Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/12/70ddc4-f9c4-498b-85ee-16fc9d44ec7d/1/nA1VQL3NMwUrwA__JmM4vzzIKoA.mft
File: nA1VQL3NMwUrwA__JmM4vzzIKoA.mft (raw, json)
Hash identifier: AulpkMsXfsCDu0JF7VJXk899B3rLIjgBxXWWan59Bpo=
Subject key identifier: AC:6E:93:A4:5D:BC:C3:F9:88:2E:61:99:F4:86:A1:C3:32:7D:D8:84
Authority key identifier: 9C:0D:55:40:BD:CD:33:05:2B:C0:0F:FF:26:63:38:BF:3C:C8:2A:80
Certificate issuer: /CN=9c0d5540bdcd33052bc00fff266338bf3cc82a80
Certificate serial: 01969F07DFC47968622311CFBEFDBAA894A9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nA1VQL3NMwUrwA__JmM4vzzIKoA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/12/70ddc4-f9c4-498b-85ee-16fc9d44ec7d/1/nA1VQL3NMwUrwA__JmM4vzzIKoA.mft
Manifest number: 0A16
Signing time: Mon 05 May 2025 06:00:15 +0000
Manifest this update: Mon 05 May 2025 06:00:15 +0000
Manifest next update: Tue 06 May 2025 06:00:15 +0000
Files and hashes: 1: dOMaomaM3zc_oZf2l_KGgZkjQjM.roa (hash: ZA8CPvYUiDN0MdAy8uYPcmT72kE+r1MAEa1eMhF5nMk=)
2: nA1VQL3NMwUrwA__JmM4vzzIKoA.crl (hash: g5xHBhjUjxPo9We5dgqY0Qbe1mE3i2QEkkw5Q7SKzfA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/12/70ddc4-f9c4-498b-85ee-16fc9d44ec7d/1/nA1VQL3NMwUrwA__JmM4vzzIKoA.crl
rsync://rpki.ripe.net/repository/DEFAULT/12/70ddc4-f9c4-498b-85ee-16fc9d44ec7d/1/nA1VQL3NMwUrwA__JmM4vzzIKoA.mft
rsync://rpki.ripe.net/repository/DEFAULT/nA1VQL3NMwUrwA__JmM4vzzIKoA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 06 May 2025 06:00:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:9f:07:df:c4:79:68:62:23:11:cf:be:fd:ba:a8:94:a9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9c0d5540bdcd33052bc00fff266338bf3cc82a80
Validity
Not Before: May 5 06:00:15 2025 GMT
Not After : May 6 06:00:15 2025 GMT
Subject: CN=ac6e93a45dbcc3f9882e6199f486a1c3327dd884
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:19:16:56:42:41:05:cf:f7:a4:66:65:aa:0f:
39:72:dc:2d:9d:5c:ed:33:50:40:ea:d5:e3:1a:84:
0d:57:05:ae:a3:0c:c1:30:4b:f0:2f:5d:ad:d7:95:
1c:20:48:01:a2:c4:ce:3a:53:c1:59:61:16:e2:91:
98:91:5f:d8:a9:8d:8e:4d:fe:a7:60:32:00:ff:3a:
d8:1c:87:7a:9c:d5:54:df:67:88:2b:81:0f:ef:ed:
ec:68:a1:78:88:5f:8a:80:9e:bf:e6:de:d1:a3:07:
b6:9e:7a:04:3d:0e:5f:46:a9:b4:2a:ee:ae:98:b9:
ba:21:70:1d:c9:2d:24:27:4d:43:04:83:c3:70:99:
74:f3:de:7b:69:25:c3:41:82:e1:fe:01:b1:51:b8:
92:6b:8c:27:77:86:6a:9b:d7:0c:9d:34:38:49:66:
45:85:73:c5:02:a0:2c:81:4b:da:1c:21:90:67:c0:
77:ac:02:83:6e:70:e4:7f:d6:79:49:4e:6e:a7:c7:
df:a6:5e:e6:c0:e6:4c:36:8f:07:7f:51:fa:ee:a9:
1b:3e:e1:b0:c3:ef:38:80:fd:18:e2:b9:24:30:10:
5f:cd:f9:ab:93:3c:10:85:c7:94:f0:37:9f:08:4f:
6e:33:50:eb:d9:ef:de:a4:f4:8b:61:36:e5:e1:2f:
88:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:6E:93:A4:5D:BC:C3:F9:88:2E:61:99:F4:86:A1:C3:32:7D:D8:84
X509v3 Authority Key Identifier:
keyid:9C:0D:55:40:BD:CD:33:05:2B:C0:0F:FF:26:63:38:BF:3C:C8:2A:80
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nA1VQL3NMwUrwA__JmM4vzzIKoA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/70ddc4-f9c4-498b-85ee-16fc9d44ec7d/1/nA1VQL3NMwUrwA__JmM4vzzIKoA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/12/70ddc4-f9c4-498b-85ee-16fc9d44ec7d/1/nA1VQL3NMwUrwA__JmM4vzzIKoA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ab:9d:d1:f8:27:da:32:4f:22:27:df:bc:34:83:4c:57:0f:44:
fd:5b:ef:89:bd:96:bf:7f:02:f9:d7:8a:85:d7:c2:27:b7:0a:
e7:17:61:d8:a8:1a:a5:d0:a4:db:88:ad:7f:5f:fa:7f:f6:4f:
8f:b1:e9:4c:93:0c:62:41:7f:fb:08:0b:55:7b:f0:a2:60:8d:
e8:23:2b:28:ca:e8:30:b8:be:8a:47:5e:79:0d:fc:3a:50:8d:
ad:18:60:a4:7d:70:dc:53:c0:1a:9d:04:bb:84:1c:e2:c1:30:
5d:f5:11:a9:9c:a8:ce:3b:10:8e:dd:df:84:14:76:6c:26:c2:
5a:04:d2:82:b3:90:b8:7a:89:dd:27:40:fc:c2:26:83:a2:c7:
ad:74:e9:44:64:15:8f:d3:05:82:d8:24:4d:68:c0:cc:d8:8c:
5b:bd:95:22:90:53:73:59:27:e3:46:f0:76:7c:0d:52:ae:47:
0a:52:39:b8:25:8e:4b:a4:d5:3f:64:40:d2:48:f7:5e:6d:b8:
aa:1b:50:ef:34:bf:19:99:71:19:b9:59:0f:e9:1d:fd:3f:a1:
4d:2b:70:72:fe:e8:ae:05:73:14:1c:f6:0f:e8:2a:b2:58:a0:
68:8e:80:b7:15:76:08:f2:d0:33:c8:72:81:25:59:53:e9:6b:
12:fd:5b:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 5 12:08:09 2025 by rpki-client