Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/06/14ead9-cbb1-4639-81a7-d8b8202d7786/1/nxvZcy5s3W50lNeRh_yoVbUZmQk.mft
File: nxvZcy5s3W50lNeRh_yoVbUZmQk.mft (raw, json)
Hash identifier: qR5pU4jabp6lqBC/LcGG5ovTFTxF4fyEHA63e2VCgKg=
Subject key identifier: 3E:40:9E:D3:62:CA:F6:CE:F5:2B:F0:88:FC:F4:0B:3D:42:47:89:2B
Authority key identifier: 9F:1B:D9:73:2E:6C:DD:6E:74:94:D7:91:87:FC:A8:55:B5:19:99:09
Certificate issuer: /CN=9f1bd9732e6cdd6e7494d79187fca855b5199909
Certificate serial: 0196AB0C6B4C8CC50C9F06F1FC20A3B3A339
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nxvZcy5s3W50lNeRh_yoVbUZmQk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/06/14ead9-cbb1-4639-81a7-d8b8202d7786/1/nxvZcy5s3W50lNeRh_yoVbUZmQk.mft
Manifest number: 12AB
Signing time: Wed 07 May 2025 14:00:39 +0000
Manifest this update: Wed 07 May 2025 14:00:39 +0000
Manifest next update: Thu 08 May 2025 14:00:39 +0000
Files and hashes: 1: L2MFVzLu5kpVjnsb4Kb2Ip5hD4I.roa (hash: wDHsr026DvaBiTyi7BBF/QmvI/bBUdaI/D33HJF38Y8=)
2: _JE8lnLT-86sHVAHJKlkVaAyjr4.roa (hash: UompnxxivZ8Fg0ySIbxl1tWe4K+WK1YpWsyZpIJAPwU=)
3: nxvZcy5s3W50lNeRh_yoVbUZmQk.crl (hash: ckgWbqLlDHpPhFIMq2qW8wRSqmGRdLWdtvfQ+p6Y6UE=)
4: qdHDAHiWQsmCFoNetHDwXmdq01A.roa (hash: go8toSa0Pfxl9RGM5eMA7V4+YqEI5lyucr5i8lNbh0M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/06/14ead9-cbb1-4639-81a7-d8b8202d7786/1/nxvZcy5s3W50lNeRh_yoVbUZmQk.crl
rsync://rpki.ripe.net/repository/DEFAULT/06/14ead9-cbb1-4639-81a7-d8b8202d7786/1/nxvZcy5s3W50lNeRh_yoVbUZmQk.mft
rsync://rpki.ripe.net/repository/DEFAULT/nxvZcy5s3W50lNeRh_yoVbUZmQk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 08 May 2025 13:31:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:ab:0c:6b:4c:8c:c5:0c:9f:06:f1:fc:20:a3:b3:a3:39
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9f1bd9732e6cdd6e7494d79187fca855b5199909
Validity
Not Before: May 7 14:00:39 2025 GMT
Not After : May 8 14:00:39 2025 GMT
Subject: CN=3e409ed362caf6cef52bf088fcf40b3d4247892b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:91:6a:94:97:02:16:2e:6f:bf:74:5a:e5:c3:
a8:f8:81:05:28:34:ac:d8:34:3d:cc:44:13:26:34:
00:c7:a4:a8:02:a6:24:57:a3:8e:0a:6d:e1:9e:51:
12:f6:4f:5e:c3:6e:ee:1a:b4:b9:b1:76:68:b6:34:
b1:e2:68:c4:06:fb:81:ae:51:52:6c:f6:cc:f7:38:
a4:a3:c5:cd:67:1c:5b:98:9f:df:49:d1:cd:fb:1d:
20:48:66:58:4e:6d:83:f2:7c:66:fe:38:f5:2f:28:
43:0f:c9:23:61:6c:00:aa:ec:63:1a:e0:59:df:d9:
2a:4c:70:5d:ee:11:a8:12:8d:3f:4d:81:32:00:38:
29:e2:fe:e6:1e:73:cc:95:fe:03:5c:2d:6b:6a:de:
3f:be:3f:cc:2c:35:c8:e5:41:fe:98:01:ea:c6:89:
f0:11:fb:e5:13:80:e5:2f:0d:03:8c:49:3e:4c:b7:
5c:89:f1:a3:f1:26:fb:1a:b3:9c:ce:45:83:66:0a:
fe:ba:01:dd:d4:ad:bd:9a:d5:94:1e:9e:97:1e:cc:
aa:87:64:29:78:86:63:f7:42:e7:6c:56:5f:0f:19:
ee:72:68:db:e9:d2:ed:32:b4:1e:ed:ea:bb:3f:0b:
23:ab:5f:51:2c:91:0c:62:02:32:6c:13:c6:27:50:
d6:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:40:9E:D3:62:CA:F6:CE:F5:2B:F0:88:FC:F4:0B:3D:42:47:89:2B
X509v3 Authority Key Identifier:
keyid:9F:1B:D9:73:2E:6C:DD:6E:74:94:D7:91:87:FC:A8:55:B5:19:99:09
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nxvZcy5s3W50lNeRh_yoVbUZmQk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/06/14ead9-cbb1-4639-81a7-d8b8202d7786/1/nxvZcy5s3W50lNeRh_yoVbUZmQk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/06/14ead9-cbb1-4639-81a7-d8b8202d7786/1/nxvZcy5s3W50lNeRh_yoVbUZmQk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c9:80:37:74:da:12:9d:a2:bb:41:81:e9:36:b1:f1:58:ff:a5:
fb:3b:06:ea:b3:0a:ea:1a:45:93:2d:ba:2a:a8:dd:d9:2a:47:
0c:93:dc:63:43:8c:a5:ff:51:96:8b:0b:ed:03:da:73:87:7f:
fc:08:91:c0:66:8a:a0:64:57:23:ea:79:a0:8c:b5:a5:90:d9:
34:f2:7c:56:20:46:57:88:a0:e7:1a:4a:9d:42:2d:5f:ad:d7:
9c:30:ef:2e:c0:82:6e:a7:d6:ff:09:0f:44:91:94:80:60:fc:
34:be:41:a4:43:9b:bc:80:33:f7:62:40:22:45:cf:17:64:0b:
27:65:8f:4c:41:c2:70:80:7c:77:dc:8c:60:de:a6:d3:63:47:
d0:cd:f1:cc:20:bd:ee:03:47:6c:d5:8f:fc:f2:24:6e:43:fa:
90:c8:3b:6f:73:3f:d2:bd:84:ac:47:09:b5:7c:0f:c3:87:87:
5f:6c:ae:56:5a:1e:bb:fc:d7:31:49:92:83:16:57:60:d9:9d:
24:e6:de:ea:28:05:fc:02:40:84:46:72:57:38:90:e0:52:c0:
05:99:f2:4a:88:0f:23:5e:ee:73:bd:43:e0:46:30:e2:fd:4a:
88:b7:82:c9:7d:1a:7c:5d:7d:53:63:0b:92:2d:bb:d5:9c:41:
4b:1f:bf:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 7 16:34:28 2025 by rpki-client