Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/60/d9aa88-6426-4933-a69a-80b96680f043/1/nuVP2fF_yXpwpb9BW3iJGxW495U.mft
File: nuVP2fF_yXpwpb9BW3iJGxW495U.mft (raw, json)
Hash identifier: plqLafe8CRNss1XqP5F/CEqwMw3L6axKLW3BSo3PvwM=
Subject key identifier: 90:9F:48:5C:26:53:0C:87:65:34:EA:D6:6A:BA:CC:2F:03:16:42:42
Authority key identifier: 9E:E5:4F:D9:F1:7F:C9:7A:70:A5:BF:41:5B:78:89:1B:15:B8:F7:95
Certificate issuer: /CN=9ee54fd9f17fc97a70a5bf415b78891b15b8f795
Certificate serial: 0196C570AA5AA98DFABC79ADE1E3AC64D35C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nuVP2fF_yXpwpb9BW3iJGxW495U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/60/d9aa88-6426-4933-a69a-80b96680f043/1/nuVP2fF_yXpwpb9BW3iJGxW495U.mft
Manifest number: 041E
Signing time: Mon 12 May 2025 17:00:17 +0000
Manifest this update: Mon 12 May 2025 17:00:17 +0000
Manifest next update: Tue 13 May 2025 17:00:17 +0000
Files and hashes: 1: nuVP2fF_yXpwpb9BW3iJGxW495U.crl (hash: c4zNC1pY/VCUpx2WEbg0NPzXyZ9Pp6LgaQKxxq82X2g=)
2: oeejnnEaMW40kAD0os79-L9Olv8.roa (hash: Gvc/AI8UECrR+ZR7n6+DgnfVkthLJTkqDD0SmDPbhaE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/60/d9aa88-6426-4933-a69a-80b96680f043/1/nuVP2fF_yXpwpb9BW3iJGxW495U.crl
rsync://rpki.ripe.net/repository/DEFAULT/60/d9aa88-6426-4933-a69a-80b96680f043/1/nuVP2fF_yXpwpb9BW3iJGxW495U.mft
rsync://rpki.ripe.net/repository/DEFAULT/nuVP2fF_yXpwpb9BW3iJGxW495U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 13 May 2025 14:31:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:c5:70:aa:5a:a9:8d:fa:bc:79:ad:e1:e3:ac:64:d3:5c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9ee54fd9f17fc97a70a5bf415b78891b15b8f795
Validity
Not Before: May 12 17:00:17 2025 GMT
Not After : May 13 17:00:17 2025 GMT
Subject: CN=909f485c26530c876534ead66abacc2f03164242
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:86:02:cd:99:57:cc:a0:b4:16:db:ea:c0:2e:
e3:9d:d7:c8:8c:d5:57:71:67:0d:0e:05:d1:64:41:
14:84:5b:51:13:26:53:64:46:aa:17:fd:e4:48:4a:
46:16:77:23:10:97:55:dd:f6:2b:e8:e4:5c:0e:f2:
37:1c:14:03:6b:b6:76:e4:ac:2a:20:e9:41:db:46:
72:40:5c:f8:aa:1c:16:a2:3d:49:c3:e0:94:1b:bc:
57:4c:5c:26:6f:35:88:87:0c:46:c9:f3:d4:28:fc:
e9:13:23:01:b0:f2:f9:a3:22:2a:ec:51:59:0f:d1:
b5:63:3b:eb:20:cb:d2:b2:cc:aa:23:aa:fa:f5:5e:
41:eb:79:f7:6b:9f:cb:bb:2f:7a:55:c7:26:9a:b8:
8a:3d:15:18:38:97:da:77:ba:3c:a9:a9:cb:5c:b9:
09:de:41:63:be:9f:ac:e8:9f:36:9c:66:3c:b7:b2:
c5:c3:8c:12:12:68:a0:1a:49:4c:56:ae:eb:af:29:
e2:59:9f:59:c9:74:9c:b5:a4:ea:1c:c6:80:4a:66:
61:ab:39:11:b1:a6:59:9a:0c:f4:d1:20:29:47:4f:
f3:fa:86:26:fa:40:3b:6d:c6:5f:f7:59:47:53:22:
19:9c:f3:25:ea:12:23:d0:ae:67:a7:02:7b:42:4b:
a5:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:9F:48:5C:26:53:0C:87:65:34:EA:D6:6A:BA:CC:2F:03:16:42:42
X509v3 Authority Key Identifier:
keyid:9E:E5:4F:D9:F1:7F:C9:7A:70:A5:BF:41:5B:78:89:1B:15:B8:F7:95
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nuVP2fF_yXpwpb9BW3iJGxW495U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/d9aa88-6426-4933-a69a-80b96680f043/1/nuVP2fF_yXpwpb9BW3iJGxW495U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/60/d9aa88-6426-4933-a69a-80b96680f043/1/nuVP2fF_yXpwpb9BW3iJGxW495U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1f:36:90:73:3c:ed:91:c3:37:fc:5c:15:46:08:0d:07:93:1a:
ae:ab:bd:23:4e:6c:78:4c:5c:c9:4c:43:9b:91:f2:02:b1:63:
0c:cf:d3:56:68:fc:68:c9:8c:3c:9f:f0:63:fe:d1:fb:a4:0b:
78:60:be:9f:cb:12:ae:e6:28:fa:42:b6:2a:2c:f8:93:3c:87:
5d:62:e7:79:5d:2f:ff:ba:2d:b5:94:42:8a:5e:e9:70:65:34:
2d:0f:34:9e:39:61:8e:ad:f4:c5:5c:ce:96:b9:27:49:c5:56:
0a:21:06:11:12:42:49:34:6c:59:f9:e9:c4:3b:60:68:4d:f2:
14:6e:f5:f3:e3:fd:00:9b:c6:98:4c:8b:f6:75:a3:f2:be:88:
81:9f:50:1c:eb:59:b9:85:fc:56:cc:06:f1:f8:dd:9f:d9:25:
36:99:ae:05:78:88:bd:6a:c6:8d:f3:9a:6a:ab:9a:77:00:a9:
02:87:98:25:6c:44:97:b3:ce:02:56:86:c8:89:ed:c6:4b:28:
9c:9f:cf:31:25:fc:88:58:81:bb:a7:76:13:80:e6:5a:de:e2:
18:23:84:c1:c8:c7:c3:98:a9:65:41:e4:0f:16:a7:a0:45:40:
cb:c9:1b:8e:53:6f:c5:2b:8b:9e:fb:ab:2a:1c:55:fd:00:11:
1d:04:91:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 12 21:36:15 2025 by rpki-client