Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/b417f8-0732-48af-b00c-bb797ce7e108/1/nRFf6cnpz97xfpJBZVksAj77KxY.mft
File: nRFf6cnpz97xfpJBZVksAj77KxY.mft (raw, json)
Hash identifier: 0LKMRF8+YP0drp0UxN1br/7h7ygPV1YegttbNhmYxqo=
Subject key identifier: EF:C3:5D:2E:19:48:7A:CD:FF:D3:DD:02:E9:9B:69:DF:62:12:46:A6
Authority key identifier: 9D:11:5F:E9:C9:E9:CF:DE:F1:7E:92:41:65:59:2C:02:3E:FB:2B:16
Certificate issuer: /CN=9d115fe9c9e9cfdef17e924165592c023efb2b16
Certificate serial: 0196BB92B30FEE385783F5DBE7B7A649C13D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nRFf6cnpz97xfpJBZVksAj77KxY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/b417f8-0732-48af-b00c-bb797ce7e108/1/nRFf6cnpz97xfpJBZVksAj77KxY.mft
Manifest number: 0948
Signing time: Sat 10 May 2025 19:01:15 +0000
Manifest this update: Sat 10 May 2025 19:01:15 +0000
Manifest next update: Sun 11 May 2025 19:01:15 +0000
Files and hashes: 1: _bVk5KEYMfzUMgiBziaNKeODYT8.roa (hash: vIMcu46lRDXHK5Ht9fIkqPEvFTQHMwND+OPzypT6tAc=)
2: nRFf6cnpz97xfpJBZVksAj77KxY.crl (hash: tLCFirtzGaro1HNKQFDca/zOYCah9CFqu32+8SqMlws=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/45/b417f8-0732-48af-b00c-bb797ce7e108/1/nRFf6cnpz97xfpJBZVksAj77KxY.crl
rsync://rpki.ripe.net/repository/DEFAULT/45/b417f8-0732-48af-b00c-bb797ce7e108/1/nRFf6cnpz97xfpJBZVksAj77KxY.mft
rsync://rpki.ripe.net/repository/DEFAULT/nRFf6cnpz97xfpJBZVksAj77KxY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 11 May 2025 19:01:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:bb:92:b3:0f:ee:38:57:83:f5:db:e7:b7:a6:49:c1:3d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9d115fe9c9e9cfdef17e924165592c023efb2b16
Validity
Not Before: May 10 19:01:15 2025 GMT
Not After : May 11 19:01:15 2025 GMT
Subject: CN=efc35d2e19487acdffd3dd02e99b69df621246a6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:c9:60:5c:c2:20:01:43:98:56:99:08:32:6b:
86:a4:ab:9f:3c:f7:95:44:0e:79:9d:71:2e:04:7f:
49:9b:67:13:b6:da:a6:27:f5:82:45:0d:64:9c:9f:
78:96:24:98:c1:86:7d:e5:3d:10:eb:d5:68:85:b5:
c5:b1:c3:ed:09:c4:0b:f2:3e:33:5e:46:f4:46:62:
11:54:c1:a9:12:7c:0f:d4:3c:f2:2f:2a:56:59:8c:
a0:15:79:1d:00:24:49:a6:f1:76:de:e8:86:56:48:
45:7a:45:90:5b:c0:3a:00:2b:ae:5c:04:d8:ea:67:
68:e4:37:55:4f:5a:7c:0c:4d:9e:d9:3d:fd:b2:13:
99:a4:a4:b5:11:8e:80:39:c2:47:a5:ca:af:8a:eb:
98:6d:26:91:0c:5a:ca:a5:1b:00:db:63:f3:41:c8:
5b:23:1c:d2:89:46:d8:e6:b5:4a:36:f4:eb:08:23:
32:27:36:b8:45:fc:40:01:82:ee:c7:ad:04:ce:93:
a1:90:48:3b:59:70:c5:be:22:4f:ec:63:92:0e:cf:
7b:fb:77:25:21:e6:91:ef:96:b2:5c:87:bb:68:df:
59:0f:5d:ae:9f:7d:ee:19:5e:7f:14:79:92:00:7d:
83:1d:4d:cf:2c:a9:fe:83:b6:b3:77:ca:a2:3c:d9:
c4:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:C3:5D:2E:19:48:7A:CD:FF:D3:DD:02:E9:9B:69:DF:62:12:46:A6
X509v3 Authority Key Identifier:
keyid:9D:11:5F:E9:C9:E9:CF:DE:F1:7E:92:41:65:59:2C:02:3E:FB:2B:16
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nRFf6cnpz97xfpJBZVksAj77KxY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/b417f8-0732-48af-b00c-bb797ce7e108/1/nRFf6cnpz97xfpJBZVksAj77KxY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/45/b417f8-0732-48af-b00c-bb797ce7e108/1/nRFf6cnpz97xfpJBZVksAj77KxY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
99:63:8d:2f:06:cd:03:4c:ee:1d:97:3c:54:68:23:92:c3:76:
5a:8e:ff:bf:48:c6:ec:37:15:9d:bc:03:c5:6c:dc:fd:58:c7:
c0:a7:a2:97:97:27:07:4c:fa:cf:ca:ce:d3:31:e7:7d:ff:be:
da:ce:e7:c2:a7:a3:70:6f:17:80:d5:70:93:41:6e:1b:55:b3:
34:73:43:71:bb:a5:99:ad:62:a3:06:74:5d:72:63:74:7f:38:
f8:b7:cb:97:a9:5a:51:1b:b6:6c:fd:a5:a6:28:5d:a8:b3:d9:
03:01:c3:1b:c1:93:b0:25:41:65:46:5c:dc:5d:d4:3f:0d:85:
cd:8b:3b:86:93:1c:47:7c:b4:e5:9d:80:6f:fc:e5:59:34:16:
ab:c5:90:74:42:f5:f9:0c:b9:67:f6:9e:20:d1:18:65:4d:25:
35:50:b3:d0:f6:c6:eb:16:96:1b:8c:ea:bd:34:17:85:7b:8e:
b3:29:73:4a:0b:42:17:87:1b:70:15:a9:4b:b0:7a:dd:e6:1f:
b5:b3:49:e1:72:b4:d4:60:f8:cf:1f:d9:5a:4b:89:4f:5d:86:
d7:9d:63:47:7d:58:6e:68:d6:75:5e:b1:e5:1b:75:1a:5c:ab:
86:e4:b5:0e:b7:a3:00:6d:b3:8c:a3:4b:cd:9a:80:9f:6a:f8:
4d:a7:a2:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 01:08:36 2025 by rpki-client