Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/fb4c2b-ebd2-46b2-bcd0-84db39403768/1/n2fgyFot61Rm6r3JCEYViph3hKI.mft
File: n2fgyFot61Rm6r3JCEYViph3hKI.mft (raw, json)
Hash identifier: NodS/3oMuU4oFgwkD2C6MUEsJEPTbdMmSw1HZbNhAQg=
Subject key identifier: 39:F4:EB:C9:3C:A5:66:47:97:13:CA:AA:C5:2A:6D:B4:54:98:96:A0
Authority key identifier: 9F:67:E0:C8:5A:2D:EB:54:66:EA:BD:C9:08:46:15:8A:98:77:84:A2
Certificate issuer: /CN=9f67e0c85a2deb5466eabdc90846158a987784a2
Certificate serial: 01976C9906590C61BBD9E5DD4798595FC5CE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/n2fgyFot61Rm6r3JCEYViph3hKI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/fb4c2b-ebd2-46b2-bcd0-84db39403768/1/n2fgyFot61Rm6r3JCEYViph3hKI.mft
Manifest number: 1352
Signing time: Sat 14 Jun 2025 04:00:57 +0000
Manifest this update: Sat 14 Jun 2025 04:00:57 +0000
Manifest next update: Sun 15 Jun 2025 04:00:57 +0000
Files and hashes: 1: n2fgyFot61Rm6r3JCEYViph3hKI.crl (hash: tKJHvAwA2g49Izgege00/3rfjrMacgGWbnRNbU1aUo0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c0/fb4c2b-ebd2-46b2-bcd0-84db39403768/1/n2fgyFot61Rm6r3JCEYViph3hKI.crl
rsync://rpki.ripe.net/repository/DEFAULT/c0/fb4c2b-ebd2-46b2-bcd0-84db39403768/1/n2fgyFot61Rm6r3JCEYViph3hKI.mft
rsync://rpki.ripe.net/repository/DEFAULT/n2fgyFot61Rm6r3JCEYViph3hKI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 01:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6c:99:06:59:0c:61:bb:d9:e5:dd:47:98:59:5f:c5:ce
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9f67e0c85a2deb5466eabdc90846158a987784a2
Validity
Not Before: Jun 14 04:00:57 2025 GMT
Not After : Jun 15 04:00:57 2025 GMT
Subject: CN=39f4ebc93ca566479713caaac52a6db4549896a0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:08:73:3a:5d:ed:0e:97:4a:57:f9:c2:fd:2f:
6c:d9:f3:7f:13:6e:81:2c:6b:50:1b:b5:47:fa:51:
37:2c:3b:2e:56:0c:9e:f0:03:d6:b4:96:95:25:e1:
11:e5:46:4f:ee:a2:9d:b1:b8:48:98:73:98:7b:1b:
34:92:c7:90:02:d5:12:51:ed:86:d9:72:ac:21:1b:
ea:42:5c:3e:fb:1e:5e:73:58:f5:94:31:3f:81:53:
03:3f:55:4f:ee:e4:cd:77:a7:3a:6b:3e:a2:3d:ed:
bf:68:d7:46:4f:30:d8:65:dd:3c:d8:81:53:0b:8c:
a0:c3:2e:7a:56:b2:d3:4e:22:d7:14:96:35:d4:0f:
b7:6e:cc:48:77:58:06:b4:e2:0c:12:f0:23:18:19:
18:28:bd:61:8f:23:11:24:a9:85:7d:4b:cd:18:64:
f9:62:a5:84:49:44:99:56:7d:54:db:a7:3c:fb:fe:
06:39:56:92:d5:2d:c4:b8:ea:ea:8d:c8:1c:95:33:
94:a2:a4:c3:14:36:fe:11:01:51:5a:72:5e:6d:ad:
87:57:36:0f:d2:b6:89:bd:f1:21:95:97:40:94:82:
34:e4:ab:97:b0:72:29:37:e3:39:d6:03:77:b6:24:
c7:5b:29:d2:8d:4d:50:69:79:eb:3f:a0:a1:a3:17:
f5:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:F4:EB:C9:3C:A5:66:47:97:13:CA:AA:C5:2A:6D:B4:54:98:96:A0
X509v3 Authority Key Identifier:
keyid:9F:67:E0:C8:5A:2D:EB:54:66:EA:BD:C9:08:46:15:8A:98:77:84:A2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/n2fgyFot61Rm6r3JCEYViph3hKI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/fb4c2b-ebd2-46b2-bcd0-84db39403768/1/n2fgyFot61Rm6r3JCEYViph3hKI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/fb4c2b-ebd2-46b2-bcd0-84db39403768/1/n2fgyFot61Rm6r3JCEYViph3hKI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
09:92:19:a0:41:4f:68:b4:0f:73:2c:61:4b:18:4f:da:91:86:
9a:d5:2f:0d:c1:03:99:ad:bd:54:27:ed:02:b1:37:2b:8f:d8:
16:62:c2:39:7c:ba:dc:c6:c9:18:99:f9:11:e4:48:11:8c:01:
75:7f:8a:7f:97:06:28:36:a6:f0:35:de:25:3e:4d:49:1f:f3:
a3:61:b2:0e:18:13:a3:1b:b8:b3:b2:61:0d:f1:ea:d2:bd:34:
f3:c0:26:db:81:94:82:6f:ec:80:5a:ac:bf:c3:ab:17:51:ca:
91:5c:10:6a:4c:8b:2c:40:36:da:ed:cb:f9:0f:a5:8b:4a:b5:
ad:a7:31:6e:a1:8f:02:2b:50:f8:3e:64:9c:47:b9:24:57:8a:
b4:fb:0b:9c:62:16:39:c9:9e:fd:7b:ba:e9:40:83:df:ea:fe:
94:6f:86:7e:ed:ab:d1:ae:e9:dc:4b:e0:8b:4d:9e:70:9c:aa:
6d:ee:65:41:81:59:71:c8:96:b1:3e:da:3d:0a:2b:f5:25:ce:
91:9b:dc:d7:78:24:96:69:00:21:ce:c4:22:54:a4:3d:ab:ef:
2a:97:92:dc:12:bc:2a:9a:62:5d:0c:01:a7:21:e0:c6:da:52:
90:1d:6d:50:75:e3:5a:85:a0:18:f4:c9:c2:be:fd:87:bf:bd:
d5:bf:da:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 09:28:02 2025 by rpki-client