Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/af/8cce86-b0ae-4166-9042-528eff52febd/1/nCGl5M9uni5wM4ruv6DRWI1ztu8.mft
File: nCGl5M9uni5wM4ruv6DRWI1ztu8.mft (raw, json)
Hash identifier: IlE4Rd/5iCnnqO8s+O7ePmqUfr/cB7tVxhFvM0VeVSM=
Subject key identifier: 5C:8F:76:19:DE:C7:B8:3A:C0:EB:C0:2F:4F:89:F8:B1:BD:8E:47:3F
Authority key identifier: 9C:21:A5:E4:CF:6E:9E:2E:70:33:8A:EE:BF:A0:D1:58:8D:73:B6:EF
Certificate issuer: /CN=9c21a5e4cf6e9e2e70338aeebfa0d1588d73b6ef
Certificate serial: 0196BC6E477FC7464D35651709867A81C475
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nCGl5M9uni5wM4ruv6DRWI1ztu8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/af/8cce86-b0ae-4166-9042-528eff52febd/1/nCGl5M9uni5wM4ruv6DRWI1ztu8.mft
Manifest number: 0866
Signing time: Sat 10 May 2025 23:01:05 +0000
Manifest this update: Sat 10 May 2025 23:01:05 +0000
Manifest next update: Sun 11 May 2025 23:01:05 +0000
Files and hashes: 1: TyWL3xFpNven7KrNlaJ8v9k5JK8.roa (hash: E2+AhRY0pqwsVnmj4TP+MVDZiHT3sKt+kF6lunLkhqE=)
2: nCGl5M9uni5wM4ruv6DRWI1ztu8.crl (hash: 8No12NU48O/YsRVbFuaKitLI6GN1yYHS6BscFexpjgA=)
3: rQIqx2DMPN6bSwaHOzgkZ_qEsQE.roa (hash: Swuw4n85YJ/hs+bpmj8GLz668D6BJf6uL+FQMZ1q+FY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/af/8cce86-b0ae-4166-9042-528eff52febd/1/nCGl5M9uni5wM4ruv6DRWI1ztu8.crl
rsync://rpki.ripe.net/repository/DEFAULT/af/8cce86-b0ae-4166-9042-528eff52febd/1/nCGl5M9uni5wM4ruv6DRWI1ztu8.mft
rsync://rpki.ripe.net/repository/DEFAULT/nCGl5M9uni5wM4ruv6DRWI1ztu8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 11 May 2025 23:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:bc:6e:47:7f:c7:46:4d:35:65:17:09:86:7a:81:c4:75
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9c21a5e4cf6e9e2e70338aeebfa0d1588d73b6ef
Validity
Not Before: May 10 23:01:05 2025 GMT
Not After : May 11 23:01:05 2025 GMT
Subject: CN=5c8f7619dec7b83ac0ebc02f4f89f8b1bd8e473f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:c2:d9:32:34:e2:16:80:77:7a:4e:4b:f4:52:
f9:f4:4e:3e:b2:8c:8a:8c:c7:06:a8:5f:ee:cc:77:
28:27:45:e6:a2:b0:46:03:f3:3d:af:c5:44:96:d6:
a6:ef:f2:ab:11:da:6a:7a:9c:6a:eb:b1:8f:8e:d5:
c0:2c:32:34:fa:07:d6:1b:89:71:5f:73:7c:eb:b5:
21:64:dc:6f:a3:dc:4f:f4:ec:2d:02:13:48:1f:93:
29:01:69:a4:da:4c:59:b4:ee:a3:82:0c:0a:00:36:
05:81:b0:40:52:66:a7:19:33:17:b1:ad:79:02:fd:
e6:2f:8e:18:29:4d:3a:ca:c4:e2:2f:34:90:d7:ec:
38:a6:55:73:63:e3:32:0d:b4:3e:64:1f:04:ea:7a:
e2:b3:b7:46:ef:af:a9:91:00:62:ed:43:47:77:03:
34:72:c1:71:d5:73:24:19:9b:0f:67:47:eb:2a:2d:
9e:3f:84:30:3f:0a:65:61:a1:85:88:ee:bc:52:b6:
fb:91:73:88:e2:80:7e:b8:c2:82:9b:1f:f3:52:2d:
1b:cc:91:db:ba:36:7f:96:da:30:35:83:64:b5:22:
e0:3a:03:2a:7c:34:f8:4e:9d:cf:e9:d7:bb:3a:6c:
0f:07:81:58:56:c0:98:17:9c:de:dc:d3:0c:2d:c6:
af:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:8F:76:19:DE:C7:B8:3A:C0:EB:C0:2F:4F:89:F8:B1:BD:8E:47:3F
X509v3 Authority Key Identifier:
keyid:9C:21:A5:E4:CF:6E:9E:2E:70:33:8A:EE:BF:A0:D1:58:8D:73:B6:EF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nCGl5M9uni5wM4ruv6DRWI1ztu8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/8cce86-b0ae-4166-9042-528eff52febd/1/nCGl5M9uni5wM4ruv6DRWI1ztu8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/af/8cce86-b0ae-4166-9042-528eff52febd/1/nCGl5M9uni5wM4ruv6DRWI1ztu8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0e:43:eb:b0:42:eb:12:57:c4:e4:59:eb:8d:97:b8:d0:2d:01:
4d:80:8e:20:d1:3b:ed:93:ad:cc:d7:e2:ca:5f:8a:24:1a:49:
f2:ee:be:a6:85:48:64:1e:bb:6c:71:1c:33:39:02:80:83:4a:
eb:8a:d4:06:9e:59:39:56:eb:44:60:ba:33:f5:b3:a7:9b:ef:
32:48:62:7c:e0:1d:7d:68:ad:dd:a3:11:5b:4f:c2:53:02:9e:
f1:1c:e1:41:33:43:cb:5a:1d:31:50:39:5f:24:7d:c5:32:9a:
30:e1:b2:73:e0:23:5c:d4:13:60:c5:8a:c4:2d:9b:7f:ee:2e:
42:ef:8d:de:19:71:6b:87:66:69:99:39:c5:96:30:83:28:3b:
40:e3:97:cb:d9:32:53:86:e1:b1:72:76:82:0d:cd:41:84:8e:
11:77:48:15:5f:99:7f:67:93:ee:43:77:96:ba:7e:a0:96:73:
2f:09:a7:df:24:3a:d5:6e:22:79:21:73:c0:ae:3d:50:e2:6c:
77:a4:d9:5c:05:f1:41:ca:c5:b9:59:19:39:4d:e7:b2:fb:2a:
b7:2a:82:5e:db:bd:bd:5b:94:17:80:cf:9e:30:01:37:79:eb:
12:b1:6d:c9:53:85:65:23:d7:3f:94:5f:32:99:78:70:d5:93:
9b:f5:25:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 09:41:06 2025 by rpki-client