Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/22/c920ec-07dc-469d-b884-b98bbb1637c0/1/nAqubUXQbffEJ4708hjkLbgHCUw.mft
File: nAqubUXQbffEJ4708hjkLbgHCUw.mft (raw, json)
Hash identifier: I+axbBJcAlfnPrw3oQ+TBfRd4nCi64I1uQ/8a/PPCLo=
Subject key identifier: 8F:6D:3C:4F:8A:56:88:5D:BA:4A:6B:B4:BE:B9:F0:F4:B6:97:8F:98
Authority key identifier: 9C:0A:AE:6D:45:D0:6D:F7:C4:27:8E:F4:F2:18:E4:2D:B8:07:09:4C
Certificate issuer: /CN=9c0aae6d45d06df7c4278ef4f218e42db807094c
Certificate serial: 0196AC55AE3815E2C21F81578A549DAF9592
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nAqubUXQbffEJ4708hjkLbgHCUw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/22/c920ec-07dc-469d-b884-b98bbb1637c0/1/nAqubUXQbffEJ4708hjkLbgHCUw.mft
Manifest number: 152B
Signing time: Wed 07 May 2025 20:00:18 +0000
Manifest this update: Wed 07 May 2025 20:00:18 +0000
Manifest next update: Thu 08 May 2025 20:00:18 +0000
Files and hashes: 1: MJMdhZnjDE7HHdif7jOifgXeBWw.roa (hash: OAM+4dNU25EOni1NCJmygQc3McNUoy2zZaTz7W6MCZg=)
2: nAqubUXQbffEJ4708hjkLbgHCUw.crl (hash: gls23GBRPlrpjdYzXuibvwdF8M2ecv2moBp35BnzrOk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/22/c920ec-07dc-469d-b884-b98bbb1637c0/1/nAqubUXQbffEJ4708hjkLbgHCUw.crl
rsync://rpki.ripe.net/repository/DEFAULT/22/c920ec-07dc-469d-b884-b98bbb1637c0/1/nAqubUXQbffEJ4708hjkLbgHCUw.mft
rsync://rpki.ripe.net/repository/DEFAULT/nAqubUXQbffEJ4708hjkLbgHCUw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 08 May 2025 20:00:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:ac:55:ae:38:15:e2:c2:1f:81:57:8a:54:9d:af:95:92
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9c0aae6d45d06df7c4278ef4f218e42db807094c
Validity
Not Before: May 7 20:00:18 2025 GMT
Not After : May 8 20:00:18 2025 GMT
Subject: CN=8f6d3c4f8a56885dba4a6bb4beb9f0f4b6978f98
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:48:e4:19:5a:25:fc:ae:39:c7:b0:52:cc:ea:
f8:cd:9e:ba:04:d2:4f:7c:70:c0:91:c9:47:a2:aa:
a0:ea:db:96:27:8c:a6:0e:27:e9:85:9d:bf:c0:4f:
0b:6d:f3:1f:f4:d1:d5:bf:71:88:6b:0e:bd:4d:f9:
65:94:50:eb:b1:6d:ba:10:28:0f:30:bc:3d:2f:4c:
ee:5e:19:ce:1e:2a:1f:a7:ab:2d:a1:91:90:34:86:
7e:8d:db:1d:2b:f1:87:42:83:c6:7d:3e:62:87:87:
f3:b3:c4:39:43:3b:fd:d5:8a:30:f8:46:0b:02:5b:
1d:db:f6:7d:d3:a5:d6:e5:ea:ba:d0:0e:5c:fb:73:
3e:a2:e2:60:a4:eb:25:35:13:94:c7:a0:c1:3e:65:
d6:c4:a7:61:e8:97:69:d6:a8:6f:09:f2:c7:55:da:
fd:d2:f8:28:e8:8e:0c:4c:8e:62:07:03:71:54:9a:
8d:47:96:1f:07:8b:3e:cc:84:3b:e8:d5:19:e4:12:
eb:fd:e3:07:22:f3:29:07:f9:c1:69:04:45:e6:03:
b7:2d:e4:1f:1b:4e:8c:31:5c:97:b7:6b:ea:1d:d6:
40:f2:13:5a:ea:d8:4f:bd:d4:39:b1:2b:80:c8:61:
e8:31:85:e4:f2:5d:74:38:39:fc:c2:b4:b9:99:75:
9f:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:6D:3C:4F:8A:56:88:5D:BA:4A:6B:B4:BE:B9:F0:F4:B6:97:8F:98
X509v3 Authority Key Identifier:
keyid:9C:0A:AE:6D:45:D0:6D:F7:C4:27:8E:F4:F2:18:E4:2D:B8:07:09:4C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nAqubUXQbffEJ4708hjkLbgHCUw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/c920ec-07dc-469d-b884-b98bbb1637c0/1/nAqubUXQbffEJ4708hjkLbgHCUw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/22/c920ec-07dc-469d-b884-b98bbb1637c0/1/nAqubUXQbffEJ4708hjkLbgHCUw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
12:83:6d:22:ad:99:e1:41:0e:36:c5:db:d7:8c:ab:65:04:ff:
87:27:37:31:06:74:87:b9:70:4e:3a:62:69:7d:0f:27:91:45:
ee:8b:2e:35:6b:b3:c1:a7:87:fb:24:78:17:6f:a8:cc:2e:47:
a6:47:a2:42:9c:a6:9d:9f:fc:21:81:d6:a2:46:2e:1f:33:ab:
6c:fb:6a:00:bf:0e:35:cf:de:0a:d4:0c:65:1d:ae:91:42:4c:
09:fa:7a:30:cd:06:c9:6e:95:b4:f7:98:84:94:30:eb:fd:ce:
40:8b:e6:5a:c9:5a:f0:c6:6d:37:b3:4d:9f:6a:d5:c7:db:e4:
9c:dd:08:58:db:92:ea:5b:8d:a1:26:50:2e:a8:a9:19:72:99:
d8:73:eb:da:d5:e6:cc:b2:88:a3:7b:bf:8d:8e:65:cb:38:15:
60:08:7f:10:6b:25:69:ee:9b:6e:d7:97:93:f8:69:b9:11:27:
53:d8:b9:cb:e6:b3:d5:b5:e4:d2:b5:e9:c6:d1:a8:64:ce:7a:
b6:6d:c9:0a:e4:a8:5e:86:7d:20:65:3b:a8:5f:9a:b7:39:ff:
9f:b9:ab:6d:9c:61:20:e8:2a:0c:b0:ff:63:75:25:5d:2d:17:
a5:df:bc:b2:13:0a:b4:96:fb:0d:05:aa:30:c7:10:5e:84:77:
b6:46:eb:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 8 04:44:11 2025 by rpki-client