Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/5dd7b1-e337-404d-b764-ddb0b148e46b/1/nLls5ZxZVXUw8OqkTGZFA9nEAe0.mft
File: nLls5ZxZVXUw8OqkTGZFA9nEAe0.mft (raw, json)
Hash identifier: BkldY1C94SYBkHvVm5DEYw3aJsq4NzalJHVxwYJklk8=
Subject key identifier: F6:03:07:D4:28:31:F8:F0:E8:2A:65:01:8F:24:F3:00:17:50:BA:46
Authority key identifier: 9C:B9:6C:E5:9C:59:55:75:30:F0:EA:A4:4C:66:45:03:D9:C4:01:ED
Certificate issuer: /CN=9cb96ce59c59557530f0eaa44c664503d9c401ed
Certificate serial: 0196BB5AFA9DBDC75EA4059C88E3092216A9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nLls5ZxZVXUw8OqkTGZFA9nEAe0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/19/5dd7b1-e337-404d-b764-ddb0b148e46b/1/nLls5ZxZVXUw8OqkTGZFA9nEAe0.mft
Manifest number: 07FF
Signing time: Sat 10 May 2025 18:00:23 +0000
Manifest this update: Sat 10 May 2025 18:00:23 +0000
Manifest next update: Sun 11 May 2025 18:00:23 +0000
Files and hashes: 1: CAv9rzPv7Heix16M5AOoPXOPd4Q.roa (hash: LMRzKo9NjTluip/QqjWWZG7E9ryz+Y9CDOMAPiGo6ag=)
2: HvZFP08B7xYA2IQmujw7UzbkG0Q.roa (hash: 7DGwHO9AiazjzBsJl92PU2yw56tPjljLpvn/rYKQLdM=)
3: nLls5ZxZVXUw8OqkTGZFA9nEAe0.crl (hash: Y3/3R4+TV0m4Z/V8a1EKvZqqMNvMM0vNYvTfKm+lVwI=)
4: oR-FUhbEvQx9rEQNZ_WugrEWdnk.roa (hash: BD8t2aBzJsutTWI6CA4SIZqGlJUGz2L2fZecOB/8228=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/19/5dd7b1-e337-404d-b764-ddb0b148e46b/1/nLls5ZxZVXUw8OqkTGZFA9nEAe0.crl
rsync://rpki.ripe.net/repository/DEFAULT/19/5dd7b1-e337-404d-b764-ddb0b148e46b/1/nLls5ZxZVXUw8OqkTGZFA9nEAe0.mft
rsync://rpki.ripe.net/repository/DEFAULT/nLls5ZxZVXUw8OqkTGZFA9nEAe0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 11 May 2025 18:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:bb:5a:fa:9d:bd:c7:5e:a4:05:9c:88:e3:09:22:16:a9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9cb96ce59c59557530f0eaa44c664503d9c401ed
Validity
Not Before: May 10 18:00:23 2025 GMT
Not After : May 11 18:00:23 2025 GMT
Subject: CN=f60307d42831f8f0e82a65018f24f3001750ba46
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:c2:b5:b6:53:f3:bf:04:56:fa:8b:cc:1f:06:
e0:4a:4d:af:b4:cd:82:8f:d8:ab:37:23:8f:5f:5b:
56:03:d2:99:63:e6:b9:31:dc:7a:67:1a:d7:8e:d6:
2d:49:7f:e7:0f:3e:56:15:9a:8b:0e:d0:21:0f:0c:
5d:1a:2b:96:f4:88:db:8b:27:80:5e:28:f4:51:e0:
1e:3c:5a:05:ad:66:68:48:34:18:c2:20:c3:8c:88:
c4:03:fd:a3:5a:e7:21:8e:10:ff:a7:ca:1e:93:78:
8c:e8:e6:59:47:87:e6:ed:64:d8:3e:e0:22:bc:1d:
28:c0:68:f1:b3:df:02:23:d4:54:ab:95:63:cc:b7:
10:23:b4:cb:fb:dc:6e:7c:c5:2a:c9:f1:c8:3c:a5:
69:10:ff:38:4c:c0:8b:91:95:55:9e:a7:51:4b:4a:
21:39:d4:0c:30:53:2e:1e:d6:e8:bc:79:44:7e:e0:
53:9c:59:fe:fa:e6:17:71:e2:25:dd:55:f3:39:e7:
ac:81:c2:83:21:bd:b7:d3:f3:a6:8e:b5:e8:cc:10:
f7:45:4e:f8:a6:e1:01:99:76:f6:0a:ce:14:45:b3:
d0:c6:66:69:90:d8:dd:53:98:fd:b1:3b:47:bc:b8:
0a:0e:55:98:2a:bd:d5:47:65:32:36:1e:29:7d:40:
63:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:03:07:D4:28:31:F8:F0:E8:2A:65:01:8F:24:F3:00:17:50:BA:46
X509v3 Authority Key Identifier:
keyid:9C:B9:6C:E5:9C:59:55:75:30:F0:EA:A4:4C:66:45:03:D9:C4:01:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nLls5ZxZVXUw8OqkTGZFA9nEAe0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/5dd7b1-e337-404d-b764-ddb0b148e46b/1/nLls5ZxZVXUw8OqkTGZFA9nEAe0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/19/5dd7b1-e337-404d-b764-ddb0b148e46b/1/nLls5ZxZVXUw8OqkTGZFA9nEAe0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
32:1d:4d:4c:87:39:cf:a7:dc:a3:56:f8:ff:75:23:d5:50:59:
c5:fb:0a:eb:fd:f3:65:0d:4a:d6:19:4f:93:bd:c4:21:b6:5b:
08:7f:af:f3:9c:f0:20:58:bb:1a:f4:34:6e:6b:e1:27:f1:39:
5d:b4:21:65:62:8d:db:dc:0b:b0:c5:cc:9c:72:dd:3e:ec:61:
e0:49:9a:dc:b5:ed:f7:c7:11:a4:01:26:4d:df:09:37:ff:a0:
bc:ef:4c:56:2e:77:21:75:69:34:c6:9c:86:54:80:22:bf:d9:
2c:54:36:f2:5d:60:1e:04:9b:d8:b8:33:54:72:76:0f:96:6c:
34:ee:36:3d:3b:40:d0:de:6f:46:d6:b0:7c:bf:9f:0d:c4:18:
b1:0c:43:c0:18:88:0b:6c:d1:39:99:93:8e:0b:19:c8:c8:a8:
ae:a7:06:3a:80:3e:69:6d:cd:a7:b4:9f:6d:ab:fa:44:5e:4c:
48:6d:7a:af:91:1e:88:3b:c5:13:dd:2a:5a:e7:a7:1b:32:6d:
cf:0e:41:8b:b5:6d:6d:72:c6:59:7d:63:fd:86:0c:6d:09:c8:
82:64:c7:fc:54:17:db:67:45:3a:f6:b0:5b:67:26:ec:d0:b6:
c7:ba:d3:55:ab:12:a9:a9:21:ef:7a:31:ce:c0:b5:7f:35:be:
3c:f4:34:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 04:00:15 2025 by rpki-client