Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ae/849e26-6472-4440-a038-7baa92a828ec/1/nwTDqGM44XBgXmZdNNilyGmUigU.mft
File: nwTDqGM44XBgXmZdNNilyGmUigU.mft (raw, json)
Hash identifier: baQUmMNMbsKCrQCEC4iXA8nTVN6CUmIRww5bGVkRFWc=
Subject key identifier: BF:03:FF:C8:40:35:9E:8F:68:23:2F:70:4D:DC:C3:32:F4:93:96:CD
Authority key identifier: 9F:04:C3:A8:63:38:E1:70:60:5E:66:5D:34:D8:A5:C8:69:94:8A:05
Certificate issuer: /CN=9f04c3a86338e170605e665d34d8a5c869948a05
Certificate serial: 0196CC17DE9B2C723D5F9949901C6A62A996
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nwTDqGM44XBgXmZdNNilyGmUigU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ae/849e26-6472-4440-a038-7baa92a828ec/1/nwTDqGM44XBgXmZdNNilyGmUigU.mft
Manifest number: 055A
Signing time: Wed 14 May 2025 00:00:38 +0000
Manifest this update: Wed 14 May 2025 00:00:38 +0000
Manifest next update: Thu 15 May 2025 00:00:38 +0000
Files and hashes: 1: nwTDqGM44XBgXmZdNNilyGmUigU.crl (hash: cb98pQ2TLRall5kIvklB4acqt0x2kGsp9U/YWpLZLJg=)
2: wa6e-L5g3p2SNEGIRb1a4oqT56I.roa (hash: iBFSre5PI6/cZlAuQmnNGFmFLfmyjvaYR/9ZuSUPyuA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ae/849e26-6472-4440-a038-7baa92a828ec/1/nwTDqGM44XBgXmZdNNilyGmUigU.crl
rsync://rpki.ripe.net/repository/DEFAULT/ae/849e26-6472-4440-a038-7baa92a828ec/1/nwTDqGM44XBgXmZdNNilyGmUigU.mft
rsync://rpki.ripe.net/repository/DEFAULT/nwTDqGM44XBgXmZdNNilyGmUigU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 14 May 2025 22:19:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:cc:17:de:9b:2c:72:3d:5f:99:49:90:1c:6a:62:a9:96
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9f04c3a86338e170605e665d34d8a5c869948a05
Validity
Not Before: May 14 00:00:38 2025 GMT
Not After : May 15 00:00:38 2025 GMT
Subject: CN=bf03ffc840359e8f68232f704ddcc332f49396cd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:3d:29:93:30:8a:2c:66:91:b2:71:55:f3:9b:
6c:ca:23:9b:96:da:a8:f2:77:a8:5a:71:84:a7:af:
71:1f:2a:8c:8a:b3:7e:56:5d:37:d3:0c:5e:49:f4:
1f:79:52:af:3a:61:e8:ac:5d:90:49:06:e0:00:70:
d9:b7:b1:85:e8:1c:fd:69:d6:e6:b2:ca:ad:3d:a0:
ab:66:94:55:34:f1:78:43:e5:da:cb:a7:ba:fc:1f:
43:f9:74:ed:57:3d:61:f2:43:00:95:e1:98:04:f3:
8d:90:50:62:59:d4:27:39:79:42:0d:cb:1c:0c:ac:
ac:34:7b:8b:59:ea:17:57:2e:e8:12:bb:3a:d1:70:
75:45:a9:46:b8:2c:a9:1e:19:18:66:b5:a3:69:8e:
9a:90:75:8d:58:29:b7:e5:c2:a4:36:c8:0f:60:b7:
66:33:17:2a:f8:5d:5c:63:7a:a3:19:49:7c:f9:40:
48:33:2e:3c:77:05:40:b0:65:13:9c:cf:70:d1:70:
28:f3:99:ad:c1:bf:1d:12:a8:9b:d6:1c:88:2a:59:
bc:f9:1d:09:b9:f4:ae:2c:e9:02:36:66:ab:d5:bc:
2d:ae:4d:03:a7:77:88:54:89:26:cf:b0:fb:34:c0:
23:ad:aa:31:4a:40:a9:d9:9a:09:25:b5:30:24:3f:
f5:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:03:FF:C8:40:35:9E:8F:68:23:2F:70:4D:DC:C3:32:F4:93:96:CD
X509v3 Authority Key Identifier:
keyid:9F:04:C3:A8:63:38:E1:70:60:5E:66:5D:34:D8:A5:C8:69:94:8A:05
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nwTDqGM44XBgXmZdNNilyGmUigU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/849e26-6472-4440-a038-7baa92a828ec/1/nwTDqGM44XBgXmZdNNilyGmUigU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/849e26-6472-4440-a038-7baa92a828ec/1/nwTDqGM44XBgXmZdNNilyGmUigU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
17:ef:06:88:89:21:56:3f:08:10:99:f5:61:77:17:9b:f8:a3:
39:e5:61:bc:2f:80:58:63:0f:58:2e:09:47:5f:7d:da:7f:b9:
24:3b:6c:95:72:51:a4:5c:ac:1c:22:ce:15:bb:70:4e:c5:0d:
56:ee:49:f7:94:ee:26:4d:73:02:18:f1:c2:4f:e4:34:12:ac:
04:11:ff:95:bd:87:86:dc:dd:de:2e:15:1c:9e:d9:4b:6c:4d:
f4:cb:08:66:02:94:a0:db:58:b0:1b:34:da:9e:cb:5e:4c:11:
1a:a5:10:29:9b:3e:95:e6:c6:32:c4:52:fc:65:e6:0c:15:8d:
40:0a:6b:04:84:57:7c:cd:09:56:dc:94:39:d6:e2:f3:51:1e:
93:38:f5:d9:e9:18:c9:83:f0:a2:5f:66:ea:ad:70:d3:1e:d8:
1e:64:84:73:b6:4f:5e:c7:41:05:51:5b:6c:88:33:40:b2:a0:
51:7b:d8:b1:02:08:ee:3e:a7:c9:55:47:83:32:44:ef:bc:be:
43:6f:bb:38:0f:14:f5:ee:2c:b5:e6:d0:97:ad:f1:be:33:6c:
8b:48:77:5e:a0:71:45:d8:b2:d1:83:96:94:8d:cb:91:50:c7:
11:54:11:b9:bb:ed:44:ae:72:97:d6:aa:21:19:6c:e6:c5:95:
2d:15:9c:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 14 04:10:16 2025 by rpki-client