Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/33541a-f9ac-475a-b297-88a0e450a17b/1/N2PHEGpfJkAWLnmAWD6rW9gAjEU.mft
File: N2PHEGpfJkAWLnmAWD6rW9gAjEU.mft (raw, json)
Hash identifier: GrHOCKqyZs0lnaxogBX00QK+bEhDcSAphhWfnQj70dQ=
Subject key identifier: E8:C4:E9:8A:5B:9D:9E:71:F4:72:8D:C2:AB:FF:72:10:E0:16:E2:0E
Authority key identifier: 37:63:C7:10:6A:5F:26:40:16:2E:79:80:58:3E:AB:5B:D8:00:8C:45
Certificate issuer: /CN=3763c7106a5f2640162e7980583eab5bd8008c45
Certificate serial: 0197B70F130107B14EA45BD6EA4BC630F24E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/N2PHEGpfJkAWLnmAWD6rW9gAjEU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/33541a-f9ac-475a-b297-88a0e450a17b/1/N2PHEGpfJkAWLnmAWD6rW9gAjEU.mft
Manifest number: 110A
Signing time: Sat 28 Jun 2025 15:01:47 +0000
Manifest this update: Sat 28 Jun 2025 15:01:47 +0000
Manifest next update: Sun 29 Jun 2025 15:01:47 +0000
Files and hashes: 1: JqPeTKIiSqFLnMuoE0z5MMpECyE.roa (hash: Sm0VFijktfATyc4h+uw4DoW/FSQrn3UdeoSnPalbaPo=)
2: N2PHEGpfJkAWLnmAWD6rW9gAjEU.crl (hash: kz2/RHK2fz0OUkcUjG09+oE8cnnN+bJJ8XnoyA6/wII=)
3: VmdUY2uJ9NapTyZJ8UBdjlgGJQQ.roa (hash: 53UxHJyDkYLtFVil6COplJSwSFn/MNxw2tMZPgc57WQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/33541a-f9ac-475a-b297-88a0e450a17b/1/N2PHEGpfJkAWLnmAWD6rW9gAjEU.crl
rsync://rpki.ripe.net/repository/DEFAULT/5a/33541a-f9ac-475a-b297-88a0e450a17b/1/N2PHEGpfJkAWLnmAWD6rW9gAjEU.mft
rsync://rpki.ripe.net/repository/DEFAULT/N2PHEGpfJkAWLnmAWD6rW9gAjEU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:0f:13:01:07:b1:4e:a4:5b:d6:ea:4b:c6:30:f2:4e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3763c7106a5f2640162e7980583eab5bd8008c45
Validity
Not Before: Jun 28 15:01:47 2025 GMT
Not After : Jun 29 15:01:47 2025 GMT
Subject: CN=e8c4e98a5b9d9e71f4728dc2abff7210e016e20e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:a3:69:62:f7:e0:cd:e8:88:5d:c6:66:8d:88:
34:c8:55:ab:c1:7b:86:c0:47:af:ef:ee:21:ef:e8:
c2:48:64:0c:fc:58:13:7f:35:7c:c0:16:25:7c:44:
8d:65:03:70:4c:8a:eb:6b:dd:6c:be:f6:35:ed:62:
31:24:ee:dc:f9:66:09:36:4c:1c:b9:81:69:b1:36:
56:ed:b1:2a:1c:86:08:c2:3a:20:48:14:47:5d:4c:
04:fb:f5:04:23:a3:6b:35:1f:2c:ab:c5:2f:fd:d6:
8e:e6:1e:c0:eb:2f:df:96:29:d4:c7:44:b9:fa:41:
08:47:66:19:eb:2a:7d:47:d6:17:3c:5e:3a:04:5c:
cd:46:5b:f8:60:41:66:b2:56:2f:14:68:c0:d2:71:
62:c2:2f:db:8d:ce:fc:a2:af:17:61:97:02:d4:63:
36:48:fd:2a:aa:9c:e9:bb:68:93:31:c7:dd:ef:ec:
fe:f4:39:3c:19:2c:8f:fd:b4:c2:e3:33:ba:4b:87:
dc:4c:6a:d8:53:2b:dd:27:3b:3a:13:69:be:73:df:
9e:d2:ff:64:21:fd:54:3d:16:9e:7f:bd:cc:bd:c1:
c0:21:90:40:cf:cb:80:58:aa:c4:d4:89:e8:13:2a:
bf:93:06:fd:2a:41:e6:72:7c:d2:3c:26:74:7f:46:
39:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:C4:E9:8A:5B:9D:9E:71:F4:72:8D:C2:AB:FF:72:10:E0:16:E2:0E
X509v3 Authority Key Identifier:
keyid:37:63:C7:10:6A:5F:26:40:16:2E:79:80:58:3E:AB:5B:D8:00:8C:45
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/N2PHEGpfJkAWLnmAWD6rW9gAjEU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/33541a-f9ac-475a-b297-88a0e450a17b/1/N2PHEGpfJkAWLnmAWD6rW9gAjEU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/33541a-f9ac-475a-b297-88a0e450a17b/1/N2PHEGpfJkAWLnmAWD6rW9gAjEU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a5:28:58:d1:9a:f3:5e:e5:f2:b7:ef:a1:0b:ec:d1:a8:53:c8:
9f:8a:17:79:61:57:10:64:4b:cb:60:13:d4:39:ab:bd:d8:fd:
b4:8b:ab:fa:7e:18:0b:50:60:d2:ac:9c:d3:4c:3d:13:d3:e7:
6e:85:ec:69:b0:2a:dc:61:fa:a5:03:a9:d0:e3:6e:2c:a2:dd:
d4:6b:fd:ea:b1:79:75:c4:95:ca:76:46:e2:41:70:6c:19:54:
e9:e3:9b:5e:47:00:db:93:9c:c9:9e:bc:b7:9b:d0:84:29:d8:
3d:db:69:b4:cf:1b:92:12:48:a7:c3:5a:4a:8c:f4:de:ec:1d:
28:29:b6:8a:3e:d3:28:0c:b2:64:d2:80:93:c3:78:d0:45:09:
72:ba:9f:77:32:3e:ac:86:ff:fe:15:47:35:ec:1e:f6:c1:75:
03:90:61:d2:ec:ce:a3:6a:a2:36:31:63:35:25:d7:39:d0:b1:
0a:c8:1e:54:5b:c8:41:fa:8d:46:0c:17:84:f5:9a:6e:5c:c2:
ac:7c:ca:f8:b6:80:75:25:40:83:53:88:9f:83:a8:76:d2:9d:
d3:1f:c6:32:0a:5f:bc:d9:c7:cf:01:b8:00:69:c0:27:ca:2c:
32:5c:2c:cc:51:d4:00:3e:4c:b0:e4:b8:f9:8c:b3:7d:9f:58:
83:7b:29:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 20:33:14 2025 by rpki-client