Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/8f11b3-89c5-4b11-9c09-3a07f9224e21/1/nphC_lRy5id-eSB2x9OHcALi4lE.mft
File: nphC_lRy5id-eSB2x9OHcALi4lE.mft (raw, json)
Hash identifier: AkYmPqJIWvKoHYw6OkRNo3tF0CAyu3F1vlpRdy8b/bE=
Subject key identifier: 57:13:A2:75:E1:38:A1:B8:5F:9C:C6:CF:6C:49:7C:C4:21:A3:D6:5A
Authority key identifier: 9E:98:42:FE:54:72:E6:27:7E:79:20:76:C7:D3:87:70:02:E2:E2:51
Certificate issuer: /CN=9e9842fe5472e6277e792076c7d3877002e2e251
Certificate serial: 0196A12D6C15181B51FBFED122C307C2882E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nphC_lRy5id-eSB2x9OHcALi4lE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/8f11b3-89c5-4b11-9c09-3a07f9224e21/1/nphC_lRy5id-eSB2x9OHcALi4lE.mft
Manifest number: 24
Signing time: Mon 05 May 2025 16:00:30 +0000
Manifest this update: Mon 05 May 2025 16:00:30 +0000
Manifest next update: Tue 06 May 2025 16:00:30 +0000
Files and hashes: 1: nphC_lRy5id-eSB2x9OHcALi4lE.crl (hash: bFqcBgr3ufjh6SvhxRJlYjNHjA66C+6SuhKlNOAN8P4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/29/8f11b3-89c5-4b11-9c09-3a07f9224e21/1/nphC_lRy5id-eSB2x9OHcALi4lE.crl
rsync://rpki.ripe.net/repository/DEFAULT/29/8f11b3-89c5-4b11-9c09-3a07f9224e21/1/nphC_lRy5id-eSB2x9OHcALi4lE.mft
rsync://rpki.ripe.net/repository/DEFAULT/nphC_lRy5id-eSB2x9OHcALi4lE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 06 May 2025 16:00:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:a1:2d:6c:15:18:1b:51:fb:fe:d1:22:c3:07:c2:88:2e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9e9842fe5472e6277e792076c7d3877002e2e251
Validity
Not Before: May 5 16:00:30 2025 GMT
Not After : May 6 16:00:30 2025 GMT
Subject: CN=5713a275e138a1b85f9cc6cf6c497cc421a3d65a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:cf:8a:b8:b1:02:cd:a3:26:69:ef:3b:36:fb:
e7:dd:3c:31:63:ed:7a:c3:ac:d9:a7:8c:39:6a:50:
52:47:bb:95:10:eb:54:fc:3e:d7:b2:c7:79:ec:3b:
00:bf:00:af:f4:3b:89:0f:6c:60:0c:34:8c:95:a8:
0a:6c:6d:15:b4:de:93:28:ea:15:a7:79:72:65:60:
84:c2:de:44:a8:72:7b:2c:95:27:f7:c5:11:c8:c1:
7e:3a:eb:10:3d:b2:b1:5b:0b:f4:a0:db:82:cf:4b:
78:91:c5:12:a1:55:54:9d:ca:19:e6:e2:a6:16:54:
20:c2:2b:5b:02:aa:92:89:50:2c:f0:ac:fb:02:49:
3d:3d:37:ab:b1:89:0c:23:53:34:65:15:3e:c8:ec:
81:0b:0d:4a:86:b0:1c:af:42:a4:f8:a0:74:fa:44:
8f:86:29:b6:ec:85:2b:b3:d6:dc:50:ce:de:13:2c:
cb:5d:c2:45:38:1b:43:78:74:e5:8e:c4:0a:5f:19:
2c:c7:98:e9:16:a5:67:94:25:d3:bd:a8:d7:f6:85:
44:db:f9:a5:7c:e2:91:19:db:ba:bc:9f:9c:68:42:
cf:f0:2c:cb:ad:18:3b:01:bf:db:24:62:07:1d:f1:
39:2b:8d:2d:11:d4:d7:07:dd:9f:b1:35:73:fa:90:
44:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:13:A2:75:E1:38:A1:B8:5F:9C:C6:CF:6C:49:7C:C4:21:A3:D6:5A
X509v3 Authority Key Identifier:
keyid:9E:98:42:FE:54:72:E6:27:7E:79:20:76:C7:D3:87:70:02:E2:E2:51
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nphC_lRy5id-eSB2x9OHcALi4lE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/8f11b3-89c5-4b11-9c09-3a07f9224e21/1/nphC_lRy5id-eSB2x9OHcALi4lE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/29/8f11b3-89c5-4b11-9c09-3a07f9224e21/1/nphC_lRy5id-eSB2x9OHcALi4lE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
52:c2:dd:1a:94:32:62:84:82:a0:92:33:ea:41:50:6b:69:39:
ce:da:f7:0b:67:69:c3:28:9d:e9:96:54:e8:63:96:16:f4:01:
12:f7:58:df:05:4c:02:1f:f5:61:24:62:d3:a1:1b:1b:a7:ad:
99:2f:e5:07:94:5f:36:13:82:f3:15:ea:04:b2:3a:a2:96:89:
53:a6:ea:59:b8:7f:86:5e:79:c8:8d:fe:89:8c:c4:f8:eb:c3:
d2:9d:79:c0:c8:86:05:03:28:26:b4:9f:07:ed:a4:d7:fe:e5:
3a:15:6b:36:47:37:9a:32:72:67:b4:13:41:4c:23:1f:b2:84:
2e:6c:31:9c:68:a8:2f:9e:bc:6c:69:70:36:39:75:a5:75:6c:
d5:cb:75:25:3b:52:55:69:81:eb:9f:e1:11:04:af:cf:97:8c:
df:85:c2:eb:87:dd:12:f1:46:ab:a5:d0:e2:24:23:10:cb:13:
b7:a9:2f:2b:ca:83:b5:68:c1:82:ef:e3:79:07:49:27:a5:70:
3b:a1:20:ca:47:7f:de:bd:91:40:56:01:fb:a6:4b:2d:06:91:
f9:af:6a:db:47:a4:9f:d8:dc:40:8e:93:01:a0:4a:7a:4a:db:
74:09:6e:77:91:02:e9:18:56:3f:58:4f:8b:23:0f:bc:bd:3e:
8e:05:29:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 5 21:20:38 2025 by rpki-client