Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/48/f5ed1c-3797-400d-b72f-804cda5243b3/1/n2yY1Ze3gbehDH4O2xxI9rgaX4s.mft
File: n2yY1Ze3gbehDH4O2xxI9rgaX4s.mft (raw, json)
Hash identifier: xrxF2or9xAQgM8leLryWtRx7ECuaF1DpsVEzB7YZc64=
Subject key identifier: 39:B4:E6:1A:E8:92:0B:D5:32:9C:24:28:C0:87:FD:BF:91:1F:65:17
Authority key identifier: 9F:6C:98:D5:97:B7:81:B7:A1:0C:7E:0E:DB:1C:48:F6:B8:1A:5F:8B
Certificate issuer: /CN=9f6c98d597b781b7a10c7e0edb1c48f6b81a5f8b
Certificate serial: 019678687E71FF13B7525B8556832A611F9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/n2yY1Ze3gbehDH4O2xxI9rgaX4s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/48/f5ed1c-3797-400d-b72f-804cda5243b3/1/n2yY1Ze3gbehDH4O2xxI9rgaX4s.mft
Manifest number: 02BE
Signing time: Sun 27 Apr 2025 18:00:36 +0000
Manifest this update: Sun 27 Apr 2025 18:00:36 +0000
Manifest next update: Mon 28 Apr 2025 18:00:36 +0000
Files and hashes: 1: 1uWXPJauvtvifVbThumN2raM6U0.roa (hash: Y17nAyKVcY518yw8/uPGoyc32qYJ3ixC6oOmJrlY3aE=)
2: n2yY1Ze3gbehDH4O2xxI9rgaX4s.crl (hash: dlSEN9O7izl+2qGL7MOnnWCgkidJF0ks5u/QdqrH24g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/48/f5ed1c-3797-400d-b72f-804cda5243b3/1/n2yY1Ze3gbehDH4O2xxI9rgaX4s.crl
rsync://rpki.ripe.net/repository/DEFAULT/48/f5ed1c-3797-400d-b72f-804cda5243b3/1/n2yY1Ze3gbehDH4O2xxI9rgaX4s.mft
rsync://rpki.ripe.net/repository/DEFAULT/n2yY1Ze3gbehDH4O2xxI9rgaX4s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 18:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:78:68:7e:71:ff:13:b7:52:5b:85:56:83:2a:61:1f:9b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9f6c98d597b781b7a10c7e0edb1c48f6b81a5f8b
Validity
Not Before: Apr 27 18:00:36 2025 GMT
Not After : Apr 28 18:00:36 2025 GMT
Subject: CN=39b4e61ae8920bd5329c2428c087fdbf911f6517
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:5f:c8:68:a5:95:43:b7:95:84:ea:b5:d5:3b:
7c:07:57:9d:b0:7d:40:57:c1:21:b3:6f:cf:cd:f9:
7b:8a:40:29:67:6c:45:0b:76:80:61:fe:ae:d5:19:
64:1a:66:7e:76:54:4a:4f:89:9d:90:93:1d:0a:4f:
14:06:02:e5:d9:8f:56:2f:0e:8e:05:9a:d6:34:9f:
09:d4:07:3b:27:5d:7e:19:f8:e3:54:bc:37:fe:d4:
cd:78:5f:92:1b:b7:2f:79:d3:a9:81:67:e5:cd:f9:
d5:7a:8e:10:7e:e0:cf:ec:01:6d:46:e1:5f:3a:18:
59:74:a7:a9:7f:9d:2f:04:eb:2e:44:17:d2:13:1a:
e4:7c:d6:bc:46:ce:14:1d:92:14:63:a3:7a:5f:c8:
8d:2e:c6:45:00:b1:84:c9:c6:16:02:2c:6e:a7:f4:
3c:1c:a6:07:9e:80:86:3c:b1:0b:fd:81:5c:75:6c:
b9:04:a9:43:bc:78:89:69:39:8c:89:55:29:e0:0a:
5d:90:55:d2:c2:36:eb:6e:3a:87:a0:36:63:fd:0a:
bb:08:86:3d:0c:55:02:57:3c:99:06:58:43:3c:b1:
dc:28:96:de:cb:57:a2:c3:17:14:aa:03:35:4a:1e:
5f:c4:74:b1:ef:2a:77:0b:08:e1:84:1f:e7:85:fa:
38:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:B4:E6:1A:E8:92:0B:D5:32:9C:24:28:C0:87:FD:BF:91:1F:65:17
X509v3 Authority Key Identifier:
keyid:9F:6C:98:D5:97:B7:81:B7:A1:0C:7E:0E:DB:1C:48:F6:B8:1A:5F:8B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/n2yY1Ze3gbehDH4O2xxI9rgaX4s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/48/f5ed1c-3797-400d-b72f-804cda5243b3/1/n2yY1Ze3gbehDH4O2xxI9rgaX4s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/48/f5ed1c-3797-400d-b72f-804cda5243b3/1/n2yY1Ze3gbehDH4O2xxI9rgaX4s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3f:fd:6e:51:39:de:58:a3:4e:d7:ee:d4:2f:eb:d1:30:4b:e2:
12:c0:7e:ce:97:d6:1e:84:0d:37:81:55:bb:36:94:b0:eb:cc:
98:8a:6a:eb:38:01:ce:bc:a2:07:9e:e1:1b:b3:84:2c:ac:da:
d5:63:3d:15:64:80:5e:65:95:eb:f7:4c:df:ae:5a:37:4d:fb:
bc:31:2b:5b:a5:ff:1d:49:b0:73:e8:cb:38:c6:83:ce:97:e5:
e7:dc:66:35:dd:62:9a:ef:03:a8:64:b0:99:df:e0:83:a6:08:
71:00:7a:f8:14:2e:a8:5f:48:e5:54:84:5e:90:3e:45:ad:fb:
3f:06:6e:09:5a:10:e0:df:ee:f5:dd:8f:96:ea:81:7c:50:d2:
65:84:2d:8a:11:9e:ae:35:ca:f5:c0:56:a1:48:5e:50:44:42:
89:62:b7:74:f2:e5:03:30:9e:7a:d0:3b:1b:46:4e:fd:fd:8b:
5b:02:72:bf:d0:ae:c5:d7:7f:1f:b0:c7:38:13:bd:a2:14:9b:
a3:bb:28:c7:ab:6b:a4:da:f6:de:6d:a1:f1:d8:3b:cf:79:9f:
41:2b:55:a7:ba:e1:09:58:1d:20:3f:35:6a:87:10:8a:77:43:
10:18:d7:7e:23:bd:0f:c6:f6:c3:3f:f7:81:c0:21:68:26:f3:
ae:18:19:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 03:24:54 2025 by rpki-client