Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/a30360-0329-4cf1-a37f-db7498dade0c/1/nlaYDUienFO8gp8-jWPTg_ONDeM.mft
File: nlaYDUienFO8gp8-jWPTg_ONDeM.mft (raw, json)
Hash identifier: uJFPVrGSQv2xKrogLFE+bbOw++dko77AaljIb3pU1Pg=
Subject key identifier: AE:82:B5:EC:E4:91:89:2E:C4:59:2F:BF:71:5A:15:51:0C:CE:0C:8C
Authority key identifier: 9E:56:98:0D:48:9E:9C:53:BC:82:9F:3E:8D:63:D3:83:F3:8D:0D:E3
Certificate issuer: /CN=9e56980d489e9c53bc829f3e8d63d383f38d0de3
Certificate serial: 0196A7662406F95791C227DD91180AF73C2A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nlaYDUienFO8gp8-jWPTg_ONDeM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/a30360-0329-4cf1-a37f-db7498dade0c/1/nlaYDUienFO8gp8-jWPTg_ONDeM.mft
Manifest number: 1485
Signing time: Tue 06 May 2025 21:00:11 +0000
Manifest this update: Tue 06 May 2025 21:00:11 +0000
Manifest next update: Wed 07 May 2025 21:00:11 +0000
Files and hashes: 1: 5LKnYfYeN0M1IwSjOCfaAZydc0E.roa (hash: R6rY8mHoFXXwwf30CLdp4brLxdq1SUoGP6TPbyDWGN8=)
2: nlaYDUienFO8gp8-jWPTg_ONDeM.crl (hash: NTIiHJj28wBm3muscWYEqOHdT22yq1TX7r6i/v7CtZE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/16/a30360-0329-4cf1-a37f-db7498dade0c/1/nlaYDUienFO8gp8-jWPTg_ONDeM.crl
rsync://rpki.ripe.net/repository/DEFAULT/16/a30360-0329-4cf1-a37f-db7498dade0c/1/nlaYDUienFO8gp8-jWPTg_ONDeM.mft
rsync://rpki.ripe.net/repository/DEFAULT/nlaYDUienFO8gp8-jWPTg_ONDeM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 07 May 2025 21:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:a7:66:24:06:f9:57:91:c2:27:dd:91:18:0a:f7:3c:2a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9e56980d489e9c53bc829f3e8d63d383f38d0de3
Validity
Not Before: May 6 21:00:11 2025 GMT
Not After : May 7 21:00:11 2025 GMT
Subject: CN=ae82b5ece491892ec4592fbf715a15510cce0c8c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:77:c2:06:a7:e6:8d:ee:a3:c9:cc:e6:75:62:
9a:2b:e5:a3:47:e3:60:bf:3d:ff:f4:36:27:8f:09:
dd:3a:eb:50:a6:7c:6f:f9:2f:db:ca:45:c1:57:ef:
9e:cc:95:5c:8c:e0:56:c9:42:f2:e7:f6:c5:eb:85:
40:85:16:be:5f:1a:a3:b2:20:d8:9c:e4:02:1f:db:
3b:8f:5c:35:0e:7b:eb:b3:4a:17:2e:72:8b:05:fa:
49:88:60:0c:68:8c:49:5f:ab:77:2e:08:b9:94:51:
6b:43:00:1e:51:90:8f:2f:ff:bb:7b:0d:6f:0a:ff:
60:df:46:e3:58:3b:5c:fe:25:b9:56:94:6d:12:b7:
f5:5f:5f:f6:2d:d6:a5:73:b1:5d:ea:08:e8:98:b9:
d0:8d:e3:4c:b3:66:df:41:17:a0:8b:0f:0f:8f:65:
fd:36:e6:1d:4c:96:3c:5d:d1:98:bc:f7:15:2d:93:
93:4d:20:87:00:a9:3a:08:38:7a:7c:d3:8f:d9:65:
28:ed:2c:6d:59:84:ab:52:30:14:4c:44:e8:a5:f7:
a9:b6:4b:13:69:c0:48:11:cd:30:20:9c:7a:40:41:
8d:64:be:74:48:7a:f1:36:48:92:41:4b:fa:ea:54:
21:ab:0a:5e:6d:7b:10:02:13:93:f2:6b:75:5e:2c:
6a:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:82:B5:EC:E4:91:89:2E:C4:59:2F:BF:71:5A:15:51:0C:CE:0C:8C
X509v3 Authority Key Identifier:
keyid:9E:56:98:0D:48:9E:9C:53:BC:82:9F:3E:8D:63:D3:83:F3:8D:0D:E3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nlaYDUienFO8gp8-jWPTg_ONDeM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/a30360-0329-4cf1-a37f-db7498dade0c/1/nlaYDUienFO8gp8-jWPTg_ONDeM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/a30360-0329-4cf1-a37f-db7498dade0c/1/nlaYDUienFO8gp8-jWPTg_ONDeM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
65:f3:7c:23:42:39:ff:c3:19:67:1f:f2:a9:28:df:96:d2:13:
58:c6:80:d9:66:c3:07:f5:d0:63:fd:57:bf:b0:90:34:6a:47:
87:23:b2:95:15:c4:df:16:7f:32:c7:1d:05:1a:bc:05:8a:af:
e1:ca:f2:3f:61:ff:e7:98:52:e0:c5:d9:dd:f7:08:a7:a6:14:
2b:9f:1c:01:8c:20:7d:0a:17:ec:8a:5c:6f:d6:c4:37:9a:92:
41:2e:1e:b2:ec:97:2a:a6:7a:9c:c4:f0:6d:0b:18:42:8f:79:
32:3e:e2:1b:3f:5e:2b:c0:d4:c8:08:40:e1:f7:7d:a0:67:25:
db:b6:1d:02:a6:63:f8:bb:e7:45:bb:af:c8:a2:95:00:04:e0:
06:8b:96:59:64:70:b5:5f:f4:19:ef:39:d3:fa:43:50:38:5a:
34:7f:51:45:c3:38:31:e6:71:c6:ff:ee:65:c8:07:aa:c1:98:
c8:ae:79:69:2a:12:ba:3d:f0:96:89:10:db:7f:b5:21:d7:95:
ed:7d:97:11:35:5c:a3:c9:0d:ef:cb:99:4c:9f:f0:8c:82:45:
f5:6e:a4:d5:da:96:c7:5b:87:a7:88:dc:fd:72:1c:ca:04:d0:
21:4b:69:c3:e5:a4:fc:ac:fd:a2:bc:18:c0:42:1a:f6:a2:83:
45:7b:73:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 7 03:21:55 2025 by rpki-client