Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0a/f033f1-2f5d-46d1-9194-63f301889486/1/aN2-9_HN2K0ScWDyDqCj9rc_pKI.mft
File: aN2-9_HN2K0ScWDyDqCj9rc_pKI.mft (raw, json)
Hash identifier: 3W+m0lW29XSNnaCkL+AXbwWfxDBlELkkbLOYlM0X0As=
Subject key identifier: 1A:4D:E7:7F:D9:DA:30:43:29:3E:B9:4D:4C:A3:41:C7:6F:0A:C6:70
Authority key identifier: 68:DD:BE:F7:F1:CD:D8:AD:12:71:60:F2:0E:A0:A3:F6:B7:3F:A4:A2
Certificate issuer: /CN=68ddbef7f1cdd8ad127160f20ea0a3f6b73fa4a2
Certificate serial: 01977E6829BB09C53C0A9EBAF08306356DD7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aN2-9_HN2K0ScWDyDqCj9rc_pKI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0a/f033f1-2f5d-46d1-9194-63f301889486/1/aN2-9_HN2K0ScWDyDqCj9rc_pKI.mft
Manifest number: 0819
Signing time: Tue 17 Jun 2025 15:00:44 +0000
Manifest this update: Tue 17 Jun 2025 15:00:44 +0000
Manifest next update: Wed 18 Jun 2025 15:00:44 +0000
Files and hashes: 1: aN2-9_HN2K0ScWDyDqCj9rc_pKI.crl (hash: 2n8OemWDSkQFP2iFhUYinsBodyHf5zqnIQmU2EUj3WY=)
2: uPEejKeFHwtXb-AtaoWRNmQjDGA.roa (hash: v3yjbG7P5ZTU4wRZpuwJQttHEpL//NSRVp6n0qXaPGc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0a/f033f1-2f5d-46d1-9194-63f301889486/1/aN2-9_HN2K0ScWDyDqCj9rc_pKI.crl
rsync://rpki.ripe.net/repository/DEFAULT/0a/f033f1-2f5d-46d1-9194-63f301889486/1/aN2-9_HN2K0ScWDyDqCj9rc_pKI.mft
rsync://rpki.ripe.net/repository/DEFAULT/aN2-9_HN2K0ScWDyDqCj9rc_pKI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 18 Jun 2025 13:26:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:7e:68:29:bb:09:c5:3c:0a:9e:ba:f0:83:06:35:6d:d7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=68ddbef7f1cdd8ad127160f20ea0a3f6b73fa4a2
Validity
Not Before: Jun 17 15:00:44 2025 GMT
Not After : Jun 18 15:00:44 2025 GMT
Subject: CN=1a4de77fd9da3043293eb94d4ca341c76f0ac670
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:70:b3:e2:c3:7e:e5:dd:c7:58:48:61:e6:5a:
f1:5f:67:12:a4:48:5b:12:71:31:a0:5f:45:15:4b:
03:63:bd:b2:03:ab:3c:2a:f6:7e:cb:f6:e3:94:86:
37:84:47:4b:d7:90:51:0c:18:6e:ac:1e:0b:ba:c6:
d3:68:5f:fa:2c:ee:d5:3a:38:ec:e8:4a:06:d0:82:
f0:b6:43:6b:ce:ce:c8:ed:94:fb:2f:a7:4a:cf:ba:
bc:8a:58:f8:10:1c:50:04:40:f6:5e:4a:20:6d:8a:
95:32:15:db:2c:74:0b:29:df:89:81:33:6f:63:42:
49:2f:17:c0:e3:15:44:b3:63:41:5d:51:7a:9b:28:
b4:60:c9:e2:ee:15:d5:03:51:8f:2f:15:43:7e:43:
92:71:3a:e7:7c:31:2b:15:17:8c:a8:a2:91:fa:a1:
2f:13:44:e6:02:d2:a1:c3:88:e5:c1:c2:ee:69:a1:
6a:72:33:ce:f2:05:f6:b9:b9:e2:ca:39:d1:9e:9f:
6b:18:d0:22:ed:52:c8:4b:04:4f:b8:9d:af:4f:81:
97:64:9a:a7:67:f9:18:d0:a8:af:ed:9c:f2:9a:a3:
a8:2b:a4:1b:71:30:a3:26:7e:fc:fb:d4:cf:d0:93:
0d:71:04:3e:eb:e2:4e:49:e4:1d:cd:5d:1c:f2:d4:
db:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:4D:E7:7F:D9:DA:30:43:29:3E:B9:4D:4C:A3:41:C7:6F:0A:C6:70
X509v3 Authority Key Identifier:
keyid:68:DD:BE:F7:F1:CD:D8:AD:12:71:60:F2:0E:A0:A3:F6:B7:3F:A4:A2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aN2-9_HN2K0ScWDyDqCj9rc_pKI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/f033f1-2f5d-46d1-9194-63f301889486/1/aN2-9_HN2K0ScWDyDqCj9rc_pKI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/f033f1-2f5d-46d1-9194-63f301889486/1/aN2-9_HN2K0ScWDyDqCj9rc_pKI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
46:fc:eb:53:a0:bb:6f:49:9b:ba:c3:4b:8f:90:e4:32:9f:51:
42:f2:d7:f4:0a:d2:ad:9d:11:88:ff:37:79:9f:f4:7a:d1:78:
68:ec:c7:4b:77:23:10:13:5e:a8:97:d7:fb:56:05:34:55:b6:
a7:c6:ca:39:55:9a:5a:80:cd:85:33:56:1b:a2:6b:e2:c7:4f:
72:33:e9:1c:e9:1d:b6:0a:24:bd:e2:8c:89:ed:cb:12:07:82:
ac:b0:95:48:35:c3:84:d6:f1:57:18:a2:63:95:b1:1f:fb:0d:
c5:e0:f2:4a:79:7e:22:f2:ab:12:a2:0f:ee:01:7e:ec:b4:ec:
00:e1:1f:64:61:36:d4:ae:52:e3:ee:e7:99:b1:cc:ec:93:f2:
35:6d:94:f5:95:53:50:8f:09:15:d7:61:a6:16:cd:de:18:42:
40:0b:05:5f:c6:7e:89:d4:05:80:4a:46:19:0a:60:e7:45:80:
07:10:46:34:46:bd:69:9d:4f:b1:c8:9d:74:12:cd:74:0a:d4:
86:63:fb:08:d8:44:d4:cb:5b:1a:d3:a8:31:91:39:4a:81:98:
81:25:e8:e3:51:3e:67:eb:7a:fd:f7:e2:e0:57:b7:cc:eb:b3:
38:68:90:e7:4c:3e:fa:e8:77:a1:1e:09:88:c2:85:e7:55:ed:
ea:4a:00:2d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZd+aCm7CcU8Cp668IMGNW3XMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY4ZGRiZWY3ZjFjZGQ4YWQxMjcxNjBmMjBlYTBhM2Y2Yjcz
ZmE0YTIwHhcNMjUwNjE3MTUwMDQ0WhcNMjUwNjE4MTUwMDQ0WjAzMTEwLwYDVQQD
EygxYTRkZTc3ZmQ5ZGEzMDQzMjkzZWI5NGQ0Y2EzNDFjNzZmMGFjNjcwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqnCz4sN+5d3HWEhh5lrxX2cSpEhb
EnExoF9FFUsDY72yA6s8KvZ+y/bjlIY3hEdL15BRDBhurB4LusbTaF/6LO7VOjjs
6EoG0ILwtkNrzs7I7ZT7L6dKz7q8ilj4EBxQBED2XkogbYqVMhXbLHQLKd+JgTNv
Y0JJLxfA4xVEs2NBXVF6myi0YMni7hXVA1GPLxVDfkOScTrnfDErFReMqKKR+qEv
E0TmAtKhw4jlwcLuaaFqcjPO8gX2ubniyjnRnp9rGNAi7VLISwRPuJ2vT4GXZJqn
Z/kY0Kiv7ZzymqOoK6QbcTCjJn78+9TP0JMNcQQ+6+JOSeQdzV0c8tTbIwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBpN53/Z2jBDKT65TUyjQcdvCsZwMB8GA1UdIwQY
MBaAFGjdvvfxzditEnFg8g6go/a3P6SiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYU4yLTlfSE4ySzBTY1dEeURxQ2o5cmNfcEtJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wYS9mMDMzZjEtMmY1ZC00NmQxLTkxOTQt
NjNmMzAxODg5NDg2LzEvYU4yLTlfSE4ySzBTY1dEeURxQ2o5cmNfcEtJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wYS9mMDMzZjEtMmY1ZC00NmQxLTkxOTQtNjNmMzAxODg5NDg2
LzEvYU4yLTlfSE4ySzBTY1dEeURxQ2o5cmNfcEtJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEARvzrU6C7
b0mbusNLj5DkMp9RQvLX9ArSrZ0RiP83eZ/0etF4aOzHS3cjEBNeqJfX+1YFNFW2
p8bKOVWaWoDNhTNWG6Jr4sdPcjPpHOkdtgokveKMie3LEgeCrLCVSDXDhNbxVxii
Y5WxH/sNxeDySnl+IvKrEqIP7gF+7LTsAOEfZGE21K5S4+7nmbHM7JPyNW2U9ZVT
UI8JFddhphbN3hhCQAsFX8Z+idQFgEpGGQpg50WABxBGNEa9aZ1PsciddBLNdArU
hmP7CNhE1MtbGtOoMZE5SoGYgSXo41E+Z+t6/ffi4Fe3zOuzOGiQ50w++uh3oR4J
iMKF51Xt6koALQ==
-----END CERTIFICATE-----
Generated at Tue Jun 17 23:34:46 2025 by rpki-client