Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9b/ff25d7-5ffa-4686-8326-69d79c9d0721/1/nfbRY1k964rv8HL-yljm8_HE5-U.mft
File: nfbRY1k964rv8HL-yljm8_HE5-U.mft (raw, json)
Hash identifier: opkN2tZRgvv0QJaNSQX8h2/MPK4vykZBO67zph5RB3I=
Subject key identifier: F5:C2:27:CC:E0:5B:50:01:66:CA:91:1A:63:9B:E4:65:E1:91:69:AF
Authority key identifier: 9D:F6:D1:63:59:3D:EB:8A:EF:F0:72:FE:CA:58:E6:F3:F1:C4:E7:E5
Certificate issuer: /CN=9df6d163593deb8aeff072feca58e6f3f1c4e7e5
Certificate serial: 0196C239A07B4199CD9EAE8EF3A2E2E6C23A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nfbRY1k964rv8HL-yljm8_HE5-U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9b/ff25d7-5ffa-4686-8326-69d79c9d0721/1/nfbRY1k964rv8HL-yljm8_HE5-U.mft
Manifest number: 0BD2
Signing time: Mon 12 May 2025 02:01:18 +0000
Manifest this update: Mon 12 May 2025 02:01:18 +0000
Manifest next update: Tue 13 May 2025 02:01:18 +0000
Files and hashes: 1: XM057xIBl4X4QJASTmfkRwaiNaE.roa (hash: vZ1H1/yQjb9EVPL0oyydRTCpB/F5AEPyVx/M+2z5CZ0=)
2: nfbRY1k964rv8HL-yljm8_HE5-U.crl (hash: kuEgQ1l2F6kvcvKk+g0FXzkXhNGERcBcnyQyW2Agefg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9b/ff25d7-5ffa-4686-8326-69d79c9d0721/1/nfbRY1k964rv8HL-yljm8_HE5-U.crl
rsync://rpki.ripe.net/repository/DEFAULT/9b/ff25d7-5ffa-4686-8326-69d79c9d0721/1/nfbRY1k964rv8HL-yljm8_HE5-U.mft
rsync://rpki.ripe.net/repository/DEFAULT/nfbRY1k964rv8HL-yljm8_HE5-U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 13 May 2025 01:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:c2:39:a0:7b:41:99:cd:9e:ae:8e:f3:a2:e2:e6:c2:3a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9df6d163593deb8aeff072feca58e6f3f1c4e7e5
Validity
Not Before: May 12 02:01:18 2025 GMT
Not After : May 13 02:01:18 2025 GMT
Subject: CN=f5c227cce05b500166ca911a639be465e19169af
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:ac:dd:72:4e:4a:f6:17:6f:ea:81:1a:cf:9d:
a4:7c:13:ed:ce:02:d0:d5:3c:63:79:86:10:35:0c:
af:eb:38:6f:de:30:90:a7:a4:b9:f2:c5:bf:e0:20:
69:6b:10:a4:1b:17:c4:d6:ae:4f:b0:1e:d0:80:42:
4a:84:c6:34:c8:27:99:46:ea:e2:a5:54:39:e7:cf:
59:77:ff:55:6f:f7:f6:50:22:53:06:35:2a:17:18:
fd:00:7d:ea:62:e9:15:0a:e3:02:7e:80:0f:74:83:
95:d3:0c:bf:ee:cc:a5:4a:c2:60:de:d1:8e:88:87:
a2:ee:9a:20:6d:0a:bc:41:4a:40:f4:79:3d:fa:84:
94:8c:57:0f:fa:ab:e8:b8:1d:bf:89:ad:d7:e8:65:
c2:3a:dc:48:5e:5f:f5:d0:ff:de:ec:f3:b0:9d:6e:
e4:0a:3b:7b:54:a2:a2:85:80:34:94:eb:96:d2:42:
2f:ef:0b:2d:b1:dc:15:6a:ae:2f:0a:d6:2c:9b:97:
17:16:80:23:dc:f6:72:2b:e4:22:d0:8b:79:61:c5:
49:25:cc:8c:08:26:60:5c:fd:96:a3:b3:b1:65:62:
02:48:3c:13:3f:bf:44:0b:c9:9c:40:59:2b:69:ee:
4c:80:64:27:9b:e5:14:1d:11:45:34:73:9f:ba:df:
bf:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:C2:27:CC:E0:5B:50:01:66:CA:91:1A:63:9B:E4:65:E1:91:69:AF
X509v3 Authority Key Identifier:
keyid:9D:F6:D1:63:59:3D:EB:8A:EF:F0:72:FE:CA:58:E6:F3:F1:C4:E7:E5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nfbRY1k964rv8HL-yljm8_HE5-U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/ff25d7-5ffa-4686-8326-69d79c9d0721/1/nfbRY1k964rv8HL-yljm8_HE5-U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/ff25d7-5ffa-4686-8326-69d79c9d0721/1/nfbRY1k964rv8HL-yljm8_HE5-U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ae:03:72:d9:cb:f0:d1:ab:b9:56:af:0f:52:79:05:0f:46:b2:
04:64:1c:85:fb:e4:bd:33:8e:94:ff:77:04:f6:91:dc:54:f1:
c2:34:dd:01:f3:12:49:61:ed:c3:95:f7:78:81:e1:0e:f0:78:
8a:b0:9f:7e:ff:89:3f:cd:4b:0e:fd:6d:e3:23:a6:ec:50:bd:
ae:70:81:4c:e0:eb:ef:09:80:e1:53:ef:e6:eb:b1:40:0d:b7:
7c:81:b6:e6:1f:55:a5:d4:ec:30:59:dd:83:5e:35:14:cf:c2:
7d:97:2b:fe:5e:9a:fc:73:1d:94:ca:82:66:83:b2:94:ef:d5:
a4:39:6a:f1:12:85:44:8c:1b:f4:1d:db:cb:ef:ef:59:d0:99:
60:c3:0e:3b:39:ed:eb:95:bd:c2:7a:be:5d:44:9c:c6:1d:ca:
6b:5d:09:45:da:8b:a9:82:bc:b2:01:b5:82:84:aa:ea:1b:83:
3a:74:8a:33:3f:47:ae:ba:02:f6:6a:a6:3a:cd:2d:2d:94:72:
a5:b1:b5:1d:07:b9:d1:dc:53:2d:95:8e:e5:01:67:63:ee:d7:
56:f9:cc:d1:e8:7d:d5:24:61:9f:cd:d6:ad:f8:e9:ac:46:22:
66:31:6f:72:be:42:7f:70:03:85:c3:9e:65:08:9a:c8:a5:60:
d5:2a:33:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 12 09:27:30 2025 by rpki-client