Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cf/da358c-2e47-44ec-b0c5-2ad968b362de/1/nwSzzyTPS4GyIhFGoA8id7w0h4A.mft
File: nwSzzyTPS4GyIhFGoA8id7w0h4A.mft (raw, json)
Hash identifier: KqDKx823b2rqWwFScvoOaqVAgE/0GmDC1CV3darYlxQ=
Subject key identifier: 08:4E:3F:AA:BA:16:F5:F2:2C:A9:F7:F1:CE:0B:C2:8A:C2:83:C8:CF
Authority key identifier: 9F:04:B3:CF:24:CF:4B:81:B2:22:11:46:A0:0F:22:77:BC:34:87:80
Certificate issuer: /CN=9f04b3cf24cf4b81b2221146a00f2277bc348780
Certificate serial: 0196A98C191A9B3729AB453964BE3501A1A0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nwSzzyTPS4GyIhFGoA8id7w0h4A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cf/da358c-2e47-44ec-b0c5-2ad968b362de/1/nwSzzyTPS4GyIhFGoA8id7w0h4A.mft
Manifest number: 0FCB
Signing time: Wed 07 May 2025 07:00:52 +0000
Manifest this update: Wed 07 May 2025 07:00:52 +0000
Manifest next update: Thu 08 May 2025 07:00:52 +0000
Files and hashes: 1: JkR72JNkfOOkf4Hdto9Hn61nIOM.roa (hash: GdSC1LJhK3esreP7fCY/nmDtbQZgfXPG6XPWXjCKZig=)
2: nwSzzyTPS4GyIhFGoA8id7w0h4A.crl (hash: 2QGInxoa8UmAoUnlGr2tTUgX6jMcRl3E2SJzCsh0CRg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cf/da358c-2e47-44ec-b0c5-2ad968b362de/1/nwSzzyTPS4GyIhFGoA8id7w0h4A.crl
rsync://rpki.ripe.net/repository/DEFAULT/cf/da358c-2e47-44ec-b0c5-2ad968b362de/1/nwSzzyTPS4GyIhFGoA8id7w0h4A.mft
rsync://rpki.ripe.net/repository/DEFAULT/nwSzzyTPS4GyIhFGoA8id7w0h4A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 08 May 2025 07:00:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:a9:8c:19:1a:9b:37:29:ab:45:39:64:be:35:01:a1:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9f04b3cf24cf4b81b2221146a00f2277bc348780
Validity
Not Before: May 7 07:00:52 2025 GMT
Not After : May 8 07:00:52 2025 GMT
Subject: CN=084e3faaba16f5f22ca9f7f1ce0bc28ac283c8cf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:cb:65:fc:04:b5:23:69:97:04:da:16:ae:87:
e8:30:4f:13:25:91:fd:fb:dd:7c:52:f8:6d:ab:c8:
e5:9f:a5:53:6d:ea:fc:f7:37:66:50:ba:c4:db:19:
e1:7b:b7:3e:14:ee:4f:5e:d9:d0:cc:cb:d2:f7:2a:
17:a2:e9:61:a1:56:c5:87:47:fc:d5:38:c9:46:5e:
ce:45:00:1f:da:e6:53:08:c8:50:5a:17:3c:bd:48:
b1:d2:86:84:9f:62:25:71:0d:dd:c9:38:07:18:f0:
07:cd:72:9e:9e:ba:a7:48:c2:ce:96:fc:3b:e5:44:
71:3a:0d:d4:e0:22:09:e9:dc:af:d6:b7:6d:dd:f7:
e8:05:58:2d:e8:6c:ce:73:f0:5f:ea:6b:d0:6f:a5:
c9:c7:36:71:d9:10:ad:31:aa:4c:e7:d1:fd:f0:9a:
23:91:26:57:c7:0e:aa:d3:18:f4:d2:9e:9c:cd:8f:
b6:53:e3:c8:94:40:1e:4f:63:fc:b3:14:e8:a0:32:
d7:14:6f:b2:59:74:c1:23:d2:9e:e9:39:a7:4c:d4:
53:c2:be:e3:fc:2c:3a:79:f1:fa:7b:84:3c:a4:83:
22:19:5d:e6:46:8e:b4:7e:5e:82:c1:93:31:c3:5a:
0a:0f:c5:98:f5:78:0f:70:29:50:07:cd:3a:33:ff:
b5:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:4E:3F:AA:BA:16:F5:F2:2C:A9:F7:F1:CE:0B:C2:8A:C2:83:C8:CF
X509v3 Authority Key Identifier:
keyid:9F:04:B3:CF:24:CF:4B:81:B2:22:11:46:A0:0F:22:77:BC:34:87:80
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nwSzzyTPS4GyIhFGoA8id7w0h4A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/da358c-2e47-44ec-b0c5-2ad968b362de/1/nwSzzyTPS4GyIhFGoA8id7w0h4A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/da358c-2e47-44ec-b0c5-2ad968b362de/1/nwSzzyTPS4GyIhFGoA8id7w0h4A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8d:3b:1c:db:98:70:d1:64:b8:41:43:79:fc:50:cb:c7:10:fb:
c7:95:ba:79:58:04:02:4b:bc:fa:d6:ae:7e:ea:af:cd:2b:05:
71:3c:12:06:5e:62:ff:10:fb:9b:75:77:ce:51:cf:f5:c8:1c:
bf:0a:31:08:4c:a6:ae:07:31:de:59:3b:3d:fa:46:fa:ea:28:
d7:28:ef:63:8a:85:c1:5d:ac:bc:39:7f:db:31:28:8f:df:bf:
7a:e0:31:ac:df:2f:a8:b9:67:87:8b:91:9e:69:27:98:5a:f9:
8f:f4:74:03:5f:3b:bb:3c:ba:5c:49:32:31:a2:b7:ba:ce:6c:
99:61:85:99:5f:14:ef:9f:01:2c:0c:f2:f7:25:cc:a0:14:46:
e4:81:e2:c5:c4:fe:88:38:fd:45:2c:28:1d:b6:64:d4:87:d5:
8b:8a:ef:68:79:ec:dc:e6:1c:3b:9f:c2:0a:f5:12:9a:29:2f:
86:5a:da:03:d3:b9:d6:7b:7d:24:7a:b0:1e:8b:58:c8:85:6d:
de:20:f5:b9:9a:22:34:fe:1e:98:1d:b3:60:56:75:cf:aa:4c:
9d:c5:0a:08:0f:14:ed:26:f5:b6:aa:9c:97:dd:4b:db:30:2f:
77:3b:c6:05:31:2a:35:6c:60:eb:e3:fe:ee:f7:5b:81:4f:3a:
fb:62:8e:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 7 11:14:43 2025 by rpki-client