Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/48/f5ed1c-3797-400d-b72f-804cda5243b3/1/n2yY1Ze3gbehDH4O2xxI9rgaX4s.mft
File: n2yY1Ze3gbehDH4O2xxI9rgaX4s.mft (raw, json)
Hash identifier: C0tWPjptk32ctvwWSeVMsktWsjLizkmcStJi270TNJk=
Subject key identifier: 4D:24:21:B0:AA:6A:DE:ED:1F:1C:01:D2:53:57:46:90:AD:7E:F0:79
Authority key identifier: 9F:6C:98:D5:97:B7:81:B7:A1:0C:7E:0E:DB:1C:48:F6:B8:1A:5F:8B
Certificate issuer: /CN=9f6c98d597b781b7a10c7e0edb1c48f6b81a5f8b
Certificate serial: 0196C1CABB13B136CC7E20AE32A3C762CD6F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/n2yY1Ze3gbehDH4O2xxI9rgaX4s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/48/f5ed1c-3797-400d-b72f-804cda5243b3/1/n2yY1Ze3gbehDH4O2xxI9rgaX4s.mft
Manifest number: 02E4
Signing time: Mon 12 May 2025 00:00:10 +0000
Manifest this update: Mon 12 May 2025 00:00:10 +0000
Manifest next update: Tue 13 May 2025 00:00:10 +0000
Files and hashes: 1: 1uWXPJauvtvifVbThumN2raM6U0.roa (hash: Y17nAyKVcY518yw8/uPGoyc32qYJ3ixC6oOmJrlY3aE=)
2: n2yY1Ze3gbehDH4O2xxI9rgaX4s.crl (hash: JUrPvmKujXFILdQtO+Pl2M2btoQ7iM3KJo/nQg/5aCg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/48/f5ed1c-3797-400d-b72f-804cda5243b3/1/n2yY1Ze3gbehDH4O2xxI9rgaX4s.crl
rsync://rpki.ripe.net/repository/DEFAULT/48/f5ed1c-3797-400d-b72f-804cda5243b3/1/n2yY1Ze3gbehDH4O2xxI9rgaX4s.mft
rsync://rpki.ripe.net/repository/DEFAULT/n2yY1Ze3gbehDH4O2xxI9rgaX4s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 13 May 2025 00:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:c1:ca:bb:13:b1:36:cc:7e:20:ae:32:a3:c7:62:cd:6f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9f6c98d597b781b7a10c7e0edb1c48f6b81a5f8b
Validity
Not Before: May 12 00:00:10 2025 GMT
Not After : May 13 00:00:10 2025 GMT
Subject: CN=4d2421b0aa6adeed1f1c01d253574690ad7ef079
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:a8:8b:db:79:b9:c8:d0:06:c6:77:cf:5a:f4:
bb:8a:ee:ac:d2:f8:c4:b7:6f:2c:70:c6:89:5f:e9:
12:09:68:2a:a4:37:50:f0:05:db:bb:6f:c6:97:a0:
f5:f9:7a:a6:b6:20:fe:1d:b4:6a:75:33:47:29:52:
39:a2:e9:ab:9b:83:0a:ad:c1:b6:5f:1a:82:27:bd:
2c:5d:ef:0a:2a:f5:57:6c:5c:4a:a6:e8:24:89:60:
e7:63:3e:a2:fc:07:4e:91:7e:b3:89:5f:a6:56:75:
d8:f5:6b:99:16:ad:94:fb:f9:1d:54:f3:f6:74:b9:
ce:15:9a:20:78:fb:d7:3a:db:08:22:12:3f:f5:42:
db:f8:c8:0b:d9:df:52:89:a1:0e:6a:42:69:9a:0c:
7c:1d:b7:ba:c9:a1:ae:40:b2:a2:e9:e2:7b:82:83:
91:bc:97:35:6a:73:be:e1:ae:25:d2:c5:81:df:17:
17:fd:0a:2c:94:3f:3d:e4:1c:3e:fd:d2:41:56:af:
81:0e:7e:f0:b6:82:ec:94:21:65:a6:c9:e2:a2:ba:
54:0f:c6:3c:d7:b9:14:a0:04:1e:01:70:cd:fa:22:
0a:28:ce:46:1a:3d:47:74:76:d1:26:b2:39:e3:9f:
d1:e6:b6:bc:74:3e:f5:f2:de:ec:3c:71:3b:f7:4c:
8a:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:24:21:B0:AA:6A:DE:ED:1F:1C:01:D2:53:57:46:90:AD:7E:F0:79
X509v3 Authority Key Identifier:
keyid:9F:6C:98:D5:97:B7:81:B7:A1:0C:7E:0E:DB:1C:48:F6:B8:1A:5F:8B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/n2yY1Ze3gbehDH4O2xxI9rgaX4s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/48/f5ed1c-3797-400d-b72f-804cda5243b3/1/n2yY1Ze3gbehDH4O2xxI9rgaX4s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/48/f5ed1c-3797-400d-b72f-804cda5243b3/1/n2yY1Ze3gbehDH4O2xxI9rgaX4s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
27:41:32:fe:62:d9:69:43:d0:15:2d:a6:cd:1f:b5:c0:16:bf:
eb:79:8a:89:92:91:5d:0a:84:98:a5:86:f4:05:7c:8c:02:3d:
42:9c:90:5a:53:9a:87:4b:1f:72:a4:59:d2:e8:35:7e:51:ad:
60:a3:c1:ad:77:04:54:b9:d6:c1:40:e2:73:e2:97:30:cb:8a:
c5:4c:eb:d9:d6:43:af:56:20:6d:79:02:5b:d6:10:dc:cd:1f:
c6:52:3d:a8:ca:f4:29:04:7b:a4:7a:25:13:d8:f6:84:d5:96:
a6:6c:49:4c:ed:55:9b:56:b8:25:41:72:70:8f:1d:b4:1b:c8:
56:e8:73:18:47:02:f7:6c:f8:4a:ca:26:74:5d:0f:9b:fd:b3:
e1:41:18:1e:d2:83:41:5e:f5:ea:27:a4:43:cf:b8:eb:45:87:
77:c6:4e:22:b5:a8:95:1b:a7:26:4e:28:42:9f:72:38:76:5b:
30:7d:fe:38:41:d0:cc:50:25:b3:fa:70:7a:67:db:39:c1:8c:
4e:49:a0:88:c3:c5:6b:e8:e5:99:a1:9d:33:61:3f:bb:04:fa:
17:d3:d5:9c:77:0f:4b:ca:f2:66:37:6f:e5:6d:9a:2a:18:5c:
49:38:8f:25:5d:0f:f8:8a:26:f6:b9:b4:a1:54:16:6d:29:35:
d0:c2:be:e2
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZbByrsTsTbMfiCuMqPHYs1vMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDlmNmM5OGQ1OTdiNzgxYjdhMTBjN2UwZWRiMWM0OGY2Yjgx
YTVmOGIwHhcNMjUwNTEyMDAwMDEwWhcNMjUwNTEzMDAwMDEwWjAzMTEwLwYDVQQD
Eyg0ZDI0MjFiMGFhNmFkZWVkMWYxYzAxZDI1MzU3NDY5MGFkN2VmMDc5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr6iL23m5yNAGxnfPWvS7iu6s0vjE
t28scMaJX+kSCWgqpDdQ8AXbu2/Gl6D1+XqmtiD+HbRqdTNHKVI5oumrm4MKrcG2
XxqCJ70sXe8KKvVXbFxKpugkiWDnYz6i/AdOkX6ziV+mVnXY9WuZFq2U+/kdVPP2
dLnOFZogePvXOtsIIhI/9ULb+MgL2d9SiaEOakJpmgx8Hbe6yaGuQLKi6eJ7goOR
vJc1anO+4a4l0sWB3xcX/QoslD895Bw+/dJBVq+BDn7wtoLslCFlpsniorpUD8Y8
17kUoAQeAXDN+iIKKM5GGj1HdHbRJrI545/R5ra8dD718t7sPHE790yK+wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFE0kIbCqat7tHxwB0lNXRpCtfvB5MB8GA1UdIwQY
MBaAFJ9smNWXt4G3oQx+DtscSPa4Gl+LMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbjJ5WTFaZTNnYmVoREg0TzJ4eEk5cmdhWDRzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80OC9mNWVkMWMtMzc5Ny00MDBkLWI3MmYt
ODA0Y2RhNTI0M2IzLzEvbjJ5WTFaZTNnYmVoREg0TzJ4eEk5cmdhWDRzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80OC9mNWVkMWMtMzc5Ny00MDBkLWI3MmYtODA0Y2RhNTI0M2Iz
LzEvbjJ5WTFaZTNnYmVoREg0TzJ4eEk5cmdhWDRzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJ0Ey/mLZ
aUPQFS2mzR+1wBa/63mKiZKRXQqEmKWG9AV8jAI9QpyQWlOah0sfcqRZ0ug1flGt
YKPBrXcEVLnWwUDic+KXMMuKxUzr2dZDr1YgbXkCW9YQ3M0fxlI9qMr0KQR7pHol
E9j2hNWWpmxJTO1Vm1a4JUFycI8dtBvIVuhzGEcC92z4SsomdF0Pm/2z4UEYHtKD
QV716iekQ8+460WHd8ZOIrWolRunJk4oQp9yOHZbMH3+OEHQzFAls/pwemfbOcGM
TkmgiMPFa+jlmaGdM2E/uwT6F9PVnHcPS8ryZjdv5W2aKhhcSTiPJV0P+Iom9rm0
oVQWbSk10MK+4g==
-----END CERTIFICATE-----
Generated at Mon May 12 08:20:54 2025 by rpki-client