Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/79/cdbd0a-68ec-487d-8fea-619281380bc2/1/n2m9-bvSpFl-Js4gv-E4YkytM9w.mft
File: n2m9-bvSpFl-Js4gv-E4YkytM9w.mft (raw, json)
Hash identifier: R/+fD4lYWwke9JU6qrMHaU3TjMS3AVlik/b6ViVblV4=
Subject key identifier: 4F:C4:A9:76:70:BB:3A:F1:3E:B0:E6:A4:26:DB:1D:9F:E0:DA:81:0A
Authority key identifier: 9F:69:BD:F9:BB:D2:A4:59:7E:26:CE:20:BF:E1:38:62:4C:AD:33:DC
Certificate issuer: /CN=9f69bdf9bbd2a4597e26ce20bfe138624cad33dc
Certificate serial: 0196BC6E4D925E7307CCAF6CDC0ECA6CC201
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/n2m9-bvSpFl-Js4gv-E4YkytM9w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/79/cdbd0a-68ec-487d-8fea-619281380bc2/1/n2m9-bvSpFl-Js4gv-E4YkytM9w.mft
Manifest number: 1533
Signing time: Sat 10 May 2025 23:01:07 +0000
Manifest this update: Sat 10 May 2025 23:01:07 +0000
Manifest next update: Sun 11 May 2025 23:01:07 +0000
Files and hashes: 1: Q-k4eP71XDc11_L4_l_xUnKRF5E.roa (hash: LRoS7+b3eCmFJlD9TdL/ZA7RouROtd2Rd2SIPOdtZjI=)
2: n2m9-bvSpFl-Js4gv-E4YkytM9w.crl (hash: F1qRbtJdQwsnFXFf9OQ6urczSEJmmty5QkSrjUdZ2WA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/79/cdbd0a-68ec-487d-8fea-619281380bc2/1/n2m9-bvSpFl-Js4gv-E4YkytM9w.crl
rsync://rpki.ripe.net/repository/DEFAULT/79/cdbd0a-68ec-487d-8fea-619281380bc2/1/n2m9-bvSpFl-Js4gv-E4YkytM9w.mft
rsync://rpki.ripe.net/repository/DEFAULT/n2m9-bvSpFl-Js4gv-E4YkytM9w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 11 May 2025 22:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:bc:6e:4d:92:5e:73:07:cc:af:6c:dc:0e:ca:6c:c2:01
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9f69bdf9bbd2a4597e26ce20bfe138624cad33dc
Validity
Not Before: May 10 23:01:07 2025 GMT
Not After : May 11 23:01:07 2025 GMT
Subject: CN=4fc4a97670bb3af13eb0e6a426db1d9fe0da810a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:ff:05:d6:42:14:1a:63:47:ab:35:ef:16:a4:
3d:ec:fd:42:b5:a8:68:87:1b:38:31:76:0f:9e:83:
19:c7:f2:d8:ec:05:7f:da:7e:98:a4:13:1b:65:c9:
95:35:e7:cd:fa:d1:3b:9e:25:fe:2f:fa:f2:6b:33:
3e:c3:09:76:52:8d:2a:cb:99:cd:0c:c9:b9:e7:1e:
8d:80:85:13:9e:75:27:16:b8:0e:58:2b:1f:b9:f7:
5b:36:a5:22:48:74:f1:55:90:fd:63:fa:93:16:05:
21:3a:30:8b:b6:5e:a5:d6:f9:1b:33:f0:ad:6e:5b:
3f:e7:95:c1:a3:6c:44:04:57:e1:86:70:45:3b:7c:
94:8b:74:61:b6:a7:5c:02:90:18:52:8d:60:55:6f:
34:60:5d:dd:65:52:01:7b:37:c1:71:23:59:b5:fa:
d9:37:36:4e:2e:e4:af:9c:28:cb:66:1a:08:54:57:
30:8a:5d:28:4a:96:d3:e9:5b:bb:17:d7:c4:ec:34:
c5:34:78:37:2e:7c:a2:a7:2b:af:3a:da:76:ff:e1:
b4:b4:48:11:3a:f5:0a:b6:ce:db:93:66:6a:83:3e:
a3:18:55:70:66:2c:e7:24:24:d4:d1:75:ae:f9:f4:
e7:fd:0c:ad:52:57:3f:ac:cd:3e:06:e4:57:c1:db:
f1:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:C4:A9:76:70:BB:3A:F1:3E:B0:E6:A4:26:DB:1D:9F:E0:DA:81:0A
X509v3 Authority Key Identifier:
keyid:9F:69:BD:F9:BB:D2:A4:59:7E:26:CE:20:BF:E1:38:62:4C:AD:33:DC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/n2m9-bvSpFl-Js4gv-E4YkytM9w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/79/cdbd0a-68ec-487d-8fea-619281380bc2/1/n2m9-bvSpFl-Js4gv-E4YkytM9w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/79/cdbd0a-68ec-487d-8fea-619281380bc2/1/n2m9-bvSpFl-Js4gv-E4YkytM9w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
51:6c:5b:75:e9:6c:9e:6b:db:01:8b:b1:7c:16:d6:c1:35:a5:
f0:dc:5b:60:f2:a4:08:87:7f:92:34:2f:a7:d6:43:e0:b7:af:
23:5f:83:49:5e:f5:c2:2d:93:b9:30:93:97:60:61:37:f5:11:
cb:21:a2:b7:eb:62:80:74:b3:8f:2c:39:d7:bb:7e:44:28:f5:
17:34:01:06:ee:7c:0a:48:58:32:09:bf:ee:e1:c0:37:b4:e1:
34:8c:5c:e6:95:5c:43:85:cf:0c:24:a8:99:5b:4f:80:b4:50:
c4:ab:bb:6e:b8:19:7d:d3:5d:75:1c:e1:2d:51:00:cc:a0:1b:
a4:92:48:ea:bc:ad:19:e8:d4:ee:32:53:2d:96:03:de:7e:03:
70:15:a0:29:4e:01:af:16:43:35:82:d2:d4:b5:30:2d:da:d5:
d5:14:57:61:c2:01:05:e0:11:2f:e4:bd:56:46:1a:d6:6c:59:
6f:ab:e5:66:c3:10:f7:6e:a0:8a:96:aa:24:78:58:a4:a3:64:
04:26:d2:de:87:d1:29:86:fa:a6:eb:6e:ef:51:5f:d7:d5:bc:
83:eb:c7:88:5b:a4:f8:32:6b:b3:06:52:80:5b:6a:db:33:39:
5a:ab:24:d8:5d:a9:ea:43:74:61:df:02:c5:a5:a7:c4:00:6b:
97:36:25:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 05:08:29 2025 by rpki-client