Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/2f3229-a130-4dc8-a47b-2dc26dc4bc11/1/n2PP8kRuzsvr4BJGNpgLR-CyD6Y.mft
File: n2PP8kRuzsvr4BJGNpgLR-CyD6Y.mft (raw, json)
Hash identifier: 65U8R/+Mcw09RURQXFs4dyI2AZ2TVxijLyUbn4mV3YI=
Subject key identifier: 11:20:5D:AE:FA:26:42:48:3D:48:BB:59:22:77:45:D2:D3:59:B1:05
Authority key identifier: 9F:63:CF:F2:44:6E:CE:CB:EB:E0:12:46:36:98:0B:47:E0:B2:0F:A6
Certificate issuer: /CN=9f63cff2446ececbebe0124636980b47e0b20fa6
Certificate serial: 0196BBFFBA9053B993159B8625254DED9C33
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/n2PP8kRuzsvr4BJGNpgLR-CyD6Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/02/2f3229-a130-4dc8-a47b-2dc26dc4bc11/1/n2PP8kRuzsvr4BJGNpgLR-CyD6Y.mft
Manifest number: 0CA2
Signing time: Sat 10 May 2025 21:00:20 +0000
Manifest this update: Sat 10 May 2025 21:00:20 +0000
Manifest next update: Sun 11 May 2025 21:00:20 +0000
Files and hashes: 1: 3PWYGF7PsxnPXxj5QLlwFzdRhbc.roa (hash: aJRxgQh7BxmkL4a1Mj0Fr2c3xjK5a/VBrY9HD8oJxXw=)
2: Zui9qtQV4KiP1G1w7-U9vy20ZFM.roa (hash: wpcPrt+AyPc1ASjLftJfcLWQI1C4woYgXnX5ExSKCJw=)
3: n2PP8kRuzsvr4BJGNpgLR-CyD6Y.crl (hash: zV983lsJHXNaaOvxlKtEVm7n2DtmD4zzX3n5v6iGqGs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/02/2f3229-a130-4dc8-a47b-2dc26dc4bc11/1/n2PP8kRuzsvr4BJGNpgLR-CyD6Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/02/2f3229-a130-4dc8-a47b-2dc26dc4bc11/1/n2PP8kRuzsvr4BJGNpgLR-CyD6Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/n2PP8kRuzsvr4BJGNpgLR-CyD6Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 11 May 2025 21:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:bb:ff:ba:90:53:b9:93:15:9b:86:25:25:4d:ed:9c:33
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9f63cff2446ececbebe0124636980b47e0b20fa6
Validity
Not Before: May 10 21:00:20 2025 GMT
Not After : May 11 21:00:20 2025 GMT
Subject: CN=11205daefa2642483d48bb59227745d2d359b105
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:2c:07:f4:19:d8:96:90:c3:1b:ae:d8:87:97:
1b:c9:61:e7:f7:9f:98:bb:63:aa:0c:10:60:fa:6e:
6c:41:e3:ad:c6:98:49:0f:0f:e5:9f:aa:12:5c:db:
3e:82:5d:a3:a2:9b:23:d1:8d:61:4a:a4:80:9c:0a:
e7:10:85:e4:11:d3:a0:e6:0b:34:a1:f6:0a:cf:3f:
10:b1:35:58:5a:65:97:92:30:53:91:17:26:8c:15:
4d:6f:7c:fb:2d:c5:6c:b8:0b:c4:3d:50:7a:53:e2:
2c:f0:91:5b:bd:78:89:cd:b8:b4:1c:5f:fe:6e:cc:
1a:77:dc:0d:e8:e4:a8:4d:53:30:e9:99:47:36:7b:
22:56:28:23:95:a7:c2:ab:38:fb:f3:19:81:fd:98:
a9:21:4b:cb:06:44:15:56:df:69:1a:b1:ea:66:ac:
1d:e5:54:82:b7:7e:95:4c:5e:be:c1:32:4c:14:5a:
bd:1f:6c:a1:c5:be:2a:8e:16:d2:12:db:f6:13:ec:
1f:89:20:97:f7:42:b5:fc:87:cb:d9:c8:27:84:75:
66:1a:ba:9e:df:e4:ed:6a:0a:f4:36:14:fc:30:d0:
ac:59:03:71:77:f0:06:e7:14:05:cb:7c:60:96:d8:
04:0d:72:87:bf:3e:c3:9c:8b:cc:65:11:dd:b3:b5:
6a:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:20:5D:AE:FA:26:42:48:3D:48:BB:59:22:77:45:D2:D3:59:B1:05
X509v3 Authority Key Identifier:
keyid:9F:63:CF:F2:44:6E:CE:CB:EB:E0:12:46:36:98:0B:47:E0:B2:0F:A6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/n2PP8kRuzsvr4BJGNpgLR-CyD6Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/2f3229-a130-4dc8-a47b-2dc26dc4bc11/1/n2PP8kRuzsvr4BJGNpgLR-CyD6Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/02/2f3229-a130-4dc8-a47b-2dc26dc4bc11/1/n2PP8kRuzsvr4BJGNpgLR-CyD6Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
04:29:f4:7e:cf:00:c8:f0:6a:45:9b:af:3b:0e:d6:fd:aa:f8:
6a:04:35:f3:12:1c:f7:5e:07:d1:05:24:39:fe:68:80:17:ff:
86:eb:f8:b2:45:66:39:3b:c3:6d:2b:01:5e:c3:60:ef:b4:19:
2f:a5:76:fc:09:af:64:c8:aa:81:d4:f2:4c:4f:ad:a0:53:2d:
1b:e5:9b:24:66:d6:15:cd:e1:db:7f:a1:d5:74:5c:79:be:cc:
ec:f5:de:ae:de:2d:5f:a9:fe:9a:44:fc:6f:06:82:13:66:91:
8e:a0:92:73:86:02:fd:1a:85:e3:1a:5e:3d:1c:59:be:31:d4:
1d:13:05:ba:a8:25:92:3b:a6:b4:76:2d:a5:4d:1b:a9:c4:51:
05:5d:3d:d3:d1:4f:de:0a:6e:c3:46:ec:fa:da:0b:f8:28:51:
8d:62:5f:13:81:f4:6c:21:7c:bb:e4:db:8a:2a:69:0d:6b:2a:
63:cf:76:f7:ae:39:28:05:43:1f:c6:59:1c:21:79:ee:f6:60:
87:08:06:8d:ba:52:3f:13:d1:5b:8b:0e:6b:7b:78:08:27:ac:
a5:fd:1a:c5:67:2b:0b:fa:42:f2:85:44:a6:6a:fa:52:b4:83:
11:24:9e:27:5e:69:39:d2:6e:06:44:18:54:a9:9e:38:75:c9:
44:f7:b5:06
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZa7/7qQU7mTFZuGJSVN7ZwzMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDlmNjNjZmYyNDQ2ZWNlY2JlYmUwMTI0NjM2OTgwYjQ3ZTBi
MjBmYTYwHhcNMjUwNTEwMjEwMDIwWhcNMjUwNTExMjEwMDIwWjAzMTEwLwYDVQQD
EygxMTIwNWRhZWZhMjY0MjQ4M2Q0OGJiNTkyMjc3NDVkMmQzNTliMTA1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuSwH9BnYlpDDG67Yh5cbyWHn95+Y
u2OqDBBg+m5sQeOtxphJDw/ln6oSXNs+gl2jopsj0Y1hSqSAnArnEIXkEdOg5gs0
ofYKzz8QsTVYWmWXkjBTkRcmjBVNb3z7LcVsuAvEPVB6U+Is8JFbvXiJzbi0HF/+
bswad9wN6OSoTVMw6ZlHNnsiVigjlafCqzj78xmB/ZipIUvLBkQVVt9pGrHqZqwd
5VSCt36VTF6+wTJMFFq9H2yhxb4qjhbSEtv2E+wfiSCX90K1/IfL2cgnhHVmGrqe
3+Ttagr0NhT8MNCsWQNxd/AG5xQFy3xgltgEDXKHvz7DnIvMZRHds7VqjQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBEgXa76JkJIPUi7WSJ3RdLTWbEFMB8GA1UdIwQY
MBaAFJ9jz/JEbs7L6+ASRjaYC0fgsg+mMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbjJQUDhrUnV6c3ZyNEJKR05wZ0xSLUN5RDZZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMi8yZjMyMjktYTEzMC00ZGM4LWE0N2It
MmRjMjZkYzRiYzExLzEvbjJQUDhrUnV6c3ZyNEJKR05wZ0xSLUN5RDZZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wMi8yZjMyMjktYTEzMC00ZGM4LWE0N2ItMmRjMjZkYzRiYzEx
LzEvbjJQUDhrUnV6c3ZyNEJKR05wZ0xSLUN5RDZZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABCn0fs8A
yPBqRZuvOw7W/ar4agQ18xIc914H0QUkOf5ogBf/huv4skVmOTvDbSsBXsNg77QZ
L6V2/AmvZMiqgdTyTE+toFMtG+WbJGbWFc3h23+h1XRceb7M7PXert4tX6n+mkT8
bwaCE2aRjqCSc4YC/RqF4xpePRxZvjHUHRMFuqglkjumtHYtpU0bqcRRBV0909FP
3gpuw0bs+toL+ChRjWJfE4H0bCF8u+TbiippDWsqY8929645KAVDH8ZZHCF57vZg
hwgGjbpSPxPRW4sOa3t4CCespf0axWcrC/pC8oVEpmr6UrSDESSeJ15pOdJuBkQY
VKmeOHXJRPe1Bg==
-----END CERTIFICATE-----
Generated at Sun May 11 05:23:47 2025 by rpki-client