Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/53/bce397-372d-4d2f-ad0a-a48ebd301671/1/nElQd51ZdVHXnEPmFqUJB96M33c.mft
File: nElQd51ZdVHXnEPmFqUJB96M33c.mft (raw, json)
Hash identifier: 5pGThmw21NYpyf9lJEv23MDXuJK8qob3/AbjVbcGQgo=
Subject key identifier: 02:3A:1E:D6:63:76:00:7D:1F:19:84:EF:98:68:25:4B:3D:24:78:11
Authority key identifier: 9C:49:50:77:9D:59:75:51:D7:9C:43:E6:16:A5:09:07:DE:8C:DF:77
Certificate issuer: /CN=9c4950779d597551d79c43e616a50907de8cdf77
Certificate serial: 0196ACFAEE5F7F1C4028E4BA54224837B29F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nElQd51ZdVHXnEPmFqUJB96M33c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/53/bce397-372d-4d2f-ad0a-a48ebd301671/1/nElQd51ZdVHXnEPmFqUJB96M33c.mft
Manifest number: 152C
Signing time: Wed 07 May 2025 23:00:48 +0000
Manifest this update: Wed 07 May 2025 23:00:48 +0000
Manifest next update: Thu 08 May 2025 23:00:48 +0000
Files and hashes: 1: 2R1UFCZ6LPm3SJQHM7rJf5ia5HE.roa (hash: 9iVp3ax6SoInGkRmccCgwLuza4oa5BeDphs/tDw0ZLo=)
2: nElQd51ZdVHXnEPmFqUJB96M33c.crl (hash: uh+B48Icgn9pmgdPy0XUOrn9P0/dIw2piA3+WFdcwI8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/53/bce397-372d-4d2f-ad0a-a48ebd301671/1/nElQd51ZdVHXnEPmFqUJB96M33c.crl
rsync://rpki.ripe.net/repository/DEFAULT/53/bce397-372d-4d2f-ad0a-a48ebd301671/1/nElQd51ZdVHXnEPmFqUJB96M33c.mft
rsync://rpki.ripe.net/repository/DEFAULT/nElQd51ZdVHXnEPmFqUJB96M33c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 08 May 2025 20:38:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:ac:fa:ee:5f:7f:1c:40:28:e4:ba:54:22:48:37:b2:9f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9c4950779d597551d79c43e616a50907de8cdf77
Validity
Not Before: May 7 23:00:48 2025 GMT
Not After : May 8 23:00:48 2025 GMT
Subject: CN=023a1ed66376007d1f1984ef9868254b3d247811
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:dd:eb:07:d0:23:e0:bd:18:42:2e:5b:b3:e8:
80:16:a2:41:c4:fd:1e:9d:5f:4f:23:39:e1:c5:52:
bc:9a:7a:8a:ee:9a:8b:3f:9b:a0:ba:82:3c:79:42:
1a:c8:6d:be:75:4a:96:07:0f:a3:d2:8f:75:8b:ed:
8b:f2:2a:9d:cc:8e:31:f7:4c:6f:53:34:3d:2a:ee:
15:8b:b8:5a:1f:80:c0:41:ad:79:e3:64:7e:d4:61:
e8:3a:c0:51:41:f8:29:5e:c0:ce:f2:ed:9a:51:85:
6c:97:5b:0c:7f:dd:62:db:ab:70:89:f2:4c:b2:79:
a3:4f:a8:72:fc:79:0b:46:5a:4e:7b:fa:c7:29:59:
9c:76:74:28:7a:cc:9b:30:ae:0f:ff:b2:4c:52:9f:
9c:7f:07:61:c7:b7:e3:e3:35:2d:02:cc:40:1b:1b:
77:82:3a:e9:90:ae:30:00:9b:fa:cc:c3:1c:30:26:
ee:b9:e0:bf:97:26:a1:06:ee:dd:fa:37:bc:c5:8c:
12:80:87:54:83:fb:4d:2d:b1:75:a9:74:80:59:62:
e8:ac:56:36:29:f6:a6:9a:f2:06:a8:a5:72:a5:8b:
ec:27:b5:2b:ab:02:83:9b:2c:8b:0a:bf:62:83:7e:
5f:b9:de:f3:2b:31:97:61:7a:fd:af:16:30:ff:e6:
a3:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:3A:1E:D6:63:76:00:7D:1F:19:84:EF:98:68:25:4B:3D:24:78:11
X509v3 Authority Key Identifier:
keyid:9C:49:50:77:9D:59:75:51:D7:9C:43:E6:16:A5:09:07:DE:8C:DF:77
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nElQd51ZdVHXnEPmFqUJB96M33c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/53/bce397-372d-4d2f-ad0a-a48ebd301671/1/nElQd51ZdVHXnEPmFqUJB96M33c.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/53/bce397-372d-4d2f-ad0a-a48ebd301671/1/nElQd51ZdVHXnEPmFqUJB96M33c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b0:9f:d4:f5:0b:b1:42:63:2f:16:37:15:43:37:3f:61:9d:9e:
41:fd:95:97:45:b4:31:da:09:ae:95:5f:6e:54:d8:56:07:a1:
ed:a2:3d:d3:d9:2c:ea:4c:8f:1b:5e:94:3b:a7:e1:c3:d8:2c:
94:0e:5c:61:33:8e:18:d6:30:f6:bd:cb:6d:59:72:ae:dc:fb:
2e:cd:08:92:bf:d0:17:22:e9:1a:81:ea:33:da:d7:f2:77:03:
e4:a8:4c:97:c8:8d:45:c6:d3:a3:65:14:59:0d:78:49:db:da:
f7:ac:86:cf:7d:ba:06:63:0b:a5:7a:b6:7b:ac:63:32:24:d8:
28:fa:3c:3a:85:52:a0:a0:85:ae:8f:7e:76:7a:a1:52:21:6d:
6f:6a:a7:ab:33:33:06:35:be:e7:95:57:3f:f4:fd:e8:db:83:
3f:93:54:f3:95:6a:14:1c:4d:58:4a:cf:9b:55:1b:96:eb:8e:
c6:3e:eb:8b:f5:32:08:92:ee:6f:d7:bc:46:c9:51:71:31:b3:
5d:55:75:aa:50:40:ef:00:59:0a:b6:c2:27:69:04:6e:51:12:
26:77:ee:e6:52:c4:6c:3e:f1:bd:e3:eb:9d:c9:38:51:82:74:
28:9c:e0:41:67:56:45:63:aa:4e:db:0b:92:a2:b5:1b:72:cb:
b0:a9:d0:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 8 01:51:34 2025 by rpki-client