Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/2b5e0d-19a9-4036-98b6-ca65a9723c59/1/nEbB13YgBThO2FJs-hx0llZPUNM.mft
File: nEbB13YgBThO2FJs-hx0llZPUNM.mft (raw, json)
Hash identifier: 7vTVoIURuQtOlw/rLAaF/FYdaFQey9/OhOV/8UsscfA=
Subject key identifier: C9:0D:AC:D2:C5:CC:E4:96:4F:29:2C:17:C6:BC:06:E2:CB:DE:CF:B6
Authority key identifier: 9C:46:C1:D7:76:20:05:38:4E:D8:52:6C:FA:1C:74:96:56:4F:50:D3
Certificate issuer: /CN=9c46c1d7762005384ed8526cfa1c7496564f50d3
Certificate serial: 0196B890E60FFB8840D8D1EA9B350F3B0594
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nEbB13YgBThO2FJs-hx0llZPUNM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cd/2b5e0d-19a9-4036-98b6-ca65a9723c59/1/nEbB13YgBThO2FJs-hx0llZPUNM.mft
Manifest number: 03C9
Signing time: Sat 10 May 2025 05:00:25 +0000
Manifest this update: Sat 10 May 2025 05:00:25 +0000
Manifest next update: Sun 11 May 2025 05:00:25 +0000
Files and hashes: 1: GiJYSZmHP4AF_ON-lln6mBkXaRk.roa (hash: C1PRVClAPoLTLOqGEkfYdyI+UReAPqKicWbGHLAUP6Y=)
2: nEbB13YgBThO2FJs-hx0llZPUNM.crl (hash: zD/OrOh+p7EuQjitXK6HICt/qQipFp8Up3dl2t7o4kY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cd/2b5e0d-19a9-4036-98b6-ca65a9723c59/1/nEbB13YgBThO2FJs-hx0llZPUNM.crl
rsync://rpki.ripe.net/repository/DEFAULT/cd/2b5e0d-19a9-4036-98b6-ca65a9723c59/1/nEbB13YgBThO2FJs-hx0llZPUNM.mft
rsync://rpki.ripe.net/repository/DEFAULT/nEbB13YgBThO2FJs-hx0llZPUNM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 11 May 2025 04:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:b8:90:e6:0f:fb:88:40:d8:d1:ea:9b:35:0f:3b:05:94
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9c46c1d7762005384ed8526cfa1c7496564f50d3
Validity
Not Before: May 10 05:00:25 2025 GMT
Not After : May 11 05:00:25 2025 GMT
Subject: CN=c90dacd2c5cce4964f292c17c6bc06e2cbdecfb6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:aa:95:c3:fb:30:a6:28:3f:36:79:d7:f2:ed:
4b:b9:dc:2d:e1:05:0f:6e:24:47:c9:51:30:fa:8d:
70:29:98:13:2a:c5:da:ee:27:97:1c:7e:a0:36:f9:
5b:40:52:bf:f7:76:41:c7:08:8e:0d:8b:00:7f:ff:
8e:17:75:e9:e5:bf:f9:94:05:78:5c:bd:05:2f:44:
5e:3b:2a:3f:ef:28:e7:cb:d7:df:25:dd:19:66:e3:
d5:19:6e:90:ec:85:6c:fd:17:6c:bd:6a:40:54:89:
6f:7e:2b:62:59:2a:4c:f3:f4:e6:4c:90:61:fe:64:
45:5e:8e:00:40:92:24:fe:94:2a:8f:f5:ec:8c:06:
3e:3d:56:ba:70:b2:2a:26:1a:ff:60:05:b7:42:1a:
23:eb:e7:86:d3:16:d1:18:cc:b0:ad:d9:ce:26:2d:
86:89:6b:9f:ad:cc:2c:f4:57:d3:bd:c1:71:65:62:
1d:91:80:9b:c0:ab:01:22:6d:fa:17:1b:b1:4f:6a:
3d:69:18:35:52:f6:08:3f:9c:db:6b:2c:3d:c1:d2:
b9:52:ad:c3:14:0a:61:b6:4f:72:d6:4f:58:29:c6:
52:00:78:be:cb:b4:d5:d9:df:83:e5:6a:55:9b:c7:
be:f7:c4:97:41:f7:65:5c:99:20:c7:3a:a5:7a:ab:
aa:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:0D:AC:D2:C5:CC:E4:96:4F:29:2C:17:C6:BC:06:E2:CB:DE:CF:B6
X509v3 Authority Key Identifier:
keyid:9C:46:C1:D7:76:20:05:38:4E:D8:52:6C:FA:1C:74:96:56:4F:50:D3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nEbB13YgBThO2FJs-hx0llZPUNM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/2b5e0d-19a9-4036-98b6-ca65a9723c59/1/nEbB13YgBThO2FJs-hx0llZPUNM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/2b5e0d-19a9-4036-98b6-ca65a9723c59/1/nEbB13YgBThO2FJs-hx0llZPUNM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5a:5a:48:37:2f:ae:1d:a9:c1:7c:dc:58:35:c4:d8:b9:0f:f6:
9d:73:eb:b1:1c:5a:c1:16:fa:1a:b3:b4:4d:8a:0b:4d:cd:64:
30:c0:14:e2:f7:44:15:6f:4b:34:1c:6b:09:db:65:c8:a5:26:
15:a6:5c:36:e6:40:b3:70:6a:4b:83:dd:ff:63:6c:0d:2f:d3:
e4:a4:91:f0:8e:54:57:61:62:4a:81:a3:76:c9:f5:ef:5b:57:
cd:3a:23:03:a5:32:58:cd:78:ff:aa:b3:81:4a:ef:bb:6a:4c:
b6:7e:ca:2b:c6:91:91:02:b9:3c:ed:db:13:1a:95:fd:55:bb:
09:64:01:28:bc:fd:e8:36:ba:f6:03:47:02:61:cd:d0:c7:d6:
41:0f:d8:e0:da:94:05:c5:80:21:f4:96:7a:f0:2c:a6:cd:7d:
5b:73:cd:38:10:0e:35:0b:1a:93:9b:c9:e1:27:aa:86:e6:f7:
7a:84:4d:26:b5:e8:65:cc:a4:0e:5d:0d:33:6e:9f:ac:14:df:
b9:91:43:40:bc:f9:4e:99:c0:58:73:79:10:dd:7b:b9:f2:f7:
14:61:22:b6:e0:26:6a:15:88:59:12:ea:e7:76:77:ed:f7:8a:
53:a2:29:c9:cb:60:b9:4e:bd:ab:b1:fa:3d:bc:4d:db:f4:7f:
d6:ec:96:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 13:17:10 2025 by rpki-client