Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8f/ff94f1-ba63-40d6-beca-5e624a3038cf/1/nBrtmRP4iAr3VX7vPvAtbg_z_Uk.mft
File: nBrtmRP4iAr3VX7vPvAtbg_z_Uk.mft (raw, json)
Hash identifier: sWSSB6odX/h/51L/EvBHmwBO1GN8X7E6ANUfr4NBiqM=
Subject key identifier: 8A:36:47:89:04:C6:CC:64:00:A9:94:2E:75:83:67:5E:A8:1D:4A:00
Authority key identifier: 9C:1A:ED:99:13:F8:88:0A:F7:55:7E:EF:3E:F0:2D:6E:0F:F3:FD:49
Certificate issuer: /CN=9c1aed9913f8880af7557eef3ef02d6e0ff3fd49
Certificate serial: 0196BC005C94EB1E254A09D5D38C18C56281
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nBrtmRP4iAr3VX7vPvAtbg_z_Uk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8f/ff94f1-ba63-40d6-beca-5e624a3038cf/1/nBrtmRP4iAr3VX7vPvAtbg_z_Uk.mft
Manifest number: 1550
Signing time: Sat 10 May 2025 21:01:02 +0000
Manifest this update: Sat 10 May 2025 21:01:02 +0000
Manifest next update: Sun 11 May 2025 21:01:02 +0000
Files and hashes: 1: 3f3HIccO3MohgHCLC_LlaFxa7sU.roa (hash: kCeD4JlEOramRmkp3pFIST1qhopaS50IqgyTgjDtfVo=)
2: nBrtmRP4iAr3VX7vPvAtbg_z_Uk.crl (hash: Prx4N4gdWb6FueoD9XnBc08VfMfA4VUp46o4njf4epI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8f/ff94f1-ba63-40d6-beca-5e624a3038cf/1/nBrtmRP4iAr3VX7vPvAtbg_z_Uk.crl
rsync://rpki.ripe.net/repository/DEFAULT/8f/ff94f1-ba63-40d6-beca-5e624a3038cf/1/nBrtmRP4iAr3VX7vPvAtbg_z_Uk.mft
rsync://rpki.ripe.net/repository/DEFAULT/nBrtmRP4iAr3VX7vPvAtbg_z_Uk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 11 May 2025 21:01:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:bc:00:5c:94:eb:1e:25:4a:09:d5:d3:8c:18:c5:62:81
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9c1aed9913f8880af7557eef3ef02d6e0ff3fd49
Validity
Not Before: May 10 21:01:02 2025 GMT
Not After : May 11 21:01:02 2025 GMT
Subject: CN=8a36478904c6cc6400a9942e7583675ea81d4a00
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:ab:38:da:29:88:7a:16:69:47:e9:d6:cd:4e:
59:a1:4c:2e:f8:b3:b6:f9:7c:ec:75:cd:2b:7b:5c:
5c:ef:69:fe:bf:41:f3:b5:e9:09:64:25:96:77:3b:
dd:58:89:c9:c9:0d:bb:bf:16:89:36:24:f6:f8:cf:
dc:e9:e3:75:ec:d7:ef:b1:28:71:d1:a2:04:7d:d5:
18:a6:3d:83:f3:36:a4:ce:00:ca:46:18:de:8d:83:
83:47:f0:d3:e4:4f:9d:27:08:7b:f3:25:7e:59:dd:
17:ee:76:b6:10:f9:93:13:56:37:e5:49:a4:cb:c8:
06:51:b4:eb:fd:f5:a0:d4:13:84:e7:fd:18:78:63:
fc:b6:77:f9:da:31:b4:42:40:21:e7:cc:f0:29:d1:
e3:8f:cc:a1:38:4b:88:20:89:68:98:3e:b3:0d:b0:
87:84:34:0a:95:96:29:f4:2b:36:77:27:57:4a:53:
48:af:63:44:d5:a6:4b:7f:12:f5:78:72:7e:d1:7e:
29:60:08:3b:1d:30:35:39:43:ba:9c:59:6e:bd:72:
7d:84:bd:bd:c4:f6:d0:44:8e:2e:35:12:c1:86:4b:
b0:d4:f0:f4:eb:8f:a9:a5:64:74:c1:f2:71:b3:68:
f2:8b:c9:f6:bf:67:c8:b3:f4:af:82:25:32:e4:59:
04:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:36:47:89:04:C6:CC:64:00:A9:94:2E:75:83:67:5E:A8:1D:4A:00
X509v3 Authority Key Identifier:
keyid:9C:1A:ED:99:13:F8:88:0A:F7:55:7E:EF:3E:F0:2D:6E:0F:F3:FD:49
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nBrtmRP4iAr3VX7vPvAtbg_z_Uk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/ff94f1-ba63-40d6-beca-5e624a3038cf/1/nBrtmRP4iAr3VX7vPvAtbg_z_Uk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/ff94f1-ba63-40d6-beca-5e624a3038cf/1/nBrtmRP4iAr3VX7vPvAtbg_z_Uk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c0:5f:4c:0d:93:78:83:3f:03:c6:c9:4c:e5:8b:6e:c1:97:d6:
19:86:b3:b2:2e:41:02:e3:25:b3:f0:50:79:7a:65:93:86:b8:
e8:17:f1:da:8b:39:11:f1:47:d4:1b:35:f1:1b:0d:47:28:0d:
bb:a8:6f:9c:3c:d5:82:9a:f5:33:21:a4:21:3b:51:15:39:aa:
55:ad:27:68:0a:2e:25:73:bd:94:e6:0b:54:0d:6c:25:9b:f1:
09:6d:3b:79:b5:72:f8:a9:18:cb:f5:44:76:56:4e:bd:18:25:
34:74:0f:65:a2:36:71:18:dd:50:b3:0a:b2:1d:45:cd:0d:60:
d2:21:1f:fd:53:92:ce:83:9a:6d:77:60:66:75:15:e8:62:85:
3b:7b:7e:d8:5e:4c:e2:c5:ed:f1:06:b4:3f:b7:b1:37:54:46:
9b:5f:72:3c:f2:71:cb:1b:bf:59:ee:61:9f:7f:0a:e4:29:9f:
95:a3:47:74:b0:fc:c4:42:85:13:f7:13:fe:27:68:84:3d:7d:
65:9c:22:e6:2f:c0:5d:26:31:c6:57:29:17:22:ea:f3:43:f5:
6f:44:99:a2:a9:07:3b:49:b2:4a:3f:28:ae:92:6c:12:f3:80:
df:01:66:34:db:ba:ed:67:19:c0:34:64:f4:35:f8:e4:40:ce:
b6:92:a1:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 02:00:24 2025 by rpki-client