Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/9ff9c7-d329-45a6-898a-9d959abce526/1/nT67qfosrShqyRJ2V1dF9hXo-nE.mft
File: nT67qfosrShqyRJ2V1dF9hXo-nE.mft (raw, json)
Hash identifier: 8KtO5+2p8YvhjeJraK8NZmgNJWdG1VFh5sv7BxrTXv0=
Subject key identifier: BD:9F:50:4C:2A:BB:F4:04:48:2D:A8:A4:7E:A6:DB:8A:FD:E4:BC:DE
Authority key identifier: 9D:3E:BB:A9:FA:2C:AD:28:6A:C9:12:76:57:57:45:F6:15:E8:FA:71
Certificate issuer: /CN=9d3ebba9fa2cad286ac91276575745f615e8fa71
Certificate serial: 0196C081CD1EF1BBA030881018CE587034B4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nT67qfosrShqyRJ2V1dF9hXo-nE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/9ff9c7-d329-45a6-898a-9d959abce526/1/nT67qfosrShqyRJ2V1dF9hXo-nE.mft
Manifest number: 08CF
Signing time: Sun 11 May 2025 18:00:54 +0000
Manifest this update: Sun 11 May 2025 18:00:54 +0000
Manifest next update: Mon 12 May 2025 18:00:54 +0000
Files and hashes: 1: _O2K9lYrU1ufrJyVF92JtVYbIao.roa (hash: opCkasUjE09S1Hv7hZM9HKqW92oCRoLsRmm8L97k62Q=)
2: nT67qfosrShqyRJ2V1dF9hXo-nE.crl (hash: rTMjyUHmNb/auuAl/LSGuGXZZYOldXthPtAC3vPQQpA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5b/9ff9c7-d329-45a6-898a-9d959abce526/1/nT67qfosrShqyRJ2V1dF9hXo-nE.crl
rsync://rpki.ripe.net/repository/DEFAULT/5b/9ff9c7-d329-45a6-898a-9d959abce526/1/nT67qfosrShqyRJ2V1dF9hXo-nE.mft
rsync://rpki.ripe.net/repository/DEFAULT/nT67qfosrShqyRJ2V1dF9hXo-nE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 12 May 2025 16:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:c0:81:cd:1e:f1:bb:a0:30:88:10:18:ce:58:70:34:b4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9d3ebba9fa2cad286ac91276575745f615e8fa71
Validity
Not Before: May 11 18:00:54 2025 GMT
Not After : May 12 18:00:54 2025 GMT
Subject: CN=bd9f504c2abbf404482da8a47ea6db8afde4bcde
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:c7:f7:b0:81:31:6f:53:1e:b1:eb:d4:39:00:
2c:7c:7b:79:c6:27:9a:ba:50:85:51:b2:e4:b3:a8:
cd:50:fc:8b:32:c4:76:42:3a:d0:b7:75:b8:c2:a7:
30:77:61:e9:22:e1:00:2c:d9:c9:fb:fc:da:10:20:
31:48:95:bf:ca:67:67:0f:97:b5:29:69:90:e9:44:
37:61:98:76:74:a1:27:0a:71:53:8c:73:64:79:50:
ea:bc:fd:f2:a1:e1:84:9b:a7:7f:82:d9:ec:e8:27:
d6:e5:cf:93:37:ba:69:78:23:c9:c7:ca:a6:cd:4d:
56:4c:ea:6e:db:cb:5e:ad:68:18:50:b6:68:8a:29:
b9:3b:4a:b8:c9:67:15:7e:80:7f:50:8a:7c:c9:e7:
15:6d:01:c3:67:53:d2:26:b3:04:50:1a:bb:60:22:
60:98:e2:a3:46:9f:d9:0a:e5:64:13:6b:5d:99:ba:
4a:d4:99:4a:b4:5c:03:c1:b0:08:17:92:ff:73:2b:
1a:37:33:4d:40:ee:b9:5c:4b:df:a6:55:c9:05:9e:
ce:38:69:95:55:a2:d2:55:86:93:43:e2:26:a3:dc:
94:5e:16:a6:2c:5f:0b:32:4c:85:75:09:9b:43:7a:
da:2f:15:e0:77:a7:c2:f7:b5:a4:05:d4:19:6b:6f:
ff:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:9F:50:4C:2A:BB:F4:04:48:2D:A8:A4:7E:A6:DB:8A:FD:E4:BC:DE
X509v3 Authority Key Identifier:
keyid:9D:3E:BB:A9:FA:2C:AD:28:6A:C9:12:76:57:57:45:F6:15:E8:FA:71
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nT67qfosrShqyRJ2V1dF9hXo-nE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/9ff9c7-d329-45a6-898a-9d959abce526/1/nT67qfosrShqyRJ2V1dF9hXo-nE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/9ff9c7-d329-45a6-898a-9d959abce526/1/nT67qfosrShqyRJ2V1dF9hXo-nE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9d:7c:2a:68:3c:75:47:de:65:07:66:e8:4c:77:0b:20:12:94:
0d:dd:bc:fd:91:e8:c5:12:5c:44:4e:a5:89:e0:fd:20:7b:f5:
04:48:97:9a:a8:c0:21:75:e7:95:ec:52:42:02:fa:df:69:0b:
d6:df:5a:bd:a2:21:7b:1c:85:02:82:6d:09:21:d0:a7:01:bd:
4e:2e:1f:19:91:dd:40:60:15:85:4e:81:33:19:a0:ad:f9:70:
10:56:97:e5:12:5e:74:3a:8f:a9:3c:12:37:9a:f2:0a:a4:d7:
85:a0:0e:0a:ad:3a:0c:d0:19:bb:a6:60:de:82:76:ea:64:27:
c2:3c:fd:ce:b9:a1:e8:04:f1:5a:c7:01:81:f7:61:16:b6:9e:
e2:70:5c:25:31:19:ee:c2:b3:5b:fb:db:c8:85:ff:3f:95:c0:
8b:3f:55:54:0f:de:40:d0:6c:5f:8b:dd:6f:49:b1:61:cb:84:
79:78:38:28:24:c7:55:45:df:73:99:37:ce:42:cb:e2:a5:bc:
5b:9b:e7:6a:cd:23:5b:4b:7d:a8:2f:54:09:a8:1a:8d:d9:d6:
d2:e8:df:e2:50:5d:9e:ad:8b:96:26:41:8d:65:9a:48:da:54:
b7:a7:21:e3:29:c9:af:c5:fc:73:ac:a6:de:e0:cb:e2:e2:66:
ad:4a:de:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 22:04:28 2025 by rpki-client