Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/33541a-f9ac-475a-b297-88a0e450a17b/1/N2PHEGpfJkAWLnmAWD6rW9gAjEU.mft
File: N2PHEGpfJkAWLnmAWD6rW9gAjEU.mft (raw, json)
Hash identifier: EkjSBHudhqdyzNOPsDIPToLf4ZJl2eEjeSUgzwAAtrY=
Subject key identifier: 0D:B3:E8:F1:4D:B6:BC:C1:53:83:71:19:5D:81:DA:F2:C6:9F:67:8D
Authority key identifier: 37:63:C7:10:6A:5F:26:40:16:2E:79:80:58:3E:AB:5B:D8:00:8C:45
Certificate issuer: /CN=3763c7106a5f2640162e7980583eab5bd8008c45
Certificate serial: 0196B822F8955CC3A9EB0FA00424A595057A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/N2PHEGpfJkAWLnmAWD6rW9gAjEU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/33541a-f9ac-475a-b297-88a0e450a17b/1/N2PHEGpfJkAWLnmAWD6rW9gAjEU.mft
Manifest number: 1086
Signing time: Sat 10 May 2025 03:00:21 +0000
Manifest this update: Sat 10 May 2025 03:00:21 +0000
Manifest next update: Sun 11 May 2025 03:00:21 +0000
Files and hashes: 1: JqPeTKIiSqFLnMuoE0z5MMpECyE.roa (hash: Sm0VFijktfATyc4h+uw4DoW/FSQrn3UdeoSnPalbaPo=)
2: N2PHEGpfJkAWLnmAWD6rW9gAjEU.crl (hash: FrKf2/Gd3Te4CBDTHfMU4ggvNB7BiUEfVyTblgrDKRc=)
3: VmdUY2uJ9NapTyZJ8UBdjlgGJQQ.roa (hash: 53UxHJyDkYLtFVil6COplJSwSFn/MNxw2tMZPgc57WQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/33541a-f9ac-475a-b297-88a0e450a17b/1/N2PHEGpfJkAWLnmAWD6rW9gAjEU.crl
rsync://rpki.ripe.net/repository/DEFAULT/5a/33541a-f9ac-475a-b297-88a0e450a17b/1/N2PHEGpfJkAWLnmAWD6rW9gAjEU.mft
rsync://rpki.ripe.net/repository/DEFAULT/N2PHEGpfJkAWLnmAWD6rW9gAjEU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 10 May 2025 19:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:b8:22:f8:95:5c:c3:a9:eb:0f:a0:04:24:a5:95:05:7a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3763c7106a5f2640162e7980583eab5bd8008c45
Validity
Not Before: May 10 03:00:21 2025 GMT
Not After : May 11 03:00:21 2025 GMT
Subject: CN=0db3e8f14db6bcc1538371195d81daf2c69f678d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:ea:ce:90:cc:5b:3e:f8:c3:cf:26:6a:87:a3:
07:27:e4:97:c0:5c:17:96:24:cc:e9:0c:76:18:ef:
cf:4b:89:31:08:b6:5b:83:b8:2e:7a:1d:f7:dd:9a:
43:0d:9d:74:3e:4d:5d:4d:15:8f:04:eb:41:93:48:
cd:fc:d8:43:03:62:6a:03:ef:c5:3c:e1:bd:d5:32:
5b:e0:ee:84:e7:1e:ac:b0:44:a5:6a:6e:cf:09:cc:
5a:94:03:31:93:a4:26:58:71:08:b8:6b:58:0f:66:
57:68:b0:da:6d:9b:e0:c2:76:04:f4:db:65:e1:36:
39:4a:da:05:c5:b3:72:96:fa:25:43:b9:99:ff:98:
2e:cf:6f:52:02:e1:eb:36:e0:f5:98:db:39:de:9c:
35:cd:e6:3d:0a:0b:1c:9d:44:64:82:b5:62:c3:03:
2e:8a:f8:e8:96:48:a4:d1:9b:3a:3d:34:a1:0c:91:
0d:cd:9b:a9:86:6c:9f:d9:02:e8:fa:e0:d2:06:ca:
54:4d:d7:b3:9c:62:82:ba:93:b7:c2:42:76:5d:7c:
e6:a5:86:e5:ff:06:2d:b5:74:89:87:f9:5c:2a:81:
40:09:71:ec:62:d2:5f:33:a8:38:c8:08:10:08:e0:
b4:1c:61:f2:4f:43:84:66:6e:75:56:17:0f:7e:64:
43:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:B3:E8:F1:4D:B6:BC:C1:53:83:71:19:5D:81:DA:F2:C6:9F:67:8D
X509v3 Authority Key Identifier:
keyid:37:63:C7:10:6A:5F:26:40:16:2E:79:80:58:3E:AB:5B:D8:00:8C:45
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/N2PHEGpfJkAWLnmAWD6rW9gAjEU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/33541a-f9ac-475a-b297-88a0e450a17b/1/N2PHEGpfJkAWLnmAWD6rW9gAjEU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/33541a-f9ac-475a-b297-88a0e450a17b/1/N2PHEGpfJkAWLnmAWD6rW9gAjEU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
45:83:67:03:19:21:6e:f5:39:3c:14:30:04:1c:a8:44:71:4c:
a2:ba:36:9c:bd:df:ad:42:f7:f1:fb:f5:7f:1d:f5:d4:de:79:
06:58:24:59:7e:46:df:7e:f6:e9:87:34:f5:d0:88:c2:1b:63:
f5:2a:d8:49:01:83:ec:7b:64:f1:c6:2f:ea:0a:ec:74:fc:0b:
cc:c9:40:e7:c8:08:09:a9:77:a7:be:20:b4:5b:6c:f0:43:ea:
4f:de:38:f4:7a:3a:de:0c:15:62:77:9e:09:1d:3f:bb:ef:f1:
8c:0d:d5:ab:f2:df:c8:76:42:3b:58:af:4b:06:6b:6d:d2:52:
b7:e4:c2:d9:68:25:6a:f5:2b:b4:83:26:7b:bb:16:e9:0d:6e:
50:79:c9:74:29:01:58:0e:69:6a:96:4f:71:14:1d:3c:36:90:
5e:1c:6f:ca:ad:68:31:5f:1f:03:44:39:46:22:db:33:a4:d2:
dc:71:37:c5:d5:cd:ba:c5:7a:3c:44:45:d9:fb:d0:0e:e2:08:
ea:c1:db:b3:6c:66:92:c5:b9:0e:01:0a:50:31:84:3c:4c:9c:
3b:e5:dd:63:bb:8e:5e:32:e8:17:9b:df:73:a8:2b:fd:42:f9:
e8:bd:6e:6d:e9:a1:17:66:28:7a:88:19:d7:7f:d0:d4:a8:ce:
b2:2c:ff:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 04:47:12 2025 by rpki-client