Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/2f3229-a130-4dc8-a47b-2dc26dc4bc11/1/n2PP8kRuzsvr4BJGNpgLR-CyD6Y.mft
File: n2PP8kRuzsvr4BJGNpgLR-CyD6Y.mft (raw, json)
Hash identifier: UQl02uKnbDj1IdLkq/anXwdYuXgRNHtMLT7ZiKdC5NA=
Subject key identifier: 0E:DF:03:74:30:E2:6A:77:F6:90:50:7B:E4:3D:8E:DB:B9:13:63:09
Authority key identifier: 9F:63:CF:F2:44:6E:CE:CB:EB:E0:12:46:36:98:0B:47:E0:B2:0F:A6
Certificate issuer: /CN=9f63cff2446ececbebe0124636980b47e0b20fa6
Certificate serial: 0197B70E81A0C4830F76303616BFADFC5625
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/n2PP8kRuzsvr4BJGNpgLR-CyD6Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/02/2f3229-a130-4dc8-a47b-2dc26dc4bc11/1/n2PP8kRuzsvr4BJGNpgLR-CyD6Y.mft
Manifest number: 0D24
Signing time: Sat 28 Jun 2025 15:01:10 +0000
Manifest this update: Sat 28 Jun 2025 15:01:10 +0000
Manifest next update: Sun 29 Jun 2025 15:01:10 +0000
Files and hashes: 1: 3PWYGF7PsxnPXxj5QLlwFzdRhbc.roa (hash: aJRxgQh7BxmkL4a1Mj0Fr2c3xjK5a/VBrY9HD8oJxXw=)
2: Zui9qtQV4KiP1G1w7-U9vy20ZFM.roa (hash: wpcPrt+AyPc1ASjLftJfcLWQI1C4woYgXnX5ExSKCJw=)
3: n2PP8kRuzsvr4BJGNpgLR-CyD6Y.crl (hash: w7hr6KQqYN8WTPTxOg4WpXMjjWH4QUUIXUCQK0EXKMs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/02/2f3229-a130-4dc8-a47b-2dc26dc4bc11/1/n2PP8kRuzsvr4BJGNpgLR-CyD6Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/02/2f3229-a130-4dc8-a47b-2dc26dc4bc11/1/n2PP8kRuzsvr4BJGNpgLR-CyD6Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/n2PP8kRuzsvr4BJGNpgLR-CyD6Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:0e:81:a0:c4:83:0f:76:30:36:16:bf:ad:fc:56:25
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9f63cff2446ececbebe0124636980b47e0b20fa6
Validity
Not Before: Jun 28 15:01:10 2025 GMT
Not After : Jun 29 15:01:10 2025 GMT
Subject: CN=0edf037430e26a77f690507be43d8edbb9136309
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:94:01:d7:81:a7:17:ab:a6:48:16:d5:0b:3b:
5a:da:38:94:cd:d2:8d:c2:21:15:e8:c9:da:9f:f8:
f6:a6:e3:67:e1:be:92:65:ca:30:7a:4c:e7:41:fa:
01:2f:eb:da:c1:74:8e:b3:2f:42:27:fc:80:43:59:
eb:1a:86:6d:c4:0a:23:90:2d:f6:c0:ab:f9:44:af:
f7:e9:75:22:0f:21:91:6b:1d:89:ab:4a:2e:05:27:
89:e1:02:15:ab:ba:f2:90:12:4c:3c:60:40:5a:24:
eb:f5:80:61:2c:95:4a:a1:88:d9:1b:44:36:a1:a6:
43:9e:0f:81:73:69:cb:d5:94:43:1d:66:83:1f:35:
18:98:6b:5d:be:ce:ab:53:45:25:9e:09:d3:0a:a0:
32:f0:d6:a1:b7:61:5e:21:30:fa:89:39:e1:e7:52:
20:8d:17:d1:06:65:bd:9c:38:2c:9c:2f:f0:ce:62:
11:44:6c:16:e4:5e:15:17:71:8a:8b:c4:3d:41:dd:
48:12:5b:c3:2a:2d:b0:2b:79:ab:d4:b8:72:f0:0f:
6c:99:45:9c:e8:af:52:5e:22:03:4e:e9:68:e7:9a:
a7:96:8c:47:38:3d:86:fc:d7:80:88:2a:ac:58:3b:
b4:df:9d:c2:22:04:62:53:85:68:11:00:24:e7:6e:
b5:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:DF:03:74:30:E2:6A:77:F6:90:50:7B:E4:3D:8E:DB:B9:13:63:09
X509v3 Authority Key Identifier:
keyid:9F:63:CF:F2:44:6E:CE:CB:EB:E0:12:46:36:98:0B:47:E0:B2:0F:A6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/n2PP8kRuzsvr4BJGNpgLR-CyD6Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/2f3229-a130-4dc8-a47b-2dc26dc4bc11/1/n2PP8kRuzsvr4BJGNpgLR-CyD6Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/02/2f3229-a130-4dc8-a47b-2dc26dc4bc11/1/n2PP8kRuzsvr4BJGNpgLR-CyD6Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1c:1e:e6:a5:c6:cc:db:cf:d3:8e:1c:48:a7:c7:3c:ea:f7:6a:
ef:bb:07:c3:3c:44:99:94:29:98:2e:c7:21:7d:72:3c:ce:51:
a8:95:25:03:08:56:40:a6:2a:ce:d3:43:0e:bb:25:0c:1d:e0:
4c:bc:41:9c:c0:fd:e2:03:dd:d1:ec:b6:02:70:ad:a5:9c:37:
6e:44:ce:99:9e:e3:7b:79:6e:0f:ec:6d:24:38:de:57:f4:02:
a7:b5:4d:e9:11:e7:1b:36:b4:52:b8:bd:e0:20:1e:33:06:df:
09:c2:b9:0a:a0:e7:be:61:91:70:f6:ec:76:d9:e8:66:08:f8:
f1:e5:27:e7:3d:6e:56:2e:fa:ba:72:be:0f:fc:3c:c4:1e:1a:
d0:2b:a5:83:e5:24:48:2d:f5:7f:4a:59:1f:07:fc:74:ca:a8:
a8:1d:98:91:ae:0d:b7:c7:2a:37:24:a4:c8:d9:84:d1:fc:c8:
c4:c8:ef:ba:a5:a1:ff:dd:64:73:4f:1c:66:14:0b:6b:37:79:
dc:6d:92:4b:ee:7a:b2:18:71:30:b6:05:e8:09:90:8d:72:e0:
87:fe:af:51:b2:cf:a8:e0:6c:da:aa:c3:b1:ad:06:d0:ba:a7:
60:3f:ff:fa:0d:6a:31:18:65:2d:d7:c6:2e:ab:db:a9:cd:b7:
06:95:33:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 21:59:23 2025 by rpki-client