Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b2/cbd332-a8db-4606-ac9b-14ec41d4c0a6/1/n4IkN_Se1TiGaJAir93aWfefinE.mft
File: n4IkN_Se1TiGaJAir93aWfefinE.mft (raw, json)
Hash identifier: c+AL3eaL0Z2uYlJrHmJTZeT0LUEUiapyIcCybb3wIWc=
Subject key identifier: 1E:AD:17:A0:D3:0E:48:43:EB:94:89:EE:30:6A:BA:AB:74:36:AB:1E
Authority key identifier: 9F:82:24:37:F4:9E:D5:38:86:68:90:22:AF:DD:DA:59:F7:9F:8A:71
Certificate issuer: /CN=9f822437f49ed53886689022afddda59f79f8a71
Certificate serial: 0197B7B3478C4D63B1BC2933FF0A7BF73088
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/n4IkN_Se1TiGaJAir93aWfefinE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b2/cbd332-a8db-4606-ac9b-14ec41d4c0a6/1/n4IkN_Se1TiGaJAir93aWfefinE.mft
Manifest number: 08AC
Signing time: Sat 28 Jun 2025 18:01:09 +0000
Manifest this update: Sat 28 Jun 2025 18:01:09 +0000
Manifest next update: Sun 29 Jun 2025 18:01:09 +0000
Files and hashes: 1: IdEYIsWCps3Gl-CPOJNmXVY_KDA.roa (hash: V5/YEnbALkGDiezb6/4H3zOCBx4UZLrATG4CYdBNlRA=)
2: n4IkN_Se1TiGaJAir93aWfefinE.crl (hash: 4KE0r0rNKEY8WgU/IfpxOt/mRmEBYUuir/fKEeJNPjg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b2/cbd332-a8db-4606-ac9b-14ec41d4c0a6/1/n4IkN_Se1TiGaJAir93aWfefinE.crl
rsync://rpki.ripe.net/repository/DEFAULT/b2/cbd332-a8db-4606-ac9b-14ec41d4c0a6/1/n4IkN_Se1TiGaJAir93aWfefinE.mft
rsync://rpki.ripe.net/repository/DEFAULT/n4IkN_Se1TiGaJAir93aWfefinE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:b3:47:8c:4d:63:b1:bc:29:33:ff:0a:7b:f7:30:88
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9f822437f49ed53886689022afddda59f79f8a71
Validity
Not Before: Jun 28 18:01:09 2025 GMT
Not After : Jun 29 18:01:09 2025 GMT
Subject: CN=1ead17a0d30e4843eb9489ee306abaab7436ab1e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:72:3b:10:da:75:79:a2:87:24:d7:20:c2:d0:
24:4f:ae:2e:a2:d6:c5:c1:0c:52:e7:fc:dc:f2:66:
c7:2d:b0:5f:6e:46:76:a5:68:f9:db:fb:96:fd:1e:
7d:9d:e1:30:25:ed:2d:52:65:c5:c1:cd:9f:c4:1f:
e7:f3:60:bc:39:fe:3b:7a:1f:e6:6c:95:1b:95:be:
ba:00:00:01:98:e6:e3:d7:fd:42:c8:b7:02:75:b4:
78:d2:6d:a7:be:ba:0b:9c:8c:e7:47:86:03:00:18:
40:9d:b5:6e:56:12:7f:ec:20:cd:66:3d:94:ae:30:
28:07:05:b0:64:cf:61:05:5f:36:b7:93:5e:10:9f:
f4:6f:54:29:2f:3b:19:29:b4:77:2c:0d:d3:cc:42:
8d:84:c4:f4:40:88:b0:46:5e:a2:c5:0f:23:82:66:
b1:ad:38:af:7a:c5:c0:59:fe:7f:b3:a8:5c:b0:fb:
f2:8f:73:04:69:15:25:82:f9:6b:0f:cc:9e:27:7e:
40:27:31:d7:75:dd:e9:3b:b5:0f:fc:a2:b8:5a:37:
fd:63:ba:3d:93:f1:1c:36:f4:aa:91:81:70:39:49:
cd:1d:ab:ac:9a:a3:05:d1:22:6b:6f:b7:d1:5f:68:
63:0a:41:b4:d2:9a:ac:bc:9d:98:cf:45:35:81:e2:
72:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:AD:17:A0:D3:0E:48:43:EB:94:89:EE:30:6A:BA:AB:74:36:AB:1E
X509v3 Authority Key Identifier:
keyid:9F:82:24:37:F4:9E:D5:38:86:68:90:22:AF:DD:DA:59:F7:9F:8A:71
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/n4IkN_Se1TiGaJAir93aWfefinE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/cbd332-a8db-4606-ac9b-14ec41d4c0a6/1/n4IkN_Se1TiGaJAir93aWfefinE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/cbd332-a8db-4606-ac9b-14ec41d4c0a6/1/n4IkN_Se1TiGaJAir93aWfefinE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
85:5c:b5:bc:ec:0a:26:b4:35:41:81:84:08:87:a8:93:2c:10:
6e:ee:f3:e8:57:b8:d7:fe:dd:68:96:03:3a:7b:3e:f3:e3:5d:
42:09:0f:10:80:49:ae:52:0b:0e:f7:e6:cd:b4:b1:43:a3:08:
37:e1:6b:16:2a:f4:fc:76:a4:f4:fd:ad:d9:e2:7b:cb:11:36:
7d:5e:b8:c3:80:2f:1b:2c:21:ce:62:8f:3d:b0:af:42:56:2f:
c4:90:50:03:0a:a3:49:f3:9a:56:90:8e:bb:c2:c0:ea:fe:dd:
59:21:62:80:e4:39:d5:bd:64:de:49:11:2f:a2:db:25:76:3a:
88:e3:ba:16:09:7c:8d:ef:f3:23:9d:7f:17:eb:14:d9:e9:2a:
3c:8b:6d:b0:12:34:43:00:c1:4e:01:3c:3f:46:f9:e9:f2:60:
6f:53:59:9d:cf:fa:69:5c:4a:10:8f:16:f0:30:6f:4f:44:d5:
e7:e8:ba:44:25:69:7a:7f:55:3a:e0:52:72:60:27:23:27:de:
97:9c:76:96:50:78:3c:c2:38:be:69:1d:00:a4:31:b0:58:b1:
c3:3f:39:b0:9e:7a:3a:a4:6c:d3:dc:d0:68:fa:86:2b:b7:7d:
59:06:29:7f:fd:25:de:4f:1f:04:d6:04:29:13:29:bd:11:c4:
b7:7f:bd:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 21:18:34 2025 by rpki-client