Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/263f28-e029-46c8-815b-ea26c5644640/1/nJ4hbtlwrbWem9SinbNcIj1ivJY.mft
File: nJ4hbtlwrbWem9SinbNcIj1ivJY.mft (raw, json)
Hash identifier: aZ/AgqAIxCs0d7DX34e+u8NW2pBURDhfQ8FaDX8CZ+s=
Subject key identifier: 73:F9:AC:9C:51:11:6A:BE:E1:FD:13:86:81:57:18:31:E5:B0:6C:6D
Authority key identifier: 9C:9E:21:6E:D9:70:AD:B5:9E:9B:D4:A2:9D:B3:5C:22:3D:62:BC:96
Certificate issuer: /CN=9c9e216ed970adb59e9bd4a29db35c223d62bc96
Certificate serial: 0196BF00BD2229865F69264BCE2A69A86305
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nJ4hbtlwrbWem9SinbNcIj1ivJY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/263f28-e029-46c8-815b-ea26c5644640/1/nJ4hbtlwrbWem9SinbNcIj1ivJY.mft
Manifest number: 0A51
Signing time: Sun 11 May 2025 11:00:18 +0000
Manifest this update: Sun 11 May 2025 11:00:18 +0000
Manifest next update: Mon 12 May 2025 11:00:18 +0000
Files and hashes: 1: FjLc6iE1HCBUPWs6XDYXgHm0OF4.roa (hash: kIa9UaUqLSZ9J3sHBlTkTWhH3Zl6GZgevA7Dd1AIyEw=)
2: nJ4hbtlwrbWem9SinbNcIj1ivJY.crl (hash: smukTzrslXA30FA/kaPwbQArOtHJxwjeE5kT8H5NA2g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bc/263f28-e029-46c8-815b-ea26c5644640/1/nJ4hbtlwrbWem9SinbNcIj1ivJY.crl
rsync://rpki.ripe.net/repository/DEFAULT/bc/263f28-e029-46c8-815b-ea26c5644640/1/nJ4hbtlwrbWem9SinbNcIj1ivJY.mft
rsync://rpki.ripe.net/repository/DEFAULT/nJ4hbtlwrbWem9SinbNcIj1ivJY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 12 May 2025 07:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:bf:00:bd:22:29:86:5f:69:26:4b:ce:2a:69:a8:63:05
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9c9e216ed970adb59e9bd4a29db35c223d62bc96
Validity
Not Before: May 11 11:00:18 2025 GMT
Not After : May 12 11:00:18 2025 GMT
Subject: CN=73f9ac9c51116abee1fd138681571831e5b06c6d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f0:26:56:df:ba:54:28:ae:76:90:84:e8:ab:7b:
11:32:e1:4a:e6:bc:c7:c8:c4:b1:bf:57:ce:d5:cb:
6b:9b:d4:44:f2:6e:33:23:75:dc:87:b7:5f:c6:ce:
c7:bb:53:18:4c:65:d7:f6:a6:91:4d:e4:d6:8a:af:
ef:40:56:4d:57:2e:8e:63:07:a7:f2:3c:a1:25:c2:
9b:ce:52:17:f0:4b:f1:50:0a:15:17:5b:6d:29:76:
4b:fd:b4:03:1c:6f:ed:92:71:7f:47:e0:48:7c:22:
75:d6:12:94:7c:fb:97:49:a2:36:8c:9c:5c:7e:7d:
b1:dc:86:82:ad:ba:75:b0:75:e1:10:9f:7d:ba:c2:
2c:5d:c0:3a:d5:21:53:af:02:be:ca:9e:93:87:49:
9d:0a:e3:a9:3d:17:00:3b:31:ff:73:86:e0:68:e4:
68:f7:ab:83:4c:d7:92:a7:dd:ac:85:42:91:44:47:
32:5c:36:a8:da:b3:72:75:a9:7e:a6:d8:ef:d1:20:
7b:24:af:50:7f:5c:33:10:02:f6:6d:b0:d9:61:bd:
65:82:2d:4d:1e:b2:42:93:4b:21:22:98:65:98:64:
9c:35:5b:aa:d1:a9:78:7c:23:e0:52:f1:5f:7a:71:
a2:78:0a:a1:7b:ed:23:28:7e:b7:62:22:bd:6e:4c:
cd:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:F9:AC:9C:51:11:6A:BE:E1:FD:13:86:81:57:18:31:E5:B0:6C:6D
X509v3 Authority Key Identifier:
keyid:9C:9E:21:6E:D9:70:AD:B5:9E:9B:D4:A2:9D:B3:5C:22:3D:62:BC:96
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nJ4hbtlwrbWem9SinbNcIj1ivJY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/263f28-e029-46c8-815b-ea26c5644640/1/nJ4hbtlwrbWem9SinbNcIj1ivJY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/263f28-e029-46c8-815b-ea26c5644640/1/nJ4hbtlwrbWem9SinbNcIj1ivJY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
aa:7e:f1:96:35:4e:91:a7:de:3b:bb:30:8c:ba:f7:b6:b0:b3:
4b:8c:a5:cd:d6:2d:36:c4:52:94:1e:25:8c:ce:14:5e:b5:f6:
42:39:4b:a4:74:b4:a1:7e:e3:db:cb:6d:31:d9:01:60:e3:3e:
28:8d:ba:ba:a1:c0:c3:ee:42:e6:fe:30:ca:36:1c:c9:88:82:
5c:4e:ae:0d:fa:7a:12:e4:36:c9:09:a4:8e:f0:66:2a:61:7c:
84:10:9d:35:29:2f:1f:5f:04:fa:d9:8b:67:72:e2:d5:6e:62:
2d:b7:5f:c2:b3:92:55:fa:73:75:fe:42:53:a5:d1:0d:bb:cb:
03:ae:5d:8c:1d:a6:01:bf:49:db:8a:45:6a:86:a9:12:b6:3c:
34:c4:1d:29:3d:f0:2a:37:aa:a6:33:37:6f:1d:eb:c0:1a:f9:
96:c6:5d:7e:05:de:f8:a8:60:75:4f:0d:cb:3a:2b:55:55:4c:
60:f3:ac:b4:17:7d:d8:c4:4b:ce:1f:a8:93:00:e9:dd:b5:8c:
05:b6:27:94:50:dc:ef:d9:65:c2:65:4c:cd:05:65:7e:fd:d1:
7b:bf:d9:ff:1e:77:19:19:8e:b4:2f:cb:7c:15:12:fa:82:72:
3e:7b:a8:57:54:3f:ae:5f:95:75:38:8b:a8:4b:a1:ff:30:0e:
5a:7c:6a:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 16:51:53 2025 by rpki-client