Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3a/16661c-e77b-41c3-80e4-14ee32fc5d06/1/nwM4t9tUQAKUEDl1Fckw60UtdbA.mft
File: nwM4t9tUQAKUEDl1Fckw60UtdbA.mft (raw, json)
Hash identifier: dpoH+y7zeJneaMlVtqy8p8oSn+d1GzOEnEvmiNurbFk=
Subject key identifier: D3:A5:8A:BD:31:23:77:76:C6:0E:35:CD:CC:3E:5B:15:8D:DD:E8:5F
Authority key identifier: 9F:03:38:B7:DB:54:40:02:94:10:39:75:15:C9:30:EB:45:2D:75:B0
Certificate issuer: /CN=9f0338b7db5440029410397515c930eb452d75b0
Certificate serial: 0196C8723CDCADBA9573DA6984A4AB26DB45
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nwM4t9tUQAKUEDl1Fckw60UtdbA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3a/16661c-e77b-41c3-80e4-14ee32fc5d06/1/nwM4t9tUQAKUEDl1Fckw60UtdbA.mft
Manifest number: 1538
Signing time: Tue 13 May 2025 07:00:51 +0000
Manifest this update: Tue 13 May 2025 07:00:51 +0000
Manifest next update: Wed 14 May 2025 07:00:51 +0000
Files and hashes: 1: HhSxQEAct_Hilmn4S8Eq6DvrLvI.roa (hash: crLyXY2X5OyUyjzwP0FotFChrfWXLKr+2gME4D4k2t8=)
2: nwM4t9tUQAKUEDl1Fckw60UtdbA.crl (hash: bN7axrNW+3tRJOTQcRsN+wMlVvJ5URn43mRL154Y/Lo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3a/16661c-e77b-41c3-80e4-14ee32fc5d06/1/nwM4t9tUQAKUEDl1Fckw60UtdbA.crl
rsync://rpki.ripe.net/repository/DEFAULT/3a/16661c-e77b-41c3-80e4-14ee32fc5d06/1/nwM4t9tUQAKUEDl1Fckw60UtdbA.mft
rsync://rpki.ripe.net/repository/DEFAULT/nwM4t9tUQAKUEDl1Fckw60UtdbA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 13 May 2025 23:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:c8:72:3c:dc:ad:ba:95:73:da:69:84:a4:ab:26:db:45
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9f0338b7db5440029410397515c930eb452d75b0
Validity
Not Before: May 13 07:00:51 2025 GMT
Not After : May 14 07:00:51 2025 GMT
Subject: CN=d3a58abd31237776c60e35cdcc3e5b158ddde85f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:e9:d6:69:31:24:2a:50:09:78:f4:cb:8f:84:
7d:21:71:1b:76:48:fc:db:32:1d:a9:30:e8:a6:95:
13:60:ed:a6:45:fe:7a:8e:c6:26:2d:bc:12:c7:de:
b6:36:33:5b:8a:97:a6:78:3c:ff:6b:a6:cf:0d:59:
55:26:9b:7f:d6:f4:eb:ce:76:4f:20:c6:14:cd:0e:
e3:2c:c2:ee:38:57:3d:47:5f:a7:92:28:a9:19:e7:
0e:2a:cc:e5:d2:09:c5:8c:20:84:39:3a:cc:84:2d:
f7:09:34:42:92:d6:4d:bf:9f:2f:7f:a8:aa:97:8e:
2c:cd:f8:32:b9:f7:05:2a:2c:64:b2:d5:4a:9d:fa:
28:ad:1d:3e:8b:ee:1e:2b:02:38:fe:ea:d4:4f:34:
7b:0f:bd:99:03:42:c0:1f:f8:2b:45:ea:57:24:4d:
64:6a:4d:c6:e7:ef:4d:0e:06:41:c3:c4:61:45:43:
f4:ac:c4:1d:d2:bd:51:2c:a3:7e:a4:e1:46:7f:4d:
d9:02:af:81:26:11:f5:cc:a2:58:9d:7a:48:f8:82:
e6:ca:60:af:27:58:cf:cc:c1:e8:5f:90:96:c7:9a:
b4:05:e4:65:15:e2:de:6b:22:cb:14:1c:a1:86:93:
9d:39:9c:57:fa:5f:cc:11:5e:26:ee:da:38:7b:cc:
ae:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:A5:8A:BD:31:23:77:76:C6:0E:35:CD:CC:3E:5B:15:8D:DD:E8:5F
X509v3 Authority Key Identifier:
keyid:9F:03:38:B7:DB:54:40:02:94:10:39:75:15:C9:30:EB:45:2D:75:B0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nwM4t9tUQAKUEDl1Fckw60UtdbA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/16661c-e77b-41c3-80e4-14ee32fc5d06/1/nwM4t9tUQAKUEDl1Fckw60UtdbA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/16661c-e77b-41c3-80e4-14ee32fc5d06/1/nwM4t9tUQAKUEDl1Fckw60UtdbA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
49:5c:52:30:88:f6:3a:0a:39:21:9c:b1:9e:40:9e:89:9c:44:
f3:d9:04:19:b4:f6:af:ff:ef:1c:06:32:b7:e5:13:61:d3:cd:
b1:a3:e9:c8:ef:15:95:7e:96:e6:76:22:a8:49:18:6d:db:69:
5d:14:23:d6:37:60:da:a2:ef:22:b8:89:49:66:ee:62:1a:30:
14:4d:09:a8:51:89:12:d4:a8:31:35:ec:82:0e:a7:8c:d1:aa:
e1:22:20:df:59:c0:94:34:a7:f3:5a:0e:9b:7c:79:45:5b:f9:
e6:4d:9c:0e:23:ff:63:60:0f:b6:53:3e:e5:6f:9b:7c:4a:e3:
27:2a:7a:85:a5:61:c2:42:68:51:79:f9:b9:49:29:54:07:1a:
12:2d:57:08:cb:4c:13:28:4e:9b:8a:eb:bb:63:59:20:43:2a:
a3:2b:67:a2:1c:1e:f7:05:28:55:4c:7e:d9:c8:bf:58:95:c4:
d7:d3:f4:af:9e:ab:2d:75:7b:d7:af:3b:51:f3:62:63:55:f8:
15:67:36:d7:82:95:23:c2:bb:8a:08:02:4c:6b:fd:23:6f:57:
c6:b8:1a:88:7b:ac:86:a9:24:fb:f1:46:1e:e8:4f:70:30:21:
74:06:97:c2:09:32:e6:8c:53:df:18:1c:ce:1e:57:4f:05:97:
63:88:1a:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 13 09:41:49 2025 by rpki-client