Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/60/deb102-423f-4e92-b7c5-73d014e8349b/1/nPmIlqiK6PNUCut37KHxqUu9aXg.mft
File: nPmIlqiK6PNUCut37KHxqUu9aXg.mft (raw, json)
Hash identifier: KD3rdc+HChNaQRlYHzO9I9ThPhxRqUzp2738rLLm9gc=
Subject key identifier: 3E:89:5A:B4:A6:D6:0D:46:28:CC:E1:93:D4:A5:9D:65:8E:00:7A:D6
Authority key identifier: 9C:F9:88:96:A8:8A:E8:F3:54:0A:EB:77:EC:A1:F1:A9:4B:BD:69:78
Certificate issuer: /CN=9cf98896a88ae8f3540aeb77eca1f1a94bbd6978
Certificate serial: 0196CB04DD76780E884280F99A4AE2CC358F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nPmIlqiK6PNUCut37KHxqUu9aXg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/60/deb102-423f-4e92-b7c5-73d014e8349b/1/nPmIlqiK6PNUCut37KHxqUu9aXg.mft
Manifest number: 06D1
Signing time: Tue 13 May 2025 19:00:15 +0000
Manifest this update: Tue 13 May 2025 19:00:15 +0000
Manifest next update: Wed 14 May 2025 19:00:15 +0000
Files and hashes: 1: nPmIlqiK6PNUCut37KHxqUu9aXg.crl (hash: Aeb+sPPiV8bmx4pQF6VY2KkWzcUYBXx6zRl/U6aaWLg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/60/deb102-423f-4e92-b7c5-73d014e8349b/1/nPmIlqiK6PNUCut37KHxqUu9aXg.crl
rsync://rpki.ripe.net/repository/DEFAULT/60/deb102-423f-4e92-b7c5-73d014e8349b/1/nPmIlqiK6PNUCut37KHxqUu9aXg.mft
rsync://rpki.ripe.net/repository/DEFAULT/nPmIlqiK6PNUCut37KHxqUu9aXg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 14 May 2025 19:00:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:cb:04:dd:76:78:0e:88:42:80:f9:9a:4a:e2:cc:35:8f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9cf98896a88ae8f3540aeb77eca1f1a94bbd6978
Validity
Not Before: May 13 19:00:15 2025 GMT
Not After : May 14 19:00:15 2025 GMT
Subject: CN=3e895ab4a6d60d4628cce193d4a59d658e007ad6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:c0:9a:6f:b0:8c:f8:c5:dd:12:78:6e:78:4e:
96:6f:df:b3:44:50:3b:3c:7d:0a:af:cb:37:14:4d:
3f:09:df:e7:ed:3d:56:85:0b:d9:be:c8:0c:91:76:
06:e7:0e:43:93:86:48:2e:43:ff:67:46:47:f2:c5:
8b:c8:1f:0f:7a:36:c9:4f:77:15:a4:73:19:d4:4c:
30:c1:9a:e0:ce:72:05:fb:d3:5f:bb:bf:41:70:a8:
63:f0:6c:94:fc:ed:77:4d:c7:3e:fa:b0:7b:58:6a:
bd:21:0f:21:0b:e9:ae:0d:02:09:74:c7:7d:10:d6:
34:5e:69:fb:1c:77:27:8e:a6:26:2f:da:86:c9:1e:
61:85:c4:a3:1b:c0:d6:95:a3:12:c7:d0:74:b7:99:
1e:80:9e:bd:74:3f:f6:56:f2:81:c9:3c:1f:70:7a:
12:5b:cf:14:66:93:36:1f:69:ff:e3:11:09:87:d0:
16:5f:4c:a7:69:0b:c6:01:99:a5:70:4e:c8:ad:c2:
58:07:8c:8a:24:d7:fe:08:6f:2e:54:a0:22:5f:d9:
13:8f:80:ff:44:68:3d:c1:4d:70:b3:66:51:7c:9d:
d0:d7:5a:94:62:59:4d:05:17:fb:33:69:8c:ca:b6:
91:d8:cb:1a:65:fb:fa:5b:da:ab:0f:14:7b:b5:87:
fc:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:89:5A:B4:A6:D6:0D:46:28:CC:E1:93:D4:A5:9D:65:8E:00:7A:D6
X509v3 Authority Key Identifier:
keyid:9C:F9:88:96:A8:8A:E8:F3:54:0A:EB:77:EC:A1:F1:A9:4B:BD:69:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nPmIlqiK6PNUCut37KHxqUu9aXg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/deb102-423f-4e92-b7c5-73d014e8349b/1/nPmIlqiK6PNUCut37KHxqUu9aXg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/60/deb102-423f-4e92-b7c5-73d014e8349b/1/nPmIlqiK6PNUCut37KHxqUu9aXg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8e:74:06:7c:74:38:c9:75:d9:1f:07:68:c8:da:b9:b0:ea:41:
dc:77:03:6b:fb:4b:be:6e:d2:44:41:58:9f:60:5e:98:dc:a4:
3d:91:28:dd:62:25:11:41:e4:7c:95:a0:ba:8a:e9:58:9c:4a:
5c:fd:94:5b:12:e1:d0:55:04:89:2c:74:3b:4b:2d:f2:4c:61:
e1:33:14:ec:62:c6:46:57:3b:db:98:b9:fe:22:fd:7a:d7:08:
82:e7:9f:e7:82:7f:50:8a:ca:aa:a6:36:33:2d:b4:be:6e:fd:
f8:b0:d1:c7:bf:4e:37:f4:0c:81:52:98:0e:2a:8b:48:51:05:
83:0b:57:0b:1d:97:b5:b7:30:67:35:5e:a4:9d:bf:36:6c:a2:
81:22:e0:37:0c:04:de:d5:be:95:83:ae:d0:5c:dd:b8:69:24:
0f:9f:72:51:89:61:2b:bf:11:c0:8b:91:d5:f1:62:02:a6:36:
23:65:53:ac:42:02:8f:5f:4d:e8:be:30:61:a2:d9:9d:a8:45:
9f:dc:a9:04:39:43:00:fb:ca:78:b8:8d:6c:51:14:3c:54:7c:
6e:15:c6:b2:11:c5:29:5d:ad:7c:f4:6d:9c:30:62:f7:1b:63:
a8:18:a1:52:e7:d7:b9:9a:60:7d:2f:ff:35:3f:15:cd:e2:88:
3d:a1:83:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 14 03:04:24 2025 by rpki-client