Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b2/cbd332-a8db-4606-ac9b-14ec41d4c0a6/1/n4IkN_Se1TiGaJAir93aWfefinE.mft
File: n4IkN_Se1TiGaJAir93aWfefinE.mft (raw, json)
Hash identifier: N3JnIV0n849o6fYu5400x5oBd8UFdN9n3BpdYYXqH10=
Subject key identifier: 67:BE:DA:F2:97:98:63:22:18:FA:95:B1:EE:F8:25:2E:95:ED:3F:BE
Authority key identifier: 9F:82:24:37:F4:9E:D5:38:86:68:90:22:AF:DD:DA:59:F7:9F:8A:71
Certificate issuer: /CN=9f822437f49ed53886689022afddda59f79f8a71
Certificate serial: 0197499EE793E0BD07905DB79DA89825D142
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/n4IkN_Se1TiGaJAir93aWfefinE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b2/cbd332-a8db-4606-ac9b-14ec41d4c0a6/1/n4IkN_Se1TiGaJAir93aWfefinE.mft
Manifest number: 0873
Signing time: Sat 07 Jun 2025 09:00:40 +0000
Manifest this update: Sat 07 Jun 2025 09:00:40 +0000
Manifest next update: Sun 08 Jun 2025 09:00:40 +0000
Files and hashes: 1: IdEYIsWCps3Gl-CPOJNmXVY_KDA.roa (hash: V5/YEnbALkGDiezb6/4H3zOCBx4UZLrATG4CYdBNlRA=)
2: n4IkN_Se1TiGaJAir93aWfefinE.crl (hash: U+JcCUVVeEqypcK8McLlQIhi8qtwHBklYmlkzXdprrM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b2/cbd332-a8db-4606-ac9b-14ec41d4c0a6/1/n4IkN_Se1TiGaJAir93aWfefinE.crl
rsync://rpki.ripe.net/repository/DEFAULT/b2/cbd332-a8db-4606-ac9b-14ec41d4c0a6/1/n4IkN_Se1TiGaJAir93aWfefinE.mft
rsync://rpki.ripe.net/repository/DEFAULT/n4IkN_Se1TiGaJAir93aWfefinE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:49:9e:e7:93:e0:bd:07:90:5d:b7:9d:a8:98:25:d1:42
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9f822437f49ed53886689022afddda59f79f8a71
Validity
Not Before: Jun 7 09:00:40 2025 GMT
Not After : Jun 8 09:00:40 2025 GMT
Subject: CN=67bedaf29798632218fa95b1eef8252e95ed3fbe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:57:e1:52:55:f9:13:5b:af:50:cc:c9:c0:02:
a4:5b:0d:d7:57:94:6b:87:0c:de:5c:fb:cf:6c:89:
c6:e0:18:e5:82:4e:bc:0b:e3:df:d4:49:47:b8:60:
c9:f2:00:42:2a:07:8d:44:ba:e0:c0:25:3f:be:ef:
88:b1:17:0b:5d:f6:a8:be:7d:02:e2:77:a0:cc:9a:
f9:50:2b:1c:01:af:5e:3e:a3:2c:21:b6:55:fb:a2:
94:f4:40:eb:9d:83:ff:f1:11:50:30:66:e5:2d:dc:
ae:06:f7:42:75:b7:24:9c:3c:ad:1e:d2:e5:5f:64:
74:38:5c:a1:cc:04:44:24:dc:ab:ff:87:9b:dc:61:
da:30:73:07:5c:ad:e4:f3:a3:9a:fd:01:8b:8b:21:
3b:be:a8:f9:0a:0f:e1:c2:4c:f5:47:c5:be:5c:7b:
7f:f4:2e:a3:f2:d9:31:72:96:01:ab:a8:8b:d9:91:
3a:0d:fa:d5:42:4f:ba:67:6e:be:14:37:1e:16:c0:
01:67:96:51:c2:15:55:6f:12:a5:36:2b:8b:9f:4e:
96:6b:ea:a3:85:78:63:cd:5d:8c:a1:b7:27:41:21:
e3:34:08:93:c4:d0:e1:58:ad:83:2e:67:de:99:cc:
54:86:cd:10:45:e5:f1:c9:56:f9:69:ee:3f:8e:55:
b3:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:BE:DA:F2:97:98:63:22:18:FA:95:B1:EE:F8:25:2E:95:ED:3F:BE
X509v3 Authority Key Identifier:
keyid:9F:82:24:37:F4:9E:D5:38:86:68:90:22:AF:DD:DA:59:F7:9F:8A:71
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/n4IkN_Se1TiGaJAir93aWfefinE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/cbd332-a8db-4606-ac9b-14ec41d4c0a6/1/n4IkN_Se1TiGaJAir93aWfefinE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/cbd332-a8db-4606-ac9b-14ec41d4c0a6/1/n4IkN_Se1TiGaJAir93aWfefinE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
58:7f:a4:45:95:b5:da:25:a8:11:66:58:5f:9a:e3:06:97:01:
04:1b:1c:4a:e7:79:ba:28:cc:d6:6a:13:6e:e5:4a:61:ed:25:
e0:aa:78:a4:c9:03:80:71:fe:4a:6a:e7:05:98:b1:94:66:62:
4a:53:9a:3b:76:9d:34:55:29:4e:63:97:67:77:e9:bc:0e:fc:
b2:56:a4:05:db:e7:f1:a6:a6:7c:ef:78:ab:7b:1e:64:fa:b1:
a6:a2:f5:b9:80:af:3f:0c:40:9f:0f:46:21:75:8f:44:ff:02:
af:d8:35:bf:b6:db:d8:34:53:4f:0e:f1:d5:c7:b9:87:5d:e5:
56:8a:f0:42:49:ad:a0:df:d2:44:a0:63:88:bd:30:e3:3f:2f:
3a:de:ae:47:a3:c7:2a:99:e3:32:3e:14:21:ef:63:d9:81:a1:
92:41:c3:89:e6:00:62:ee:b1:0a:39:79:bf:5d:0c:1d:d8:bd:
da:d7:07:b5:d8:56:89:3b:5a:ae:66:fb:24:90:83:d2:c2:89:
0f:41:a6:c6:e7:21:ca:76:ba:7b:94:51:49:21:56:2d:4a:ae:
e3:78:02:41:4d:5a:7b:a5:d1:e8:25:d6:6d:77:e3:04:93:a9:
4e:c6:de:ce:cb:4a:86:33:35:1d:7d:97:70:a8:69:f1:c9:22:
02:6f:0d:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 11:30:07 2025 by rpki-client