Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/fb4c2b-ebd2-46b2-bcd0-84db39403768/1/n2fgyFot61Rm6r3JCEYViph3hKI.mft
File: n2fgyFot61Rm6r3JCEYViph3hKI.mft (raw, json)
Hash identifier: rLuk3EBnGv5Yk4bgswPcqV0QTVJpELCvp6XoABUqmX0=
Subject key identifier: A8:F7:DE:AA:7B:BF:D9:87:9D:24:CF:6C:E4:8E:53:7A:14:72:88:6B
Authority key identifier: 9F:67:E0:C8:5A:2D:EB:54:66:EA:BD:C9:08:46:15:8A:98:77:84:A2
Certificate issuer: /CN=9f67e0c85a2deb5466eabdc90846158a987784a2
Certificate serial: 019749D5CD192D129DA4E72FE4E9D6B4AC0F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/n2fgyFot61Rm6r3JCEYViph3hKI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/fb4c2b-ebd2-46b2-bcd0-84db39403768/1/n2fgyFot61Rm6r3JCEYViph3hKI.mft
Manifest number: 1340
Signing time: Sat 07 Jun 2025 10:00:37 +0000
Manifest this update: Sat 07 Jun 2025 10:00:37 +0000
Manifest next update: Sun 08 Jun 2025 10:00:37 +0000
Files and hashes: 1: n2fgyFot61Rm6r3JCEYViph3hKI.crl (hash: qvsH4T+HY5ifPQv+k2ohxls90Un1iE25rFPLMRLhbu0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c0/fb4c2b-ebd2-46b2-bcd0-84db39403768/1/n2fgyFot61Rm6r3JCEYViph3hKI.crl
rsync://rpki.ripe.net/repository/DEFAULT/c0/fb4c2b-ebd2-46b2-bcd0-84db39403768/1/n2fgyFot61Rm6r3JCEYViph3hKI.mft
rsync://rpki.ripe.net/repository/DEFAULT/n2fgyFot61Rm6r3JCEYViph3hKI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 09:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:49:d5:cd:19:2d:12:9d:a4:e7:2f:e4:e9:d6:b4:ac:0f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9f67e0c85a2deb5466eabdc90846158a987784a2
Validity
Not Before: Jun 7 10:00:37 2025 GMT
Not After : Jun 8 10:00:37 2025 GMT
Subject: CN=a8f7deaa7bbfd9879d24cf6ce48e537a1472886b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:28:f5:b0:89:6d:24:1d:b9:af:62:d6:ea:e9:
31:90:b1:4a:d2:8f:7c:b2:0a:56:3b:99:6b:60:06:
19:e9:e0:7f:ee:78:d0:20:70:00:e5:6f:56:2d:eb:
ed:a5:ad:50:91:aa:7a:63:02:64:c8:e2:a8:a8:81:
e7:ff:e6:6a:4c:ea:17:d2:eb:87:7b:c2:00:12:cb:
5c:2a:31:b9:dd:1a:ea:34:30:89:4a:1a:a2:c8:22:
95:8c:f4:c8:28:3b:d4:55:72:de:ce:bc:0a:04:7b:
33:c5:39:35:ce:1b:ef:50:57:11:4f:ae:62:12:18:
94:8d:cd:4f:31:94:89:0d:64:fa:9e:e3:cd:fe:c0:
51:46:b7:9b:3c:45:37:a1:33:dc:c4:6e:a9:1b:b0:
93:a8:65:46:e4:f8:d0:06:90:fe:85:93:9a:71:e8:
4c:ba:21:ab:7c:f0:37:c0:f1:be:bb:ad:73:2e:e3:
8a:47:bb:38:74:a2:a9:53:64:0a:d9:fd:ba:90:64:
f3:ac:e0:ea:2a:90:0d:80:cc:c4:6e:68:3a:d9:66:
8a:99:9d:da:29:c7:63:97:d7:ea:a2:a6:67:e5:53:
a3:c2:0e:1b:dd:5c:c8:8e:c0:55:7f:57:8a:00:56:
d3:39:dc:d7:c3:da:4e:52:6a:e3:fc:b3:ad:2c:1e:
64:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:F7:DE:AA:7B:BF:D9:87:9D:24:CF:6C:E4:8E:53:7A:14:72:88:6B
X509v3 Authority Key Identifier:
keyid:9F:67:E0:C8:5A:2D:EB:54:66:EA:BD:C9:08:46:15:8A:98:77:84:A2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/n2fgyFot61Rm6r3JCEYViph3hKI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/fb4c2b-ebd2-46b2-bcd0-84db39403768/1/n2fgyFot61Rm6r3JCEYViph3hKI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/fb4c2b-ebd2-46b2-bcd0-84db39403768/1/n2fgyFot61Rm6r3JCEYViph3hKI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1e:22:77:f0:18:82:c1:32:06:67:29:d9:5c:c2:27:78:fc:5f:
c9:a2:15:94:71:2a:cb:fb:7b:c7:a1:49:e9:8c:56:ea:27:db:
cd:f6:7a:98:b1:4e:db:3e:c8:5a:8e:9f:f2:61:d5:2c:29:bf:
e7:d9:42:08:e6:f2:07:8a:80:fc:7b:3d:16:c2:93:3e:c3:48:
9b:d9:ef:c1:7e:63:f2:35:8f:64:72:3b:c4:03:e8:2f:94:3d:
c5:36:e6:c5:de:6d:b4:5a:f6:bd:ff:94:2f:14:70:b2:32:6a:
8c:5f:26:8b:0a:91:04:0c:d4:fc:43:0b:3a:34:44:95:b3:09:
82:81:29:85:5b:97:9b:e6:9f:5d:7c:78:70:99:6a:10:d8:d2:
81:fd:2b:15:a6:05:7e:9c:f4:8a:64:c7:d6:b1:f7:db:1f:3f:
62:72:72:f1:fc:c8:b1:cf:d2:f8:75:5d:0b:6a:4c:1e:24:44:
fb:6e:53:4d:91:0c:51:ea:f1:45:2f:b8:28:f9:48:66:0a:af:
a2:fa:1c:74:24:54:f7:bf:3b:92:29:8b:34:bc:9e:49:2d:31:
a5:78:3d:42:3a:82:10:12:32:3d:e1:20:dd:ae:32:73:c1:2b:
ab:64:bd:62:ed:fa:4a:08:65:a2:b1:79:63:46:fb:06:fa:f8:
90:44:54:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 16:44:38 2025 by rpki-client