Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/0cf187-ecb3-4b42-91e4-6addfcb18f99/1/n3Qy9pnL0kmy48nFW976-DmGtEI.mft
File: n3Qy9pnL0kmy48nFW976-DmGtEI.mft (raw, json)
Hash identifier: MB4UBtSrRgYx9pRu7qfbdcLOhg9NCbTNhV9OfIYs4r0=
Subject key identifier: E8:81:58:9F:37:69:5D:3E:65:16:05:50:A5:D5:BB:D3:E3:32:B9:4A
Authority key identifier: 9F:74:32:F6:99:CB:D2:49:B2:E3:C9:C5:5B:DE:FA:F8:39:86:B4:42
Certificate issuer: /CN=9f7432f699cbd249b2e3c9c55bdefaf83986b442
Certificate serial: 0196C83ACF7D930A695B07E34BE83166568F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/n3Qy9pnL0kmy48nFW976-DmGtEI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ab/0cf187-ecb3-4b42-91e4-6addfcb18f99/1/n3Qy9pnL0kmy48nFW976-DmGtEI.mft
Manifest number: 1000
Signing time: Tue 13 May 2025 06:00:19 +0000
Manifest this update: Tue 13 May 2025 06:00:19 +0000
Manifest next update: Wed 14 May 2025 06:00:19 +0000
Files and hashes: 1: n3Qy9pnL0kmy48nFW976-DmGtEI.crl (hash: Blg7BbfHjt/Cw+3PJ/i2fk0ObZ9Whm8nfvGPjf6rB+Y=)
2: yY1iNFVSPGpVBCv6e5Q4VD19NB8.roa (hash: Xz+3ntm5iVPl2B9YcE2P65g+xG5FxMjLX4w1n0LEPnc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ab/0cf187-ecb3-4b42-91e4-6addfcb18f99/1/n3Qy9pnL0kmy48nFW976-DmGtEI.crl
rsync://rpki.ripe.net/repository/DEFAULT/ab/0cf187-ecb3-4b42-91e4-6addfcb18f99/1/n3Qy9pnL0kmy48nFW976-DmGtEI.mft
rsync://rpki.ripe.net/repository/DEFAULT/n3Qy9pnL0kmy48nFW976-DmGtEI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 14 May 2025 06:00:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:c8:3a:cf:7d:93:0a:69:5b:07:e3:4b:e8:31:66:56:8f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9f7432f699cbd249b2e3c9c55bdefaf83986b442
Validity
Not Before: May 13 06:00:19 2025 GMT
Not After : May 14 06:00:19 2025 GMT
Subject: CN=e881589f37695d3e65160550a5d5bbd3e332b94a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:b7:16:33:f9:ce:93:bd:9e:89:2c:f3:e9:26:
56:ac:59:71:2c:20:0c:8b:59:1a:30:0d:a2:1d:61:
a7:5d:d1:f7:5a:13:22:62:dd:77:aa:1a:8c:56:c5:
3b:3a:7a:ef:95:14:6c:d0:33:78:b3:b3:36:5f:10:
17:d4:94:84:50:b4:c3:95:fb:74:c1:7d:9a:30:37:
22:12:43:89:19:77:a3:11:da:e5:ab:ec:68:50:86:
18:fe:9e:71:bf:b6:ee:19:0b:87:65:60:f0:d5:32:
e5:e7:5f:3d:46:68:1d:66:ad:ef:3c:a1:6e:64:2e:
84:bb:91:d9:2a:81:d1:72:7e:af:09:61:13:51:2f:
0a:ec:c3:19:72:bc:df:5b:52:60:9c:ef:c7:df:24:
cf:1a:11:fc:37:79:cc:1f:eb:89:15:ca:a3:65:70:
54:93:51:68:f2:37:42:ab:f5:93:06:28:f7:29:16:
8e:86:53:dc:a3:86:f1:b8:45:1b:7e:dc:71:c2:8f:
25:37:5a:be:1c:14:ca:11:f9:3e:93:97:58:f9:17:
4f:1f:24:bd:a1:d6:89:b9:48:fd:5a:68:c6:a2:39:
68:16:20:37:f0:16:e6:48:3d:99:1a:7b:93:58:d7:
84:0a:15:ed:19:dd:bc:0d:31:40:a3:44:42:32:c4:
6e:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:81:58:9F:37:69:5D:3E:65:16:05:50:A5:D5:BB:D3:E3:32:B9:4A
X509v3 Authority Key Identifier:
keyid:9F:74:32:F6:99:CB:D2:49:B2:E3:C9:C5:5B:DE:FA:F8:39:86:B4:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/n3Qy9pnL0kmy48nFW976-DmGtEI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/0cf187-ecb3-4b42-91e4-6addfcb18f99/1/n3Qy9pnL0kmy48nFW976-DmGtEI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/0cf187-ecb3-4b42-91e4-6addfcb18f99/1/n3Qy9pnL0kmy48nFW976-DmGtEI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9a:dc:4c:77:b1:c8:d2:a7:56:37:79:26:05:6a:78:ad:e4:26:
c7:14:70:28:47:48:de:dc:92:e4:b4:26:67:75:fa:bf:0e:97:
9b:93:e0:7a:22:d1:c4:a8:d5:a4:3f:18:f1:c8:05:18:bc:be:
81:1a:68:a0:59:23:7c:cc:78:66:cb:d5:49:17:8c:94:11:8b:
ea:1b:63:f7:a2:d0:d6:b4:5d:be:0f:0a:70:84:69:4b:ff:02:
bd:f0:7a:e3:e9:f2:e3:c1:b7:de:56:31:a4:b1:37:66:29:f8:
21:ea:81:64:46:3c:2f:d1:ab:77:99:e6:2b:e7:21:1e:d9:cb:
e6:61:b1:da:d0:06:d1:63:5f:92:db:0f:97:c3:37:79:5d:26:
0c:e6:67:77:58:a6:87:a5:fb:57:c6:8b:aa:12:75:d5:8e:68:
5f:00:75:50:ab:5a:ff:1d:d5:d8:b4:04:e0:9e:9e:1d:90:fb:
14:21:de:08:05:8c:c1:63:24:67:2a:f3:83:0c:4b:44:35:59:
72:8b:e8:16:3d:e2:0b:86:f8:63:4c:de:be:b3:73:3f:9f:8b:
71:69:d8:d4:2b:a8:2b:44:fa:cf:c7:7b:41:fc:da:0c:12:ce:
8a:55:51:d5:9b:ee:10:41:cd:fe:f2:eb:1b:43:8a:29:f0:25:
07:ed:86:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 13 13:26:48 2025 by rpki-client