Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/8928f1-8618-4c19-9f3d-4b8793db7460/1/nGIPMbSZfHNFvGa0a0PWhr8Akxo.mft
File: nGIPMbSZfHNFvGa0a0PWhr8Akxo.mft (raw, json)
Hash identifier: 9mA96nGfsejQdoLxh0wwOlAGwEDDfpaBsEanfbOfgGo=
Subject key identifier: 92:4E:0A:1E:46:B6:55:C0:C7:24:94:32:9A:EA:D1:5A:D8:6C:F7:47
Authority key identifier: 9C:62:0F:31:B4:99:7C:73:45:BC:66:B4:6B:43:D6:86:BF:00:93:1A
Certificate issuer: /CN=9c620f31b4997c7345bc66b46b43d686bf00931a
Certificate serial: 0196BF380FF78B695AD513F09E99184E0837
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nGIPMbSZfHNFvGa0a0PWhr8Akxo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/8928f1-8618-4c19-9f3d-4b8793db7460/1/nGIPMbSZfHNFvGa0a0PWhr8Akxo.mft
Manifest number: 05FB
Signing time: Sun 11 May 2025 12:00:44 +0000
Manifest this update: Sun 11 May 2025 12:00:44 +0000
Manifest next update: Mon 12 May 2025 12:00:44 +0000
Files and hashes: 1: nGIPMbSZfHNFvGa0a0PWhr8Akxo.crl (hash: 7EyCYf5uzPbb0D0EEy6iW9rLV774lWNqfHmCg0yxwWQ=)
2: wxRtFa54V_vU8mgLHIqlXUzZMOc.roa (hash: PMULlzIWB9KqtKOtRO+7MsiWSaPQynQGmN9eXMu6mPc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/66/8928f1-8618-4c19-9f3d-4b8793db7460/1/nGIPMbSZfHNFvGa0a0PWhr8Akxo.crl
rsync://rpki.ripe.net/repository/DEFAULT/66/8928f1-8618-4c19-9f3d-4b8793db7460/1/nGIPMbSZfHNFvGa0a0PWhr8Akxo.mft
rsync://rpki.ripe.net/repository/DEFAULT/nGIPMbSZfHNFvGa0a0PWhr8Akxo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 12 May 2025 12:00:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:bf:38:0f:f7:8b:69:5a:d5:13:f0:9e:99:18:4e:08:37
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9c620f31b4997c7345bc66b46b43d686bf00931a
Validity
Not Before: May 11 12:00:44 2025 GMT
Not After : May 12 12:00:44 2025 GMT
Subject: CN=924e0a1e46b655c0c72494329aead15ad86cf747
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:4d:13:3a:9a:ee:41:a8:3c:47:5c:5b:f2:46:
f3:de:2e:57:de:40:2b:00:50:c0:06:a5:47:5f:58:
ff:64:53:69:9d:6c:79:e0:c8:b4:94:9f:3c:ea:12:
92:b9:77:28:77:d6:5f:83:99:7f:aa:91:00:13:f1:
32:b6:80:9d:02:8c:f3:96:ee:f4:93:7b:c6:a6:f0:
a3:03:32:05:d8:2a:06:91:d4:ce:db:8e:54:1d:74:
0f:81:1d:cf:68:6e:18:bb:cd:02:bc:e6:e1:19:19:
be:28:2c:4b:0b:04:bd:02:a0:f5:df:de:ef:cd:ae:
f2:d8:d3:f6:b2:46:3f:b5:f4:fa:fd:91:cf:f2:32:
74:96:8b:c8:86:bd:38:33:20:69:f2:2b:e2:53:c3:
98:29:a3:50:a4:f0:57:a5:0c:9b:29:13:df:39:81:
2d:08:b9:3c:94:57:42:7a:0b:a9:a9:4e:a6:94:73:
8c:38:d7:1e:e1:cc:1e:14:58:b2:51:56:8f:b5:d2:
43:a1:74:63:ab:cb:94:5e:36:4e:7a:5d:22:0e:e4:
44:6a:15:e6:4d:f6:80:44:09:d7:77:e9:34:7f:01:
7d:2b:de:59:d6:8f:e0:75:e6:31:65:4b:ce:a3:04:
47:ca:f8:4e:15:c2:6c:ff:f3:30:9a:8e:c6:58:d2:
a2:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:4E:0A:1E:46:B6:55:C0:C7:24:94:32:9A:EA:D1:5A:D8:6C:F7:47
X509v3 Authority Key Identifier:
keyid:9C:62:0F:31:B4:99:7C:73:45:BC:66:B4:6B:43:D6:86:BF:00:93:1A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nGIPMbSZfHNFvGa0a0PWhr8Akxo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/8928f1-8618-4c19-9f3d-4b8793db7460/1/nGIPMbSZfHNFvGa0a0PWhr8Akxo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/8928f1-8618-4c19-9f3d-4b8793db7460/1/nGIPMbSZfHNFvGa0a0PWhr8Akxo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0a:c8:be:92:62:8e:51:75:3b:ab:75:8b:b1:f1:66:0d:14:40:
93:1f:48:80:e6:d5:4f:a9:82:9c:d8:0e:5c:40:ce:f3:87:8c:
c4:6f:15:04:a7:a1:3c:32:f0:c7:12:3b:b9:4b:ea:20:ba:2b:
8a:ff:f9:e2:50:96:c9:02:a5:ab:5a:c2:dd:6d:bf:a2:60:69:
72:5e:e7:13:b1:49:15:7e:c1:09:b6:24:7b:86:3c:48:a1:84:
80:25:f0:92:4b:03:b8:43:d9:bd:c3:14:2c:53:ff:b4:5d:ed:
ee:33:05:c7:3f:8e:04:ac:ab:9a:ab:49:aa:e9:2c:50:1f:55:
da:cf:e5:6a:0b:9e:c6:88:c9:9e:cb:47:a0:14:e6:99:aa:ba:
d6:ee:ad:7e:5d:69:de:e2:bb:f8:37:51:86:08:52:11:0e:6d:
35:85:a0:0c:74:48:91:b3:7e:60:6e:e2:8f:5a:28:1c:db:6b:
e3:82:4c:35:b6:1c:e9:12:c6:70:16:09:a3:b5:cd:e6:0a:17:
01:fc:16:a3:be:74:44:3b:36:dd:35:c2:13:bf:c6:8b:7b:50:
a4:05:49:08:7d:9d:1d:d8:34:a3:e8:af:3f:25:cd:66:72:f4:
7f:b3:df:fc:60:4b:62:99:a6:02:87:e3:84:a5:37:9f:6b:d5:
7e:6a:06:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 18:55:45 2025 by rpki-client