Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b2/cbd332-a8db-4606-ac9b-14ec41d4c0a6/1/n4IkN_Se1TiGaJAir93aWfefinE.mft
File: n4IkN_Se1TiGaJAir93aWfefinE.mft (raw, json)
Hash identifier: m8Htt91MT4b8ZpCxmEc1BHSfO6Xd9ZF6PToyj84cEGM=
Subject key identifier: 32:69:97:8D:48:7A:1F:28:CE:9F:09:16:31:82:65:34:7F:B0:8A:2F
Authority key identifier: 9F:82:24:37:F4:9E:D5:38:86:68:90:22:AF:DD:DA:59:F7:9F:8A:71
Certificate issuer: /CN=9f822437f49ed53886689022afddda59f79f8a71
Certificate serial: 0196B10E38DE28F67B166E5612D6535C36CE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/n4IkN_Se1TiGaJAir93aWfefinE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b2/cbd332-a8db-4606-ac9b-14ec41d4c0a6/1/n4IkN_Se1TiGaJAir93aWfefinE.mft
Manifest number: 0824
Signing time: Thu 08 May 2025 18:00:21 +0000
Manifest this update: Thu 08 May 2025 18:00:21 +0000
Manifest next update: Fri 09 May 2025 18:00:21 +0000
Files and hashes: 1: IdEYIsWCps3Gl-CPOJNmXVY_KDA.roa (hash: V5/YEnbALkGDiezb6/4H3zOCBx4UZLrATG4CYdBNlRA=)
2: n4IkN_Se1TiGaJAir93aWfefinE.crl (hash: okHgQt+NBSvNZVNO8SXbUqxhUT881slv/aP/x0IhovY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b2/cbd332-a8db-4606-ac9b-14ec41d4c0a6/1/n4IkN_Se1TiGaJAir93aWfefinE.crl
rsync://rpki.ripe.net/repository/DEFAULT/b2/cbd332-a8db-4606-ac9b-14ec41d4c0a6/1/n4IkN_Se1TiGaJAir93aWfefinE.mft
rsync://rpki.ripe.net/repository/DEFAULT/n4IkN_Se1TiGaJAir93aWfefinE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 09 May 2025 15:42:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:b1:0e:38:de:28:f6:7b:16:6e:56:12:d6:53:5c:36:ce
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9f822437f49ed53886689022afddda59f79f8a71
Validity
Not Before: May 8 18:00:21 2025 GMT
Not After : May 9 18:00:21 2025 GMT
Subject: CN=3269978d487a1f28ce9f0916318265347fb08a2f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:82:4e:a9:4a:08:07:36:4c:44:49:c7:19:ba:
1f:be:66:9f:35:99:fb:a9:d8:4b:2e:30:53:63:af:
88:ee:81:5c:f9:0d:27:f1:fa:73:9b:24:2b:f4:79:
7a:06:c6:0e:6f:52:bf:7f:06:cd:71:a8:90:6c:f9:
01:1c:7a:de:c7:6c:b7:c7:56:10:07:cc:69:46:6d:
d9:67:e2:db:dd:52:5b:6a:01:13:ee:1e:91:82:cf:
d6:1d:09:f2:c7:e4:ca:12:80:ca:46:53:b4:2d:87:
46:1b:8f:d9:68:55:d5:35:4d:0e:14:0f:cf:4e:cc:
b8:df:09:fc:07:50:ac:b7:4c:ea:07:53:8c:20:50:
b9:ef:58:3f:8e:43:46:e0:58:5f:f7:99:21:99:84:
c2:d3:e2:5c:b5:6d:be:91:e3:8d:e6:87:90:6f:c5:
e7:58:f5:bb:d5:c8:2e:6d:d3:da:38:3e:fa:5e:b1:
f9:2c:10:1b:04:30:d4:14:e1:30:fa:dc:75:79:07:
5d:ac:5e:1d:7f:ef:03:0e:a8:45:12:cc:8c:cf:bd:
b4:d9:6d:73:5a:5c:c2:94:6b:6c:fc:2d:fe:fc:6b:
93:b3:55:7c:36:21:58:e4:2f:28:ad:90:07:92:e6:
e3:e5:b6:6e:b1:b8:84:7f:a6:e0:40:e2:88:c9:42:
78:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:69:97:8D:48:7A:1F:28:CE:9F:09:16:31:82:65:34:7F:B0:8A:2F
X509v3 Authority Key Identifier:
keyid:9F:82:24:37:F4:9E:D5:38:86:68:90:22:AF:DD:DA:59:F7:9F:8A:71
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/n4IkN_Se1TiGaJAir93aWfefinE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/cbd332-a8db-4606-ac9b-14ec41d4c0a6/1/n4IkN_Se1TiGaJAir93aWfefinE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/cbd332-a8db-4606-ac9b-14ec41d4c0a6/1/n4IkN_Se1TiGaJAir93aWfefinE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b3:47:3d:d1:75:78:2c:0b:f6:15:a6:c1:d3:e5:69:7e:d8:44:
ad:1c:63:43:7d:77:fb:08:c5:4a:2b:de:d1:ec:22:03:d3:18:
dd:5c:0a:a8:a3:85:33:48:cb:26:cc:01:4a:de:c7:92:3e:57:
69:d6:b1:68:1f:56:3e:12:43:f7:9e:fa:db:c8:1f:6c:56:cf:
22:c6:bd:3b:41:5d:fb:98:e5:d4:13:c3:e9:99:64:a5:9f:5b:
aa:3f:4c:5d:72:e5:48:47:5a:9e:58:8d:ef:45:0a:4c:e0:c9:
30:65:55:a7:34:d8:67:3e:19:c4:8c:64:e5:e2:87:37:b4:87:
cf:ae:e6:fe:aa:c7:de:ed:a7:e2:bc:20:78:9b:ad:0f:ce:a2:
c5:fb:e7:43:4d:1a:9b:fc:95:6e:5c:41:da:e8:70:15:03:8e:
69:d2:38:bd:45:f8:5c:77:83:50:c6:ba:3f:8b:87:28:7a:70:
95:87:31:a3:81:aa:37:ef:e1:f4:0b:71:4d:b0:40:8b:4b:6d:
a4:9b:d3:b6:19:c9:d4:85:ff:e9:53:b4:78:14:cd:50:3c:fe:
31:f7:75:15:75:86:8d:5e:82:f4:ea:fd:d9:41:ce:5f:d7:3e:
9f:f4:60:d0:72:b2:8a:7c:5b:e5:39:40:23:83:03:32:83:f2:
29:8a:f1:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 8 19:59:26 2025 by rpki-client