Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/60/7a542d-719e-46d0-a5cc-061dd681332c/1/Nq8EHRLErbZvjBYRPJphR9AjiNk.mft
File: Nq8EHRLErbZvjBYRPJphR9AjiNk.mft (raw, json)
Hash identifier: 9w8Z3nVEYYDjR7rdqQth4evBMwFzRgiRaWSVnHb71wA=
Subject key identifier: 09:F3:04:E2:F5:F5:2B:3B:E2:F1:1B:4F:93:F6:90:99:E1:BF:8C:B7
Authority key identifier: 36:AF:04:1D:12:C4:AD:B6:6F:8C:16:11:3C:9A:61:47:D0:23:88:D9
Certificate issuer: /CN=36af041d12c4adb66f8c16113c9a6147d02388d9
Certificate serial: 0196C5DEC0F1CE07922F7A2DC44541489125
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Nq8EHRLErbZvjBYRPJphR9AjiNk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/60/7a542d-719e-46d0-a5cc-061dd681332c/1/Nq8EHRLErbZvjBYRPJphR9AjiNk.mft
Manifest number: 0E87
Signing time: Mon 12 May 2025 19:00:31 +0000
Manifest this update: Mon 12 May 2025 19:00:31 +0000
Manifest next update: Tue 13 May 2025 19:00:31 +0000
Files and hashes: 1: Nq8EHRLErbZvjBYRPJphR9AjiNk.crl (hash: vFC3RwGlvgOM1Iqfm9I6OYa63n6hq3/GsMQDlNpVDK8=)
2: nxVkwWxp31G9Nhk5RnHhT1dH-NE.roa (hash: dlhfhOwY+Ae+4z4M/Srqh6E06sqatloTn5dl72qTwng=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/60/7a542d-719e-46d0-a5cc-061dd681332c/1/Nq8EHRLErbZvjBYRPJphR9AjiNk.crl
rsync://rpki.ripe.net/repository/DEFAULT/60/7a542d-719e-46d0-a5cc-061dd681332c/1/Nq8EHRLErbZvjBYRPJphR9AjiNk.mft
rsync://rpki.ripe.net/repository/DEFAULT/Nq8EHRLErbZvjBYRPJphR9AjiNk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 13 May 2025 19:00:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:c5:de:c0:f1:ce:07:92:2f:7a:2d:c4:45:41:48:91:25
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=36af041d12c4adb66f8c16113c9a6147d02388d9
Validity
Not Before: May 12 19:00:31 2025 GMT
Not After : May 13 19:00:31 2025 GMT
Subject: CN=09f304e2f5f52b3be2f11b4f93f69099e1bf8cb7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:e9:23:01:4f:31:87:11:15:8c:0a:3b:d3:df:
1e:64:3b:5e:03:57:94:ec:64:15:53:e2:37:ed:1a:
ec:df:c0:a9:f0:a1:da:3a:c6:39:e3:9e:8a:1b:22:
3c:cb:9e:99:72:a4:e5:93:50:73:04:28:21:5b:89:
bc:d7:c6:81:70:9e:77:9f:59:d3:46:9c:30:ea:5e:
ad:e7:4c:6c:79:67:a3:a8:32:14:a8:28:da:d6:7a:
6c:a6:8b:00:6d:9f:d5:47:88:b6:1e:5a:c4:78:30:
34:33:37:05:92:7c:63:a3:0c:f4:b6:5e:86:bf:8c:
14:2f:79:58:0a:49:b2:4d:ff:9f:a1:48:7a:77:19:
a6:ed:ea:dc:d1:33:32:8b:41:8f:4b:3f:79:ff:ed:
e7:6b:14:e2:bf:90:f0:69:5c:22:42:ae:f0:04:77:
c2:98:7f:41:d3:4b:69:71:3a:9f:ac:95:55:2c:21:
f2:78:32:90:1e:5f:d3:13:07:bb:a7:99:57:00:84:
04:55:50:8a:ce:03:d0:e7:ae:ed:79:56:ad:d3:8b:
72:3d:21:de:b7:c1:f6:2e:7d:1e:42:73:b1:1f:e4:
2e:ca:12:b0:69:9a:97:96:26:d6:cd:5b:88:1a:e8:
de:38:31:fb:8e:2e:63:ef:bc:27:ae:f9:8f:34:16:
4b:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:F3:04:E2:F5:F5:2B:3B:E2:F1:1B:4F:93:F6:90:99:E1:BF:8C:B7
X509v3 Authority Key Identifier:
keyid:36:AF:04:1D:12:C4:AD:B6:6F:8C:16:11:3C:9A:61:47:D0:23:88:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Nq8EHRLErbZvjBYRPJphR9AjiNk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/7a542d-719e-46d0-a5cc-061dd681332c/1/Nq8EHRLErbZvjBYRPJphR9AjiNk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/60/7a542d-719e-46d0-a5cc-061dd681332c/1/Nq8EHRLErbZvjBYRPJphR9AjiNk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
42:d7:0f:12:a1:72:95:a4:9f:dc:ff:e4:c0:52:f8:ca:c3:e6:
ed:26:70:71:19:4d:b2:28:6e:df:8b:a5:30:b9:86:e0:09:d9:
c1:2a:92:f1:3c:6a:09:f8:7d:a2:62:37:4f:2a:5b:69:d7:b4:
80:53:75:f3:37:c4:54:6b:f9:a3:ba:dd:d7:0d:0b:8d:2b:56:
a1:9f:6d:ce:60:e1:f2:2b:17:30:c2:b4:71:40:eb:a0:fb:6e:
37:da:4e:e3:c2:14:bd:a1:87:ad:61:46:b5:9d:cd:02:33:89:
f4:31:77:10:54:06:9a:88:c7:43:2f:68:09:44:e0:d3:e4:1f:
71:f0:f4:3c:75:76:fd:71:ee:69:a5:d9:7f:c3:44:d2:e5:cd:
50:1b:81:3b:a0:b1:d2:23:b0:c4:58:3b:7e:66:55:b9:0b:ea:
26:63:ba:72:f0:6f:2c:f5:74:9a:cd:3d:89:ed:d6:fe:c4:b6:
21:33:88:ae:35:91:45:14:e9:c4:72:44:9f:3f:47:33:23:3d:
8d:04:14:6e:8d:16:7e:58:ae:af:11:22:bf:23:a5:5c:8f:8e:
99:fe:61:b7:fd:5d:0b:0c:7b:58:9f:de:d7:5c:98:9d:30:24:
ad:09:00:e8:ca:60:c8:80:a1:6d:4e:88:a4:67:74:a9:34:7a:
a0:a7:38:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 13 01:25:43 2025 by rpki-client