Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/d8ac58-9a61-4852-9f2f-26f39384874f/1/nQ4wgHks-p8V8D6z_XbKaMjN4iA.mft
File: nQ4wgHks-p8V8D6z_XbKaMjN4iA.mft (raw, json)
Hash identifier: CHb0fnRqsnrHGTF7gURA/xVh62b3t+CIMSIzO+V/XsA=
Subject key identifier: 94:F1:B0:4A:AD:1F:6F:CB:B9:72:1B:8E:F6:58:D2:1A:6A:EF:21:11
Authority key identifier: 9D:0E:30:80:79:2C:FA:9F:15:F0:3E:B3:FD:76:CA:68:C8:CD:E2:20
Certificate issuer: /CN=9d0e3080792cfa9f15f03eb3fd76ca68c8cde220
Certificate serial: 0196C5A8478A37633E8A66DD8EEF28145886
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nQ4wgHks-p8V8D6z_XbKaMjN4iA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/d8ac58-9a61-4852-9f2f-26f39384874f/1/nQ4wgHks-p8V8D6z_XbKaMjN4iA.mft
Manifest number: 0854
Signing time: Mon 12 May 2025 18:01:01 +0000
Manifest this update: Mon 12 May 2025 18:01:01 +0000
Manifest next update: Tue 13 May 2025 18:01:01 +0000
Files and hashes: 1: nQ4wgHks-p8V8D6z_XbKaMjN4iA.crl (hash: BBlJHz/2Tw6JWQWh0txMluwteUl50j6VvFtJS3rdwcY=)
2: rXxUdbIPPXIqdDVbiUA9acHyJIM.roa (hash: 5bx7bg2hnSlwIm9l4N1LRlEvMvEQpIFQjXIt7GUC0r0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8b/d8ac58-9a61-4852-9f2f-26f39384874f/1/nQ4wgHks-p8V8D6z_XbKaMjN4iA.crl
rsync://rpki.ripe.net/repository/DEFAULT/8b/d8ac58-9a61-4852-9f2f-26f39384874f/1/nQ4wgHks-p8V8D6z_XbKaMjN4iA.mft
rsync://rpki.ripe.net/repository/DEFAULT/nQ4wgHks-p8V8D6z_XbKaMjN4iA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 13 May 2025 18:01:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:c5:a8:47:8a:37:63:3e:8a:66:dd:8e:ef:28:14:58:86
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9d0e3080792cfa9f15f03eb3fd76ca68c8cde220
Validity
Not Before: May 12 18:01:01 2025 GMT
Not After : May 13 18:01:01 2025 GMT
Subject: CN=94f1b04aad1f6fcbb9721b8ef658d21a6aef2111
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:0a:65:cd:f6:2c:40:34:0e:20:19:41:a7:ff:
0e:32:7f:0e:38:9c:1b:74:0c:e5:f8:4b:cb:24:f7:
f2:e8:84:2b:1d:6f:c9:a5:7b:73:08:0b:ea:83:71:
f2:69:fe:76:b1:8f:79:52:b4:a4:c5:4a:96:45:69:
6f:53:af:c1:46:8e:03:d8:88:34:36:44:2c:a3:f5:
d0:11:bf:b4:ef:19:18:a6:38:ad:a7:4e:74:94:03:
5d:c4:77:da:e3:a1:55:eb:5c:93:f6:6f:09:cd:c1:
bb:df:57:70:b0:18:14:9b:79:dd:9a:b6:f8:8f:ed:
29:f2:8c:62:06:a9:60:e9:1f:36:65:b7:a6:14:08:
b2:dd:94:99:e7:95:77:46:a5:cb:30:a3:6e:22:ca:
40:14:54:aa:83:71:c9:f9:d8:2e:1f:9f:85:64:3d:
09:e7:fb:8c:72:42:9a:48:c7:b1:c9:87:41:31:93:
92:c7:63:fc:d2:36:97:38:b7:94:83:a3:48:76:6f:
5d:f5:d1:50:40:6b:4a:0f:c2:8f:9f:75:7f:7f:f6:
d6:fc:f9:97:d1:3b:46:58:77:fb:bb:7d:fe:25:04:
2e:71:2c:3f:d9:35:8a:08:e5:75:e6:ba:05:4e:a4:
ef:49:58:f9:78:0e:e6:df:ac:8b:de:f5:02:c2:a2:
cf:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:F1:B0:4A:AD:1F:6F:CB:B9:72:1B:8E:F6:58:D2:1A:6A:EF:21:11
X509v3 Authority Key Identifier:
keyid:9D:0E:30:80:79:2C:FA:9F:15:F0:3E:B3:FD:76:CA:68:C8:CD:E2:20
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nQ4wgHks-p8V8D6z_XbKaMjN4iA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/d8ac58-9a61-4852-9f2f-26f39384874f/1/nQ4wgHks-p8V8D6z_XbKaMjN4iA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/d8ac58-9a61-4852-9f2f-26f39384874f/1/nQ4wgHks-p8V8D6z_XbKaMjN4iA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
77:2f:14:a7:4c:23:72:25:53:54:f3:5a:53:19:44:67:be:9a:
ec:25:e3:cc:7a:9f:b2:92:41:6d:96:98:d9:c9:a1:e0:b7:b9:
86:80:b9:f1:90:73:ae:15:b6:a1:d9:7c:f8:e2:2b:51:82:72:
ca:74:05:f9:46:23:15:1b:e0:72:b9:03:45:37:1c:49:a5:6b:
3e:cb:f2:50:1d:fd:23:1c:ac:b1:bc:22:3d:de:7f:e6:be:40:
a5:ad:bc:f8:59:fc:f3:39:c1:c8:ae:8d:0a:48:47:e6:be:b0:
80:d4:0a:3b:77:af:a6:71:38:fb:c1:03:49:ad:bc:66:65:f7:
34:74:41:f4:d3:8a:93:08:d3:77:64:f4:cd:6b:5c:aa:e7:b1:
53:36:40:88:d7:55:29:97:c7:23:22:e1:35:02:45:ab:24:1a:
44:9e:06:30:62:87:fe:c2:70:fb:35:35:84:c3:1f:a8:f6:86:
84:3c:16:ec:d6:64:33:3d:3b:c6:3d:ed:d8:96:85:33:0c:ad:
b9:ad:9c:ad:64:ac:72:d4:ed:75:f0:8f:7b:8b:57:fb:a8:9f:
88:31:d9:38:ff:0d:d1:c1:2d:02:07:00:b8:bf:fd:3e:2c:33:
ba:b7:b6:41:ba:e0:24:17:21:51:78:5d:a4:6a:c5:5e:ce:0c:
7c:d9:20:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 13 02:16:19 2025 by rpki-client