Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a3/a5c069-8061-4dee-9568-880b2df57f25/1/nSAoCNH5FFVeG9WcFncof_mztZA.mft
File: nSAoCNH5FFVeG9WcFncof_mztZA.mft (raw, json)
Hash identifier: bvIZHdIg8Fd9UFP2G6/Jig9Cl/XUsgAzgByuHWV/xNc=
Subject key identifier: 59:EC:1C:FA:59:B7:A9:89:10:9F:1B:F3:66:AE:D8:1F:E6:61:0D:0D
Authority key identifier: 9D:20:28:08:D1:F9:14:55:5E:1B:D5:9C:16:77:28:7F:F9:B3:B5:90
Certificate issuer: /CN=9d202808d1f914555e1bd59c1677287ff9b3b590
Certificate serial: 0196BBC8B49FE7F6B943F2A30CE6837DDE75
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nSAoCNH5FFVeG9WcFncof_mztZA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a3/a5c069-8061-4dee-9568-880b2df57f25/1/nSAoCNH5FFVeG9WcFncof_mztZA.mft
Manifest number: 0F3D
Signing time: Sat 10 May 2025 20:00:14 +0000
Manifest this update: Sat 10 May 2025 20:00:14 +0000
Manifest next update: Sun 11 May 2025 20:00:14 +0000
Files and hashes: 1: nSAoCNH5FFVeG9WcFncof_mztZA.crl (hash: xWABlESb35klySJiwpzDtgzFXFz1RE/d72Ljjp+TFkQ=)
2: qztp8oOkrsOnZQZ-AVesJkd8gBA.roa (hash: w8j5kLnBBDJA6YAxwk7yr2iHlxdseJ2t5FGwhKWuj0I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a3/a5c069-8061-4dee-9568-880b2df57f25/1/nSAoCNH5FFVeG9WcFncof_mztZA.crl
rsync://rpki.ripe.net/repository/DEFAULT/a3/a5c069-8061-4dee-9568-880b2df57f25/1/nSAoCNH5FFVeG9WcFncof_mztZA.mft
rsync://rpki.ripe.net/repository/DEFAULT/nSAoCNH5FFVeG9WcFncof_mztZA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 11 May 2025 14:04:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:bb:c8:b4:9f:e7:f6:b9:43:f2:a3:0c:e6:83:7d:de:75
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9d202808d1f914555e1bd59c1677287ff9b3b590
Validity
Not Before: May 10 20:00:14 2025 GMT
Not After : May 11 20:00:14 2025 GMT
Subject: CN=59ec1cfa59b7a989109f1bf366aed81fe6610d0d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:8f:10:b2:4f:50:37:17:d9:26:c9:89:c3:80:
ec:87:04:98:8b:20:9c:92:8d:da:a5:59:27:98:10:
06:5d:f8:a5:b2:c7:5c:02:06:ce:47:65:b2:ad:14:
f7:e9:c2:dd:ac:53:25:c5:a8:02:58:69:4d:de:03:
ab:2d:0e:87:da:c7:f6:4b:82:fa:8c:35:7c:03:d2:
2f:5d:c7:67:01:53:22:23:c7:8e:a8:eb:2b:ed:64:
c3:3d:a5:17:2e:db:5e:5c:83:b6:ab:7f:f2:8d:5c:
5d:3a:3f:8b:07:6c:04:47:d0:e4:ea:92:2b:0e:c8:
ad:4f:79:b4:5f:e3:ad:1d:11:ce:25:01:23:ba:76:
dd:56:65:26:de:3a:3a:7b:cc:7f:fe:c6:ef:bf:89:
a2:00:3d:0a:09:d9:40:0d:6b:fb:cc:f4:8a:b0:9b:
0a:32:38:ea:d3:88:a9:73:c7:28:31:75:f6:80:59:
2e:c5:4b:16:a5:47:66:8a:0a:2e:f2:e9:f3:5f:c5:
37:43:49:4c:65:5a:de:7b:cb:4a:ab:73:30:34:f4:
2b:6e:f7:61:bb:5a:fc:a6:9e:13:f3:52:9e:40:9c:
f9:8e:f8:c6:5e:49:12:29:36:ba:d1:30:59:79:40:
d0:ff:0c:fa:bc:11:aa:0b:e8:7a:fe:77:eb:7f:63:
d4:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:EC:1C:FA:59:B7:A9:89:10:9F:1B:F3:66:AE:D8:1F:E6:61:0D:0D
X509v3 Authority Key Identifier:
keyid:9D:20:28:08:D1:F9:14:55:5E:1B:D5:9C:16:77:28:7F:F9:B3:B5:90
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nSAoCNH5FFVeG9WcFncof_mztZA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/a5c069-8061-4dee-9568-880b2df57f25/1/nSAoCNH5FFVeG9WcFncof_mztZA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/a5c069-8061-4dee-9568-880b2df57f25/1/nSAoCNH5FFVeG9WcFncof_mztZA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
69:9d:55:a0:76:2b:a3:48:a8:eb:a1:75:50:ff:cf:2c:03:66:
71:41:bb:e9:80:41:01:94:ee:3d:d0:58:0f:14:88:ef:d8:94:
22:7c:8f:6b:a2:7b:20:5d:84:e3:27:3b:03:58:9a:8e:cc:df:
e8:32:f5:4a:e2:46:fe:88:8f:1a:db:29:35:01:2b:f7:ea:a5:
75:b0:05:e2:4c:ae:7a:fc:15:5a:68:a5:cb:6a:da:1f:57:4e:
0e:c7:00:e3:1a:d4:45:49:79:ee:65:ad:86:8a:33:35:f3:06:
96:48:a4:a5:d0:bf:31:7c:c8:99:f8:83:02:af:3f:0a:31:73:
cd:7e:f0:c3:99:e8:2d:9e:e4:c7:48:fe:ca:8f:02:0f:81:74:
79:48:e8:f1:ad:0c:a8:42:26:3a:76:49:1b:55:8c:29:04:01:
74:bb:86:e6:78:32:38:13:34:8e:3f:6d:1d:bd:27:28:be:31:
39:85:9d:ba:59:78:41:b5:9a:59:6b:6e:22:54:57:11:96:43:
e9:5f:11:89:32:6b:86:4f:05:b9:ce:d5:8b:61:ec:ff:6a:04:
c4:a6:68:5a:38:7a:4e:e4:0c:1a:99:d7:f9:9c:43:5a:99:89:
58:f6:46:21:76:90:fa:4c:e6:e7:c0:b9:f3:48:13:83:0d:0e:
3d:7c:1b:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 23:35:10 2025 by rpki-client