Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/33541a-f9ac-475a-b297-88a0e450a17b/1/N2PHEGpfJkAWLnmAWD6rW9gAjEU.mft
File: N2PHEGpfJkAWLnmAWD6rW9gAjEU.mft (raw, json)
Hash identifier: NU7tRV97+NiKg/CtNTVaQHxAtd0X7w/vbIrNl4E/Yxc=
Subject key identifier: 2B:AB:3A:E7:35:52:61:B9:76:B3:55:85:C5:90:F5:65:CB:2A:7E:2D
Authority key identifier: 37:63:C7:10:6A:5F:26:40:16:2E:79:80:58:3E:AB:5B:D8:00:8C:45
Certificate issuer: /CN=3763c7106a5f2640162e7980583eab5bd8008c45
Certificate serial: 0196729DA2F14EFCF0079A093B395941F493
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/N2PHEGpfJkAWLnmAWD6rW9gAjEU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/33541a-f9ac-475a-b297-88a0e450a17b/1/N2PHEGpfJkAWLnmAWD6rW9gAjEU.mft
Manifest number: 1062
Signing time: Sat 26 Apr 2025 15:00:55 +0000
Manifest this update: Sat 26 Apr 2025 15:00:55 +0000
Manifest next update: Sun 27 Apr 2025 15:00:55 +0000
Files and hashes: 1: JqPeTKIiSqFLnMuoE0z5MMpECyE.roa (hash: Sm0VFijktfATyc4h+uw4DoW/FSQrn3UdeoSnPalbaPo=)
2: N2PHEGpfJkAWLnmAWD6rW9gAjEU.crl (hash: KQUd6Iji99kZjLj5nyvulYDANskW5ewIVqyFO+cCVEA=)
3: VmdUY2uJ9NapTyZJ8UBdjlgGJQQ.roa (hash: 53UxHJyDkYLtFVil6COplJSwSFn/MNxw2tMZPgc57WQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/33541a-f9ac-475a-b297-88a0e450a17b/1/N2PHEGpfJkAWLnmAWD6rW9gAjEU.crl
rsync://rpki.ripe.net/repository/DEFAULT/5a/33541a-f9ac-475a-b297-88a0e450a17b/1/N2PHEGpfJkAWLnmAWD6rW9gAjEU.mft
rsync://rpki.ripe.net/repository/DEFAULT/N2PHEGpfJkAWLnmAWD6rW9gAjEU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Apr 2025 11:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:72:9d:a2:f1:4e:fc:f0:07:9a:09:3b:39:59:41:f4:93
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3763c7106a5f2640162e7980583eab5bd8008c45
Validity
Not Before: Apr 26 15:00:55 2025 GMT
Not After : Apr 27 15:00:55 2025 GMT
Subject: CN=2bab3ae7355261b976b35585c590f565cb2a7e2d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f8:8c:87:6d:0e:9c:39:37:e3:17:16:9e:52:ae:
bb:25:58:5f:fd:50:08:fc:59:62:5f:1e:d2:e0:0a:
2d:71:e3:43:c3:33:72:0e:8b:6d:6a:11:99:fb:fa:
a7:bd:61:f2:e0:f6:04:0a:12:19:b6:ee:20:45:89:
45:d8:a7:f2:86:6c:19:3c:c3:75:6a:19:dd:e0:f5:
cc:5e:d5:90:8b:f3:c5:2d:19:fc:38:07:b8:7d:d8:
69:4a:bb:40:12:7f:70:3d:72:b9:de:56:19:c3:51:
77:7d:77:3b:0c:2c:60:04:cc:ee:ff:83:0a:28:60:
e5:e9:8e:51:67:2d:3e:56:28:da:bd:d5:da:68:98:
74:43:eb:7c:6a:f9:11:8c:59:52:b4:57:31:34:58:
51:53:a6:8f:c6:d6:bc:ea:a4:f3:ba:4c:06:88:94:
36:17:f8:26:2a:f7:2f:5d:6c:0c:65:70:96:d9:00:
fa:20:c5:ed:30:12:9c:73:73:61:43:fd:72:c3:04:
00:40:c7:b1:60:e8:be:55:ed:e1:bf:8b:e5:64:cf:
aa:25:5f:b8:a9:4e:92:84:f1:0e:6b:eb:26:4b:24:
e4:32:40:36:f9:e6:a4:e7:76:38:9f:05:2e:5b:17:
82:70:d0:c0:e6:23:7c:38:da:52:b5:17:76:f0:e2:
27:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:AB:3A:E7:35:52:61:B9:76:B3:55:85:C5:90:F5:65:CB:2A:7E:2D
X509v3 Authority Key Identifier:
keyid:37:63:C7:10:6A:5F:26:40:16:2E:79:80:58:3E:AB:5B:D8:00:8C:45
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/N2PHEGpfJkAWLnmAWD6rW9gAjEU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/33541a-f9ac-475a-b297-88a0e450a17b/1/N2PHEGpfJkAWLnmAWD6rW9gAjEU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/33541a-f9ac-475a-b297-88a0e450a17b/1/N2PHEGpfJkAWLnmAWD6rW9gAjEU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9e:56:25:76:9b:b8:ec:44:cc:1b:a8:98:70:d8:31:db:ef:4a:
a2:bf:9a:3e:3c:8e:02:d3:6b:ac:d3:4b:f8:0a:13:63:00:7a:
3d:ed:75:0d:c3:87:d5:0b:96:fe:42:c8:fb:ed:70:78:90:b5:
ae:49:ef:18:04:ce:f9:df:8f:bf:97:20:a2:ec:8f:5f:99:43:
02:7b:ae:9d:e2:5f:1d:39:2b:60:ea:e2:9b:0e:b1:c5:e0:a8:
e7:04:d8:98:d9:ac:99:b1:13:58:fc:92:58:0a:74:e3:c6:85:
9f:25:f6:4a:43:f4:d3:3b:31:f3:30:32:d2:4e:c6:f7:e1:1a:
9d:f1:d6:0a:6c:47:35:fd:32:34:3e:db:2d:00:a1:94:f6:d9:
5a:cd:38:65:b0:5d:4c:c5:08:fe:de:38:4b:7d:92:46:f6:44:
0f:67:51:47:c0:0e:70:7d:6e:3f:a8:78:a8:5b:4c:2f:4c:45:
6f:d3:50:a4:57:cf:2b:b9:03:b9:4d:b4:70:75:40:fc:5f:7b:
5f:55:7d:92:61:ed:b9:89:62:27:7c:22:fd:a9:73:cc:5f:ff:
c0:1c:5d:12:72:f7:75:11:36:d3:1f:24:29:bd:b6:95:ff:3e:
9b:84:7b:56:de:a9:4d:ea:97:e5:f9:05:f0:d4:2c:0c:a8:39:
9c:3c:24:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 19:18:43 2025 by rpki-client