4s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ce:1e:4f:fa:2f:e6:43:c4:f7:bc:77:a2:73:6e:6e:d1:5e:e6:
95:60:f3:b6:33:cd:59:c7:7c:43:8e:f5:54:c5:26:a7:64:0e:
d7:52:01:a0:cf:d5:ee:5f:17:2b:30:e6:d5:29:77:cb:93:b2:
bb:93:5c:82:95:a9:0d:e5:b8:e3:aa:d3:09:fd:d8:1d:35:35:
b5:6e:f2:23:c1:fc:ed:cf:10:4f:17:00:8b:1c:fd:79:c4:a3:
d0:3c:e4:9d:9d:dd:ba:b4:36:b9:82:28:d8:a4:3b:8a:a2:ae:
87:45:96:53:21:e6:d7:7a:b8:68:6c:7f:e6:a9:db:14:38:7c:
ba:37:18:0c:13:9d:02:f3:48:2c:8f:e5:f5:d8:94:22:4b:22:
a1:a0:e3:71:55:dc:33:7f:15:60:17:94:7c:90:c4:b3:18:de:
67:46:43:5b:90:32:4b:66:cf:8c:96:7e:d5:fb:5b:78:cd:a4:
f1:d5:27:4e:6b:c7:99:90:3c:13:53:fd:0e:bc:28:ee:5b:2e:
1b:ac:11:3b:a0:3d:d9:ad:3b:23:5b:19:87:cb:14:2c:a7:b0:
e4:24:dc:f6:34:8e:4e:0b:b1:40:31:8a:75:4f:29:e7:8e:4c:
25:47:95:b5:a3:94:2b:d8:78:17:8b:06:e5:4a:64:bc:57:2f:
ff:97:f7:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 13:34:14 2025 by rpki-client