Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/66f829-5129-4842-a5c0-3740b0941db8/1/nSVxkIIfcFio6v1IGWl0NoutjxQ.mft
File: nSVxkIIfcFio6v1IGWl0NoutjxQ.mft (raw, json)
Hash identifier: HJPfam6BVvowJLMJK53olauDZJMjenOWOtS+GaHKz4A=
Subject key identifier: 21:8B:02:FE:CC:02:75:63:60:64:F4:A6:B2:F0:9F:A5:3D:FE:5D:DB
Authority key identifier: 9D:25:71:90:82:1F:70:58:A8:EA:FD:48:19:69:74:36:8B:AD:8F:14
Certificate issuer: /CN=9d257190821f7058a8eafd48196974368bad8f14
Certificate serial: 0196CCF33385A05804F0B1F4EA0E65D57915
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nSVxkIIfcFio6v1IGWl0NoutjxQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4e/66f829-5129-4842-a5c0-3740b0941db8/1/nSVxkIIfcFio6v1IGWl0NoutjxQ.mft
Manifest number: 153E
Signing time: Wed 14 May 2025 04:00:12 +0000
Manifest this update: Wed 14 May 2025 04:00:12 +0000
Manifest next update: Thu 15 May 2025 04:00:12 +0000
Files and hashes: 1: S6yD0xSsAdYMuFY-SqJP0As2TGI.roa (hash: NWiZKpb2JP7oKryMsUVnNHlDjQunxGKrj2ir9mx8k8E=)
2: lkhGtmHtTBEdKgsUVjONXoB0iQc.roa (hash: 9yZ07+0QCixTukFaKD5cKhr7FU+NHBM/0FUydctI6gg=)
3: nSVxkIIfcFio6v1IGWl0NoutjxQ.crl (hash: Jr2/FlEwQgwtJIEc7D6rVLGX3q1t67c9plK55Bx+5UA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4e/66f829-5129-4842-a5c0-3740b0941db8/1/nSVxkIIfcFio6v1IGWl0NoutjxQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/4e/66f829-5129-4842-a5c0-3740b0941db8/1/nSVxkIIfcFio6v1IGWl0NoutjxQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/nSVxkIIfcFio6v1IGWl0NoutjxQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 15 May 2025 04:00:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:cc:f3:33:85:a0:58:04:f0:b1:f4:ea:0e:65:d5:79:15
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9d257190821f7058a8eafd48196974368bad8f14
Validity
Not Before: May 14 04:00:12 2025 GMT
Not After : May 15 04:00:12 2025 GMT
Subject: CN=218b02fecc0275636064f4a6b2f09fa53dfe5ddb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f4:0c:3d:b9:96:99:c0:49:ab:ec:28:ac:02:ae:
03:13:d4:8b:c7:07:7e:99:8d:84:e9:c5:b8:4c:e5:
22:70:f3:be:ba:86:1f:60:2e:d4:22:c5:57:91:55:
c1:91:af:da:a4:1f:82:17:33:31:b2:8e:51:d8:00:
50:5f:f1:db:97:59:bd:69:5b:0d:09:0b:70:76:72:
1d:fb:0e:54:9c:32:95:86:aa:da:01:37:68:67:fe:
d9:bc:28:08:c0:1b:a9:f4:62:2a:7c:03:9d:e8:2a:
6b:e2:9e:0e:76:10:3f:6c:ac:ac:ba:37:2d:ae:70:
1b:ba:0e:df:17:f4:74:15:fc:d1:fa:bd:72:db:1b:
d3:1d:02:c3:c2:e9:99:b8:cd:50:04:66:db:e7:9b:
df:3d:bd:be:de:65:9a:1b:c3:8c:5a:f6:86:19:4c:
29:b8:ab:68:39:86:95:8b:2f:05:ac:14:8b:2c:12:
4f:f1:04:1b:d5:34:50:a3:79:51:0f:c7:92:ce:db:
21:56:6c:66:85:12:46:5e:25:08:f1:ef:fe:de:25:
d1:36:0d:7e:08:49:31:be:f8:20:ff:f1:86:cd:54:
9f:3c:ca:53:d2:d9:66:23:69:f3:2c:06:95:c7:cb:
b6:26:b4:36:ea:63:0c:2e:a8:5a:0f:49:d5:45:a4:
20:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:8B:02:FE:CC:02:75:63:60:64:F4:A6:B2:F0:9F:A5:3D:FE:5D:DB
X509v3 Authority Key Identifier:
keyid:9D:25:71:90:82:1F:70:58:A8:EA:FD:48:19:69:74:36:8B:AD:8F:14
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nSVxkIIfcFio6v1IGWl0NoutjxQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/66f829-5129-4842-a5c0-3740b0941db8/1/nSVxkIIfcFio6v1IGWl0NoutjxQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/66f829-5129-4842-a5c0-3740b0941db8/1/nSVxkIIfcFio6v1IGWl0NoutjxQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c7:56:aa:92:5a:11:1c:a2:2e:8c:7c:58:98:84:00:3e:f1:29:
81:43:62:8a:28:64:93:2a:28:76:25:cb:8e:fe:d2:10:87:84:
6d:87:2e:dd:9a:66:16:8c:3f:d6:93:48:89:e0:99:42:73:53:
49:00:bb:13:a4:e7:1c:91:20:1a:ba:56:a6:e4:f7:a2:a0:98:
b2:60:7d:2b:af:c8:8b:15:21:fc:76:99:94:d4:59:fc:9d:75:
a7:e2:7f:5c:48:d0:da:29:64:d6:1d:0a:03:cd:d3:03:c4:0d:
9b:eb:77:51:8d:43:5d:29:e8:69:8e:af:18:34:87:c8:75:20:
dd:e4:ed:4b:39:6b:e0:79:d6:e1:16:7c:ce:62:f4:d2:04:3c:
dc:ca:78:67:7e:71:23:60:2c:e2:fd:23:e1:b3:2c:e2:b9:a4:
02:b6:8c:d3:a7:a7:3a:ba:69:22:ad:ea:9a:dd:6d:24:93:67:
cf:d3:9e:f4:c7:3f:40:d6:1d:94:55:9e:f4:e7:a3:be:b3:08:
a8:58:1a:7d:c8:51:50:1d:21:9d:53:a8:5f:e3:56:76:4a:68:
de:32:30:27:72:58:5f:19:c9:79:91:48:8e:dc:24:87:48:8c:
82:01:f1:97:7b:a8:8d:e3:95:23:0b:97:66:43:a3:21:e7:5c:
cd:c4:85:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 14 14:10:30 2025 by rpki-client