Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/72/927638-fd47-4e56-bb9e-d7920ae44920/1/_nzo-_uEec-5drRDzDx84vcDq34.mft
File: _nzo-_uEec-5drRDzDx84vcDq34.mft (raw, json)
Hash identifier: +puCwiE1qnokDJo6LziKonMVPMhmy9lHr2iD0j7iceA=
Subject key identifier: E6:85:92:EC:2D:7A:D6:B6:E8:1A:56:23:E5:4F:D6:D7:E2:BC:4F:0A
Authority key identifier: FE:7C:E8:FB:FB:84:79:CF:B9:76:B4:43:CC:3C:7C:E2:F7:03:AB:7E
Certificate issuer: /CN=fe7ce8fbfb8479cfb976b443cc3c7ce2f703ab7e
Certificate serial: 0196BD8148A454FA25F9ACADFFC84E84520D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_nzo-_uEec-5drRDzDx84vcDq34.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/72/927638-fd47-4e56-bb9e-d7920ae44920/1/_nzo-_uEec-5drRDzDx84vcDq34.mft
Manifest number: 0C15
Signing time: Sun 11 May 2025 04:01:28 +0000
Manifest this update: Sun 11 May 2025 04:01:28 +0000
Manifest next update: Mon 12 May 2025 04:01:28 +0000
Files and hashes: 1: _nzo-_uEec-5drRDzDx84vcDq34.crl (hash: vRtBUZjo6boBNGpV87APe24P390PqD2fK/iOYpBtSZY=)
2: beiUjzIIFq8lUZEsjU5aHKjNnJA.roa (hash: mFm580c3qaH3SmCWZbvTiuZ0e3oedku3mVQP4lTuq5I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/72/927638-fd47-4e56-bb9e-d7920ae44920/1/_nzo-_uEec-5drRDzDx84vcDq34.crl
rsync://rpki.ripe.net/repository/DEFAULT/72/927638-fd47-4e56-bb9e-d7920ae44920/1/_nzo-_uEec-5drRDzDx84vcDq34.mft
rsync://rpki.ripe.net/repository/DEFAULT/_nzo-_uEec-5drRDzDx84vcDq34.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 12 May 2025 04:01:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:bd:81:48:a4:54:fa:25:f9:ac:ad:ff:c8:4e:84:52:0d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fe7ce8fbfb8479cfb976b443cc3c7ce2f703ab7e
Validity
Not Before: May 11 04:01:28 2025 GMT
Not After : May 12 04:01:28 2025 GMT
Subject: CN=e68592ec2d7ad6b6e81a5623e54fd6d7e2bc4f0a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:38:7c:e2:98:c9:43:ea:fa:76:1c:de:2e:d8:
f1:41:06:69:84:d9:63:aa:88:93:3a:f5:a1:b8:e1:
66:c2:43:e6:7b:06:ad:31:a6:92:d0:ba:b1:42:c5:
eb:ca:e0:12:d8:fd:3e:87:57:dc:1b:55:92:02:18:
83:0e:77:a4:cf:8a:91:fd:96:11:1e:7a:ea:80:f3:
4e:8d:a0:6f:7c:c0:a4:7a:0b:9d:fd:03:67:2e:1c:
ed:36:7a:d6:20:f4:e1:f0:6f:4b:f3:8e:4b:e5:75:
12:08:38:00:2f:38:4f:d9:c1:6f:69:1d:26:97:d3:
89:0d:2b:a1:db:f0:21:a9:28:87:c8:5f:b5:e5:87:
77:83:76:e0:69:07:03:ee:01:d0:ab:2c:e1:d8:b1:
51:10:43:40:db:76:11:0b:62:7b:25:5f:c9:8f:4e:
9f:88:aa:46:ec:7e:e7:5f:83:c8:72:35:fa:77:fb:
d1:fe:51:43:81:8d:d7:50:d9:b8:ec:d4:81:6a:73:
fa:c0:cf:cb:26:80:60:e0:ba:eb:d8:e6:43:f8:e1:
21:92:3b:e9:bf:a4:7a:8a:6d:a2:65:86:9a:48:bf:
27:98:03:29:79:ec:13:50:ce:c2:5b:9c:14:cf:7a:
50:60:8e:fc:60:82:60:a4:8b:bc:c8:ec:13:0d:79:
7a:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E6:85:92:EC:2D:7A:D6:B6:E8:1A:56:23:E5:4F:D6:D7:E2:BC:4F:0A
X509v3 Authority Key Identifier:
keyid:FE:7C:E8:FB:FB:84:79:CF:B9:76:B4:43:CC:3C:7C:E2:F7:03:AB:7E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_nzo-_uEec-5drRDzDx84vcDq34.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/72/927638-fd47-4e56-bb9e-d7920ae44920/1/_nzo-_uEec-5drRDzDx84vcDq34.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/72/927638-fd47-4e56-bb9e-d7920ae44920/1/_nzo-_uEec-5drRDzDx84vcDq34.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
18:79:d5:3b:ec:17:17:56:e0:ea:68:37:3f:c1:a9:54:db:39:
6b:fd:76:1d:e2:42:ea:89:c9:d2:f6:fb:fb:97:1c:aa:bb:12:
62:67:7d:47:ed:c8:f2:7f:04:da:35:99:0e:e4:84:f7:27:4c:
ba:75:b7:35:6f:07:cc:97:5f:6a:69:66:b0:c2:e1:41:b2:50:
44:8f:51:3c:92:f4:93:a8:cb:1f:7f:6e:b4:7e:c0:2c:bc:8f:
00:e2:5f:c1:f8:0d:60:db:6d:65:e4:3b:c4:91:6e:f2:cc:a3:
f5:75:81:75:a6:ac:c6:8c:3b:29:34:5a:62:ff:f3:89:67:db:
68:e6:ad:d2:28:fc:a4:87:8d:da:cd:3e:9f:52:83:37:22:b5:
3b:a4:39:a0:a8:2a:1e:4d:97:54:dc:9f:a4:0f:00:8f:88:67:
04:f8:3c:a9:d0:c4:3f:db:b5:eb:97:44:be:2e:ea:30:28:cb:
39:e2:88:d0:ac:7b:30:db:27:d7:97:2c:b8:48:5c:27:9c:4e:
fe:63:55:ea:84:a9:56:a1:9b:32:6e:e8:35:d3:6f:cc:8f:c1:
4d:85:9b:6c:43:98:4e:1b:33:8d:5f:91:83:b7:b7:42:59:52:
08:79:67:29:fa:36:16:b1:f9:9d:94:45:d1:b8:58:ae:cf:aa:
a0:85:8a:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 10:19:22 2025 by rpki-client