Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/48/f5ed1c-3797-400d-b72f-804cda5243b3/1/n2yY1Ze3gbehDH4O2xxI9rgaX4s.mft
File: n2yY1Ze3gbehDH4O2xxI9rgaX4s.mft (raw, json)
Hash identifier: nCr6LpXaJVcWEchzZ5LPYxVpc0e+Q+anQVVPP6t1jwA=
Subject key identifier: 0D:1B:06:A1:24:1D:98:02:F4:FD:6B:3F:9F:75:4E:83:04:FC:9A:D4
Authority key identifier: 9F:6C:98:D5:97:B7:81:B7:A1:0C:7E:0E:DB:1C:48:F6:B8:1A:5F:8B
Certificate issuer: /CN=9f6c98d597b781b7a10c7e0edb1c48f6b81a5f8b
Certificate serial: 0197C4262A7435FA4962655C437A64BD485E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/n2yY1Ze3gbehDH4O2xxI9rgaX4s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/48/f5ed1c-3797-400d-b72f-804cda5243b3/1/n2yY1Ze3gbehDH4O2xxI9rgaX4s.mft
Manifest number: 036A
Signing time: Tue 01 Jul 2025 04:02:04 +0000
Manifest this update: Tue 01 Jul 2025 04:02:04 +0000
Manifest next update: Wed 02 Jul 2025 04:02:04 +0000
Files and hashes: 1: gLvldii-qJB8VCnJaWDvi5QbXt8.roa (hash: 9RxPQGeD0pT2vqVcsjjJurQ/oZ8JH2GkOiJjJQsHTb0=)
2: n2yY1Ze3gbehDH4O2xxI9rgaX4s.crl (hash: 0lImfYra5jvd6l6TbNuPTqvL9JzmwUuVIqcfF01B2e8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/48/f5ed1c-3797-400d-b72f-804cda5243b3/1/n2yY1Ze3gbehDH4O2xxI9rgaX4s.crl
rsync://rpki.ripe.net/repository/DEFAULT/48/f5ed1c-3797-400d-b72f-804cda5243b3/1/n2yY1Ze3gbehDH4O2xxI9rgaX4s.mft
rsync://rpki.ripe.net/repository/DEFAULT/n2yY1Ze3gbehDH4O2xxI9rgaX4s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 01 Jul 2025 23:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:c4:26:2a:74:35:fa:49:62:65:5c:43:7a:64:bd:48:5e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9f6c98d597b781b7a10c7e0edb1c48f6b81a5f8b
Validity
Not Before: Jul 1 04:02:04 2025 GMT
Not After : Jul 2 04:02:04 2025 GMT
Subject: CN=0d1b06a1241d9802f4fd6b3f9f754e8304fc9ad4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ee:de:10:85:17:90:17:80:78:c2:94:b3:34:32:
07:f6:87:87:9c:b5:57:bd:d2:fb:10:9f:0e:d6:ef:
b2:06:9b:4c:8d:88:87:2b:f1:e4:2c:e7:8c:1f:d9:
d5:44:22:c4:43:fa:bb:23:c4:c3:5d:2f:0a:39:90:
59:1b:ab:68:8b:1e:b2:f8:18:1f:25:19:9c:4a:e8:
d5:2d:63:38:83:43:c1:e5:97:98:fb:6b:87:f7:a4:
1a:30:ee:b4:04:eb:0a:55:d9:e9:36:0b:9c:30:04:
15:bc:a1:ec:2b:85:93:69:1a:d0:82:09:33:44:5e:
38:0a:0b:fc:97:f9:44:2e:6e:7d:52:70:fd:77:90:
24:84:db:e3:15:71:78:9f:e3:21:19:e6:d2:4e:6b:
63:79:a1:7b:24:74:51:37:08:f7:04:a1:65:30:dc:
ed:f4:ae:bc:8c:20:f9:92:55:48:e8:ee:57:2d:29:
81:de:e5:0e:5d:49:61:68:80:c8:93:57:db:f9:b5:
c0:5e:a6:d9:63:de:9a:c0:ba:dc:f2:a8:55:8e:7e:
87:59:87:93:33:86:ed:79:c7:53:05:c6:3d:be:a6:
48:bf:85:4b:50:c7:4b:06:93:d7:00:48:46:c5:b5:
99:5b:4f:39:01:35:39:80:20:55:2a:b5:40:95:4f:
fb:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:1B:06:A1:24:1D:98:02:F4:FD:6B:3F:9F:75:4E:83:04:FC:9A:D4
X509v3 Authority Key Identifier:
keyid:9F:6C:98:D5:97:B7:81:B7:A1:0C:7E:0E:DB:1C:48:F6:B8:1A:5F:8B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/n2yY1Ze3gbehDH4O2xxI9rgaX4s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/48/f5ed1c-3797-400d-b72f-804cda5243b3/1/n2yY1Ze3gbehDH4O2xxI9rgaX4s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/48/f5ed1c-3797-400d-b72f-804cda5243b3/1/n2yY1Ze3gbehDH4O2xxI9rgaX4s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
99:5c:86:0f:e6:d6:b3:7f:fd:45:bb:1a:3b:7b:38:71:de:18:
e7:b2:dd:ab:b0:39:9b:8a:fd:5d:b0:69:5d:a1:5c:a2:18:99:
dc:41:3b:a4:fc:de:fc:08:1e:95:af:b5:07:9c:3c:d0:aa:be:
ba:ab:a3:c7:ba:f1:83:59:d2:74:f4:7d:22:0d:78:ec:5d:1c:
51:08:95:c2:70:d7:10:4c:e5:bd:e5:b4:76:4c:f4:5e:2b:ad:
6f:f7:cc:17:ee:77:e1:59:30:16:b2:b5:36:02:1b:25:6a:bb:
3e:5d:e9:2e:46:c1:83:f9:2d:23:67:3b:1a:1e:1c:f4:2c:fc:
f8:7d:ab:3a:9e:e6:54:12:8e:dd:73:b9:82:93:62:84:36:43:
ea:6b:39:3a:df:7f:ff:0d:32:b0:a8:fd:6c:5f:67:04:11:94:
bf:97:22:86:c9:ad:e3:c7:9a:b4:02:5f:d5:5e:56:e6:35:5f:
8e:50:41:8c:54:e3:12:ea:3d:85:10:a2:eb:d6:0e:67:5d:2f:
90:e8:65:83:52:d8:e9:0c:d5:72:c2:c1:04:bd:51:19:55:88:
69:d5:9b:46:73:a3:b2:25:05:26:9a:cb:41:ef:8d:5b:e6:17:
e3:c9:d0:96:dc:6c:d1:aa:dd:57:81:6a:8c:e9:bb:03:fc:f8:
5f:be:34:5c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZfEJip0NfpJYmVcQ3pkvUheMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDlmNmM5OGQ1OTdiNzgxYjdhMTBjN2UwZWRiMWM0OGY2Yjgx
YTVmOGIwHhcNMjUwNzAxMDQwMjA0WhcNMjUwNzAyMDQwMjA0WjAzMTEwLwYDVQQD
EygwZDFiMDZhMTI0MWQ5ODAyZjRmZDZiM2Y5Zjc1NGU4MzA0ZmM5YWQ0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7t4QhReQF4B4wpSzNDIH9oeHnLVX
vdL7EJ8O1u+yBptMjYiHK/HkLOeMH9nVRCLEQ/q7I8TDXS8KOZBZG6toix6y+Bgf
JRmcSujVLWM4g0PB5ZeY+2uH96QaMO60BOsKVdnpNgucMAQVvKHsK4WTaRrQggkz
RF44Cgv8l/lELm59UnD9d5AkhNvjFXF4n+MhGebSTmtjeaF7JHRRNwj3BKFlMNzt
9K68jCD5klVI6O5XLSmB3uUOXUlhaIDIk1fb+bXAXqbZY96awLrc8qhVjn6HWYeT
M4btecdTBcY9vqZIv4VLUMdLBpPXAEhGxbWZW085ATU5gCBVKrVAlU/7cQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFA0bBqEkHZgC9P1rP591ToME/JrUMB8GA1UdIwQY
MBaAFJ9smNWXt4G3oQx+DtscSPa4Gl+LMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbjJ5WTFaZTNnYmVoREg0TzJ4eEk5cmdhWDRzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80OC9mNWVkMWMtMzc5Ny00MDBkLWI3MmYt
ODA0Y2RhNTI0M2IzLzEvbjJ5WTFaZTNnYmVoREg0TzJ4eEk5cmdhWDRzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80OC9mNWVkMWMtMzc5Ny00MDBkLWI3MmYtODA0Y2RhNTI0M2Iz
LzEvbjJ5WTFaZTNnYmVoREg0TzJ4eEk5cmdhWDRzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAmVyGD+bW
s3/9RbsaO3s4cd4Y57Ldq7A5m4r9XbBpXaFcohiZ3EE7pPze/Agela+1B5w80Kq+
uqujx7rxg1nSdPR9Ig147F0cUQiVwnDXEEzlveW0dkz0Xiutb/fMF+534VkwFrK1
NgIbJWq7Pl3pLkbBg/ktI2c7Gh4c9Cz8+H2rOp7mVBKO3XO5gpNihDZD6ms5Ot9/
/w0ysKj9bF9nBBGUv5cihsmt48eatAJf1V5W5jVfjlBBjFTjEuo9hRCi69YOZ10v
kOhlg1LY6QzVcsLBBL1RGVWIadWbRnOjsiUFJprLQe+NW+YX48nQltxs0ardV4Fq
jOm7A/z4X740XA==
-----END CERTIFICATE-----
Generated at Tue Jul 1 06:44:28 2025 by rpki-client