Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4d/ee2793-a0c9-42dc-a6a2-329ba388b7cf/1/nkLKRmiKg3tXUjTOahoyZYfWwgQ.mft
File: nkLKRmiKg3tXUjTOahoyZYfWwgQ.mft (raw, json)
Hash identifier: m3ljG9uIAWCZh/J6ttfRGeFNX9h7UaI9iV3MDukg9q0=
Subject key identifier: F7:66:AF:B2:C4:D0:36:99:BF:CC:59:8E:08:20:CC:63:34:B4:7D:0C
Authority key identifier: 9E:42:CA:46:68:8A:83:7B:57:52:34:CE:6A:1A:32:65:87:D6:C2:04
Certificate issuer: /CN=9e42ca46688a837b575234ce6a1a326587d6c204
Certificate serial: 0196C871DF89D7582F0F6707086AD79C4460
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nkLKRmiKg3tXUjTOahoyZYfWwgQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4d/ee2793-a0c9-42dc-a6a2-329ba388b7cf/1/nkLKRmiKg3tXUjTOahoyZYfWwgQ.mft
Manifest number: 0FDD
Signing time: Tue 13 May 2025 07:00:27 +0000
Manifest this update: Tue 13 May 2025 07:00:27 +0000
Manifest next update: Wed 14 May 2025 07:00:27 +0000
Files and hashes: 1: 2sz7XXaQR044rc-q4fD0WIzUxYQ.roa (hash: pi07prhyU4hZ/cG1dB+HetMAgpuPmtLhNCb2plULwQE=)
2: D2HSpId2VYXPjhlDPg7eWeC18Pw.roa (hash: UXPvVbmh0MzKjV4UFrcu58vEq8RZqO0eg1YthASI72I=)
3: UnUG9yNZwHFtxPW6hAKjubIbusM.roa (hash: xsmRUWemFAWw0xMxDEpqyiLbWsqfijBX0AOIJJiaM5U=)
4: nkLKRmiKg3tXUjTOahoyZYfWwgQ.crl (hash: aFtiV+uyMSgNba7dvfhrDs3anCjVTp4dPThKgqBL3h4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4d/ee2793-a0c9-42dc-a6a2-329ba388b7cf/1/nkLKRmiKg3tXUjTOahoyZYfWwgQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/4d/ee2793-a0c9-42dc-a6a2-329ba388b7cf/1/nkLKRmiKg3tXUjTOahoyZYfWwgQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/nkLKRmiKg3tXUjTOahoyZYfWwgQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 14 May 2025 07:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:c8:71:df:89:d7:58:2f:0f:67:07:08:6a:d7:9c:44:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9e42ca46688a837b575234ce6a1a326587d6c204
Validity
Not Before: May 13 07:00:27 2025 GMT
Not After : May 14 07:00:27 2025 GMT
Subject: CN=f766afb2c4d03699bfcc598e0820cc6334b47d0c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:4e:47:02:48:51:55:9e:b5:a9:c0:5b:48:10:
a4:2b:f0:b7:29:17:0b:f6:3a:59:65:55:98:d6:a2:
3a:50:94:3f:be:a3:3f:89:e2:cc:14:55:fe:67:0d:
42:3e:fe:51:24:e8:7f:f9:cc:58:69:ae:f5:99:f8:
94:5f:7e:93:62:c6:47:be:77:0f:ae:01:0a:18:29:
1d:1b:86:9a:b7:15:d2:9a:a3:07:a9:3e:6e:5d:47:
46:be:53:5d:cc:82:6b:b0:7a:8d:d5:a0:2d:28:10:
b7:df:ba:2b:95:9c:28:75:dc:08:64:05:83:5f:72:
df:6c:1c:94:64:36:18:e8:2d:1f:38:13:eb:fa:82:
37:99:8e:1b:cc:80:1a:9e:db:a9:94:e5:59:60:b4:
d1:70:89:b8:61:47:1d:ee:c1:0e:d7:7a:ed:69:73:
1b:8e:26:ac:81:50:f3:13:21:ed:04:5b:30:04:3f:
56:45:f6:28:f9:27:3b:a4:8d:d2:83:e4:27:74:2c:
2c:3c:6e:db:a3:7c:ea:51:cb:4b:26:ee:74:a5:44:
b1:1c:f5:8f:e0:e6:32:e2:33:05:6e:5e:3d:13:ec:
61:42:ee:3a:64:29:c7:f5:23:63:44:b4:58:de:e1:
e2:fc:ad:b2:0f:97:a7:1e:90:dd:ba:fc:72:05:32:
4f:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:66:AF:B2:C4:D0:36:99:BF:CC:59:8E:08:20:CC:63:34:B4:7D:0C
X509v3 Authority Key Identifier:
keyid:9E:42:CA:46:68:8A:83:7B:57:52:34:CE:6A:1A:32:65:87:D6:C2:04
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nkLKRmiKg3tXUjTOahoyZYfWwgQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/ee2793-a0c9-42dc-a6a2-329ba388b7cf/1/nkLKRmiKg3tXUjTOahoyZYfWwgQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/ee2793-a0c9-42dc-a6a2-329ba388b7cf/1/nkLKRmiKg3tXUjTOahoyZYfWwgQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
54:62:7f:4c:df:e9:cb:98:fe:bc:6d:af:c8:66:eb:b9:d4:7e:
c6:52:3d:ba:ad:65:6a:47:ff:b8:6f:90:d2:cb:bc:44:e7:75:
bc:97:b4:f0:d2:48:8f:86:4e:08:8d:8a:62:b5:f4:a5:4d:af:
b1:ed:62:2a:c9:62:f4:61:21:9c:b0:35:a2:33:89:df:a5:e0:
65:28:c6:86:9f:bf:16:2b:d3:c6:dc:a1:88:da:0b:c3:0e:b4:
77:75:37:b0:fb:1a:0a:f8:e6:f3:28:dc:02:b8:15:e9:d6:07:
88:30:5b:a4:55:6f:57:de:4a:fd:0a:3c:3b:4b:91:8a:d1:0a:
6f:fc:99:d1:07:2d:a9:47:52:8b:70:bd:24:fd:ce:dd:27:77:
33:bd:13:a1:6f:85:e0:c9:49:37:1c:7d:ec:98:6d:2d:88:e5:
c9:76:49:44:69:7b:1c:b5:3b:e2:df:60:cb:83:75:d5:d9:81:
22:00:67:67:7f:be:ae:b9:71:25:7d:ee:b7:7d:33:45:50:49:
e8:d1:fc:e1:bb:8b:80:16:1e:03:e0:d4:f7:3c:79:b5:a2:66:
10:51:89:3b:e3:ad:85:ad:8d:92:27:c8:f6:c0:03:a7:6d:f6:
ec:b9:24:3d:60:c5:1f:b3:16:e4:c6:4b:cf:23:87:2f:e0:00:
6a:51:26:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 13 13:33:34 2025 by rpki-client