Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/93/60e957-1e17-410e-91a1-96b7e0a8ee09/1/nOYfsJJrzgyvrdDysZNIiVpEgUc.mft
File: nOYfsJJrzgyvrdDysZNIiVpEgUc.mft (raw, json)
Hash identifier: YJTKvoqlz7Qgl+/xXghhQElpvk7VrPqLho9kWlyfHVo=
Subject key identifier: C3:7A:EC:E5:3E:11:A2:00:A3:1F:3D:D0:69:C0:83:ED:A4:D9:88:B4
Authority key identifier: 9C:E6:1F:B0:92:6B:CE:0C:AF:AD:D0:F2:B1:93:48:89:5A:44:81:47
Certificate issuer: /CN=9ce61fb0926bce0cafadd0f2b19348895a448147
Certificate serial: 0196C6BABB67D9A25295DF50A5183D0E1A7F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nOYfsJJrzgyvrdDysZNIiVpEgUc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/93/60e957-1e17-410e-91a1-96b7e0a8ee09/1/nOYfsJJrzgyvrdDysZNIiVpEgUc.mft
Manifest number: 012B
Signing time: Mon 12 May 2025 23:00:48 +0000
Manifest this update: Mon 12 May 2025 23:00:48 +0000
Manifest next update: Tue 13 May 2025 23:00:48 +0000
Files and hashes: 1: 7ZCM2DGQAxMoqKS4r08nTwBlTvg.roa (hash: Nsq7TZX/LJBEuY63VFLqAaBjZcBcw7djLWbv9kH4DH4=)
2: nOYfsJJrzgyvrdDysZNIiVpEgUc.crl (hash: IB5AW1tEbaLCnSuCkeVUOTj+5DikIe6RufOAkupAifY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/93/60e957-1e17-410e-91a1-96b7e0a8ee09/1/nOYfsJJrzgyvrdDysZNIiVpEgUc.crl
rsync://rpki.ripe.net/repository/DEFAULT/93/60e957-1e17-410e-91a1-96b7e0a8ee09/1/nOYfsJJrzgyvrdDysZNIiVpEgUc.mft
rsync://rpki.ripe.net/repository/DEFAULT/nOYfsJJrzgyvrdDysZNIiVpEgUc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 13 May 2025 23:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:c6:ba:bb:67:d9:a2:52:95:df:50:a5:18:3d:0e:1a:7f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9ce61fb0926bce0cafadd0f2b19348895a448147
Validity
Not Before: May 12 23:00:48 2025 GMT
Not After : May 13 23:00:48 2025 GMT
Subject: CN=c37aece53e11a200a31f3dd069c083eda4d988b4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:22:90:c3:8c:64:c0:d1:8f:8e:71:2d:06:d2:
d1:2c:0b:66:2f:51:56:4b:07:bc:75:20:dc:9b:ac:
ee:d2:92:c2:a2:3f:84:c6:40:9e:0a:da:e0:6b:b7:
84:c8:0d:60:37:9b:d5:a7:6c:03:55:a6:86:8e:1c:
75:b2:bb:48:6a:4e:97:f8:73:8a:90:a0:79:4b:bf:
5b:89:50:61:24:1a:86:0f:b7:48:b9:41:61:d8:73:
d2:e9:4c:9a:33:9b:dd:1d:16:5f:fa:fa:5a:ce:45:
bb:91:ed:1f:41:17:b1:d6:22:8c:db:cd:2f:68:b8:
f2:72:23:4a:a1:39:b5:ef:84:40:15:4c:c9:c1:f3:
b3:e6:f8:f2:f3:99:b6:53:e0:48:5d:dc:b3:f1:af:
df:ce:0b:d5:a2:d1:9d:61:ad:4a:e5:2a:f7:70:03:
af:cf:c6:da:96:c5:e0:fd:09:c3:36:df:43:1c:c6:
19:80:92:94:4b:ac:b5:17:d3:45:56:98:41:bc:eb:
4b:42:d3:89:48:6c:15:5b:41:98:10:51:76:97:6b:
b7:04:47:f5:1d:32:0e:bd:99:d6:27:7d:e7:5e:37:
79:eb:8b:78:4d:6f:e0:a9:90:0f:b3:54:ea:6f:2c:
a6:08:8c:ad:6f:c0:88:76:c9:3b:72:d8:75:bd:f3:
30:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:7A:EC:E5:3E:11:A2:00:A3:1F:3D:D0:69:C0:83:ED:A4:D9:88:B4
X509v3 Authority Key Identifier:
keyid:9C:E6:1F:B0:92:6B:CE:0C:AF:AD:D0:F2:B1:93:48:89:5A:44:81:47
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nOYfsJJrzgyvrdDysZNIiVpEgUc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/93/60e957-1e17-410e-91a1-96b7e0a8ee09/1/nOYfsJJrzgyvrdDysZNIiVpEgUc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/93/60e957-1e17-410e-91a1-96b7e0a8ee09/1/nOYfsJJrzgyvrdDysZNIiVpEgUc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1e:99:1e:e5:1d:84:79:61:0e:17:c5:38:80:7c:75:c6:ab:3a:
8f:08:e3:5f:3f:81:46:20:f9:c3:74:ec:ce:c2:7a:c0:33:fb:
9f:bd:0d:1b:78:9a:f8:5a:e9:07:5a:50:04:d9:f5:1a:d8:77:
0a:22:86:f7:fe:08:fb:2c:b0:08:6d:2f:16:b8:87:c0:fa:d7:
b2:5c:ea:18:ed:a8:7f:d0:d9:56:8c:8c:70:5f:60:d9:aa:3b:
38:0b:93:a3:74:0a:57:eb:96:b5:f1:9a:9d:64:d8:5c:81:fa:
bd:f8:e8:2c:1c:aa:e8:f6:0f:49:d0:d5:f5:33:19:ca:41:d7:
82:5f:5a:cc:fc:c1:42:57:71:7e:02:c9:05:a0:7b:bc:15:bc:
c3:7b:76:c7:06:77:87:66:45:c6:e9:da:22:f0:97:37:26:97:
b9:40:b8:f9:90:32:fd:09:d2:10:c8:26:e8:e6:d2:d7:58:4d:
23:9f:5f:96:69:5f:e0:49:2d:0c:34:96:d6:28:a1:e9:f7:be:
f1:b4:b7:e6:35:a6:54:e8:94:56:59:ef:55:81:e1:c1:27:13:
e5:57:20:49:14:7a:8b:b4:9c:86:08:13:67:b9:28:44:5c:89:
87:aa:c3:48:30:df:c2:6e:a8:1f:7f:f2:f6:73:66:ef:2d:75:
60:c2:7a:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 13 09:42:58 2025 by rpki-client