Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/86/faa50f-4de1-4d1c-b803-19bf7810961b/1/nYwI9K2P6tNx2j58ArbP1on8pbo.mft
File: nYwI9K2P6tNx2j58ArbP1on8pbo.mft (raw, json)
Hash identifier: eqANi9X5g2RPb6NGLtxIDtJSIk2X554k2kgK0UxZGo0=
Subject key identifier: CE:B2:4E:5F:49:51:BE:38:A8:92:3F:CD:80:6D:52:79:F8:CE:F3:7D
Authority key identifier: 9D:8C:08:F4:AD:8F:EA:D3:71:DA:3E:7C:02:B6:CF:D6:89:FC:A5:BA
Certificate issuer: /CN=9d8c08f4ad8fead371da3e7c02b6cfd689fca5ba
Certificate serial: 0196C2021F7B8F4D294E6941357CF29B697A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nYwI9K2P6tNx2j58ArbP1on8pbo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/86/faa50f-4de1-4d1c-b803-19bf7810961b/1/nYwI9K2P6tNx2j58ArbP1on8pbo.mft
Manifest number: 0893
Signing time: Mon 12 May 2025 01:00:41 +0000
Manifest this update: Mon 12 May 2025 01:00:41 +0000
Manifest next update: Tue 13 May 2025 01:00:41 +0000
Files and hashes: 1: nJBx_aFvLLmg9WQ03TK76fpJWGM.roa (hash: 02dNoeVE9Sy74k3q/XOECz/G2VHIiUVMONX/87WPyrU=)
2: nYwI9K2P6tNx2j58ArbP1on8pbo.crl (hash: HfAYX2lIHJjrUiN41qHDSLKc2qrotc4Q5IKeqkV4b+8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/86/faa50f-4de1-4d1c-b803-19bf7810961b/1/nYwI9K2P6tNx2j58ArbP1on8pbo.crl
rsync://rpki.ripe.net/repository/DEFAULT/86/faa50f-4de1-4d1c-b803-19bf7810961b/1/nYwI9K2P6tNx2j58ArbP1on8pbo.mft
rsync://rpki.ripe.net/repository/DEFAULT/nYwI9K2P6tNx2j58ArbP1on8pbo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 13 May 2025 01:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:c2:02:1f:7b:8f:4d:29:4e:69:41:35:7c:f2:9b:69:7a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9d8c08f4ad8fead371da3e7c02b6cfd689fca5ba
Validity
Not Before: May 12 01:00:41 2025 GMT
Not After : May 13 01:00:41 2025 GMT
Subject: CN=ceb24e5f4951be38a8923fcd806d5279f8cef37d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:c7:91:cc:d1:9f:70:2a:9f:15:c3:26:51:b9:
fe:51:7b:06:c8:56:ca:13:d4:13:0b:44:79:ae:6c:
50:be:8f:e5:cb:46:6c:5f:02:7c:1d:6b:cb:84:b5:
56:6d:ae:a6:0d:f4:8c:8b:d9:53:64:4c:4a:2c:42:
ed:15:aa:42:e8:fa:9d:09:98:93:d4:65:5f:3e:85:
24:34:95:7d:da:24:ea:ba:c9:07:23:fb:2e:84:a3:
d9:17:1c:7f:ac:ea:73:82:1d:dd:95:23:f7:64:91:
10:4c:9d:98:88:4d:1c:a3:33:68:16:56:78:59:59:
e1:84:2c:ae:8c:10:80:47:bb:ff:47:46:d8:b4:33:
6b:eb:35:2d:1d:49:fd:1a:10:ef:dd:c2:51:c7:ed:
4e:77:82:aa:d3:b3:44:79:88:ab:00:fb:2a:40:1e:
b1:c5:50:3e:60:de:f1:6e:17:fc:bb:68:97:e7:fd:
16:98:29:6c:56:92:fd:de:bc:3f:bb:a8:52:08:22:
b0:17:b3:64:b2:a0:cc:ad:bb:37:db:7f:61:3f:37:
a8:65:e6:95:38:ea:96:a4:72:6d:77:5e:27:56:64:
a1:27:40:92:ec:50:d8:cd:18:d6:fd:4f:e5:54:18:
f1:3a:db:ce:2c:5c:a9:4b:c4:f7:24:af:70:66:0f:
41:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:B2:4E:5F:49:51:BE:38:A8:92:3F:CD:80:6D:52:79:F8:CE:F3:7D
X509v3 Authority Key Identifier:
keyid:9D:8C:08:F4:AD:8F:EA:D3:71:DA:3E:7C:02:B6:CF:D6:89:FC:A5:BA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nYwI9K2P6tNx2j58ArbP1on8pbo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/faa50f-4de1-4d1c-b803-19bf7810961b/1/nYwI9K2P6tNx2j58ArbP1on8pbo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/86/faa50f-4de1-4d1c-b803-19bf7810961b/1/nYwI9K2P6tNx2j58ArbP1on8pbo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8f:fd:47:54:04:98:b5:38:bb:6a:8a:f7:05:98:35:5c:c0:be:
89:be:69:ad:4a:b1:c4:39:26:15:e3:10:e6:26:82:30:da:48:
1f:7b:21:b4:c8:d7:8f:0d:30:e1:1e:76:d1:75:41:fc:ee:33:
77:1e:18:98:07:1c:05:04:58:68:50:4c:c0:71:03:8c:4b:49:
45:ab:89:96:7f:b6:fe:a3:36:e6:ce:60:84:c5:04:bd:38:28:
d0:cb:c6:93:31:65:08:dd:58:c5:c7:11:cf:89:a7:68:9d:f1:
9c:c4:56:4b:30:27:54:4a:cf:e9:ae:6e:4e:19:ec:5e:8d:94:
d4:c9:76:e3:44:ef:71:f3:d6:fe:be:86:1f:03:e2:c4:db:5e:
f6:39:de:4b:e6:04:95:b5:35:b1:55:1e:5a:3e:ee:a7:17:dd:
45:7d:68:2c:38:a0:40:fc:79:45:f3:0d:82:f7:c5:a4:09:5b:
0c:81:0d:82:eb:fe:ba:e1:38:0f:d2:aa:cc:2a:b0:45:5d:9e:
82:88:74:77:2c:e8:72:eb:bf:35:63:3a:20:c0:89:7d:c0:83:
df:1e:8c:32:21:ef:27:7e:0a:59:f5:13:b5:60:1d:85:c8:87:
ff:d2:c5:85:c7:8e:57:6b:f4:0c:b4:d2:3e:6c:5b:b1:d9:02:
23:a9:7d:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 12 11:17:21 2025 by rpki-client