Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c9/3c076b-aea1-4a33-a9e9-99128bf6a841/1/2NPKLCMa_fOwNVx3p8uyJvgbdN4.mft
File: 2NPKLCMa_fOwNVx3p8uyJvgbdN4.mft (raw, json)
Hash identifier: JHunfe/F6aczHGlKKIGY8lytMk7BXfYrGsyzhjYo690=
Subject key identifier: 26:AE:01:03:43:EC:8A:9F:D7:38:1C:F2:1F:F8:44:C5:54:4E:1D:78
Authority key identifier: D8:D3:CA:2C:23:1A:FD:F3:B0:35:5C:77:A7:CB:B2:26:F8:1B:74:DE
Certificate issuer: /CN=d8d3ca2c231afdf3b0355c77a7cbb226f81b74de
Certificate serial: 0197B821201FF960DE5DF7CD0F9F7806DA33
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2NPKLCMa_fOwNVx3p8uyJvgbdN4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c9/3c076b-aea1-4a33-a9e9-99128bf6a841/1/2NPKLCMa_fOwNVx3p8uyJvgbdN4.mft
Manifest number: 0199
Signing time: Sat 28 Jun 2025 20:01:08 +0000
Manifest this update: Sat 28 Jun 2025 20:01:08 +0000
Manifest next update: Sun 29 Jun 2025 20:01:08 +0000
Files and hashes: 1: 1-fKYH7NxhQKRhWFUhdeZIQJCx4I.roa (hash: hiw+Pi/4f+TeDv6TkBewfREUIC+lofxlXNwz+z+uPDE=)
2: 2NPKLCMa_fOwNVx3p8uyJvgbdN4.crl (hash: VmxqFcLTMhHAuEMmyZ8eeO4SrF+xHUzmnM3Ymln2UrI=)
3: P6mssWX-V0cqAzHy81OLWoJ95tA.roa (hash: 1KxuTLXZ0RpUrBX1EdO6Y3ND8ja5oUQEOKFvppcvKmo=)
4: xb1c81OFtbINdLQq-ZwRav9UWoI.roa (hash: XHYFd0tSE5d2fh7X6gspcN3JIn/ONDCV3VHTC+ocClI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c9/3c076b-aea1-4a33-a9e9-99128bf6a841/1/2NPKLCMa_fOwNVx3p8uyJvgbdN4.crl
rsync://rpki.ripe.net/repository/DEFAULT/c9/3c076b-aea1-4a33-a9e9-99128bf6a841/1/2NPKLCMa_fOwNVx3p8uyJvgbdN4.mft
rsync://rpki.ripe.net/repository/DEFAULT/2NPKLCMa_fOwNVx3p8uyJvgbdN4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b8:21:20:1f:f9:60:de:5d:f7:cd:0f:9f:78:06:da:33
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d8d3ca2c231afdf3b0355c77a7cbb226f81b74de
Validity
Not Before: Jun 28 20:01:08 2025 GMT
Not After : Jun 29 20:01:08 2025 GMT
Subject: CN=26ae010343ec8a9fd7381cf21ff844c5544e1d78
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:38:85:26:f7:e1:5b:b0:f2:f1:cd:24:a2:20:
55:5c:ae:51:6e:30:75:1f:f8:29:8b:7f:fe:92:34:
d5:63:e1:67:b4:4f:a8:f5:f3:ee:66:3f:91:d3:99:
2d:d9:39:b8:ea:79:fc:17:b2:36:de:84:cc:76:7d:
e9:31:c3:6f:c3:6a:0a:79:38:48:8b:ec:a2:e6:9e:
d7:35:38:a4:d4:62:1e:93:80:ef:e7:b2:dd:b3:71:
18:89:16:7e:f5:2f:f6:12:33:33:5c:87:bc:e0:fa:
5d:d8:a8:94:e6:51:a0:68:0e:c6:da:df:6f:89:b7:
17:7f:f4:35:13:e6:b4:b1:5d:06:a8:1c:d6:1f:0f:
5c:1e:82:13:48:d6:31:60:78:f4:fd:e2:a7:1d:52:
57:c2:cd:ef:66:81:c3:54:58:0d:38:71:67:61:d4:
41:16:f6:61:9f:48:08:39:b1:fa:8c:e0:42:da:89:
f3:59:44:be:fa:b1:41:e6:ed:f5:37:75:20:1a:fa:
57:92:08:98:b2:f1:00:87:42:52:0c:a0:d4:03:29:
a1:b9:87:b2:02:d8:1c:9d:e6:4c:0a:bd:aa:c9:77:
f5:d0:3b:9f:25:de:68:66:b5:df:d7:55:b5:d7:2e:
ae:3d:aa:22:7a:36:8f:44:43:a5:bd:8c:ad:50:4a:
10:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:AE:01:03:43:EC:8A:9F:D7:38:1C:F2:1F:F8:44:C5:54:4E:1D:78
X509v3 Authority Key Identifier:
keyid:D8:D3:CA:2C:23:1A:FD:F3:B0:35:5C:77:A7:CB:B2:26:F8:1B:74:DE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2NPKLCMa_fOwNVx3p8uyJvgbdN4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/3c076b-aea1-4a33-a9e9-99128bf6a841/1/2NPKLCMa_fOwNVx3p8uyJvgbdN4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/3c076b-aea1-4a33-a9e9-99128bf6a841/1/2NPKLCMa_fOwNVx3p8uyJvgbdN4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0a:d3:ea:24:92:34:00:c4:53:55:c5:d2:dc:7f:c3:ec:2e:dc:
84:51:b2:92:a6:b9:66:be:bb:bd:68:51:33:b5:fb:1d:20:b1:
9a:b1:e6:f9:fd:5d:ee:1c:bc:bc:54:d2:eb:0f:cc:63:e1:a9:
49:16:b6:0a:22:50:66:71:96:b7:19:77:65:6a:70:61:a9:58:
90:b1:ba:66:5a:dd:55:79:5b:53:d5:48:43:e8:67:64:84:25:
77:65:ef:1c:bd:e5:da:ce:60:f2:e0:57:52:7b:21:38:00:7f:
75:4c:97:f0:0a:ea:72:09:10:63:6b:ca:80:8c:2f:b0:52:cb:
a0:6f:e6:cb:90:a9:0b:3c:10:d5:ef:68:6f:57:f0:5d:4d:51:
9f:3a:8c:c0:cb:6d:c0:56:a3:04:f9:87:8c:37:c7:17:83:92:
24:68:db:e8:9e:18:35:97:4a:07:99:d7:9b:91:b5:d8:21:59:
79:6d:17:6c:d5:0f:94:13:6f:4f:8d:86:25:a6:7e:11:a1:29:
e7:68:04:56:ac:f4:05:75:6c:1c:68:de:5e:94:d5:7b:6a:10:
01:8a:bf:5a:69:59:9c:c3:16:a9:17:2e:30:32:49:9c:bc:df:
a7:b5:5c:6a:21:62:b8:af:97:2a:0d:aa:c4:84:de:a1:aa:d4:
73:3d:07:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 22:41:38 2025 by rpki-client