Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/22/0a3fff-1a42-4044-ae8f-7354a73bda7e/1/n2-3lUF5qWZrTLav40bR4h7DDkU.mft
File: n2-3lUF5qWZrTLav40bR4h7DDkU.mft (raw, json)
Hash identifier: hcihEHS7j8B1QhPJ8vF/U+bwTTPB3V6jX0T7NxNrPgE=
Subject key identifier: AE:DA:EF:A3:75:DE:BD:6B:29:5B:32:F9:E2:52:E7:D5:FF:AE:98:39
Authority key identifier: 9F:6F:B7:95:41:79:A9:66:6B:4C:B6:AF:E3:46:D1:E2:1E:C3:0E:45
Certificate issuer: /CN=9f6fb7954179a9666b4cb6afe346d1e21ec30e45
Certificate serial: 01968EF025BFD7274DF528DD1F5E0C2B27E2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/n2-3lUF5qWZrTLav40bR4h7DDkU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/22/0a3fff-1a42-4044-ae8f-7354a73bda7e/1/n2-3lUF5qWZrTLav40bR4h7DDkU.mft
Manifest number: 151F
Signing time: Fri 02 May 2025 03:00:24 +0000
Manifest this update: Fri 02 May 2025 03:00:24 +0000
Manifest next update: Sat 03 May 2025 03:00:24 +0000
Files and hashes: 1: Jzi6jJ9SZ3rViS6uZE0u8bf720A.roa (hash: eJjmExeoetRrFmsV6X8Y7xVRrkNxyQjjkQ/pmteWEY0=)
2: cCtlVAhKMx_L9MmcKQdhGeXgd7A.roa (hash: Q1si7hVwLSegXDVNPXeui2AkeRgS0Epsk3MKoikvRr4=)
3: n2-3lUF5qWZrTLav40bR4h7DDkU.crl (hash: spK1XpfAHqcXUFGu5hKeGA+zNsMpMFQFi5342m8Ac/w=)
4: ozXKoKdXVNYBzwo0Mz0MILNjdCg.roa (hash: Ve119gf9TbBJ6X/Ot4F8LURtnL5ENbzhaQXEL2/zcYA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/22/0a3fff-1a42-4044-ae8f-7354a73bda7e/1/n2-3lUF5qWZrTLav40bR4h7DDkU.crl
rsync://rpki.ripe.net/repository/DEFAULT/22/0a3fff-1a42-4044-ae8f-7354a73bda7e/1/n2-3lUF5qWZrTLav40bR4h7DDkU.mft
rsync://rpki.ripe.net/repository/DEFAULT/n2-3lUF5qWZrTLav40bR4h7DDkU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 03 May 2025 01:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:8e:f0:25:bf:d7:27:4d:f5:28:dd:1f:5e:0c:2b:27:e2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9f6fb7954179a9666b4cb6afe346d1e21ec30e45
Validity
Not Before: May 2 03:00:24 2025 GMT
Not After : May 3 03:00:24 2025 GMT
Subject: CN=aedaefa375debd6b295b32f9e252e7d5ffae9839
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:81:39:ae:7b:84:3d:b6:4d:43:9d:81:2d:55:
9a:56:b8:e5:52:0f:04:dc:8f:42:87:6a:5a:73:c9:
04:9a:07:ab:6c:f0:38:fd:88:7b:b9:12:04:1a:40:
4a:69:8f:16:f7:5b:87:ee:86:49:90:7b:c0:91:ef:
6b:a1:4a:e3:98:c7:a6:d2:a4:4a:7c:94:6d:7a:74:
0a:67:b5:42:86:51:f1:15:ad:86:b9:88:8a:f5:55:
67:4a:1c:7b:91:3d:89:35:ad:09:d7:7c:62:f7:80:
6c:e0:4f:20:76:af:eb:bf:32:88:c8:ff:08:17:9f:
7e:d6:f0:cd:c0:cf:b1:68:57:0b:cc:21:6a:35:f9:
b0:d1:2d:88:2d:6b:23:18:90:14:4e:bb:51:a0:fe:
13:d5:f9:be:16:bf:3b:94:d7:18:d5:4c:ea:53:67:
6f:76:2b:d1:f8:6a:15:2a:1a:11:34:4c:4a:6f:1e:
b0:66:4a:9f:6f:9e:1a:10:47:11:48:8e:f5:16:38:
77:ba:4a:7b:e4:ff:d3:20:bc:db:8c:c4:68:e1:41:
a1:e1:cd:cb:6e:ac:8e:18:7f:4f:77:05:2f:b1:df:
99:0f:13:01:d4:21:70:bd:cf:49:4c:85:0f:85:22:
39:85:25:ba:25:9b:24:df:71:ff:d4:4d:04:18:40:
41:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:DA:EF:A3:75:DE:BD:6B:29:5B:32:F9:E2:52:E7:D5:FF:AE:98:39
X509v3 Authority Key Identifier:
keyid:9F:6F:B7:95:41:79:A9:66:6B:4C:B6:AF:E3:46:D1:E2:1E:C3:0E:45
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/n2-3lUF5qWZrTLav40bR4h7DDkU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/0a3fff-1a42-4044-ae8f-7354a73bda7e/1/n2-3lUF5qWZrTLav40bR4h7DDkU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/22/0a3fff-1a42-4044-ae8f-7354a73bda7e/1/n2-3lUF5qWZrTLav40bR4h7DDkU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
06:49:12:36:8c:6e:e2:69:3c:56:8e:2b:8d:1a:00:a2:3c:f9:
d1:12:80:d5:25:13:0c:d2:1b:08:d0:f1:66:95:69:45:82:ff:
76:b2:30:80:8b:12:f9:37:a4:42:0a:f2:fc:57:44:62:f7:6c:
7a:7a:97:4d:fc:69:8e:d0:52:98:98:fb:be:ce:02:15:19:1d:
0f:49:a9:b3:6f:ef:8b:45:8d:dc:aa:b3:f7:ac:5e:e1:4a:de:
da:ac:11:06:4a:27:7e:6d:7b:32:08:7e:54:1f:e3:9f:75:6e:
c8:5e:c0:d2:d5:7b:8c:3f:e0:6b:71:00:9f:2e:04:36:e0:83:
4f:34:83:7c:bd:dd:4e:94:77:e3:9f:52:2b:f9:5b:db:00:93:
2a:07:78:5f:a2:c3:08:87:d7:9e:9e:dc:96:e0:44:a8:51:d0:
1f:d3:5d:47:00:0a:fc:ce:81:19:03:cb:62:96:a1:be:9b:82:
5b:2e:e1:89:bb:d5:03:b2:00:12:94:be:41:36:d7:c6:47:88:
13:8a:df:d9:25:14:91:d5:49:a3:af:b6:d0:9d:f2:0a:24:66:
b1:8a:25:1e:41:2d:77:a0:3d:38:08:01:a7:3f:84:da:b8:c0:
8b:c5:a4:e9:b5:fc:3d:f8:de:33:b5:d2:8c:9a:26:cc:b4:a1:
df:a7:c6:09
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZaO8CW/1ydN9SjdH14MKyfiMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDlmNmZiNzk1NDE3OWE5NjY2YjRjYjZhZmUzNDZkMWUyMWVj
MzBlNDUwHhcNMjUwNTAyMDMwMDI0WhcNMjUwNTAzMDMwMDI0WjAzMTEwLwYDVQQD
EyhhZWRhZWZhMzc1ZGViZDZiMjk1YjMyZjllMjUyZTdkNWZmYWU5ODM5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq4E5rnuEPbZNQ52BLVWaVrjlUg8E
3I9Ch2pac8kEmgerbPA4/Yh7uRIEGkBKaY8W91uH7oZJkHvAke9roUrjmMem0qRK
fJRtenQKZ7VChlHxFa2GuYiK9VVnShx7kT2JNa0J13xi94Bs4E8gdq/rvzKIyP8I
F59+1vDNwM+xaFcLzCFqNfmw0S2ILWsjGJAUTrtRoP4T1fm+Fr87lNcY1UzqU2dv
divR+GoVKhoRNExKbx6wZkqfb54aEEcRSI71Fjh3ukp75P/TILzbjMRo4UGh4c3L
bqyOGH9PdwUvsd+ZDxMB1CFwvc9JTIUPhSI5hSW6JZsk33H/1E0EGEBBVwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFK7a76N13r1rKVsy+eJS59X/rpg5MB8GA1UdIwQY
MBaAFJ9vt5VBealma0y2r+NG0eIeww5FMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbjItM2xVRjVxV1pyVExhdjQwYlI0aDdERGtVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMi8wYTNmZmYtMWE0Mi00MDQ0LWFlOGYt
NzM1NGE3M2JkYTdlLzEvbjItM2xVRjVxV1pyVExhdjQwYlI0aDdERGtVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yMi8wYTNmZmYtMWE0Mi00MDQ0LWFlOGYtNzM1NGE3M2JkYTdl
LzEvbjItM2xVRjVxV1pyVExhdjQwYlI0aDdERGtVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABkkSNoxu
4mk8Vo4rjRoAojz50RKA1SUTDNIbCNDxZpVpRYL/drIwgIsS+TekQgry/FdEYvds
enqXTfxpjtBSmJj7vs4CFRkdD0mps2/vi0WN3Kqz96xe4Ure2qwRBkonfm17Mgh+
VB/jn3VuyF7A0tV7jD/ga3EAny4ENuCDTzSDfL3dTpR3459SK/lb2wCTKgd4X6LD
CIfXnp7cluBEqFHQH9NdRwAK/M6BGQPLYpahvpuCWy7hibvVA7IAEpS+QTbXxkeI
E4rf2SUUkdVJo6+20J3yCiRmsYolHkEtd6A9OAgBpz+E2rjAi8Wk6bX8PfjeM7XS
jJomzLSh36fGCQ==
-----END CERTIFICATE-----
Generated at Fri May 2 10:19:41 2025 by rpki-client