Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/33541a-f9ac-475a-b297-88a0e450a17b/1/N2PHEGpfJkAWLnmAWD6rW9gAjEU.mft
File: N2PHEGpfJkAWLnmAWD6rW9gAjEU.mft (raw, json)
Hash identifier: sgGzG6JOvwBHwfmeKftBzYoYqlykxPHqyBY0PC3TWUs=
Subject key identifier: 9F:43:F2:55:36:A3:02:AE:44:07:C9:ED:9D:DD:2A:13:E2:46:66:7A
Authority key identifier: 37:63:C7:10:6A:5F:26:40:16:2E:79:80:58:3E:AB:5B:D8:00:8C:45
Certificate issuer: /CN=3763c7106a5f2640162e7980583eab5bd8008c45
Certificate serial: 019748F9D7654083227B80C097E21F9CC628
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/N2PHEGpfJkAWLnmAWD6rW9gAjEU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/33541a-f9ac-475a-b297-88a0e450a17b/1/N2PHEGpfJkAWLnmAWD6rW9gAjEU.mft
Manifest number: 10D1
Signing time: Sat 07 Jun 2025 06:00:22 +0000
Manifest this update: Sat 07 Jun 2025 06:00:22 +0000
Manifest next update: Sun 08 Jun 2025 06:00:22 +0000
Files and hashes: 1: JqPeTKIiSqFLnMuoE0z5MMpECyE.roa (hash: Sm0VFijktfATyc4h+uw4DoW/FSQrn3UdeoSnPalbaPo=)
2: N2PHEGpfJkAWLnmAWD6rW9gAjEU.crl (hash: kYzPqtE1hjbnsNldQkUjwVlmQnNmgJIk+k+Bje1pBig=)
3: VmdUY2uJ9NapTyZJ8UBdjlgGJQQ.roa (hash: 53UxHJyDkYLtFVil6COplJSwSFn/MNxw2tMZPgc57WQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/33541a-f9ac-475a-b297-88a0e450a17b/1/N2PHEGpfJkAWLnmAWD6rW9gAjEU.crl
rsync://rpki.ripe.net/repository/DEFAULT/5a/33541a-f9ac-475a-b297-88a0e450a17b/1/N2PHEGpfJkAWLnmAWD6rW9gAjEU.mft
rsync://rpki.ripe.net/repository/DEFAULT/N2PHEGpfJkAWLnmAWD6rW9gAjEU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 06:00:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:48:f9:d7:65:40:83:22:7b:80:c0:97:e2:1f:9c:c6:28
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3763c7106a5f2640162e7980583eab5bd8008c45
Validity
Not Before: Jun 7 06:00:22 2025 GMT
Not After : Jun 8 06:00:22 2025 GMT
Subject: CN=9f43f25536a302ae4407c9ed9ddd2a13e246667a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:9f:23:e5:fc:5a:2d:02:95:f7:3f:50:22:e3:
34:c9:02:d9:43:72:4b:d4:b6:49:ba:bc:8f:6e:b8:
b6:64:fd:af:79:80:f3:0d:aa:f6:1b:f5:33:e1:72:
b6:78:82:3c:fe:7a:5d:86:2b:02:58:56:0e:63:af:
5c:ce:82:a1:5b:63:98:59:b8:87:3d:ce:9b:21:54:
60:05:3d:74:72:41:e6:bb:9b:2e:21:7e:f5:c6:a8:
57:5f:9b:56:63:24:8e:8e:63:cf:bf:33:77:60:67:
30:eb:d4:ad:a8:a6:55:03:21:dd:d7:62:d8:43:92:
c6:46:dc:e8:77:49:56:37:ed:cd:4a:00:57:9f:66:
8d:b7:a8:3f:9d:bf:37:62:01:14:33:59:a5:00:02:
f8:d1:fd:9d:9b:49:42:63:9f:00:d9:bf:2d:56:fb:
35:bc:53:ed:38:03:75:ac:1a:2f:21:d3:46:0d:25:
f9:1e:e5:69:8b:92:bc:98:3b:5d:fc:30:69:cd:77:
c4:12:83:42:65:f6:00:89:0d:25:c9:8c:21:d5:71:
08:b8:88:c0:49:9f:dc:08:72:d5:24:f7:f0:03:6b:
19:d9:12:45:8a:4f:d3:f2:1d:3e:07:9b:82:fb:1a:
d1:63:b6:a3:97:2a:2c:df:cc:0f:e0:9e:cf:02:6a:
97:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:43:F2:55:36:A3:02:AE:44:07:C9:ED:9D:DD:2A:13:E2:46:66:7A
X509v3 Authority Key Identifier:
keyid:37:63:C7:10:6A:5F:26:40:16:2E:79:80:58:3E:AB:5B:D8:00:8C:45
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/N2PHEGpfJkAWLnmAWD6rW9gAjEU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/33541a-f9ac-475a-b297-88a0e450a17b/1/N2PHEGpfJkAWLnmAWD6rW9gAjEU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/33541a-f9ac-475a-b297-88a0e450a17b/1/N2PHEGpfJkAWLnmAWD6rW9gAjEU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9b:33:81:9a:e2:ba:02:9b:95:34:eb:d2:15:56:55:dd:a5:ae:
85:79:34:a9:d2:90:cb:27:67:5c:17:ac:41:3c:de:0f:e4:e1:
3c:b8:64:f8:7f:95:d4:25:1b:cf:f3:53:9f:ca:66:f6:51:ac:
7c:bc:0c:66:ce:c2:52:38:13:df:cd:32:ba:ef:7a:93:35:84:
f3:82:80:58:bb:61:19:95:e7:14:66:42:cd:46:4a:c6:d8:86:
bb:c3:85:a1:0c:14:d1:e4:80:1c:ea:5b:54:f4:24:99:21:f9:
25:2c:a6:b3:57:95:30:6c:29:d8:4f:95:54:55:6f:88:81:31:
97:23:ab:ba:9e:77:a2:5e:03:07:5d:3d:d1:0d:61:33:5f:47:
0c:d2:8a:95:31:f1:42:f7:9f:76:a7:50:fb:6c:40:66:ff:70:
43:c6:56:e3:38:22:6b:5a:e7:9b:91:30:69:bc:82:c6:ab:86:
8b:da:12:84:9b:fc:a8:49:f4:b1:85:79:c9:08:d5:25:9d:5c:
5c:14:50:39:d9:8e:2d:f5:0a:dc:b6:df:08:1b:b2:24:ce:69:
ba:04:d2:3f:d8:fd:00:84:93:f5:02:8a:88:2c:ba:14:f0:47:
dc:ea:af:9b:33:bb:2f:50:bd:8f:dc:47:8d:fd:54:e2:13:3d:
c4:ba:1d:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 15:35:28 2025 by rpki-client