Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9c/12c712-0c6e-4fb5-90d9-c1f9158243ea/1/nkVus5ycwGznHHdUoD8_PwCSgd0.mft
File: nkVus5ycwGznHHdUoD8_PwCSgd0.mft (raw, json)
Hash identifier: 5ec6tYSIAU5E1x1WcSMTTAUgFivyWIXoeZkdMvkyEIU=
Subject key identifier: 3C:AD:2D:AA:BB:99:05:B7:94:30:D6:C1:87:E8:A9:A4:BE:2B:4C:E8
Authority key identifier: 9E:45:6E:B3:9C:9C:C0:6C:E7:1C:77:54:A0:3F:3F:3F:00:92:81:DD
Certificate issuer: /CN=9e456eb39c9cc06ce71c7754a03f3f3f009281dd
Certificate serial: 0196C6F17D9D52786C09289EE8DFDE39AD95
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nkVus5ycwGznHHdUoD8_PwCSgd0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9c/12c712-0c6e-4fb5-90d9-c1f9158243ea/1/nkVus5ycwGznHHdUoD8_PwCSgd0.mft
Manifest number: 153A
Signing time: Tue 13 May 2025 00:00:37 +0000
Manifest this update: Tue 13 May 2025 00:00:37 +0000
Manifest next update: Wed 14 May 2025 00:00:37 +0000
Files and hashes: 1: 0e3XvmLgCCLyXX2Pnl1oUQprG1Y.roa (hash: FMORsyXFiyuBPfP/wfzNQt83A1mlYj2dL5G6obhc0aU=)
2: nkVus5ycwGznHHdUoD8_PwCSgd0.crl (hash: JEnQTaTR7pppbAbBfYzsvb5UCui7R35NZ4etXO5GyMM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9c/12c712-0c6e-4fb5-90d9-c1f9158243ea/1/nkVus5ycwGznHHdUoD8_PwCSgd0.crl
rsync://rpki.ripe.net/repository/DEFAULT/9c/12c712-0c6e-4fb5-90d9-c1f9158243ea/1/nkVus5ycwGznHHdUoD8_PwCSgd0.mft
rsync://rpki.ripe.net/repository/DEFAULT/nkVus5ycwGznHHdUoD8_PwCSgd0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 13 May 2025 20:47:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:c6:f1:7d:9d:52:78:6c:09:28:9e:e8:df:de:39:ad:95
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9e456eb39c9cc06ce71c7754a03f3f3f009281dd
Validity
Not Before: May 13 00:00:37 2025 GMT
Not After : May 14 00:00:37 2025 GMT
Subject: CN=3cad2daabb9905b79430d6c187e8a9a4be2b4ce8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:d0:29:52:f5:45:28:57:e7:6d:c4:68:73:55:
77:44:94:16:be:5f:db:ca:eb:e0:71:6f:48:62:93:
09:0d:6c:d5:54:7a:b2:20:2f:2e:6e:cc:ec:fd:df:
81:c4:5d:6b:b8:b8:fd:11:5a:0a:11:51:c7:3b:69:
bf:09:e7:51:41:7c:cf:69:fc:ee:ec:71:82:19:37:
7e:cf:ee:ef:ee:e4:bf:23:d1:72:91:41:3a:83:46:
7e:17:4a:81:52:1c:1b:34:50:ed:9f:d4:0a:15:f8:
e8:f0:9d:0e:d9:9f:cf:c6:84:7d:7e:0b:58:b1:8d:
a2:82:5b:f8:5c:37:2c:3e:79:f9:5b:46:4f:80:ff:
ca:0d:c5:25:78:d4:e6:aa:16:6f:f2:fb:57:d2:35:
04:fd:9d:d0:0f:99:f3:cd:1b:3d:e0:fe:ea:52:ad:
ec:56:c1:e8:a5:b8:9e:a9:7e:34:6a:13:dd:7f:40:
95:f5:96:44:bf:f0:ff:1b:fb:b8:40:bf:49:21:7b:
0f:3d:93:8c:34:05:1f:99:8b:0c:67:df:dd:d2:6d:
60:55:89:e6:14:ad:7b:37:05:af:e2:f8:2a:ea:0f:
15:4b:c9:58:c3:b6:36:50:dc:a7:c5:78:73:31:5f:
0f:6f:3f:b5:e4:a9:7f:b3:cf:1a:18:83:8e:f5:b0:
a6:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:AD:2D:AA:BB:99:05:B7:94:30:D6:C1:87:E8:A9:A4:BE:2B:4C:E8
X509v3 Authority Key Identifier:
keyid:9E:45:6E:B3:9C:9C:C0:6C:E7:1C:77:54:A0:3F:3F:3F:00:92:81:DD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nkVus5ycwGznHHdUoD8_PwCSgd0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/12c712-0c6e-4fb5-90d9-c1f9158243ea/1/nkVus5ycwGznHHdUoD8_PwCSgd0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/12c712-0c6e-4fb5-90d9-c1f9158243ea/1/nkVus5ycwGznHHdUoD8_PwCSgd0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a0:ba:27:c9:c7:ed:42:9a:63:e2:d1:17:91:fb:60:be:f5:d6:
fc:e6:70:82:33:9f:93:3d:f1:39:6c:1b:cb:cd:6f:6f:ec:24:
4b:b6:1a:b5:ce:6b:38:7d:66:c6:75:ee:b5:91:97:8e:98:cc:
66:b0:43:be:81:4c:8a:f3:7b:b7:61:29:6b:10:3e:f8:18:81:
3f:c5:73:02:a5:b2:02:2c:b4:f7:95:b3:05:f4:f1:b4:52:f6:
b8:f9:d3:a0:c3:0e:1b:cb:6a:11:f2:71:79:4e:d3:47:fb:4b:
44:ed:57:4f:b1:5c:00:f6:a7:5f:a4:4a:bc:f6:01:84:11:c1:
3c:b1:04:d3:4f:ba:09:f7:b4:32:10:75:7f:31:1e:45:0f:ed:
74:93:c6:b2:5f:1f:17:b7:45:e0:a5:67:cc:d8:3f:5a:7a:d7:
31:50:28:d8:4a:d4:7d:8f:6f:0d:9e:c5:e4:93:ba:fe:d5:e8:
f7:28:29:00:b0:0c:ee:3b:f4:e3:b0:99:17:cb:e0:67:f1:06:
8f:1e:a5:6c:8a:c0:d8:f3:49:50:9b:32:8e:f4:38:cc:98:51:
74:77:40:5b:09:77:45:6b:20:65:cf:69:6a:fd:2d:68:45:4b:
9e:36:e1:d4:45:6f:09:7e:28:ac:2f:65:39:47:aa:b3:fd:31:
53:bf:26:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 13 03:01:37 2025 by rpki-client