Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/27/dc5c07-eb30-408f-858a-ea469c860dc6/1/nSZknk8seV_-VA-dl_JumcXF4_8.mft
File: nSZknk8seV_-VA-dl_JumcXF4_8.mft (raw, json)
Hash identifier: 2ufC+uJRf6d5HjWOmkIpTtmrOS/3ENqRV5M2+l/fInY=
Subject key identifier: 9D:A1:96:A8:98:7F:6B:69:07:49:B3:70:B6:69:B0:D5:A7:0A:01:56
Authority key identifier: 9D:26:64:9E:4F:2C:79:5F:FE:54:0F:9D:97:F2:6E:99:C5:C5:E3:FF
Certificate issuer: /CN=9d26649e4f2c795ffe540f9d97f26e99c5c5e3ff
Certificate serial: 0196C7289D421819F4EED6435DEB69C39976
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nSZknk8seV_-VA-dl_JumcXF4_8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/27/dc5c07-eb30-408f-858a-ea469c860dc6/1/nSZknk8seV_-VA-dl_JumcXF4_8.mft
Manifest number: 153D
Signing time: Tue 13 May 2025 01:00:49 +0000
Manifest this update: Tue 13 May 2025 01:00:49 +0000
Manifest next update: Wed 14 May 2025 01:00:49 +0000
Files and hashes: 1: KCBbNGS1YVW1hBxpXGDK5vFmb2s.roa (hash: 5Zdj42abBdFlW3cL9DY3OZbKnuKmXjtJAYCIOqBuBo0=)
2: UHBBgUNLNn1iHI9e-EGjjOzBhFw.roa (hash: BSvm991wTIbEUV5S7qd3FSoLfpa8IYB6IeFe483AVIY=)
3: YulnYlbf3_p4_qdtilX3A7GCTS4.roa (hash: 9jhnLDTHr1+aTiwSRhcVHPAQnY8jnY4svd3BxfDOy3k=)
4: nSZknk8seV_-VA-dl_JumcXF4_8.crl (hash: N43FBUB/Ci9iU6zg43GfMPC8RS5BoIL8EDIEzYJ6vHM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/27/dc5c07-eb30-408f-858a-ea469c860dc6/1/nSZknk8seV_-VA-dl_JumcXF4_8.crl
rsync://rpki.ripe.net/repository/DEFAULT/27/dc5c07-eb30-408f-858a-ea469c860dc6/1/nSZknk8seV_-VA-dl_JumcXF4_8.mft
rsync://rpki.ripe.net/repository/DEFAULT/nSZknk8seV_-VA-dl_JumcXF4_8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 13 May 2025 20:47:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:c7:28:9d:42:18:19:f4:ee:d6:43:5d:eb:69:c3:99:76
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9d26649e4f2c795ffe540f9d97f26e99c5c5e3ff
Validity
Not Before: May 13 01:00:49 2025 GMT
Not After : May 14 01:00:49 2025 GMT
Subject: CN=9da196a8987f6b690749b370b669b0d5a70a0156
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:47:5d:61:ee:87:57:c0:40:d0:02:fb:ca:1c:
59:10:17:98:54:fd:ca:a6:31:e3:bb:74:53:b8:4f:
44:5a:1f:54:66:11:17:fa:2d:95:b7:15:81:33:4e:
06:51:9c:20:27:31:9f:ad:a7:5d:37:32:3e:7b:f7:
a0:87:a0:ce:cc:cb:5f:ac:f7:4c:ed:bb:5f:e2:b6:
3e:36:fe:52:3d:ca:e4:81:cf:0c:e4:32:fa:42:50:
9d:06:09:8a:e5:65:57:90:ab:4a:86:8d:11:3f:15:
77:2e:79:d1:49:26:d4:98:e8:a4:6b:69:ad:f8:21:
79:fe:31:97:e1:a1:dd:27:65:81:de:21:f8:c4:8f:
53:5a:ae:35:47:ba:41:f5:09:53:c8:dc:cb:7d:64:
be:9c:ff:d2:30:37:c0:50:a0:45:6f:a7:67:97:f4:
51:c4:fb:36:ef:b6:3e:c2:c5:67:57:aa:42:74:53:
8b:7a:a2:d2:f6:5e:0b:e1:7f:07:e4:a4:09:1d:eb:
7c:8f:06:72:c5:20:bb:8e:d8:bb:8e:a5:a0:b7:3a:
74:74:cf:f0:24:33:58:8e:94:fa:4a:ca:95:99:20:
ad:a5:39:0e:e3:30:4d:b3:e6:2b:15:d4:c7:51:d5:
cf:2f:de:f1:67:85:1e:d0:19:e4:c9:50:af:b7:fe:
a1:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:A1:96:A8:98:7F:6B:69:07:49:B3:70:B6:69:B0:D5:A7:0A:01:56
X509v3 Authority Key Identifier:
keyid:9D:26:64:9E:4F:2C:79:5F:FE:54:0F:9D:97:F2:6E:99:C5:C5:E3:FF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nSZknk8seV_-VA-dl_JumcXF4_8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/dc5c07-eb30-408f-858a-ea469c860dc6/1/nSZknk8seV_-VA-dl_JumcXF4_8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/27/dc5c07-eb30-408f-858a-ea469c860dc6/1/nSZknk8seV_-VA-dl_JumcXF4_8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
91:79:e1:0d:38:7a:c2:b7:11:69:1e:26:4f:b9:b3:b9:5f:7e:
66:ae:b1:e3:7a:85:79:2a:d2:61:ac:7f:cb:e9:fc:c7:65:68:
25:37:07:38:11:6c:62:78:3e:6f:1e:15:bb:1e:09:27:1d:ec:
32:17:ab:46:53:3d:ec:9e:f3:b7:55:ad:ff:86:7a:a1:18:53:
07:69:d5:17:c9:62:7c:44:37:d9:ab:dc:c6:4e:58:5d:01:63:
c7:7f:74:b4:d4:f9:f2:98:c3:32:99:b7:a8:cf:fc:5d:22:0c:
92:03:56:e3:cb:bf:7d:66:db:a0:9b:c7:25:9e:95:65:49:dc:
8e:43:c5:65:c7:f7:96:8f:c1:1d:bd:3a:65:f5:6a:7f:e5:0f:
22:e5:cc:47:f7:cd:b5:83:51:b8:2c:1f:6a:de:a9:e6:84:35:
33:43:1c:98:e9:bd:f4:60:0a:45:5c:91:e7:05:bf:e7:9a:5e:
dc:f9:ed:bf:21:a7:ac:73:2b:80:50:d6:f1:c8:67:e9:a7:86:
7b:62:35:48:76:98:cb:1b:9c:9b:0c:da:0d:17:aa:07:f8:24:
9c:b6:98:a3:52:f6:be:13:dd:80:b1:05:86:65:35:65:a6:b4:
9e:04:8e:ce:1f:71:39:64:96:6e:b4:0b:e6:87:f5:78:2d:db:
e1:48:7c:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 13 05:55:59 2025 by rpki-client