Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ba/ed4e2c-e5ad-417a-8788-11824406bd5d/1/nOTmWuzJXURqDLZAuXZvoPgVDjw.mft
File: nOTmWuzJXURqDLZAuXZvoPgVDjw.mft (raw, json)
Hash identifier: Hmk0e4f6LycMzAcJlQX6njiebaO4U3xEB07Bkvf71pg=
Subject key identifier: 9C:0B:84:41:D3:5B:AE:AF:6D:3F:AE:C2:88:AC:BF:69:AC:AB:48:69
Authority key identifier: 9C:E4:E6:5A:EC:C9:5D:44:6A:0C:B6:40:B9:76:6F:A0:F8:15:0E:3C
Certificate issuer: /CN=9ce4e65aecc95d446a0cb640b9766fa0f8150e3c
Certificate serial: 0196C6F174EA27AD0381D955986C94C31230
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nOTmWuzJXURqDLZAuXZvoPgVDjw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ba/ed4e2c-e5ad-417a-8788-11824406bd5d/1/nOTmWuzJXURqDLZAuXZvoPgVDjw.mft
Manifest number: 0E3C
Signing time: Tue 13 May 2025 00:00:34 +0000
Manifest this update: Tue 13 May 2025 00:00:34 +0000
Manifest next update: Wed 14 May 2025 00:00:34 +0000
Files and hashes: 1: nOTmWuzJXURqDLZAuXZvoPgVDjw.crl (hash: Wb7jqeFBNfRYWUMzKT5yIqB513Cgq9QCF0TtjVKq+lI=)
2: wnex2LpnDh2tDYAOL_JlA2jqYbg.roa (hash: jkFPmngwGBf/VR9fqzS0+q+xo9EQNuNbpIxHsY+rxw0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ba/ed4e2c-e5ad-417a-8788-11824406bd5d/1/nOTmWuzJXURqDLZAuXZvoPgVDjw.crl
rsync://rpki.ripe.net/repository/DEFAULT/ba/ed4e2c-e5ad-417a-8788-11824406bd5d/1/nOTmWuzJXURqDLZAuXZvoPgVDjw.mft
rsync://rpki.ripe.net/repository/DEFAULT/nOTmWuzJXURqDLZAuXZvoPgVDjw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 13 May 2025 23:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:c6:f1:74:ea:27:ad:03:81:d9:55:98:6c:94:c3:12:30
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9ce4e65aecc95d446a0cb640b9766fa0f8150e3c
Validity
Not Before: May 13 00:00:34 2025 GMT
Not After : May 14 00:00:34 2025 GMT
Subject: CN=9c0b8441d35baeaf6d3faec288acbf69acab4869
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:f7:18:ec:f2:30:50:61:95:32:7b:8e:33:53:
59:91:c1:fc:76:1c:1a:d9:91:8c:d5:1c:f4:55:55:
ef:0a:fa:1e:92:ad:41:2d:cd:42:40:28:a4:f9:5e:
71:35:35:4a:2e:14:1e:af:14:22:4c:61:22:5d:60:
6c:7c:50:70:7c:3c:0e:51:99:7e:27:08:a4:10:3d:
95:cb:c6:6a:59:0d:8b:dd:63:a7:ea:29:51:e6:7d:
10:7d:32:3d:51:7b:0a:95:46:28:27:73:a2:7a:59:
76:b4:1d:4a:70:6e:7f:bc:08:b6:1a:46:6c:37:13:
44:32:b9:d4:73:df:7e:38:3b:42:1e:e9:a6:87:c7:
80:01:b4:99:d9:68:cb:76:93:3b:e2:06:43:82:7e:
94:e8:84:d0:8a:3d:93:90:ad:1c:06:c5:4c:64:9b:
b5:5d:1b:ca:0f:6f:7b:a6:53:55:db:e7:69:06:23:
74:aa:e8:bc:73:37:24:bb:05:95:d5:c1:e4:df:f6:
d6:2c:9d:a5:95:e2:fd:6a:3b:d8:04:df:da:c8:82:
ea:53:75:1c:55:21:cd:53:06:01:65:aa:0f:5d:9c:
73:eb:9b:36:f4:58:31:8d:18:7a:a2:11:11:2f:38:
b0:eb:8a:e5:90:e2:c6:6d:14:2e:ce:ac:62:17:d4:
4c:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:0B:84:41:D3:5B:AE:AF:6D:3F:AE:C2:88:AC:BF:69:AC:AB:48:69
X509v3 Authority Key Identifier:
keyid:9C:E4:E6:5A:EC:C9:5D:44:6A:0C:B6:40:B9:76:6F:A0:F8:15:0E:3C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nOTmWuzJXURqDLZAuXZvoPgVDjw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/ed4e2c-e5ad-417a-8788-11824406bd5d/1/nOTmWuzJXURqDLZAuXZvoPgVDjw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/ed4e2c-e5ad-417a-8788-11824406bd5d/1/nOTmWuzJXURqDLZAuXZvoPgVDjw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
34:2c:01:f6:0b:f4:af:d0:7f:4c:03:d5:a5:46:c9:54:7c:6e:
13:89:58:3b:10:82:e6:50:50:b8:4e:11:b7:7f:f6:91:a6:4d:
44:05:72:40:94:a0:a7:67:07:9e:b5:2b:f7:a8:01:37:67:12:
a8:b7:3a:e2:e3:b5:16:f3:9f:4e:32:e3:67:25:d1:4d:71:bb:
19:c9:d8:30:e4:41:50:14:9d:78:27:9e:1c:14:f3:90:db:25:
ce:fc:8e:33:f0:6f:4b:4f:51:61:94:65:b6:fe:be:d2:d1:b5:
d8:af:fc:da:dd:d4:ee:fe:8a:8d:e1:02:46:67:01:6c:27:e9:
7a:f9:46:37:e6:0c:e4:61:1d:66:18:2e:35:b3:52:ee:9e:8a:
6d:a5:9d:cd:1b:bc:e4:d0:e9:45:32:2c:b2:05:eb:66:37:ec:
76:90:2a:a6:0d:d8:41:98:35:40:69:1c:ea:c5:12:af:48:e6:
56:da:44:74:60:8a:3c:6e:02:fc:31:05:90:db:5b:11:07:54:
5b:1e:4c:3e:5d:65:f0:d4:89:b8:aa:3c:66:4c:a4:91:07:47:
55:d9:fe:60:32:fd:07:d2:16:9f:8d:6f:c2:e6:aa:ad:b3:0b:
05:ee:5c:53:27:0f:f8:05:2f:cd:76:3d:d9:96:26:2e:65:f3:
0f:ce:12:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 13 08:31:11 2025 by rpki-client