Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/39/962840-5169-4ff3-89f9-480734e38da8/1/nj8Vea4XZmLWY6ODTA_vgkzuAzw.mft
File: nj8Vea4XZmLWY6ODTA_vgkzuAzw.mft (raw, json)
Hash identifier: Kuqi+HdJEpyGKTF+QjqlhPUupRgHuEI0HJEXZHv65ec=
Subject key identifier: 0D:2A:D6:8E:03:8C:20:C9:6E:89:3A:A4:63:78:77:64:D3:B8:03:E0
Authority key identifier: 9E:3F:15:79:AE:17:66:62:D6:63:A3:83:4C:0F:EF:82:4C:EE:03:3C
Certificate issuer: /CN=9e3f1579ae176662d663a3834c0fef824cee033c
Certificate serial: 0196B8C7E7882F420423083FB1EB2654144D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nj8Vea4XZmLWY6ODTA_vgkzuAzw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/39/962840-5169-4ff3-89f9-480734e38da8/1/nj8Vea4XZmLWY6ODTA_vgkzuAzw.mft
Manifest number: 0260
Signing time: Sat 10 May 2025 06:00:30 +0000
Manifest this update: Sat 10 May 2025 06:00:30 +0000
Manifest next update: Sun 11 May 2025 06:00:30 +0000
Files and hashes: 1: nj8Vea4XZmLWY6ODTA_vgkzuAzw.crl (hash: kWhJvyZduiUF+gmTaQ0f+9eCIYRI6GmLBXTq6Y0DgF4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/39/962840-5169-4ff3-89f9-480734e38da8/1/nj8Vea4XZmLWY6ODTA_vgkzuAzw.crl
rsync://rpki.ripe.net/repository/DEFAULT/39/962840-5169-4ff3-89f9-480734e38da8/1/nj8Vea4XZmLWY6ODTA_vgkzuAzw.mft
rsync://rpki.ripe.net/repository/DEFAULT/nj8Vea4XZmLWY6ODTA_vgkzuAzw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 11 May 2025 04:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:b8:c7:e7:88:2f:42:04:23:08:3f:b1:eb:26:54:14:4d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9e3f1579ae176662d663a3834c0fef824cee033c
Validity
Not Before: May 10 06:00:30 2025 GMT
Not After : May 11 06:00:30 2025 GMT
Subject: CN=0d2ad68e038c20c96e893aa463787764d3b803e0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:0c:83:4e:29:9f:6a:90:1b:9d:f0:e0:3b:cb:
97:e5:4e:68:8d:06:3d:66:b0:e6:c1:f0:09:69:ea:
0d:be:43:f1:f1:f3:fe:b3:dd:3d:86:20:3b:f8:e7:
1c:85:c6:f8:7d:a6:9b:09:81:84:ff:09:a3:c0:f5:
a1:ce:ca:eb:be:ac:40:2d:d1:0e:24:c6:5f:7a:46:
75:a6:fb:7c:ae:d8:6e:4b:de:59:8d:c5:f3:cc:2f:
d9:5a:2b:04:35:00:db:20:2f:b3:ce:6c:88:a4:8c:
25:86:a3:c0:00:1f:c5:87:25:aa:bc:6a:f6:cd:9c:
3b:8c:1b:85:1c:6d:5e:4a:6f:98:f4:ec:dd:24:1a:
33:db:61:3a:1b:77:bb:5a:71:54:9e:ef:4f:68:30:
39:ad:fa:41:30:1e:93:85:c9:c0:aa:53:6c:98:0d:
1c:16:25:94:14:b4:5e:59:12:52:91:63:44:eb:6c:
3e:86:dc:a5:f5:5e:d5:bc:39:30:6d:99:a6:60:c1:
51:1e:5b:73:1f:75:b0:de:d5:f2:8a:46:59:70:0f:
e5:9e:98:d6:60:94:bc:1f:af:a6:ca:82:2c:6d:df:
47:a7:e6:3d:f5:bd:a7:e6:57:54:80:4f:8a:77:de:
ee:3a:14:b1:ae:f6:e5:f3:76:41:cf:fc:f8:31:51:
68:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:2A:D6:8E:03:8C:20:C9:6E:89:3A:A4:63:78:77:64:D3:B8:03:E0
X509v3 Authority Key Identifier:
keyid:9E:3F:15:79:AE:17:66:62:D6:63:A3:83:4C:0F:EF:82:4C:EE:03:3C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nj8Vea4XZmLWY6ODTA_vgkzuAzw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/39/962840-5169-4ff3-89f9-480734e38da8/1/nj8Vea4XZmLWY6ODTA_vgkzuAzw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/39/962840-5169-4ff3-89f9-480734e38da8/1/nj8Vea4XZmLWY6ODTA_vgkzuAzw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6f:d2:6b:0d:23:0e:2f:ae:23:83:d1:c7:3f:7c:11:eb:3c:ad:
4d:1a:9d:02:96:46:d2:0a:b3:09:46:e5:60:b1:2f:e4:b0:fe:
37:0f:38:00:0a:9d:bf:04:3e:c8:97:1d:0e:4e:35:fe:4a:c4:
3d:d6:d5:c0:51:9e:6f:e0:0b:61:6d:89:57:d9:89:66:68:49:
9c:0c:fe:fe:39:2f:a7:6d:d3:12:91:10:d9:f6:f2:79:34:aa:
39:3c:b4:ec:ab:20:bf:b1:58:13:28:cc:16:bc:27:fd:e4:d1:
e9:19:9f:98:d5:1c:64:81:b5:7c:e9:81:58:59:74:a5:80:71:
02:d2:ca:89:2c:9b:e7:48:db:b6:1e:b0:cd:da:ed:c9:a1:6c:
03:63:6c:4f:64:2b:1b:1e:92:ef:0c:18:e8:c2:a4:9e:b6:bf:
18:ba:43:5a:ec:19:e5:9a:c1:45:8e:23:ea:d7:be:51:29:fa:
e7:2b:c4:b9:76:99:fd:96:87:98:04:30:36:04:7d:80:eb:31:
30:d8:db:b2:77:c4:4c:6f:8f:ed:a2:75:f0:f2:18:e7:e3:63:
6e:cd:5b:9d:55:4a:69:42:d8:24:14:f2:bc:cb:44:6a:56:bc:
e9:0c:93:55:69:bf:4f:ab:60:14:19:25:19:c4:ed:9e:c5:4b:
be:ed:f1:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 10:27:57 2025 by rpki-client