Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/2fa624-5b5d-4646-b13d-16511a6ed9c6/1/n_L2ggU9Q8mtHGU5yu6fRiGw2hY.mft
File: n_L2ggU9Q8mtHGU5yu6fRiGw2hY.mft (raw, json)
Hash identifier: g38pC5LYepAybKk1eRgllsZMr6gTy+GkrHZf3ev8poA=
Subject key identifier: 0F:E1:61:FC:24:D9:47:B9:1D:51:2C:CE:C7:5D:2B:04:77:54:10:A6
Authority key identifier: 9F:F2:F6:82:05:3D:43:C9:AD:1C:65:39:CA:EE:9F:46:21:B0:DA:16
Certificate issuer: /CN=9ff2f682053d43c9ad1c6539caee9f4621b0da16
Certificate serial: 01963F8BB734AAD7B5665693F909C8045AF5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/n_L2ggU9Q8mtHGU5yu6fRiGw2hY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f6/2fa624-5b5d-4646-b13d-16511a6ed9c6/1/n_L2ggU9Q8mtHGU5yu6fRiGw2hY.mft
Manifest number: 1484
Signing time: Wed 16 Apr 2025 17:00:43 +0000
Manifest this update: Wed 16 Apr 2025 17:00:43 +0000
Manifest next update: Thu 17 Apr 2025 17:00:43 +0000
Files and hashes: 1: 9llKTYz55e1x1N79z5XQiF3dT4g.roa (hash: PS5GRedQdCJlh0VR0C24dd32hYgK4alJsCFo2wKdfTY=)
2: n_L2ggU9Q8mtHGU5yu6fRiGw2hY.crl (hash: 2mSnmQTCFnGJhidmreAuUALZ0uVx34chO+3ozHl2bJg=)
3: pfTZ88SRK7BJ1bWmmJVB35dV26A.roa (hash: TVV4m/AajwnJi7L7QdoUgaL2HibNFWxDJ80dMIKyPdw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f6/2fa624-5b5d-4646-b13d-16511a6ed9c6/1/n_L2ggU9Q8mtHGU5yu6fRiGw2hY.crl
rsync://rpki.ripe.net/repository/DEFAULT/f6/2fa624-5b5d-4646-b13d-16511a6ed9c6/1/n_L2ggU9Q8mtHGU5yu6fRiGw2hY.mft
rsync://rpki.ripe.net/repository/DEFAULT/n_L2ggU9Q8mtHGU5yu6fRiGw2hY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 17 Apr 2025 13:16:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:3f:8b:b7:34:aa:d7:b5:66:56:93:f9:09:c8:04:5a:f5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9ff2f682053d43c9ad1c6539caee9f4621b0da16
Validity
Not Before: Apr 16 17:00:43 2025 GMT
Not After : Apr 17 17:00:43 2025 GMT
Subject: CN=0fe161fc24d947b91d512ccec75d2b04775410a6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:49:a6:50:64:29:3d:b1:fa:b7:9e:b1:da:28:
49:7e:28:f0:46:cc:fc:d0:d4:b7:a4:91:3d:e1:8d:
67:0e:eb:33:66:f6:15:c2:23:2a:0c:b7:de:fd:01:
c6:64:f7:64:3d:0e:6f:0e:fb:8f:9f:42:11:d0:2d:
b7:81:fa:fb:57:14:ed:12:bc:9c:ce:ed:ce:b3:b5:
34:a9:81:04:aa:cc:71:77:46:3d:43:3e:68:e1:7a:
4f:54:12:b5:ab:3c:45:b1:e4:54:98:76:51:4c:62:
74:be:5b:d2:45:77:03:ee:73:21:2d:c5:7a:fc:e0:
80:75:7f:51:e6:30:12:87:30:74:03:1d:35:5d:ac:
67:5c:d7:48:e9:1d:5d:af:f4:7c:47:1d:e8:e2:8f:
24:e2:6a:32:06:63:08:30:5f:bd:32:4a:c6:d4:db:
1b:6a:bd:bc:36:8b:66:66:d5:bc:d4:d9:1f:7a:7a:
d3:7a:2a:c6:57:3b:77:d3:ce:66:73:6c:ea:ca:e0:
52:53:6a:da:91:31:c4:0d:4b:49:0c:fb:cc:37:fe:
34:dc:df:ad:0c:1a:a4:f9:a6:ee:df:44:9b:31:de:
33:e8:d5:7d:18:a3:a9:28:6f:d6:13:f6:73:fe:1f:
07:a4:e9:9a:3c:d7:7d:60:cb:74:dc:0f:01:ef:35:
97:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:E1:61:FC:24:D9:47:B9:1D:51:2C:CE:C7:5D:2B:04:77:54:10:A6
X509v3 Authority Key Identifier:
keyid:9F:F2:F6:82:05:3D:43:C9:AD:1C:65:39:CA:EE:9F:46:21:B0:DA:16
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/n_L2ggU9Q8mtHGU5yu6fRiGw2hY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/2fa624-5b5d-4646-b13d-16511a6ed9c6/1/n_L2ggU9Q8mtHGU5yu6fRiGw2hY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/2fa624-5b5d-4646-b13d-16511a6ed9c6/1/n_L2ggU9Q8mtHGU5yu6fRiGw2hY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
42:3e:f4:14:c4:51:3f:1c:e1:1d:2a:e4:d1:8b:72:6c:e9:12:
46:e6:f7:77:c9:c7:d9:f6:10:e9:dd:b5:b5:d0:a7:c9:38:bb:
64:df:cf:8c:96:e7:df:05:87:58:a2:98:46:82:77:ee:16:78:
b6:91:49:8c:a3:64:79:1c:6f:9e:7f:29:7f:ab:71:2f:60:da:
76:43:d5:15:4e:18:9a:6f:50:b0:d7:22:fc:41:12:88:d8:d2:
3e:63:93:13:00:44:43:3e:5d:e7:56:73:b0:39:ba:6d:f8:00:
b9:7f:a8:bd:26:fc:18:00:b8:eb:31:80:72:4a:7b:c1:d9:98:
87:3a:03:c8:61:71:76:a4:3e:46:17:49:63:53:1e:96:b1:90:
67:14:2d:36:39:24:8b:51:1e:b5:54:6d:91:6c:72:70:82:95:
62:3a:21:9d:11:ad:3b:3c:f6:10:68:d5:ad:b7:76:9d:58:51:
ee:b4:ca:e5:7b:c9:ad:85:97:93:89:71:71:3f:1e:a1:45:70:
01:21:49:cd:de:06:77:93:5e:02:14:08:d4:49:d9:47:99:a9:
42:c4:19:93:87:1c:b7:b5:94:d6:80:08:58:68:d0:8c:0b:3f:
ae:77:5e:64:cd:63:09:06:47:d8:2e:08:ef:53:7b:05:fb:42:
11:f3:4d:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 17 08:57:10 2025 by rpki-client