Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/a17b93-cc89-4d08-a5b2-636d6fc0048f/1/n4o8mp7fZEc1qU6wnwHKs5hV0ng.mft
File: n4o8mp7fZEc1qU6wnwHKs5hV0ng.mft (raw, json)
Hash identifier: hwZ9blJtBLqMobEuVFS0YxIRox9nrSSkxNxZFyUNeTk=
Subject key identifier: CC:EA:B6:7E:8A:EE:22:FC:3E:9F:7C:F5:59:F1:1B:58:1E:44:BB:39
Authority key identifier: 9F:8A:3C:9A:9E:DF:64:47:35:A9:4E:B0:9F:01:CA:B3:98:55:D2:78
Certificate issuer: /CN=9f8a3c9a9edf644735a94eb09f01cab39855d278
Certificate serial: 0196AEB22726DC80DFEC95EDB641C6C77CFC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/n4o8mp7fZEc1qU6wnwHKs5hV0ng.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/a17b93-cc89-4d08-a5b2-636d6fc0048f/1/n4o8mp7fZEc1qU6wnwHKs5hV0ng.mft
Manifest number: 0999
Signing time: Thu 08 May 2025 07:00:33 +0000
Manifest this update: Thu 08 May 2025 07:00:33 +0000
Manifest next update: Fri 09 May 2025 07:00:33 +0000
Files and hashes: 1: 9nrkqBfEEEVb2ilynt5HJRxEGWw.roa (hash: 9p3+VvNvFq4rrBtC/Z9UeyBNK7rF8lIsM8oxPtubKQs=)
2: n4o8mp7fZEc1qU6wnwHKs5hV0ng.crl (hash: TXTD5wn+wd4JwR1v/KbHzmpxjBozHuru8nWrI9df7mE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/45/a17b93-cc89-4d08-a5b2-636d6fc0048f/1/n4o8mp7fZEc1qU6wnwHKs5hV0ng.crl
rsync://rpki.ripe.net/repository/DEFAULT/45/a17b93-cc89-4d08-a5b2-636d6fc0048f/1/n4o8mp7fZEc1qU6wnwHKs5hV0ng.mft
rsync://rpki.ripe.net/repository/DEFAULT/n4o8mp7fZEc1qU6wnwHKs5hV0ng.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 09 May 2025 07:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:ae:b2:27:26:dc:80:df:ec:95:ed:b6:41:c6:c7:7c:fc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9f8a3c9a9edf644735a94eb09f01cab39855d278
Validity
Not Before: May 8 07:00:33 2025 GMT
Not After : May 9 07:00:33 2025 GMT
Subject: CN=cceab67e8aee22fc3e9f7cf559f11b581e44bb39
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:95:c7:7b:4c:bb:3f:91:b8:a8:2e:8f:af:f5:
51:89:9e:ac:8e:96:05:66:30:4a:0c:ec:db:28:d4:
05:2b:2c:3f:97:ce:e9:e0:84:bc:46:c3:ab:36:d8:
0c:20:77:1d:5e:00:f2:6c:02:70:22:8d:7d:c0:63:
9a:fc:18:f6:c1:2f:2f:92:0b:0a:ef:3c:37:fa:80:
78:db:a6:33:04:87:19:f5:b6:e6:09:c8:19:1f:86:
d0:6b:f1:78:cd:40:e0:be:71:0b:df:78:1d:d4:bc:
04:b0:96:80:19:f6:ab:c8:a2:b3:21:05:7c:4d:6d:
9f:ba:aa:2d:8d:2f:bc:df:b8:52:a0:c7:21:ff:5f:
34:e7:ec:44:be:c0:f6:2f:7f:1c:62:3f:59:d8:f9:
2c:43:7d:ef:cb:a5:1d:3a:7b:22:00:20:8b:bb:03:
31:61:ea:c2:5c:56:33:3b:0f:fc:a8:e9:d2:d3:d0:
e5:77:c9:ce:e4:fd:6c:bf:fe:93:96:37:59:9c:64:
ee:92:0f:c1:51:ef:4e:61:a1:1a:26:aa:9f:ef:a0:
ef:74:aa:63:18:5f:16:4f:18:a2:b0:f4:37:0a:b8:
81:d0:ae:fb:3e:7f:f4:28:78:84:12:2f:81:4d:97:
de:b9:14:cd:75:f7:0d:20:45:ae:71:97:30:fe:5e:
90:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:EA:B6:7E:8A:EE:22:FC:3E:9F:7C:F5:59:F1:1B:58:1E:44:BB:39
X509v3 Authority Key Identifier:
keyid:9F:8A:3C:9A:9E:DF:64:47:35:A9:4E:B0:9F:01:CA:B3:98:55:D2:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/n4o8mp7fZEc1qU6wnwHKs5hV0ng.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/a17b93-cc89-4d08-a5b2-636d6fc0048f/1/n4o8mp7fZEc1qU6wnwHKs5hV0ng.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/45/a17b93-cc89-4d08-a5b2-636d6fc0048f/1/n4o8mp7fZEc1qU6wnwHKs5hV0ng.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1a:18:4d:42:67:bf:ed:49:b2:1d:6b:65:53:57:13:d6:95:e7:
09:63:8b:77:c9:2a:75:27:a8:7b:79:6a:bd:1d:16:bc:5c:ff:
26:4d:aa:8f:f1:d8:14:7f:ad:1a:dc:32:f9:c6:2d:19:cf:96:
dc:9a:21:4a:ac:f1:43:13:56:b3:a4:37:43:ed:10:2b:4a:bf:
2f:47:a2:8c:db:cd:09:d2:cf:c6:d9:d8:50:f6:84:cf:90:99:
3d:39:91:da:88:85:6c:fe:d6:45:6c:be:3f:2b:cb:71:4c:7d:
95:24:46:68:f3:f1:5d:5f:71:ba:d0:5a:37:81:ce:1a:5d:ee:
00:99:86:d2:68:83:52:09:ea:c7:eb:a8:9b:6d:2a:57:f0:bf:
d7:dc:a6:64:7e:44:25:d3:ed:b3:57:fe:5e:f2:4b:d0:9e:7e:
3d:31:df:a2:85:78:11:55:fb:5f:8c:9b:57:bf:e8:c9:ec:1b:
0b:13:02:1c:3c:4e:ee:36:e1:2e:9b:48:0c:39:46:fc:ad:11:
34:83:0e:bc:ca:f7:09:51:b9:fa:09:b6:c2:41:31:cf:96:89:
58:b2:77:1d:f9:4b:40:c7:a4:cd:40:97:8e:f2:aa:70:0a:bc:
51:0c:38:2a:d1:17:b3:8a:50:35:20:53:e0:e0:98:e0:0c:69:
bb:0a:d8:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 8 17:22:49 2025 by rpki-client