Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/d9307d-9964-41d0-9bb9-46256dafec5e/1/nBBfWIvTBDjjPxwtKWdUxz341Ss.mft
File: nBBfWIvTBDjjPxwtKWdUxz341Ss.mft (raw, json)
Hash identifier: gJ2rUDDRkAoA5SZyeRgzD9hGluuQPrnD1GlAa/N7zKc=
Subject key identifier: C7:C9:D6:38:BB:55:B1:92:12:B0:57:3F:6C:EE:D6:3D:69:64:00:AB
Authority key identifier: 9C:10:5F:58:8B:D3:04:38:E3:3F:1C:2D:29:67:54:C7:3D:F8:D5:2B
Certificate issuer: /CN=9c105f588bd30438e33f1c2d296754c73df8d52b
Certificate serial: 0196BB920F36E8A8B46BAB84670B80F58E59
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nBBfWIvTBDjjPxwtKWdUxz341Ss.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/d9307d-9964-41d0-9bb9-46256dafec5e/1/nBBfWIvTBDjjPxwtKWdUxz341Ss.mft
Manifest number: 1531
Signing time: Sat 10 May 2025 19:00:33 +0000
Manifest this update: Sat 10 May 2025 19:00:33 +0000
Manifest next update: Sun 11 May 2025 19:00:33 +0000
Files and hashes: 1: nBBfWIvTBDjjPxwtKWdUxz341Ss.crl (hash: gF5aGO1o+CI274mE+W5T6goxTJ01w5ucaS81Ogi+B8g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8a/d9307d-9964-41d0-9bb9-46256dafec5e/1/nBBfWIvTBDjjPxwtKWdUxz341Ss.crl
rsync://rpki.ripe.net/repository/DEFAULT/8a/d9307d-9964-41d0-9bb9-46256dafec5e/1/nBBfWIvTBDjjPxwtKWdUxz341Ss.mft
rsync://rpki.ripe.net/repository/DEFAULT/nBBfWIvTBDjjPxwtKWdUxz341Ss.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 11 May 2025 19:00:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:bb:92:0f:36:e8:a8:b4:6b:ab:84:67:0b:80:f5:8e:59
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9c105f588bd30438e33f1c2d296754c73df8d52b
Validity
Not Before: May 10 19:00:33 2025 GMT
Not After : May 11 19:00:33 2025 GMT
Subject: CN=c7c9d638bb55b19212b0573f6ceed63d696400ab
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:c7:d6:a1:8a:52:b8:43:4c:90:46:be:9c:fb:
a3:86:33:a0:88:37:b0:8f:bf:dc:db:40:ba:8c:8b:
98:3b:2a:eb:fd:1e:50:8f:30:f7:f8:da:7a:6f:c8:
27:f6:c9:39:a7:fb:d8:70:5f:7d:d7:a8:ba:1f:5b:
e6:ce:86:75:bf:cc:e1:5c:0d:88:64:e8:4a:f2:2a:
42:e4:66:37:03:02:11:1f:1b:9e:6b:02:c4:5f:c3:
ac:2b:8d:f3:b2:e4:12:a2:3b:c1:d6:fe:b8:51:57:
b1:0b:a6:1d:93:1b:bb:9b:0d:a5:6d:68:9d:b9:61:
38:0a:8b:41:80:1c:8c:b6:d9:e8:77:3f:1b:e3:ad:
4d:7b:5f:a9:3d:80:5b:86:b4:df:52:dd:0a:1c:49:
0e:02:cf:56:ac:29:f8:a7:29:02:45:2f:63:e6:25:
ca:de:65:47:dd:46:47:86:32:20:c2:8f:ec:3e:d2:
d5:3c:8e:20:7d:47:54:81:f2:1f:c8:f3:3f:17:7b:
bc:62:44:ed:07:86:c0:69:1f:e9:a2:a0:7c:77:6b:
98:25:94:57:4b:22:26:e7:5e:f5:b9:8a:48:9f:cb:
55:09:0e:6f:35:0a:1f:43:92:8a:27:c7:3a:0b:ed:
a1:84:ef:f9:6d:4a:8e:ec:c8:d3:02:0e:c2:e4:76:
07:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:C9:D6:38:BB:55:B1:92:12:B0:57:3F:6C:EE:D6:3D:69:64:00:AB
X509v3 Authority Key Identifier:
keyid:9C:10:5F:58:8B:D3:04:38:E3:3F:1C:2D:29:67:54:C7:3D:F8:D5:2B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nBBfWIvTBDjjPxwtKWdUxz341Ss.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/d9307d-9964-41d0-9bb9-46256dafec5e/1/nBBfWIvTBDjjPxwtKWdUxz341Ss.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/d9307d-9964-41d0-9bb9-46256dafec5e/1/nBBfWIvTBDjjPxwtKWdUxz341Ss.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2b:e9:1b:48:47:df:b4:92:5c:0f:32:b5:c9:d5:d8:00:23:68:
fc:1c:ea:46:2a:4a:fc:e6:cf:e3:b2:f9:8e:79:76:05:d2:f7:
ca:14:6e:0c:dc:7b:b8:69:b5:e2:58:d2:0f:ea:49:c8:ab:b2:
f6:45:32:0a:21:a0:6f:fe:26:d6:da:db:c4:58:35:07:50:35:
61:5b:b7:c0:9c:78:69:dc:7c:b9:ae:e9:66:87:62:8c:7c:34:
e1:59:d5:c8:5f:2c:6a:ac:62:b7:54:31:4f:4f:5c:3d:41:0d:
70:4f:1f:b7:b2:79:ed:77:39:ad:64:f6:b0:04:7c:19:0a:78:
40:6a:f7:ad:a4:69:28:f2:fb:ed:db:aa:bb:31:c8:30:4e:58:
55:a5:38:3a:29:1b:3a:b1:1e:ab:b3:0c:bb:87:e8:9d:b0:29:
56:57:13:de:f6:ea:1f:84:a9:fe:fe:cd:9b:01:3d:2a:14:98:
f9:19:43:bb:75:81:24:49:1c:04:d5:bb:51:f6:98:a1:2d:39:
9b:ec:dd:70:9c:b2:06:03:4b:66:28:4d:03:86:bc:8e:86:55:
44:c3:75:53:ba:71:85:45:f0:b3:f4:ab:eb:50:56:4f:9e:95:
21:ed:39:9d:62:df:dd:9e:db:33:d8:f4:a2:bf:01:36:1e:73:
42:f4:17:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 02:07:02 2025 by rpki-client