Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/c33a13-a54b-45bb-b0d4-a49b72a1cfe2/1/nbtiWqVb2O81QQr93Sorw1iiXtE.mft
File: nbtiWqVb2O81QQr93Sorw1iiXtE.mft (raw, json)
Hash identifier: +oDeQQC7RJxxzxy1oe8HfGz/MJk8a0wC8h0OZNbhqzc=
Subject key identifier: 6F:9C:19:56:0E:94:A5:CC:B8:62:19:E9:54:AB:F5:10:BF:D5:50:12
Authority key identifier: 9D:BB:62:5A:A5:5B:D8:EF:35:41:0A:FD:DD:2A:2B:C3:58:A2:5E:D1
Certificate issuer: /CN=9dbb625aa55bd8ef35410afddd2a2bc358a25ed1
Certificate serial: 01969D50F7C2075DE9C666B810C9A694925A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nbtiWqVb2O81QQr93Sorw1iiXtE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/c33a13-a54b-45bb-b0d4-a49b72a1cfe2/1/nbtiWqVb2O81QQr93Sorw1iiXtE.mft
Manifest number: 022C
Signing time: Sun 04 May 2025 22:00:51 +0000
Manifest this update: Sun 04 May 2025 22:00:51 +0000
Manifest next update: Mon 05 May 2025 22:00:51 +0000
Files and hashes: 1: F_kIbrNoezU2xST1IGJ7znM97So.roa (hash: SL4bD3bCY+6YeKuV14y0PigmsFs9RgYCxYhDjlPIAW4=)
2: nbtiWqVb2O81QQr93Sorw1iiXtE.crl (hash: 87M3kzymGY7c+rJazRGUI9qYInqK0Dhawj161Bl2e3c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/c33a13-a54b-45bb-b0d4-a49b72a1cfe2/1/nbtiWqVb2O81QQr93Sorw1iiXtE.crl
rsync://rpki.ripe.net/repository/DEFAULT/51/c33a13-a54b-45bb-b0d4-a49b72a1cfe2/1/nbtiWqVb2O81QQr93Sorw1iiXtE.mft
rsync://rpki.ripe.net/repository/DEFAULT/nbtiWqVb2O81QQr93Sorw1iiXtE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 05 May 2025 22:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:9d:50:f7:c2:07:5d:e9:c6:66:b8:10:c9:a6:94:92:5a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9dbb625aa55bd8ef35410afddd2a2bc358a25ed1
Validity
Not Before: May 4 22:00:51 2025 GMT
Not After : May 5 22:00:51 2025 GMT
Subject: CN=6f9c19560e94a5ccb86219e954abf510bfd55012
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:1d:6c:2c:08:0d:bb:aa:ec:f9:c9:46:e5:58:
24:4d:d8:04:7a:00:15:53:a1:74:9b:a5:82:4b:b9:
94:75:5b:1b:23:33:43:e0:ba:76:85:35:d5:1e:83:
95:48:7b:90:cd:4b:1a:1a:05:7e:22:30:4f:0f:34:
87:e2:3c:eb:31:cb:39:fd:46:e4:cb:2f:53:ac:69:
4e:bb:8d:09:31:53:5e:17:65:5b:e1:62:d2:71:1e:
11:ee:2d:a2:fd:ae:aa:e7:08:05:c4:6e:16:97:30:
99:c5:db:4d:26:da:92:bd:52:4d:56:21:e6:64:a3:
99:d0:d4:77:b3:a1:b8:f8:b1:73:f2:20:4d:75:5a:
f1:a6:b4:a6:e2:3d:c2:90:b1:6a:61:99:90:68:93:
46:07:af:7f:6f:9c:44:ac:6c:be:ee:c5:36:88:a1:
80:b3:1d:1f:d8:1b:3f:b6:56:c5:98:3a:2c:67:45:
41:8c:79:7c:6f:8e:c4:6e:56:25:a2:35:6e:47:6c:
3e:7d:dc:f2:1f:c4:12:e1:d2:8a:ac:01:08:79:00:
3e:45:46:4b:22:9e:aa:b9:b2:81:e6:91:15:21:20:
55:c7:6f:0e:82:04:1a:1b:9a:df:4c:4a:b7:1b:ab:
bf:99:c4:35:0d:3a:ec:2e:41:f6:96:29:f0:58:e5:
0d:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:9C:19:56:0E:94:A5:CC:B8:62:19:E9:54:AB:F5:10:BF:D5:50:12
X509v3 Authority Key Identifier:
keyid:9D:BB:62:5A:A5:5B:D8:EF:35:41:0A:FD:DD:2A:2B:C3:58:A2:5E:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nbtiWqVb2O81QQr93Sorw1iiXtE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/c33a13-a54b-45bb-b0d4-a49b72a1cfe2/1/nbtiWqVb2O81QQr93Sorw1iiXtE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/c33a13-a54b-45bb-b0d4-a49b72a1cfe2/1/nbtiWqVb2O81QQr93Sorw1iiXtE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bb:43:76:a8:91:94:16:08:6a:f2:13:32:b3:29:50:be:2b:f1:
15:9f:ee:55:62:de:0f:d4:53:5d:f9:35:5c:c8:e8:a7:bd:46:
ce:54:6b:09:27:10:cd:a1:de:17:02:88:ba:5f:26:c2:07:40:
04:6b:7b:8c:cf:56:47:1b:83:31:86:89:ed:99:a7:ae:fb:ec:
43:9d:66:36:bc:eb:4d:b7:5c:c5:ca:c7:fc:68:5b:bd:16:16:
16:a3:53:14:67:6e:cf:24:61:d9:e0:27:b7:e1:63:69:67:3b:
86:ea:b5:f5:a7:f2:fc:ba:08:94:7e:78:8e:0a:aa:d5:67:d3:
6c:8a:c8:28:b9:30:b2:47:1e:61:0c:af:53:1a:b8:ec:84:d0:
ea:0b:92:40:fe:21:6e:e1:ca:56:36:f8:9c:68:45:1b:ac:07:
a2:d9:9e:52:9e:6f:5d:5d:39:53:ce:11:ba:6a:67:7d:96:b9:
2b:2b:ae:ca:fa:03:9e:12:82:7a:c8:ab:5a:cf:52:a9:8b:13:
66:a3:a0:07:7b:59:2a:b8:28:2a:e3:24:30:cd:92:07:b5:61:
c4:ad:e0:61:1b:54:89:14:b3:79:1b:13:e3:d0:24:d5:5d:4d:
cf:85:a3:8a:04:aa:91:ec:f7:e4:35:c7:4a:d8:09:14:bb:1f:
4d:76:8f:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 5 06:11:59 2025 by rpki-client