Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9f/9616ee-381d-4afe-890c-6ee514b29115/1/pNMiaTAuHLzLqsDg5a-KhkSYoTU.mft
File: pNMiaTAuHLzLqsDg5a-KhkSYoTU.mft (raw, json)
Hash identifier: MhpVU3qFpMpxF/qPNa/lBEkMmTeCGt3pkwUZdo/H9pU=
Subject key identifier: 2F:95:3D:75:CD:9D:02:4B:7C:5D:07:71:92:76:88:0D:4D:75:35:70
Authority key identifier: A4:D3:22:69:30:2E:1C:BC:CB:AA:C0:E0:E5:AF:8A:86:44:98:A1:35
Certificate issuer: /CN=a4d32269302e1cbccbaac0e0e5af8a864498a135
Certificate serial: 0196C803E39094E6B41901322F9F5841C38B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pNMiaTAuHLzLqsDg5a-KhkSYoTU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9f/9616ee-381d-4afe-890c-6ee514b29115/1/pNMiaTAuHLzLqsDg5a-KhkSYoTU.mft
Manifest number: 0E1F
Signing time: Tue 13 May 2025 05:00:20 +0000
Manifest this update: Tue 13 May 2025 05:00:20 +0000
Manifest next update: Wed 14 May 2025 05:00:20 +0000
Files and hashes: 1: WhtcuJJ0NSWsio8f8rQNMbqqeD8.roa (hash: uBIazeW9ZJrIEfawzpjRmH4sNuGdOT1AiFSbiZsPXDU=)
2: pNMiaTAuHLzLqsDg5a-KhkSYoTU.crl (hash: 2EkkVcbkb2gjHF8jtiEqgOU5cZCA08SYAamEA12nkr8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9f/9616ee-381d-4afe-890c-6ee514b29115/1/pNMiaTAuHLzLqsDg5a-KhkSYoTU.crl
rsync://rpki.ripe.net/repository/DEFAULT/9f/9616ee-381d-4afe-890c-6ee514b29115/1/pNMiaTAuHLzLqsDg5a-KhkSYoTU.mft
rsync://rpki.ripe.net/repository/DEFAULT/pNMiaTAuHLzLqsDg5a-KhkSYoTU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 14 May 2025 05:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:c8:03:e3:90:94:e6:b4:19:01:32:2f:9f:58:41:c3:8b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a4d32269302e1cbccbaac0e0e5af8a864498a135
Validity
Not Before: May 13 05:00:20 2025 GMT
Not After : May 14 05:00:20 2025 GMT
Subject: CN=2f953d75cd9d024b7c5d07719276880d4d753570
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:6a:42:6d:09:c7:a6:fb:40:52:c2:f4:30:f4:
2d:79:ee:46:82:e1:ce:52:be:ea:7e:97:63:15:78:
35:53:53:d2:42:ef:8a:5c:08:ce:56:a8:ea:20:3a:
ce:89:98:f4:34:a8:e1:ec:6d:c0:7b:00:62:fa:12:
db:a6:b0:7c:f5:2a:1c:73:6d:6e:ad:d9:72:07:1c:
dd:da:a5:5b:15:4b:8f:3d:ae:ec:14:ba:30:06:24:
0a:db:e7:9a:c4:4a:49:16:48:d3:ea:6d:e8:e4:33:
b8:2c:55:57:4d:9a:4f:04:27:e3:60:31:a7:b1:07:
d5:e5:b6:68:9d:eb:79:ca:e8:5c:65:cf:06:6d:a5:
7d:8c:d1:91:60:5c:d5:48:47:dc:06:bc:39:53:ae:
d6:f4:2e:cf:57:98:ce:47:97:3c:26:58:4d:56:87:
69:37:ed:f8:a6:8e:74:82:d1:a2:b4:d4:e6:e8:71:
26:73:8a:e9:25:09:94:a7:ef:48:99:a1:e6:fb:52:
f1:c4:e7:85:ca:8e:dd:47:fc:a1:87:c3:89:04:9b:
a8:ca:e0:ae:07:01:0e:0a:24:4f:11:46:cf:9a:9e:
73:25:6b:72:02:3d:b7:01:13:de:d2:db:d7:40:b4:
66:3a:b2:fb:ee:43:97:5b:d6:3d:33:0b:79:f1:c9:
88:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:95:3D:75:CD:9D:02:4B:7C:5D:07:71:92:76:88:0D:4D:75:35:70
X509v3 Authority Key Identifier:
keyid:A4:D3:22:69:30:2E:1C:BC:CB:AA:C0:E0:E5:AF:8A:86:44:98:A1:35
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pNMiaTAuHLzLqsDg5a-KhkSYoTU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/9616ee-381d-4afe-890c-6ee514b29115/1/pNMiaTAuHLzLqsDg5a-KhkSYoTU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/9616ee-381d-4afe-890c-6ee514b29115/1/pNMiaTAuHLzLqsDg5a-KhkSYoTU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
70:de:4a:7c:4b:4b:7a:84:26:ba:1c:1d:6f:75:3a:de:19:20:
26:60:d8:7a:8e:22:f0:c6:45:f0:33:2f:c3:ed:55:8b:76:74:
b7:62:d0:fc:9a:e0:b8:f3:d9:b8:4b:a6:d8:25:01:54:c5:ad:
60:a6:1c:14:ee:e7:eb:14:41:41:98:78:89:e0:91:b0:f1:d0:
44:59:fc:49:4e:7b:82:1f:25:b0:fa:05:ef:4e:43:28:12:8f:
01:ac:97:84:53:ea:3f:3f:95:e6:6e:b1:f8:43:24:08:60:71:
ba:e0:62:85:95:17:37:f8:7b:30:b9:28:12:9b:0f:88:b5:29:
79:64:0a:d7:5a:4a:2f:28:d6:44:2e:23:e7:23:d2:0c:32:d3:
a3:62:1e:bf:91:4b:d5:d5:f6:a4:8e:b4:e8:e0:a3:80:7d:c1:
e8:e4:c9:21:5e:08:39:f0:7e:24:f8:2c:84:9f:3d:4d:08:17:
19:18:5a:c6:a9:ef:68:78:2a:45:bc:99:86:ea:81:55:39:ad:
c4:2c:50:dc:c4:cd:a3:1b:22:64:d8:8c:52:ee:b7:95:93:d0:
ce:9b:8d:29:62:0d:ee:9f:68:eb:88:d4:58:3b:f5:53:e5:27:
95:bc:5b:40:63:b5:8d:83:3d:f4:8d:9b:db:72:52:7d:34:0c:
a4:db:62:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 13 09:51:55 2025 by rpki-client