Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a4/a33b29-bef3-461d-8878-2155126b1643/1/nPxi7NyR0Rl5zB0hpHxuw3jfpDY.mft
File: nPxi7NyR0Rl5zB0hpHxuw3jfpDY.mft (raw, json)
Hash identifier: bTMPSy9maPEiO1PkaQC3bjZJ+zM+EGbShDBEqZxTyFw=
Subject key identifier: 30:7C:B1:20:B7:11:E3:9E:05:FA:71:F0:EA:69:6F:3E:CB:C2:25:21
Authority key identifier: 9C:FC:62:EC:DC:91:D1:19:79:CC:1D:21:A4:7C:6E:C3:78:DF:A4:36
Certificate issuer: /CN=9cfc62ecdc91d11979cc1d21a47c6ec378dfa436
Certificate serial: 0196BDB77704AD9C80FE3838F663F43362DA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nPxi7NyR0Rl5zB0hpHxuw3jfpDY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a4/a33b29-bef3-461d-8878-2155126b1643/1/nPxi7NyR0Rl5zB0hpHxuw3jfpDY.mft
Manifest number: 0F2E
Signing time: Sun 11 May 2025 05:00:39 +0000
Manifest this update: Sun 11 May 2025 05:00:39 +0000
Manifest next update: Mon 12 May 2025 05:00:39 +0000
Files and hashes: 1: BuFdaMS1qY4jt-i_y_cN4QOcG_g.roa (hash: ltXbKfkdHFu9ibmOqMdLpCxXbbDufLPF6M4KyVnL37o=)
2: nPxi7NyR0Rl5zB0hpHxuw3jfpDY.crl (hash: 5BtNHP5zQM4eyLGvFyn695bf1YOZ/XzrNCnbNQIwGo4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a4/a33b29-bef3-461d-8878-2155126b1643/1/nPxi7NyR0Rl5zB0hpHxuw3jfpDY.crl
rsync://rpki.ripe.net/repository/DEFAULT/a4/a33b29-bef3-461d-8878-2155126b1643/1/nPxi7NyR0Rl5zB0hpHxuw3jfpDY.mft
rsync://rpki.ripe.net/repository/DEFAULT/nPxi7NyR0Rl5zB0hpHxuw3jfpDY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 12 May 2025 05:00:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:bd:b7:77:04:ad:9c:80:fe:38:38:f6:63:f4:33:62:da
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9cfc62ecdc91d11979cc1d21a47c6ec378dfa436
Validity
Not Before: May 11 05:00:39 2025 GMT
Not After : May 12 05:00:39 2025 GMT
Subject: CN=307cb120b711e39e05fa71f0ea696f3ecbc22521
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:13:82:65:1a:b8:a9:30:cd:18:c8:22:3c:28:
30:11:ed:0d:4a:96:48:7f:59:49:2a:8a:a7:45:cc:
e1:96:90:fe:3a:8f:62:f4:f5:ae:88:a3:60:d3:e3:
1e:14:cb:08:dd:d8:8f:93:9a:8c:0f:6c:41:e4:0e:
74:1b:10:6c:c6:3d:1d:57:7f:13:12:72:4d:a2:7f:
5e:2b:8d:fc:21:15:fd:2f:7d:c1:a5:1d:e0:b7:c1:
55:74:76:66:99:3f:aa:9a:42:3c:79:e8:fa:c3:a6:
43:07:51:f1:41:56:79:00:5d:bb:51:06:5d:04:b2:
7b:cf:97:4b:a3:47:b4:82:0b:4a:1c:e6:a5:e9:db:
bd:c9:3f:62:2c:77:88:2e:2b:7c:f7:ba:c8:ef:bb:
4f:ca:76:bd:c7:51:d9:fc:68:00:60:2a:25:43:02:
98:c8:ac:8f:d5:95:14:5e:a3:f3:c1:59:eb:53:97:
4e:81:4b:f4:49:90:ef:28:d3:8e:91:e7:fd:c1:1c:
bb:f4:fb:56:ca:79:06:b9:13:ea:d1:a2:fb:0e:6e:
aa:d9:e2:5b:cd:22:df:18:5c:5b:69:b8:c3:3f:27:
14:71:a6:79:7e:4f:04:1c:ee:2f:b8:8d:88:09:d0:
db:96:d6:49:02:5e:56:dd:b1:d5:30:b3:a4:85:9a:
85:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:7C:B1:20:B7:11:E3:9E:05:FA:71:F0:EA:69:6F:3E:CB:C2:25:21
X509v3 Authority Key Identifier:
keyid:9C:FC:62:EC:DC:91:D1:19:79:CC:1D:21:A4:7C:6E:C3:78:DF:A4:36
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nPxi7NyR0Rl5zB0hpHxuw3jfpDY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/a33b29-bef3-461d-8878-2155126b1643/1/nPxi7NyR0Rl5zB0hpHxuw3jfpDY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/a33b29-bef3-461d-8878-2155126b1643/1/nPxi7NyR0Rl5zB0hpHxuw3jfpDY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
58:78:86:07:24:de:7b:de:4e:42:c6:29:6c:6a:fe:d0:09:b5:
3a:ad:03:28:82:da:e9:f7:5c:24:a4:35:a3:ae:2c:2e:b8:64:
06:8f:92:ee:43:1e:66:0e:c8:7f:20:c0:3a:46:35:d0:90:4a:
ff:a5:88:bb:6b:34:d7:29:1e:3f:76:58:e3:c4:c7:e9:84:fa:
07:cc:23:d8:07:a6:4d:5c:3e:9f:1a:6e:b6:b1:a7:94:97:9c:
c8:d5:bf:3e:b3:cb:55:62:f1:bd:1f:e1:f3:a8:30:eb:61:9c:
06:81:b3:67:9f:02:0d:d5:49:07:ae:c7:f6:ea:78:42:79:ee:
9d:7b:37:a9:98:8b:b3:8b:71:81:e7:c9:89:1f:48:fb:54:60:
39:c4:9a:7a:21:2a:cf:d0:22:0a:72:ed:8a:8b:cf:14:cf:2c:
61:dc:a3:42:7f:11:a9:d3:e5:18:47:33:de:fa:69:77:a6:28:
a1:53:ae:ea:2b:44:e6:22:a3:09:a8:f5:87:0e:4b:ae:24:7c:
80:c3:4e:d4:1b:73:62:a7:fc:a5:fa:dc:83:35:a3:41:ac:67:
36:fb:55:76:ee:f3:e3:e7:2b:f8:46:9c:4a:5e:cd:44:ed:d6:
a7:0c:16:fb:c2:21:4b:ba:f4:21:ca:38:a4:1d:30:42:0d:92:
f3:12:92:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 12:35:20 2025 by rpki-client