Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b2/cbd332-a8db-4606-ac9b-14ec41d4c0a6/1/n4IkN_Se1TiGaJAir93aWfefinE.mft
File: n4IkN_Se1TiGaJAir93aWfefinE.mft (raw, json)
Hash identifier: PLHvj1uDc04az3xCK/7u5q3NpygVF7dAo8I8HWsAjpU=
Subject key identifier: AE:AF:8B:0F:D4:37:5E:27:39:D8:BE:C8:26:6D:B1:18:1B:A7:85:41
Authority key identifier: 9F:82:24:37:F4:9E:D5:38:86:68:90:22:AF:DD:DA:59:F7:9F:8A:71
Certificate issuer: /CN=9f822437f49ed53886689022afddda59f79f8a71
Certificate serial: 01976C61DEF71CDA5673B9EC04603D037872
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/n4IkN_Se1TiGaJAir93aWfefinE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b2/cbd332-a8db-4606-ac9b-14ec41d4c0a6/1/n4IkN_Se1TiGaJAir93aWfefinE.mft
Manifest number: 0885
Signing time: Sat 14 Jun 2025 03:00:42 +0000
Manifest this update: Sat 14 Jun 2025 03:00:42 +0000
Manifest next update: Sun 15 Jun 2025 03:00:42 +0000
Files and hashes: 1: IdEYIsWCps3Gl-CPOJNmXVY_KDA.roa (hash: V5/YEnbALkGDiezb6/4H3zOCBx4UZLrATG4CYdBNlRA=)
2: n4IkN_Se1TiGaJAir93aWfefinE.crl (hash: +lUcCgwnacFlkXPi2v0yFDVKzTnbm0Kwy1ITT+SIOzM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b2/cbd332-a8db-4606-ac9b-14ec41d4c0a6/1/n4IkN_Se1TiGaJAir93aWfefinE.crl
rsync://rpki.ripe.net/repository/DEFAULT/b2/cbd332-a8db-4606-ac9b-14ec41d4c0a6/1/n4IkN_Se1TiGaJAir93aWfefinE.mft
rsync://rpki.ripe.net/repository/DEFAULT/n4IkN_Se1TiGaJAir93aWfefinE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 01:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6c:61:de:f7:1c:da:56:73:b9:ec:04:60:3d:03:78:72
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9f822437f49ed53886689022afddda59f79f8a71
Validity
Not Before: Jun 14 03:00:42 2025 GMT
Not After : Jun 15 03:00:42 2025 GMT
Subject: CN=aeaf8b0fd4375e2739d8bec8266db1181ba78541
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:65:24:f3:b2:bd:33:3f:c4:ae:5d:3e:1c:ba:
09:ff:8c:c6:3b:35:c9:dd:e0:63:b7:57:47:91:9b:
5d:07:60:c7:dd:1b:32:0d:08:2f:47:e5:a0:ff:84:
75:4a:9f:24:96:8e:67:59:4b:e7:7a:6f:f8:43:45:
33:36:4b:d0:f1:37:68:7d:ce:e7:e4:d9:e2:68:af:
04:94:09:9d:4d:38:9f:e6:ec:a5:bd:ec:7f:0e:3f:
aa:10:fb:39:a1:ca:10:05:45:3f:6b:c5:3f:35:ed:
90:6a:42:be:31:d1:f5:d1:c0:76:e7:f0:9b:cc:7b:
af:91:b3:ef:09:30:fa:f0:a0:9c:77:72:9c:8f:d2:
48:b7:ec:51:d6:a2:95:ca:b9:2b:0e:b7:10:4c:e9:
36:97:23:6d:c9:8b:bb:f6:85:d0:b5:3f:04:94:d3:
05:bd:5b:77:89:dd:92:15:73:60:94:05:c8:78:f8:
c5:73:cc:d7:da:b9:87:99:f3:2a:fc:fb:5c:65:5f:
b1:0a:7a:3f:99:30:af:8b:7a:3c:89:f5:77:e4:cb:
5a:e7:47:74:b2:cf:75:1c:99:45:d1:7a:3e:da:0f:
ba:16:79:7c:4a:eb:3e:ca:43:b1:86:c9:a2:35:4f:
b4:21:88:d0:b5:b8:70:93:48:91:40:5d:20:45:14:
21:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:AF:8B:0F:D4:37:5E:27:39:D8:BE:C8:26:6D:B1:18:1B:A7:85:41
X509v3 Authority Key Identifier:
keyid:9F:82:24:37:F4:9E:D5:38:86:68:90:22:AF:DD:DA:59:F7:9F:8A:71
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/n4IkN_Se1TiGaJAir93aWfefinE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/cbd332-a8db-4606-ac9b-14ec41d4c0a6/1/n4IkN_Se1TiGaJAir93aWfefinE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/cbd332-a8db-4606-ac9b-14ec41d4c0a6/1/n4IkN_Se1TiGaJAir93aWfefinE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
cb:14:0a:41:df:54:cc:62:49:5e:ca:27:63:7b:43:18:f5:bb:
ce:b1:63:a9:3f:d7:9a:be:cd:5f:0e:8f:2d:60:80:a7:91:5e:
a3:72:b9:fe:b7:72:7c:1b:96:a3:82:bc:94:b5:03:80:d7:c9:
ae:c6:99:60:79:a6:ce:05:88:9e:42:6a:4b:ec:67:f3:64:3e:
6b:16:93:91:fd:37:08:67:c8:91:94:28:41:bb:70:72:a8:c8:
a2:20:e7:0f:7d:5f:89:5a:9e:eb:69:75:fa:fc:1f:e0:3c:68:
0e:2f:bb:0f:d9:00:68:05:15:df:f2:34:66:56:90:8a:6b:f7:
27:f6:08:3f:db:00:8c:32:a2:ef:10:d2:b7:07:71:49:d6:aa:
66:5e:27:ac:95:a8:66:15:04:f7:95:27:b2:b2:4c:14:f7:2d:
4b:23:a3:4e:bd:c4:87:ae:6d:7c:47:f9:47:72:0e:61:d8:14:
49:c7:59:d1:11:78:15:68:39:34:08:ba:f6:3c:37:f8:ff:e6:
67:60:70:d8:da:a2:82:ae:05:a4:28:13:a8:a8:f4:8b:5d:7c:
37:26:37:9b:25:25:c0:b9:a4:bc:6e:cc:7a:b6:af:f5:7a:e9:
ef:9f:c7:95:f0:4c:dc:a4:7e:6b:54:d0:3b:ab:52:1b:d4:a0:
e4:de:e3:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 09:05:49 2025 by rpki-client