Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/ea9c59-9e14-4f25-86bd-7eedf4dd6c13/1/nfJK-_7N9qmcKCv1OzBPPB6PRw8.mft
File: nfJK-_7N9qmcKCv1OzBPPB6PRw8.mft (raw, json)
Hash identifier: s3QKWYyKVv59yEWV+K3PfGtnPllDg2ePGlnlAlyU2Tk=
Subject key identifier: F5:9C:19:70:15:E2:74:78:83:03:53:63:A5:91:F9:2D:AA:21:A1:E3
Authority key identifier: 9D:F2:4A:FB:FE:CD:F6:A9:9C:28:2B:F5:3B:30:4F:3C:1E:8F:47:0F
Certificate issuer: /CN=9df24afbfecdf6a99c282bf53b304f3c1e8f470f
Certificate serial: 0196C382C0F090EDAB3F14CF07CAEEFD9404
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nfJK-_7N9qmcKCv1OzBPPB6PRw8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/ea9c59-9e14-4f25-86bd-7eedf4dd6c13/1/nfJK-_7N9qmcKCv1OzBPPB6PRw8.mft
Manifest number: 07E7
Signing time: Mon 12 May 2025 08:00:48 +0000
Manifest this update: Mon 12 May 2025 08:00:48 +0000
Manifest next update: Tue 13 May 2025 08:00:48 +0000
Files and hashes: 1: D6KBZtdhAp7R2Q1YiqESZQ8OeXA.roa (hash: pLl10ejVKSmOKcwrzyb02NjjAckX++6l+yonzmG4CME=)
2: nfJK-_7N9qmcKCv1OzBPPB6PRw8.crl (hash: sJpFh8Xu6VlF/hoQPFSo3VTC+UOyNW659dleVmDukEs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1c/ea9c59-9e14-4f25-86bd-7eedf4dd6c13/1/nfJK-_7N9qmcKCv1OzBPPB6PRw8.crl
rsync://rpki.ripe.net/repository/DEFAULT/1c/ea9c59-9e14-4f25-86bd-7eedf4dd6c13/1/nfJK-_7N9qmcKCv1OzBPPB6PRw8.mft
rsync://rpki.ripe.net/repository/DEFAULT/nfJK-_7N9qmcKCv1OzBPPB6PRw8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 13 May 2025 08:00:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:c3:82:c0:f0:90:ed:ab:3f:14:cf:07:ca:ee:fd:94:04
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9df24afbfecdf6a99c282bf53b304f3c1e8f470f
Validity
Not Before: May 12 08:00:48 2025 GMT
Not After : May 13 08:00:48 2025 GMT
Subject: CN=f59c197015e2747883035363a591f92daa21a1e3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:ef:19:78:c6:87:44:20:c2:ef:f0:5c:63:d4:
b8:03:4f:ce:28:6a:c3:e2:be:64:fb:7f:d7:07:b3:
c7:45:26:f0:0a:3e:fa:cb:71:27:c7:db:2c:07:f6:
5b:da:49:3a:0b:4b:6e:1c:1f:82:5f:dc:2f:be:f3:
05:3f:38:8e:04:bb:5f:59:03:7a:3c:e6:48:02:99:
cc:9f:e1:1e:31:72:d2:50:82:a1:20:09:f9:b7:a3:
85:ed:e7:23:96:12:86:2f:c4:88:bc:26:fe:8a:2b:
2e:e3:84:eb:4a:a3:58:64:5d:2b:37:25:e8:ab:aa:
76:e1:b7:e5:99:5b:17:69:ec:38:dd:45:58:4a:88:
88:a5:ac:aa:7b:2e:1a:ae:2d:7d:28:a5:9e:63:1c:
cf:d8:30:cc:8f:1d:90:b6:08:e9:f1:90:b9:2a:52:
ab:e0:e9:c0:29:fb:e1:22:5f:d8:eb:42:17:c5:e4:
e4:2e:91:7f:da:cb:07:d0:3f:cc:86:bd:1c:6d:f8:
23:fc:f7:85:ce:8f:46:b7:24:94:7c:6b:2b:66:ab:
b7:68:54:26:95:18:54:e2:6e:6c:6b:ee:74:04:fd:
ce:4c:f9:f0:28:52:78:e7:44:f1:ab:ca:a1:3f:98:
89:76:56:fe:c7:1b:57:ea:cf:62:1e:96:4f:a5:be:
4d:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:9C:19:70:15:E2:74:78:83:03:53:63:A5:91:F9:2D:AA:21:A1:E3
X509v3 Authority Key Identifier:
keyid:9D:F2:4A:FB:FE:CD:F6:A9:9C:28:2B:F5:3B:30:4F:3C:1E:8F:47:0F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nfJK-_7N9qmcKCv1OzBPPB6PRw8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/ea9c59-9e14-4f25-86bd-7eedf4dd6c13/1/nfJK-_7N9qmcKCv1OzBPPB6PRw8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/ea9c59-9e14-4f25-86bd-7eedf4dd6c13/1/nfJK-_7N9qmcKCv1OzBPPB6PRw8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
27:6b:fd:16:d4:ef:7c:28:66:aa:02:74:e4:0f:13:ab:23:17:
4b:c7:87:dc:a2:0d:66:08:b3:b5:a0:68:de:84:08:9f:f2:85:
56:83:fb:a9:62:2b:8a:c9:d4:5c:14:3e:48:55:e8:08:a1:bd:
62:94:21:54:08:5a:94:a9:7f:b5:22:d3:74:3e:20:9a:f9:83:
90:37:30:02:6c:cc:5d:d7:2f:81:67:4f:f5:2e:62:0f:04:5e:
26:ff:be:c1:df:eb:f8:0c:dd:03:bc:6b:56:d3:4b:97:b5:3b:
4a:8b:9d:7b:74:92:c5:d6:8c:bf:87:f3:88:42:82:c7:9f:5c:
21:51:ea:d6:eb:41:1a:0e:14:8f:2c:2f:20:d6:30:59:79:99:
bb:56:9b:23:61:a3:a6:65:bf:f0:1b:8f:de:8b:4c:f3:f1:05:
e9:03:b7:80:c4:08:89:9b:4f:57:41:c5:88:22:92:6b:07:01:
d6:0c:b1:94:16:40:e5:40:78:e3:1e:b7:3a:b4:04:0d:65:25:
c9:dd:a7:68:30:51:51:9c:8b:21:2e:b6:14:7b:16:86:c5:ee:
ba:f5:e3:ce:56:ac:04:47:be:ba:a8:ff:2b:c0:10:25:55:b4:
d6:c1:4c:f0:d6:08:6a:87:53:d6:47:e9:fe:2a:80:97:5a:1c:
6e:b0:f6:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 12 18:02:50 2025 by rpki-client