Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/f974e9-4743-46db-a348-1d1989f06618/1/nL6cQ-51mJYAORlQhzRyM0a_cBY.mft
File: nL6cQ-51mJYAORlQhzRyM0a_cBY.mft (raw, json)
Hash identifier: yb9BdcWU26HHQqYRm+ozrUEhZQ029pFpgEMl0EVGEo8=
Subject key identifier: A2:10:45:C5:DE:9C:1E:D3:80:DC:2B:6B:25:20:AF:C3:FC:AD:A8:DC
Authority key identifier: 9C:BE:9C:43:EE:75:98:96:00:39:19:50:87:34:72:33:46:BF:70:16
Certificate issuer: /CN=9cbe9c43ee759896003919508734723346bf7016
Certificate serial: 01969E9B259C77328D5333E88C1A99BC3A79
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nL6cQ-51mJYAORlQhzRyM0a_cBY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/02/f974e9-4743-46db-a348-1d1989f06618/1/nL6cQ-51mJYAORlQhzRyM0a_cBY.mft
Manifest number: 10E7
Signing time: Mon 05 May 2025 04:01:29 +0000
Manifest this update: Mon 05 May 2025 04:01:29 +0000
Manifest next update: Tue 06 May 2025 04:01:29 +0000
Files and hashes: 1: UZ53Oxv_ea1DJibe26VPgv4-Vpo.roa (hash: hiy12f2VyI89A+R22FhEyFKlin2hs0EKoXos1apn778=)
2: nL6cQ-51mJYAORlQhzRyM0a_cBY.crl (hash: Gj2DuYgrDpJDZVDBMm0coq0DHrztJnK6fym88fnyoqs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/02/f974e9-4743-46db-a348-1d1989f06618/1/nL6cQ-51mJYAORlQhzRyM0a_cBY.crl
rsync://rpki.ripe.net/repository/DEFAULT/02/f974e9-4743-46db-a348-1d1989f06618/1/nL6cQ-51mJYAORlQhzRyM0a_cBY.mft
rsync://rpki.ripe.net/repository/DEFAULT/nL6cQ-51mJYAORlQhzRyM0a_cBY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 05 May 2025 22:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:9e:9b:25:9c:77:32:8d:53:33:e8:8c:1a:99:bc:3a:79
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9cbe9c43ee759896003919508734723346bf7016
Validity
Not Before: May 5 04:01:29 2025 GMT
Not After : May 6 04:01:29 2025 GMT
Subject: CN=a21045c5de9c1ed380dc2b6b2520afc3fcada8dc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:1f:68:20:9f:be:72:8c:be:0a:38:0b:a3:61:
ea:1d:2f:24:4c:c9:92:6c:bd:e8:0e:7f:9c:94:92:
6c:8e:3a:66:1a:7a:c3:cb:f3:be:e2:37:14:9d:ea:
c5:59:b4:71:7e:7d:db:f4:5d:32:39:1a:29:73:c1:
09:95:6e:92:9e:72:b1:49:82:75:c8:ee:de:ab:3e:
81:f7:ed:34:99:89:64:08:ea:23:c0:ce:b7:7c:4b:
53:00:95:bf:f2:35:2e:7f:7b:17:ee:4b:c6:95:5c:
86:d8:5f:23:29:62:43:02:bc:24:35:8c:c7:45:8b:
f2:d4:c8:1c:39:5e:48:43:66:c1:75:2b:9b:f1:31:
9d:ab:12:a4:08:c7:44:9a:a4:4c:ed:12:c8:b3:bb:
6a:9f:a3:ae:89:e0:c8:b2:af:f1:99:dd:91:6b:68:
56:5d:9a:9f:c8:db:94:41:b0:b4:8a:ed:8b:a9:7c:
95:6a:03:f8:a3:68:de:e2:13:b5:51:75:cc:f6:af:
c7:7a:56:fb:ad:8e:45:7c:ab:3a:4e:75:21:e6:69:
17:7e:9e:74:69:89:3f:ad:a6:c2:ed:6d:7c:bc:f9:
ea:9f:79:c4:1e:5a:aa:35:ff:d8:25:dc:d2:51:66:
35:cb:53:3a:50:51:df:f4:57:cf:d5:7d:d1:12:f7:
d3:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:10:45:C5:DE:9C:1E:D3:80:DC:2B:6B:25:20:AF:C3:FC:AD:A8:DC
X509v3 Authority Key Identifier:
keyid:9C:BE:9C:43:EE:75:98:96:00:39:19:50:87:34:72:33:46:BF:70:16
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nL6cQ-51mJYAORlQhzRyM0a_cBY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/f974e9-4743-46db-a348-1d1989f06618/1/nL6cQ-51mJYAORlQhzRyM0a_cBY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/02/f974e9-4743-46db-a348-1d1989f06618/1/nL6cQ-51mJYAORlQhzRyM0a_cBY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6b:59:8f:4d:ef:0d:d7:4c:b2:09:e1:51:cd:d3:30:72:64:49:
46:cb:13:c6:6c:c8:8f:49:70:36:c7:fd:72:19:8e:93:a4:7f:
a6:4b:3b:2a:5a:1d:55:92:da:3a:42:32:7b:37:3f:3e:5b:07:
20:c0:95:0e:2a:1f:8f:be:73:30:91:16:83:25:99:0e:00:51:
ed:47:01:0c:80:ad:45:ab:22:49:2c:92:c2:9d:14:69:cc:92:
8b:3e:42:d4:5b:d6:fc:7a:cf:51:fa:25:f7:03:6d:fb:63:b2:
75:61:a9:93:15:63:f7:5a:45:2f:54:9c:5b:e8:b9:a1:ec:82:
96:59:b2:39:c8:23:a4:69:07:39:5b:d3:11:c5:14:c7:02:70:
ae:56:bc:97:18:b3:48:ca:0b:8e:c8:70:d8:5b:ac:75:c2:8a:
a9:91:d2:4a:77:c6:f9:9b:1f:ec:cd:1e:b5:d1:1b:db:e2:94:
f3:2a:5e:4b:c7:03:de:ab:ee:bf:9c:b6:5a:99:96:fb:ff:3b:
3c:8a:a6:7b:5f:1f:ef:52:ab:30:65:ea:b6:c1:61:f5:58:df:
51:37:b8:d7:9d:9d:86:53:98:0d:ff:c0:d8:82:c0:ad:0c:2f:
fd:fd:07:61:1c:f6:70:a6:0b:a0:53:a6:52:1d:36:f3:4e:16:
7e:3b:20:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 5 06:38:43 2025 by rpki-client