Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0a/f033f1-2f5d-46d1-9194-63f301889486/1/aN2-9_HN2K0ScWDyDqCj9rc_pKI.mft
File: aN2-9_HN2K0ScWDyDqCj9rc_pKI.mft (raw, json)
Hash identifier: wM3xMNw6il8lB+5bd9QfPcUxTrqn7KluxVRcvrVCdJM=
Subject key identifier: 71:6F:F3:16:74:1A:1F:E7:25:49:DC:AD:91:02:4A:18:58:E6:C3:3C
Authority key identifier: 68:DD:BE:F7:F1:CD:D8:AD:12:71:60:F2:0E:A0:A3:F6:B7:3F:A4:A2
Certificate issuer: /CN=68ddbef7f1cdd8ad127160f20ea0a3f6b73fa4a2
Certificate serial: 0197B6A1F416B8060C5CADE4821E4167415E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aN2-9_HN2K0ScWDyDqCj9rc_pKI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0a/f033f1-2f5d-46d1-9194-63f301889486/1/aN2-9_HN2K0ScWDyDqCj9rc_pKI.mft
Manifest number: 0836
Signing time: Sat 28 Jun 2025 13:02:36 +0000
Manifest this update: Sat 28 Jun 2025 13:02:36 +0000
Manifest next update: Sun 29 Jun 2025 13:02:36 +0000
Files and hashes: 1: aN2-9_HN2K0ScWDyDqCj9rc_pKI.crl (hash: KO65SvSBHLfi4hhRXy/PWGYmDXDZ1pHMiRTywtLVpAk=)
2: uPEejKeFHwtXb-AtaoWRNmQjDGA.roa (hash: v3yjbG7P5ZTU4wRZpuwJQttHEpL//NSRVp6n0qXaPGc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0a/f033f1-2f5d-46d1-9194-63f301889486/1/aN2-9_HN2K0ScWDyDqCj9rc_pKI.crl
rsync://rpki.ripe.net/repository/DEFAULT/0a/f033f1-2f5d-46d1-9194-63f301889486/1/aN2-9_HN2K0ScWDyDqCj9rc_pKI.mft
rsync://rpki.ripe.net/repository/DEFAULT/aN2-9_HN2K0ScWDyDqCj9rc_pKI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 13:02:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:a1:f4:16:b8:06:0c:5c:ad:e4:82:1e:41:67:41:5e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=68ddbef7f1cdd8ad127160f20ea0a3f6b73fa4a2
Validity
Not Before: Jun 28 13:02:36 2025 GMT
Not After : Jun 29 13:02:36 2025 GMT
Subject: CN=716ff316741a1fe72549dcad91024a1858e6c33c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:c4:0d:df:12:02:5d:23:5b:62:c7:bc:7a:98:
c9:41:21:55:51:c9:2a:62:af:12:83:24:68:f2:32:
6f:12:98:ec:69:a6:43:a8:ca:b5:f5:34:11:26:78:
f8:bb:58:83:f3:0d:79:33:84:b8:1a:c4:d4:5b:2e:
00:68:b9:25:fa:3d:93:8c:48:cf:22:e5:7d:a0:7f:
2b:08:89:ef:25:3d:23:5d:cf:b5:76:bd:1f:4b:f6:
b5:17:bb:cf:d5:80:5a:01:95:fd:e2:91:7a:48:f2:
36:12:d9:de:7e:e6:82:33:91:ab:db:4f:19:e1:de:
e9:39:a4:e8:35:1c:3d:9c:4b:1e:c5:c7:29:00:6c:
84:a1:83:bf:6b:71:7f:1e:b7:ca:0d:9e:58:3e:9b:
31:4f:48:68:a3:99:7e:05:61:4f:2e:c0:78:19:0a:
cb:5a:c5:76:6a:75:97:b0:73:3f:7e:27:9e:cd:04:
74:2c:65:cd:99:60:f0:90:5a:b5:6d:9d:d6:54:fa:
8d:4f:b2:ed:57:82:1b:01:7a:52:9c:9d:29:6d:a7:
5a:27:fe:0b:17:94:6c:0f:9b:45:73:1a:c2:98:fe:
cc:01:a3:dd:16:c0:6f:fd:e5:9f:1a:a6:c8:62:1d:
4b:9b:13:9c:15:60:2b:82:e5:bf:d0:4c:5f:5f:10:
0b:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:6F:F3:16:74:1A:1F:E7:25:49:DC:AD:91:02:4A:18:58:E6:C3:3C
X509v3 Authority Key Identifier:
keyid:68:DD:BE:F7:F1:CD:D8:AD:12:71:60:F2:0E:A0:A3:F6:B7:3F:A4:A2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aN2-9_HN2K0ScWDyDqCj9rc_pKI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/f033f1-2f5d-46d1-9194-63f301889486/1/aN2-9_HN2K0ScWDyDqCj9rc_pKI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/f033f1-2f5d-46d1-9194-63f301889486/1/aN2-9_HN2K0ScWDyDqCj9rc_pKI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
84:70:82:2e:cb:cc:3b:f6:90:b8:7a:e6:b1:40:54:fa:47:1c:
9d:be:fe:d2:89:25:41:1b:5f:17:fb:ce:b3:2f:a3:88:16:47:
3d:33:91:2f:bb:e2:77:8b:44:d0:fd:95:02:32:31:35:14:f4:
d5:72:8f:3a:d4:3c:f0:10:ef:68:c7:1a:b0:cf:41:03:2e:e0:
e8:22:62:2b:6f:b7:a9:96:96:37:61:39:6b:6c:e4:75:8e:ac:
54:e6:3d:a4:33:18:9d:23:ad:5f:d5:fe:b4:ef:6b:1c:37:b1:
19:c1:ef:57:c3:45:6f:c1:67:94:ea:fd:3a:56:59:dc:b7:ad:
77:c3:bb:3c:f6:f6:1b:dd:c6:00:f3:00:23:8e:98:4b:ac:47:
84:ac:5d:ac:34:77:f2:8f:41:71:25:c6:c9:b9:91:81:57:93:
4c:a9:1e:45:aa:77:cf:71:f2:b2:2c:61:36:e3:89:94:7a:6b:
ae:29:32:45:18:29:59:66:2a:74:54:6b:49:26:b0:50:ea:07:
a5:c5:1c:e1:f3:c7:f7:86:71:21:5f:32:dd:cc:9b:5a:01:18:
b3:0e:70:6c:79:65:0b:fb:6f:6c:18:7c:77:99:02:67:f6:27:
f2:f2:d1:07:c0:39:d1:94:f1:78:0d:bd:3b:18:f3:0e:bb:09:
aa:1d:0d:3d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZe2ofQWuAYMXK3kgh5BZ0FeMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY4ZGRiZWY3ZjFjZGQ4YWQxMjcxNjBmMjBlYTBhM2Y2Yjcz
ZmE0YTIwHhcNMjUwNjI4MTMwMjM2WhcNMjUwNjI5MTMwMjM2WjAzMTEwLwYDVQQD
Eyg3MTZmZjMxNjc0MWExZmU3MjU0OWRjYWQ5MTAyNGExODU4ZTZjMzNjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn8QN3xICXSNbYse8epjJQSFVUckq
Yq8SgyRo8jJvEpjsaaZDqMq19TQRJnj4u1iD8w15M4S4GsTUWy4AaLkl+j2TjEjP
IuV9oH8rCInvJT0jXc+1dr0fS/a1F7vP1YBaAZX94pF6SPI2EtnefuaCM5Gr208Z
4d7pOaToNRw9nEsexccpAGyEoYO/a3F/HrfKDZ5YPpsxT0hoo5l+BWFPLsB4GQrL
WsV2anWXsHM/fieezQR0LGXNmWDwkFq1bZ3WVPqNT7LtV4IbAXpSnJ0pbadaJ/4L
F5RsD5tFcxrCmP7MAaPdFsBv/eWfGqbIYh1LmxOcFWArguW/0ExfXxALHwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHFv8xZ0Gh/nJUncrZECShhY5sM8MB8GA1UdIwQY
MBaAFGjdvvfxzditEnFg8g6go/a3P6SiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYU4yLTlfSE4ySzBTY1dEeURxQ2o5cmNfcEtJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wYS9mMDMzZjEtMmY1ZC00NmQxLTkxOTQt
NjNmMzAxODg5NDg2LzEvYU4yLTlfSE4ySzBTY1dEeURxQ2o5cmNfcEtJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wYS9mMDMzZjEtMmY1ZC00NmQxLTkxOTQtNjNmMzAxODg5NDg2
LzEvYU4yLTlfSE4ySzBTY1dEeURxQ2o5cmNfcEtJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAhHCCLsvM
O/aQuHrmsUBU+kccnb7+0oklQRtfF/vOsy+jiBZHPTORL7vid4tE0P2VAjIxNRT0
1XKPOtQ88BDvaMcasM9BAy7g6CJiK2+3qZaWN2E5a2zkdY6sVOY9pDMYnSOtX9X+
tO9rHDexGcHvV8NFb8FnlOr9OlZZ3Letd8O7PPb2G93GAPMAI46YS6xHhKxdrDR3
8o9BcSXGybmRgVeTTKkeRap3z3HysixhNuOJlHprrikyRRgpWWYqdFRrSSawUOoH
pcUc4fPH94ZxIV8y3cybWgEYsw5wbHllC/tvbBh8d5kCZ/Yn8vLRB8A50ZTxeA29
OxjzDrsJqh0NPQ==
-----END CERTIFICATE-----
Generated at Sat Jun 28 21:00:38 2025 by rpki-client