Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/54a58b-7a32-46bc-85c0-30b764eb4900/1/n92vITJX0XbfUKpud2SKDMcqX6E.mft
File: n92vITJX0XbfUKpud2SKDMcqX6E.mft (raw, json)
Hash identifier: 1Vgx3oFUzKE4mZdq+k5wTh1ispW9najMPQYnkHdiQ1M=
Subject key identifier: 5D:C8:3E:17:6F:5F:8C:DA:84:93:F2:2D:CF:CB:F9:EA:D0:A4:E2:EC
Authority key identifier: 9F:DD:AF:21:32:57:D1:76:DF:50:AA:6E:77:64:8A:0C:C7:2A:5F:A1
Certificate issuer: /CN=9fddaf213257d176df50aa6e77648a0cc72a5fa1
Certificate serial: 0196D0994FAB57DE0B7C9F33D4F5A36D5E75
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/n92vITJX0XbfUKpud2SKDMcqX6E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/54a58b-7a32-46bc-85c0-30b764eb4900/1/n92vITJX0XbfUKpud2SKDMcqX6E.mft
Manifest number: 1541
Signing time: Wed 14 May 2025 21:00:30 +0000
Manifest this update: Wed 14 May 2025 21:00:30 +0000
Manifest next update: Thu 15 May 2025 21:00:30 +0000
Files and hashes: 1: 6WWGMBEJeVUhw0je11LNLXob3Fk.roa (hash: UR2dxpbdtKcSXZI0WPnuoltcK0Rk3PFpyvHQx4QFc88=)
2: WoPeWJaFNpjFYUzEs1-L7Kn02Eg.roa (hash: 6m5mRBxhAtLezaGJS01k05wi1I80hDZQZcqXylk3PEs=)
3: n92vITJX0XbfUKpud2SKDMcqX6E.crl (hash: pPalowd6oNj4CvVYN3DB7XqjH1EOXBgXaBtUfmwUOD8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/36/54a58b-7a32-46bc-85c0-30b764eb4900/1/n92vITJX0XbfUKpud2SKDMcqX6E.crl
rsync://rpki.ripe.net/repository/DEFAULT/36/54a58b-7a32-46bc-85c0-30b764eb4900/1/n92vITJX0XbfUKpud2SKDMcqX6E.mft
rsync://rpki.ripe.net/repository/DEFAULT/n92vITJX0XbfUKpud2SKDMcqX6E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 15 May 2025 14:01:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:d0:99:4f:ab:57:de:0b:7c:9f:33:d4:f5:a3:6d:5e:75
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9fddaf213257d176df50aa6e77648a0cc72a5fa1
Validity
Not Before: May 14 21:00:30 2025 GMT
Not After : May 15 21:00:30 2025 GMT
Subject: CN=5dc83e176f5f8cda8493f22dcfcbf9ead0a4e2ec
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:a0:13:f8:64:b2:36:f6:ab:f7:13:84:fc:3d:
39:d1:a5:4e:1c:20:6a:dd:a4:4b:80:da:c6:a0:b4:
4c:71:d2:30:fe:04:bc:29:0a:95:f0:a8:80:bd:ec:
f6:a0:d6:51:38:28:35:f8:37:57:c3:d7:b6:42:9e:
d6:cc:3f:50:05:b2:6b:89:24:11:8c:a0:28:64:60:
ce:57:f7:61:0e:4a:ae:da:24:ab:5d:be:78:fc:f3:
dd:97:b1:bf:0c:3b:da:86:b1:40:b8:2d:f4:0c:85:
09:b8:f5:a8:d0:6a:3c:b3:0f:02:91:b6:e5:14:57:
53:9f:f6:a2:90:79:b3:87:7a:cf:36:09:39:35:16:
ad:57:62:a5:9b:84:38:ed:1c:a2:46:e0:c5:04:a1:
09:2e:67:3a:fd:32:b6:a8:ad:63:3b:93:69:56:34:
f5:d2:24:fa:e9:60:b0:8c:e6:5d:db:f2:ab:29:87:
74:df:dc:ca:ef:0e:47:a7:09:d1:06:73:08:15:eb:
89:e3:d8:1a:dd:79:fd:48:99:eb:bd:29:5e:cb:9a:
4e:c4:37:c6:e5:3f:ff:4c:b6:f8:32:23:b0:db:3e:
41:9f:e6:89:08:d8:99:64:4b:b2:41:a9:45:b3:8f:
e2:33:d4:fd:82:a3:0b:0b:f2:10:f4:04:ba:08:5e:
18:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:C8:3E:17:6F:5F:8C:DA:84:93:F2:2D:CF:CB:F9:EA:D0:A4:E2:EC
X509v3 Authority Key Identifier:
keyid:9F:DD:AF:21:32:57:D1:76:DF:50:AA:6E:77:64:8A:0C:C7:2A:5F:A1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/n92vITJX0XbfUKpud2SKDMcqX6E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/54a58b-7a32-46bc-85c0-30b764eb4900/1/n92vITJX0XbfUKpud2SKDMcqX6E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/54a58b-7a32-46bc-85c0-30b764eb4900/1/n92vITJX0XbfUKpud2SKDMcqX6E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0b:3b:4e:f2:17:1d:1d:e8:5b:b8:60:64:89:a7:87:4f:b8:b4:
ba:bc:28:0f:44:0c:3e:5c:3c:e3:2d:32:35:c2:93:36:39:e5:
ed:25:fc:9b:43:3d:88:73:7a:9f:b2:d1:5b:c2:6c:fb:50:d2:
bc:d2:36:f8:11:57:4b:e2:c1:1d:4d:38:92:16:4d:93:e9:7d:
b8:da:c3:a3:bf:f2:fb:11:b5:01:bd:77:c5:07:23:41:5a:44:
54:cd:33:73:cb:84:e3:87:d9:0b:31:d8:bd:90:0e:35:7b:b6:
e3:60:89:1d:96:39:05:02:df:9a:0b:32:69:a1:f0:9d:a6:1f:
02:08:ec:3c:64:dd:6d:d2:48:c7:fe:8d:b2:cd:e0:47:6d:c6:
88:c2:81:af:12:b2:9d:e1:df:f9:52:80:c2:23:21:ce:64:ab:
2a:ef:54:73:49:19:d3:81:95:d7:62:0b:7f:cf:c7:af:62:d5:
1a:15:b1:0e:c7:c0:1a:de:5b:1d:17:57:ec:f3:f8:64:56:df:
df:bb:c8:a7:14:ac:62:6d:49:d2:ae:89:b4:e0:fd:39:d4:82:
b8:4a:1c:da:7f:db:0b:8a:36:37:52:46:d8:37:3e:1a:3c:a4:
e5:8c:51:2d:bb:15:f0:d3:5e:3d:d6:f4:f1:47:22:b8:1a:14:
5e:7f:62:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 14 23:19:24 2025 by rpki-client