Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e1/2155f1-976a-4f7e-95a4-076e1d77aebe/1/N2AlOewyw5Gf8cvJWU3cq4FWdMU.mft
File: N2AlOewyw5Gf8cvJWU3cq4FWdMU.mft (raw, json)
Hash identifier: MneNXI5zh3MepP/aXwj0RAV1fCTu+md18P7mPV5NN4M=
Subject key identifier: 4B:6A:8E:D4:D3:BE:7E:C8:0F:91:C5:8A:70:1B:13:22:FE:07:52:75
Authority key identifier: 37:60:25:39:EC:32:C3:91:9F:F1:CB:C9:59:4D:DC:AB:81:56:74:C5
Certificate issuer: /CN=37602539ec32c3919ff1cbc9594ddcab815674c5
Certificate serial: 0196A9C29E792CAD9D0DB2D4422E4968A50D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/N2AlOewyw5Gf8cvJWU3cq4FWdMU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e1/2155f1-976a-4f7e-95a4-076e1d77aebe/1/N2AlOewyw5Gf8cvJWU3cq4FWdMU.mft
Manifest number: 0BE0
Signing time: Wed 07 May 2025 08:00:26 +0000
Manifest this update: Wed 07 May 2025 08:00:26 +0000
Manifest next update: Thu 08 May 2025 08:00:26 +0000
Files and hashes: 1: 8OUuy6RxMKAA3VbPAT05z8x14Y0.roa (hash: /S82CRuIWRkEgkIG58XNeFsI8Jv6K3dyodJP/54XncE=)
2: N2AlOewyw5Gf8cvJWU3cq4FWdMU.crl (hash: rqgcMjlvaMTaPF8SjL/YjtAoXX0RclqSicnH92NL/HY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e1/2155f1-976a-4f7e-95a4-076e1d77aebe/1/N2AlOewyw5Gf8cvJWU3cq4FWdMU.crl
rsync://rpki.ripe.net/repository/DEFAULT/e1/2155f1-976a-4f7e-95a4-076e1d77aebe/1/N2AlOewyw5Gf8cvJWU3cq4FWdMU.mft
rsync://rpki.ripe.net/repository/DEFAULT/N2AlOewyw5Gf8cvJWU3cq4FWdMU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 08 May 2025 08:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:a9:c2:9e:79:2c:ad:9d:0d:b2:d4:42:2e:49:68:a5:0d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=37602539ec32c3919ff1cbc9594ddcab815674c5
Validity
Not Before: May 7 08:00:26 2025 GMT
Not After : May 8 08:00:26 2025 GMT
Subject: CN=4b6a8ed4d3be7ec80f91c58a701b1322fe075275
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:78:55:78:18:e0:75:dd:53:bf:16:39:ad:84:
2b:9d:f9:73:09:60:62:0a:c0:6e:d2:82:c2:67:ce:
4a:2e:69:9a:ee:76:87:2f:bf:74:7c:de:86:4f:17:
9e:c3:e0:c8:11:b2:c3:d0:3c:d6:0c:e5:11:0c:db:
24:6f:06:d5:08:08:d3:dd:7a:50:e1:4a:97:cb:91:
7f:03:66:7d:21:44:86:14:eb:06:a8:81:a0:b4:5f:
80:32:aa:bd:f3:af:72:56:09:13:e9:3b:f7:dd:a1:
1d:86:ce:d3:dd:b8:66:2d:e3:c9:43:ed:61:20:be:
b2:c2:bf:d1:e8:e6:ee:ae:c3:40:0d:52:2d:66:48:
b8:6b:56:6a:36:52:98:8e:ef:69:1c:f5:de:90:d6:
3b:93:cc:dc:c8:80:a8:4d:7b:f8:33:51:4b:05:9b:
e1:e4:20:58:f8:8c:18:d6:b1:51:6a:83:16:48:79:
86:1e:90:35:81:7e:c9:17:0d:74:49:75:42:11:cf:
10:ec:bc:a8:24:d2:26:20:6e:37:ab:54:37:e4:30:
2b:24:5e:85:46:41:f3:e4:26:26:15:12:81:ae:b6:
47:10:0a:49:aa:18:9f:bf:eb:42:aa:db:a1:30:fa:
57:a9:38:f0:de:1b:f7:a8:aa:a2:1b:ba:a5:86:f0:
a6:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:6A:8E:D4:D3:BE:7E:C8:0F:91:C5:8A:70:1B:13:22:FE:07:52:75
X509v3 Authority Key Identifier:
keyid:37:60:25:39:EC:32:C3:91:9F:F1:CB:C9:59:4D:DC:AB:81:56:74:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/N2AlOewyw5Gf8cvJWU3cq4FWdMU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/2155f1-976a-4f7e-95a4-076e1d77aebe/1/N2AlOewyw5Gf8cvJWU3cq4FWdMU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/2155f1-976a-4f7e-95a4-076e1d77aebe/1/N2AlOewyw5Gf8cvJWU3cq4FWdMU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
81:01:ed:01:9e:25:2b:e8:af:a9:15:54:21:4a:a3:77:8f:e7:
8f:75:9d:92:43:f7:24:99:8b:97:b0:eb:42:17:0c:7b:d9:9a:
29:17:2a:37:2f:c6:77:a5:f9:f3:09:f1:88:a5:d9:06:87:6d:
62:fe:37:5c:79:a0:e5:ac:76:e0:f9:62:66:c0:0a:51:60:0b:
ad:c8:cd:7d:4e:c4:5a:cc:db:e7:88:b6:2d:6b:78:de:c8:a8:
65:82:c7:13:35:cb:28:15:56:09:8d:2c:e6:aa:1c:57:3f:73:
3b:ae:34:be:73:4f:5b:b7:ac:db:6b:41:56:af:b9:ee:42:e6:
5a:de:b4:44:8c:59:bd:f5:ae:db:f8:53:af:4a:c0:c8:6a:f7:
b2:8a:dc:91:48:77:09:5e:e2:19:7e:b7:d5:6b:89:33:d9:a6:
a5:ba:a1:ae:9a:7d:82:0e:85:06:c8:d5:51:50:ca:2f:bc:32:
68:3c:47:04:62:d5:9d:16:13:a9:b6:bc:5f:ba:cc:d8:56:bd:
e4:f7:bb:f3:3e:cd:4b:48:8a:22:76:9e:61:1c:90:70:74:c1:
36:1b:7a:e7:d4:aa:14:55:f0:26:29:6b:f2:fd:97:89:b7:ed:
5a:58:cf:2c:0f:4e:70:8b:77:93:f2:1c:a0:fb:6e:46:08:de:
de:ab:06:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 7 17:12:56 2025 by rpki-client