Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c9/3c076b-aea1-4a33-a9e9-99128bf6a841/1/2NPKLCMa_fOwNVx3p8uyJvgbdN4.mft
File: 2NPKLCMa_fOwNVx3p8uyJvgbdN4.mft (raw, json)
Hash identifier: e3xG/1FW7pgD01r6bTEuLjvkh9CVkIRc3NJl/eMPH30=
Subject key identifier: CA:97:73:59:8C:1A:84:B5:92:8B:8E:94:2C:E7:C3:4F:B5:B2:6F:82
Authority key identifier: D8:D3:CA:2C:23:1A:FD:F3:B0:35:5C:77:A7:CB:B2:26:F8:1B:74:DE
Certificate issuer: /CN=d8d3ca2c231afdf3b0355c77a7cbb226f81b74de
Certificate serial: 0197462FADCE2227F2901F59F7CFD2095B9F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2NPKLCMa_fOwNVx3p8uyJvgbdN4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c9/3c076b-aea1-4a33-a9e9-99128bf6a841/1/2NPKLCMa_fOwNVx3p8uyJvgbdN4.mft
Manifest number: 015E
Signing time: Fri 06 Jun 2025 17:00:18 +0000
Manifest this update: Fri 06 Jun 2025 17:00:18 +0000
Manifest next update: Sat 07 Jun 2025 17:00:18 +0000
Files and hashes: 1: 1-fKYH7NxhQKRhWFUhdeZIQJCx4I.roa (hash: hiw+Pi/4f+TeDv6TkBewfREUIC+lofxlXNwz+z+uPDE=)
2: 2NPKLCMa_fOwNVx3p8uyJvgbdN4.crl (hash: cR6iW2O0Ydlt7bW2E1ZazkI7MUPVZdEK659sMzRn+xY=)
3: P6mssWX-V0cqAzHy81OLWoJ95tA.roa (hash: 1KxuTLXZ0RpUrBX1EdO6Y3ND8ja5oUQEOKFvppcvKmo=)
4: xb1c81OFtbINdLQq-ZwRav9UWoI.roa (hash: XHYFd0tSE5d2fh7X6gspcN3JIn/ONDCV3VHTC+ocClI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c9/3c076b-aea1-4a33-a9e9-99128bf6a841/1/2NPKLCMa_fOwNVx3p8uyJvgbdN4.crl
rsync://rpki.ripe.net/repository/DEFAULT/c9/3c076b-aea1-4a33-a9e9-99128bf6a841/1/2NPKLCMa_fOwNVx3p8uyJvgbdN4.mft
rsync://rpki.ripe.net/repository/DEFAULT/2NPKLCMa_fOwNVx3p8uyJvgbdN4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 07 Jun 2025 15:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:46:2f:ad:ce:22:27:f2:90:1f:59:f7:cf:d2:09:5b:9f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d8d3ca2c231afdf3b0355c77a7cbb226f81b74de
Validity
Not Before: Jun 6 17:00:18 2025 GMT
Not After : Jun 7 17:00:18 2025 GMT
Subject: CN=ca9773598c1a84b5928b8e942ce7c34fb5b26f82
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:84:41:90:ad:30:ff:91:1a:f1:a3:ef:36:dc:
4f:3b:cc:3b:2f:00:f9:90:8f:f4:64:35:40:19:7b:
af:bc:9e:53:f3:11:5f:63:93:b0:7d:70:4a:d6:b6:
57:4d:08:b1:24:78:92:f5:3a:79:b0:51:ed:c5:65:
df:fd:3e:b1:ce:d2:ff:88:85:6d:60:a4:21:4b:96:
d7:9b:ec:47:9e:d2:77:2b:cf:35:41:cd:e7:59:89:
e6:e3:4d:7a:a1:35:2a:a6:e8:d3:47:6d:20:89:3d:
39:12:e5:0a:86:9d:1f:6a:b4:14:c7:77:73:4c:d8:
08:0f:91:04:b1:b1:ab:a1:c1:89:78:51:8d:31:2b:
76:e5:ba:d2:de:b0:c1:9d:ff:7d:d9:7f:68:47:93:
10:37:f9:a9:99:8e:81:c6:e0:29:d7:3a:bb:f7:36:
62:91:6e:23:7b:c4:54:e0:c9:2c:a9:71:cf:f3:51:
86:61:a7:fd:14:14:c7:b4:88:d0:3c:cf:66:e1:f7:
69:6d:6b:44:4d:7a:9e:b6:64:d2:12:85:d9:c5:fb:
4b:dc:27:4e:bb:50:c1:76:7a:28:ee:a5:8d:e1:82:
f6:ce:0d:50:21:78:e3:35:f3:79:87:8d:ec:da:ee:
29:e4:48:a1:4e:2f:3f:94:e1:e3:97:d2:aa:6e:11:
03:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:97:73:59:8C:1A:84:B5:92:8B:8E:94:2C:E7:C3:4F:B5:B2:6F:82
X509v3 Authority Key Identifier:
keyid:D8:D3:CA:2C:23:1A:FD:F3:B0:35:5C:77:A7:CB:B2:26:F8:1B:74:DE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2NPKLCMa_fOwNVx3p8uyJvgbdN4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/3c076b-aea1-4a33-a9e9-99128bf6a841/1/2NPKLCMa_fOwNVx3p8uyJvgbdN4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/3c076b-aea1-4a33-a9e9-99128bf6a841/1/2NPKLCMa_fOwNVx3p8uyJvgbdN4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8e:fa:76:ef:9f:73:13:57:5c:73:ec:91:da:95:ae:5d:cf:b8:
67:a9:6e:c4:42:ed:1e:09:e5:38:c6:2c:7a:25:ba:72:e3:16:
5e:e0:b4:38:ab:de:dc:d7:6b:69:bb:81:ea:8f:6d:ef:02:fe:
25:b5:38:e8:6e:54:93:bb:c8:e4:91:9a:66:71:4e:8d:b0:00:
ac:e1:11:c6:ae:63:3a:c8:a6:b4:65:89:20:2f:c7:5b:f9:be:
43:17:5e:7b:0c:07:5d:33:39:6a:5f:0b:be:97:0d:8f:65:aa:
13:f8:f9:8f:28:27:a4:e8:52:59:a6:6e:94:04:41:3d:aa:8c:
28:3d:61:8b:4f:e3:5f:1d:fe:88:1b:07:1d:e5:a9:74:1d:7a:
32:c0:99:a0:43:19:98:25:8c:38:9a:c8:19:e1:87:df:fb:e5:
d3:50:00:fe:d2:a6:12:0b:82:da:86:dd:f8:ce:7c:b4:8b:1e:
5e:7d:67:cf:f2:db:21:01:ab:e6:92:6b:0c:35:ba:a2:97:94:
6b:fa:dd:7e:bf:c7:b8:f8:a6:ff:4e:a4:46:44:1b:47:ba:79:
9a:bf:f5:0a:ab:ce:dd:1f:0f:8d:97:76:f1:af:4f:43:18:e8:
1e:9a:12:95:5b:21:ed:5b:ee:d1:ec:38:36:89:60:be:95:2f:
b7:06:49:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 01:16:26 2025 by rpki-client