Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9d/af15eb-7a4d-4b0e-bebb-e9bede00c6af/1/nXuwBCAf0FtJ0SIfzkdZ6nC-xoQ.mft
File: nXuwBCAf0FtJ0SIfzkdZ6nC-xoQ.mft (raw, json)
Hash identifier: DNmZPgw5kOXqi7dhKDg/Dbtyyus+nYj2WJbICS2VDpc=
Subject key identifier: 76:0E:59:C3:71:AA:88:91:1E:93:CA:F6:F2:D0:04:59:49:95:01:35
Authority key identifier: 9D:7B:B0:04:20:1F:D0:5B:49:D1:22:1F:CE:47:59:EA:70:BE:C6:84
Certificate issuer: /CN=9d7bb004201fd05b49d1221fce4759ea70bec684
Certificate serial: 0196A0F6BB3ECE7879F1964D93BD0F59A5F3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nXuwBCAf0FtJ0SIfzkdZ6nC-xoQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9d/af15eb-7a4d-4b0e-bebb-e9bede00c6af/1/nXuwBCAf0FtJ0SIfzkdZ6nC-xoQ.mft
Manifest number: 1524
Signing time: Mon 05 May 2025 15:00:46 +0000
Manifest this update: Mon 05 May 2025 15:00:46 +0000
Manifest next update: Tue 06 May 2025 15:00:46 +0000
Files and hashes: 1: nXuwBCAf0FtJ0SIfzkdZ6nC-xoQ.crl (hash: yO68Bhn0P8oAOGLxi6wPeZceuU41nrqHzHzozmnES/E=)
2: qtN5JDorwotYpcUYWZc-ptH61p4.roa (hash: fKxhmPTYMHuqQdNEmPm2wnJirNcSsOemwlg1fw0Aem0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9d/af15eb-7a4d-4b0e-bebb-e9bede00c6af/1/nXuwBCAf0FtJ0SIfzkdZ6nC-xoQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/9d/af15eb-7a4d-4b0e-bebb-e9bede00c6af/1/nXuwBCAf0FtJ0SIfzkdZ6nC-xoQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/nXuwBCAf0FtJ0SIfzkdZ6nC-xoQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 06 May 2025 10:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:a0:f6:bb:3e:ce:78:79:f1:96:4d:93:bd:0f:59:a5:f3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9d7bb004201fd05b49d1221fce4759ea70bec684
Validity
Not Before: May 5 15:00:46 2025 GMT
Not After : May 6 15:00:46 2025 GMT
Subject: CN=760e59c371aa88911e93caf6f2d0045949950135
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:05:f9:e8:77:e0:74:15:ba:2c:31:75:38:49:
15:17:c2:c1:bc:3e:cb:19:e6:f5:92:2a:28:fb:2b:
e7:c0:5d:ce:d8:5e:87:5c:5a:6c:d0:31:d9:5d:d1:
97:6c:34:cb:d5:af:11:3b:af:e9:01:6a:b8:d1:e0:
08:c0:16:d1:2d:d6:22:8a:e9:24:06:a6:63:50:dd:
66:f6:44:66:36:42:cc:ff:3f:4f:df:42:e4:6d:ab:
9a:aa:c8:a5:53:3c:f4:13:f8:4e:5f:17:ed:14:c9:
7e:b0:dd:19:87:74:55:60:c4:23:d3:55:7d:8f:55:
cd:54:8a:99:39:f6:51:19:03:33:81:13:b9:b2:3f:
1d:60:bf:83:55:3c:16:d4:f8:21:f7:40:4a:7d:22:
99:f6:64:ae:8e:db:3f:ea:ba:96:90:31:1f:4e:79:
c5:e6:c7:9c:dc:87:11:32:db:e7:16:ca:d2:a7:a0:
34:3c:f6:96:09:5d:71:be:af:59:01:bd:db:ad:0c:
10:39:2a:57:0b:21:f5:c2:ed:d9:fe:84:6f:9f:d6:
5c:7c:31:ee:e5:01:7f:65:4e:7b:8c:7c:4c:13:2a:
a6:c9:70:08:b9:24:a8:0a:88:d1:b2:ad:04:c3:8f:
f1:04:e1:5a:8a:f9:5f:6b:83:29:09:06:ce:73:c4:
6e:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
76:0E:59:C3:71:AA:88:91:1E:93:CA:F6:F2:D0:04:59:49:95:01:35
X509v3 Authority Key Identifier:
keyid:9D:7B:B0:04:20:1F:D0:5B:49:D1:22:1F:CE:47:59:EA:70:BE:C6:84
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nXuwBCAf0FtJ0SIfzkdZ6nC-xoQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/af15eb-7a4d-4b0e-bebb-e9bede00c6af/1/nXuwBCAf0FtJ0SIfzkdZ6nC-xoQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/af15eb-7a4d-4b0e-bebb-e9bede00c6af/1/nXuwBCAf0FtJ0SIfzkdZ6nC-xoQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
06:80:11:f1:4e:f8:d5:32:2d:69:33:44:98:d6:bf:78:00:ad:
5a:b3:14:45:a8:33:15:71:a9:e4:00:ed:d1:86:96:6f:e0:33:
6e:98:34:fe:38:85:3f:8b:bb:d8:36:2d:e7:26:36:d1:a2:c3:
fb:71:08:e5:35:f2:f7:17:91:f3:04:9f:54:64:f1:ef:24:5f:
46:1b:b6:f2:88:40:8d:0a:56:dc:1f:da:1c:f3:d7:f7:13:b8:
09:ff:8f:54:43:c3:6b:60:a1:b6:c2:4a:0f:01:3a:2d:8f:e6:
44:7d:7f:6f:1e:6e:e4:db:07:38:61:bb:2b:bd:2f:68:7f:17:
8a:1e:42:34:74:78:ee:4b:b0:3b:c0:f4:82:78:32:b9:91:1a:
7c:2f:ce:bd:5c:79:9c:9e:cc:7c:77:f1:de:4f:0c:b2:66:44:
a9:ca:b8:57:2d:92:c2:28:ea:55:b7:cc:8c:be:af:7d:b0:f9:
cc:f4:f2:b1:b7:03:87:89:3c:58:13:6c:be:fa:3b:65:a9:6d:
79:fc:c2:c3:e5:3d:6a:47:17:d2:14:36:db:fa:b1:76:a7:24:
3b:78:e8:2c:eb:e0:4f:eb:43:fd:bf:b3:4b:91:76:f2:1e:7e:
aa:0c:6f:03:23:a3:71:1e:2b:a9:5f:de:5f:1a:42:f9:5b:22:
15:f1:0d:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 5 20:07:29 2025 by rpki-client