Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/22/0a3fff-1a42-4044-ae8f-7354a73bda7e/1/n2-3lUF5qWZrTLav40bR4h7DDkU.mft
File: n2-3lUF5qWZrTLav40bR4h7DDkU.mft (raw, json)
Hash identifier: yI2XA7LCyK7D8XxH7Oqiw3+kGO3oDu13yNnlzEyVYI0=
Subject key identifier: B6:BC:2F:39:9B:51:31:78:35:B0:9E:B8:F4:D1:23:F1:CE:F5:71:9A
Authority key identifier: 9F:6F:B7:95:41:79:A9:66:6B:4C:B6:AF:E3:46:D1:E2:1E:C3:0E:45
Certificate issuer: /CN=9f6fb7954179a9666b4cb6afe346d1e21ec30e45
Certificate serial: 0197CBE031432B0A8CB16A08F48979C92390
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/n2-3lUF5qWZrTLav40bR4h7DDkU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/22/0a3fff-1a42-4044-ae8f-7354a73bda7e/1/n2-3lUF5qWZrTLav40bR4h7DDkU.mft
Manifest number: 15C3
Signing time: Wed 02 Jul 2025 16:02:36 +0000
Manifest this update: Wed 02 Jul 2025 16:02:36 +0000
Manifest next update: Thu 03 Jul 2025 16:02:36 +0000
Files and hashes: 1: Jzi6jJ9SZ3rViS6uZE0u8bf720A.roa (hash: eJjmExeoetRrFmsV6X8Y7xVRrkNxyQjjkQ/pmteWEY0=)
2: cCtlVAhKMx_L9MmcKQdhGeXgd7A.roa (hash: Q1si7hVwLSegXDVNPXeui2AkeRgS0Epsk3MKoikvRr4=)
3: n2-3lUF5qWZrTLav40bR4h7DDkU.crl (hash: Xa448Xw3aVfPcZqBR5UZ9rxw/ACv1SEd6/H3iqCbzKk=)
4: ozXKoKdXVNYBzwo0Mz0MILNjdCg.roa (hash: Ve119gf9TbBJ6X/Ot4F8LURtnL5ENbzhaQXEL2/zcYA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/22/0a3fff-1a42-4044-ae8f-7354a73bda7e/1/n2-3lUF5qWZrTLav40bR4h7DDkU.crl
rsync://rpki.ripe.net/repository/DEFAULT/22/0a3fff-1a42-4044-ae8f-7354a73bda7e/1/n2-3lUF5qWZrTLav40bR4h7DDkU.mft
rsync://rpki.ripe.net/repository/DEFAULT/n2-3lUF5qWZrTLav40bR4h7DDkU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 03 Jul 2025 16:02:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:cb:e0:31:43:2b:0a:8c:b1:6a:08:f4:89:79:c9:23:90
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9f6fb7954179a9666b4cb6afe346d1e21ec30e45
Validity
Not Before: Jul 2 16:02:36 2025 GMT
Not After : Jul 3 16:02:36 2025 GMT
Subject: CN=b6bc2f399b51317835b09eb8f4d123f1cef5719a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:35:55:f9:be:b4:8b:86:eb:28:72:56:40:01:
10:ab:18:ae:fc:fe:3e:c6:68:57:eb:d2:f3:10:0d:
39:44:ba:09:d5:f8:d5:12:24:8f:81:a4:9e:31:9e:
f7:26:ba:70:20:b1:26:79:59:1c:7a:6c:fb:18:6a:
22:d0:da:06:59:53:d9:7b:79:80:c1:ad:2e:5f:8e:
da:d1:4c:68:70:0a:e8:91:26:31:ad:6f:d6:fb:7a:
62:3c:66:82:15:50:d5:26:02:e2:b7:33:f7:eb:cb:
04:88:70:9a:61:42:9b:06:b2:9c:b3:44:d2:86:4c:
cb:ed:d8:61:61:e6:a0:83:cb:65:4d:3a:d4:76:38:
49:4f:77:b6:5c:90:e8:19:ef:36:ee:10:a2:5f:70:
40:34:89:84:9a:d2:3e:b3:95:28:e6:d1:34:49:83:
df:b4:7b:b0:8a:a3:5a:b5:31:75:0e:7a:b3:08:e7:
f8:d2:4a:b8:86:0f:5f:28:d0:f5:72:be:a2:10:23:
85:9b:8f:07:8b:c0:dc:8b:c7:e5:50:ae:cc:29:f9:
fe:a6:cc:c3:c7:76:ce:e6:8e:a2:8e:37:9b:2a:ed:
ea:5e:66:2e:94:50:12:03:c1:60:e2:8e:06:51:23:
dc:27:28:46:97:50:08:8a:9f:d2:38:f1:ca:64:80:
46:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:BC:2F:39:9B:51:31:78:35:B0:9E:B8:F4:D1:23:F1:CE:F5:71:9A
X509v3 Authority Key Identifier:
keyid:9F:6F:B7:95:41:79:A9:66:6B:4C:B6:AF:E3:46:D1:E2:1E:C3:0E:45
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/n2-3lUF5qWZrTLav40bR4h7DDkU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/0a3fff-1a42-4044-ae8f-7354a73bda7e/1/n2-3lUF5qWZrTLav40bR4h7DDkU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/22/0a3fff-1a42-4044-ae8f-7354a73bda7e/1/n2-3lUF5qWZrTLav40bR4h7DDkU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2a:d9:0a:f4:fc:47:97:c2:89:a5:55:ed:8c:96:6d:25:b0:95:
ef:4c:51:57:ad:d6:73:9f:3d:3d:4b:2e:aa:0e:9d:96:bd:a5:
aa:e8:5c:c2:3c:f7:12:27:1e:e7:35:ff:fe:82:ad:79:c0:78:
1d:da:b0:e5:4e:8f:d5:1e:1d:98:81:9d:d4:4e:cb:4d:7b:3d:
8e:87:0f:49:a0:63:f0:80:04:80:21:6a:71:3d:10:38:d6:40:
d7:21:7a:51:ae:43:42:1a:e0:f0:8e:1c:b6:c5:00:d5:9f:30:
2e:1e:7e:4d:8e:9f:c8:5b:d0:39:79:87:62:cb:d5:84:4d:80:
aa:92:34:a5:f3:7b:3b:df:53:e9:32:09:81:9d:e1:db:1e:6f:
8a:f1:d3:a2:22:f2:69:ab:40:42:aa:e4:7a:9b:b3:cd:a3:27:
aa:a9:b4:a8:ae:30:90:ee:c4:88:58:5e:d8:2c:98:82:85:f7:
4f:69:a5:24:28:ad:dd:d8:cb:b4:9e:8a:7e:54:22:a5:69:97:
91:ca:fb:65:4a:32:f6:33:d8:6a:aa:d2:e0:a1:74:dc:29:3e:
0f:48:f0:66:be:b9:5f:00:f1:31:1a:bf:e4:1a:14:30:3d:44:
25:c6:bd:bb:9f:b8:72:85:d9:34:66:82:49:0d:90:f8:17:96:
61:bd:86:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 2 23:22:06 2025 by rpki-client