Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ad/a3e46f-7e5a-4663-bd63-dc0966669609/1/nqFCUiVBDJMhHQh1j82vD3qhzKo.mft
File: nqFCUiVBDJMhHQh1j82vD3qhzKo.mft (raw, json)
Hash identifier: FqOxvmzWo8JcFRF+/f09PBGAw++mL7l/n8NY7/zAvyo=
Subject key identifier: FA:10:E2:9F:BE:3F:C7:03:80:33:B9:87:FF:6D:28:32:1B:E6:A4:D2
Authority key identifier: 9E:A1:42:52:25:41:0C:93:21:1D:08:75:8F:CD:AF:0F:7A:A1:CC:AA
Certificate issuer: /CN=9ea1425225410c93211d08758fcdaf0f7aa1ccaa
Certificate serial: 0196BD809D01175D82A93A29A9E96999F514
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nqFCUiVBDJMhHQh1j82vD3qhzKo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ad/a3e46f-7e5a-4663-bd63-dc0966669609/1/nqFCUiVBDJMhHQh1j82vD3qhzKo.mft
Manifest number: 0EAA
Signing time: Sun 11 May 2025 04:00:44 +0000
Manifest this update: Sun 11 May 2025 04:00:44 +0000
Manifest next update: Mon 12 May 2025 04:00:44 +0000
Files and hashes: 1: Cy35oxIBw3su2liG61xuPEUmvjI.roa (hash: 2IrXlMCQpECjm4Y6ZOTZrh47ViIm4Ji7SwFI+6InbKc=)
2: nqFCUiVBDJMhHQh1j82vD3qhzKo.crl (hash: HAylyyla7zWhCJZvbCw+zmrPySCCHaknACde/2XXFeo=)
3: sUbGHvxaPc1G1E3lSBfIJzcROEU.roa (hash: 5uZ2a8tZ0H9NijCrdgd56gsgVSZf0YOuYCFhbDVjRg4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ad/a3e46f-7e5a-4663-bd63-dc0966669609/1/nqFCUiVBDJMhHQh1j82vD3qhzKo.crl
rsync://rpki.ripe.net/repository/DEFAULT/ad/a3e46f-7e5a-4663-bd63-dc0966669609/1/nqFCUiVBDJMhHQh1j82vD3qhzKo.mft
rsync://rpki.ripe.net/repository/DEFAULT/nqFCUiVBDJMhHQh1j82vD3qhzKo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 11 May 2025 22:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:bd:80:9d:01:17:5d:82:a9:3a:29:a9:e9:69:99:f5:14
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9ea1425225410c93211d08758fcdaf0f7aa1ccaa
Validity
Not Before: May 11 04:00:44 2025 GMT
Not After : May 12 04:00:44 2025 GMT
Subject: CN=fa10e29fbe3fc7038033b987ff6d28321be6a4d2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:77:38:3e:e0:de:5d:26:70:c7:c2:d9:96:13:
d8:02:2f:a0:4b:1c:a9:90:f9:f1:d7:c8:61:7c:c9:
71:3c:bf:56:16:a9:28:f0:34:2a:ca:d5:f6:1e:96:
76:2d:bd:84:32:d6:51:6a:76:5a:5d:16:a8:a4:05:
05:ce:43:6f:6f:d1:e6:8d:39:1f:c9:14:88:4c:c0:
ad:1a:7b:a4:8e:bd:7f:de:39:7f:70:71:af:66:a8:
18:dd:8a:f1:23:0a:ab:8e:fa:34:cb:b8:24:ab:62:
35:55:23:18:90:1c:f7:10:eb:08:93:5b:e7:84:ed:
ef:13:bb:2c:bf:64:6d:25:8d:ed:b7:3c:96:3c:c9:
b7:71:fe:2a:da:7f:af:a6:88:61:06:b9:4e:85:25:
f7:11:2e:75:4b:63:99:75:9a:22:a3:84:7f:44:f4:
a7:ab:81:bc:b2:28:01:a6:47:1a:2b:5c:fe:12:b2:
a7:c2:22:c7:b4:4c:35:69:9a:ca:b7:ce:88:b2:df:
61:12:64:f9:c9:3e:bf:98:a4:0a:7b:20:a4:6b:b9:
ef:8c:32:f3:f7:5e:de:46:54:db:51:d6:81:cc:5c:
c4:9d:a8:54:d4:bf:8a:4a:d1:c6:64:59:bc:99:aa:
4d:1a:5c:74:31:df:13:54:4e:fc:a8:5b:3d:c0:97:
41:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:10:E2:9F:BE:3F:C7:03:80:33:B9:87:FF:6D:28:32:1B:E6:A4:D2
X509v3 Authority Key Identifier:
keyid:9E:A1:42:52:25:41:0C:93:21:1D:08:75:8F:CD:AF:0F:7A:A1:CC:AA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nqFCUiVBDJMhHQh1j82vD3qhzKo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/a3e46f-7e5a-4663-bd63-dc0966669609/1/nqFCUiVBDJMhHQh1j82vD3qhzKo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/a3e46f-7e5a-4663-bd63-dc0966669609/1/nqFCUiVBDJMhHQh1j82vD3qhzKo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2f:15:29:c7:f3:ab:7f:f8:4f:03:d2:37:d1:29:15:69:dd:75:
f7:95:3c:c6:b9:ad:64:31:db:25:ed:e3:46:b3:5d:32:52:a1:
d7:a2:2b:44:dd:b5:b9:e5:c5:33:fb:11:77:a4:d1:e0:aa:bf:
92:b8:8b:a1:d5:42:28:21:ef:48:9b:3d:11:b7:24:15:dd:75:
2b:7a:64:f5:68:cb:82:cc:34:47:8f:0d:97:0c:e2:45:d0:dc:
76:30:f7:6d:7d:28:ce:f1:4a:80:41:f8:08:28:77:68:91:76:
c5:e7:4a:2f:76:3a:63:17:94:0c:24:b6:07:35:4f:bf:59:f6:
93:15:4f:c0:6b:b4:c2:c0:0d:4a:b1:e5:2d:de:83:29:a7:07:
b4:bd:c6:b1:18:be:55:96:b1:c6:2d:2f:d6:a5:a7:48:82:50:
e9:ff:ae:5d:85:66:c8:07:83:d1:79:cb:b2:12:13:b2:8c:de:
de:67:a6:6e:50:b4:c2:4f:14:c7:00:99:1c:1b:e2:50:a2:f6:
52:67:38:41:d4:28:ce:84:85:bb:3d:26:1e:17:e1:af:a3:3f:
ec:bf:35:e5:9e:9c:b6:ab:2b:fd:08:28:26:8f:1c:34:a1:f3:
ed:50:af:60:e9:a2:cf:21:41:9d:a6:65:1c:da:e8:d8:e4:8c:
7d:eb:b5:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 06:04:37 2025 by rpki-client