Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1a/ffdb69-680a-465c-a489-66c1442480de/1/nj4AxtKy-Y1RSC6UO5eT1DvzvIY.mft
File: nj4AxtKy-Y1RSC6UO5eT1DvzvIY.mft (raw, json)
Hash identifier: 5/KN231+yMbhLfI6EZ1RdCwhptLdAnkz7FiHxhkv1aw=
Subject key identifier: B4:3C:92:53:DB:4F:D9:44:F4:FE:6B:3D:4D:A3:FF:30:25:21:93:02
Authority key identifier: 9E:3E:00:C6:D2:B2:F9:8D:51:48:2E:94:3B:97:93:D4:3B:F3:BC:86
Certificate issuer: /CN=9e3e00c6d2b2f98d51482e943b9793d43bf3bc86
Certificate serial: 0196DDE70591CE2D12345866F301E03372B7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nj4AxtKy-Y1RSC6UO5eT1DvzvIY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1a/ffdb69-680a-465c-a489-66c1442480de/1/nj4AxtKy-Y1RSC6UO5eT1DvzvIY.mft
Manifest number: 0E43
Signing time: Sat 17 May 2025 11:00:27 +0000
Manifest this update: Sat 17 May 2025 11:00:27 +0000
Manifest next update: Sun 18 May 2025 11:00:27 +0000
Files and hashes: 1: Symg0jAPVS-ti1ruCDzymyj_CR0.roa (hash: GUIXVLB8gdm1fu+e7gBbFfA+4MoEzWz7SkljoSB1b/4=)
2: nj4AxtKy-Y1RSC6UO5eT1DvzvIY.crl (hash: bU1JoDIadgZRKEH4AA0imz9vh9ORlnuX0s1Y2umuasw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1a/ffdb69-680a-465c-a489-66c1442480de/1/nj4AxtKy-Y1RSC6UO5eT1DvzvIY.crl
rsync://rpki.ripe.net/repository/DEFAULT/1a/ffdb69-680a-465c-a489-66c1442480de/1/nj4AxtKy-Y1RSC6UO5eT1DvzvIY.mft
rsync://rpki.ripe.net/repository/DEFAULT/nj4AxtKy-Y1RSC6UO5eT1DvzvIY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 18 May 2025 11:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:dd:e7:05:91:ce:2d:12:34:58:66:f3:01:e0:33:72:b7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9e3e00c6d2b2f98d51482e943b9793d43bf3bc86
Validity
Not Before: May 17 11:00:27 2025 GMT
Not After : May 18 11:00:27 2025 GMT
Subject: CN=b43c9253db4fd944f4fe6b3d4da3ff3025219302
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:6d:ef:05:b1:aa:5c:31:de:6f:b2:49:ca:1d:
3d:e6:75:20:52:2e:b5:15:b4:15:71:27:58:4b:77:
d1:4f:1c:7a:8e:d9:62:b4:78:25:12:3e:8e:7e:71:
a2:a5:78:00:2f:44:8f:0a:00:3c:17:d0:91:76:4e:
36:d5:1d:34:95:ee:b2:83:28:e9:2f:7b:4a:dc:bd:
89:ff:16:47:43:1c:76:15:63:4b:0f:e1:c2:29:17:
11:21:39:95:80:45:cb:09:45:45:d3:c8:55:dc:da:
3a:db:94:d2:ed:e1:f5:80:61:35:af:35:18:dd:a0:
16:a0:66:ef:6d:a3:0f:6d:2c:7a:03:ee:99:61:53:
76:9b:32:66:5b:f9:4d:58:f2:00:40:df:c3:95:ce:
3d:aa:a0:d4:2f:52:b1:5c:29:7e:60:24:44:d4:0b:
f0:f2:83:36:59:8f:26:00:25:8b:fe:67:0f:29:5e:
21:7c:93:e4:88:24:83:ae:15:d5:06:18:3f:4c:a3:
c7:0c:4c:3e:13:64:43:25:dd:67:78:d6:41:c2:e8:
70:2e:25:c6:82:df:8d:dd:92:ad:3c:69:02:49:66:
23:ac:fd:2b:00:aa:b1:cf:34:74:73:e1:ae:da:57:
a0:cd:db:06:f8:1e:7e:c8:98:e6:a1:c5:9b:0a:7d:
b9:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:3C:92:53:DB:4F:D9:44:F4:FE:6B:3D:4D:A3:FF:30:25:21:93:02
X509v3 Authority Key Identifier:
keyid:9E:3E:00:C6:D2:B2:F9:8D:51:48:2E:94:3B:97:93:D4:3B:F3:BC:86
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nj4AxtKy-Y1RSC6UO5eT1DvzvIY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/ffdb69-680a-465c-a489-66c1442480de/1/nj4AxtKy-Y1RSC6UO5eT1DvzvIY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/ffdb69-680a-465c-a489-66c1442480de/1/nj4AxtKy-Y1RSC6UO5eT1DvzvIY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
45:6b:49:5c:2f:19:e5:3c:0a:bd:80:a4:b2:2a:06:8c:0d:59:
65:a5:28:1c:4c:de:c8:bf:24:cb:da:59:ef:67:ed:b9:3d:fb:
0e:65:1f:54:e7:30:7e:19:70:b1:8d:dc:51:86:7b:07:dd:c6:
97:34:61:23:98:34:60:af:ab:a3:32:c2:37:57:6b:b2:25:51:
39:b5:25:c0:c7:46:0e:86:57:4b:84:56:8f:47:90:f9:7e:f6:
4e:a6:db:6f:91:a3:72:94:25:de:6e:bf:0b:57:51:4b:3f:fa:
24:f2:3c:b5:5f:3f:52:a4:92:b3:cc:74:48:d3:9b:fa:07:1c:
49:78:b3:7c:fb:cb:b8:5c:d7:5a:48:d1:1f:b0:a4:9a:a2:cf:
39:71:6e:c5:88:56:39:b3:6f:be:3e:cd:01:6c:15:ad:3e:ee:
b6:3d:ca:69:9f:1b:8c:c8:af:1b:b2:18:66:f7:bc:b5:c4:a4:
bd:52:97:48:c9:da:1c:5c:7f:f7:29:07:cf:00:6b:9d:28:d8:
39:4f:c1:d6:7f:08:7f:a0:98:7d:b0:1f:e5:35:ae:9d:15:6c:
72:79:a7:3b:3c:8a:50:62:db:39:32:fa:a1:cf:ab:14:86:f4:
de:fd:50:96:2f:6c:b1:05:b8:8f:a2:23:d2:8a:cf:a9:13:68:
24:89:61:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 17 16:49:25 2025 by rpki-client