Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/e67e82-74d1-4598-80ee-ce0e97bab6a7/1/nJGTyUKgcOtue3bTPBFwwauqq8A.mft
File: nJGTyUKgcOtue3bTPBFwwauqq8A.mft (raw, json)
Hash identifier: 3CiQUxt3Ys4JhZR0i5jdMQD8q4+sMB87cMbraX+a3eA=
Subject key identifier: 03:84:59:07:41:F1:96:76:87:A1:4F:37:AD:D3:2A:9C:98:EE:66:EE
Authority key identifier: 9C:91:93:C9:42:A0:70:EB:6E:7B:76:D3:3C:11:70:C1:AB:AA:AB:C0
Certificate issuer: /CN=9c9193c942a070eb6e7b76d33c1170c1abaaabc0
Certificate serial: 0196C6BADF128E7C9A9D7C297A07950AFAF1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nJGTyUKgcOtue3bTPBFwwauqq8A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d4/e67e82-74d1-4598-80ee-ce0e97bab6a7/1/nJGTyUKgcOtue3bTPBFwwauqq8A.mft
Manifest number: 3E
Signing time: Mon 12 May 2025 23:00:57 +0000
Manifest this update: Mon 12 May 2025 23:00:57 +0000
Manifest next update: Tue 13 May 2025 23:00:57 +0000
Files and hashes: 1: nJGTyUKgcOtue3bTPBFwwauqq8A.crl (hash: 89NnRS/rUN3QQimN+askfi9HqQmeLw483ehEC8RBgh4=)
2: zsKGqfleCvDMwN0xjyFpS4xkenw.roa (hash: i/u/9VVtT03r4id3fmUnH+SfZ7Nvzq19dchi8Dl+uKg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d4/e67e82-74d1-4598-80ee-ce0e97bab6a7/1/nJGTyUKgcOtue3bTPBFwwauqq8A.crl
rsync://rpki.ripe.net/repository/DEFAULT/d4/e67e82-74d1-4598-80ee-ce0e97bab6a7/1/nJGTyUKgcOtue3bTPBFwwauqq8A.mft
rsync://rpki.ripe.net/repository/DEFAULT/nJGTyUKgcOtue3bTPBFwwauqq8A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 13 May 2025 23:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:c6:ba:df:12:8e:7c:9a:9d:7c:29:7a:07:95:0a:fa:f1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9c9193c942a070eb6e7b76d33c1170c1abaaabc0
Validity
Not Before: May 12 23:00:57 2025 GMT
Not After : May 13 23:00:57 2025 GMT
Subject: CN=0384590741f1967687a14f37add32a9c98ee66ee
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:7a:b8:13:7c:7b:0e:c9:89:39:00:e3:67:91:
c8:60:50:85:6f:97:96:3d:9e:59:7a:ab:f8:95:0a:
66:6e:98:64:1d:8c:88:48:41:e5:aa:16:a3:f7:48:
a4:b1:9e:7e:49:77:58:93:9c:fd:1a:c6:a3:14:2a:
f2:b0:03:9d:68:18:a0:d5:91:f8:cf:03:1a:ea:07:
6f:18:de:52:34:00:5d:b3:ea:ea:61:38:91:c8:03:
7e:11:99:26:62:10:04:54:ae:f0:49:96:34:b7:ed:
a1:5f:d1:88:1e:0d:ca:ab:37:ef:4d:b0:8f:f3:64:
b1:5f:d4:a5:4d:e5:fd:48:87:12:93:8a:b4:7d:2d:
ee:d4:f7:d1:b2:6e:0a:08:23:c4:75:55:aa:08:27:
b0:f5:63:a2:ef:28:12:82:e8:96:09:0c:ab:b6:95:
20:ea:c7:38:ce:37:57:c6:1a:ca:4f:e5:43:e1:2d:
53:8a:67:19:db:6e:91:a1:ec:4f:de:d2:b1:fb:a1:
10:3f:cb:8f:b8:5c:08:ad:8d:30:9d:d0:85:1f:c2:
75:82:8e:57:81:29:e9:29:f2:3a:e7:6d:ba:f1:fb:
51:7f:99:f6:c6:b5:4f:4a:6f:1c:cb:dd:49:c1:25:
0a:85:30:be:2d:0b:2d:01:fc:60:e5:5f:e9:fd:d3:
5e:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:84:59:07:41:F1:96:76:87:A1:4F:37:AD:D3:2A:9C:98:EE:66:EE
X509v3 Authority Key Identifier:
keyid:9C:91:93:C9:42:A0:70:EB:6E:7B:76:D3:3C:11:70:C1:AB:AA:AB:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nJGTyUKgcOtue3bTPBFwwauqq8A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/e67e82-74d1-4598-80ee-ce0e97bab6a7/1/nJGTyUKgcOtue3bTPBFwwauqq8A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/e67e82-74d1-4598-80ee-ce0e97bab6a7/1/nJGTyUKgcOtue3bTPBFwwauqq8A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4c:ad:9a:59:8c:e9:b2:f5:24:64:be:af:e7:30:50:28:1f:ab:
cd:8c:47:cf:b1:3e:5e:77:ef:ef:56:97:69:ab:ca:ee:9a:25:
83:2f:b2:bd:18:c7:75:24:22:b3:ea:c4:36:ac:7c:c5:f5:7f:
66:4f:1d:e9:ec:be:2c:1c:a1:96:f9:53:aa:85:ce:03:b0:e7:
ea:f3:c0:07:75:a2:2e:84:c0:d5:3e:dc:3c:ee:ad:c8:31:b4:
46:ab:ed:c5:e2:50:77:86:0c:e6:4d:2c:3a:3d:13:3b:9e:04:
69:aa:b2:8d:5b:a7:5c:5f:ca:44:3f:b7:e8:77:ca:20:02:c9:
93:dc:f8:77:f0:97:c2:95:ed:2c:ef:d6:05:6e:38:69:0c:a4:
83:6e:d8:7c:ba:6e:e8:e6:23:70:c3:91:bf:86:1a:cd:b6:82:
fb:66:89:06:02:1c:d5:93:a6:09:32:36:78:a3:5f:b7:26:45:
39:97:ca:69:0e:c3:86:e6:d8:e1:11:81:f7:b4:f0:85:24:48:
8e:fa:ec:d7:2c:f6:97:9b:36:d5:c9:26:22:f2:24:ae:d2:0e:
dc:9f:25:ee:84:d5:37:08:5a:23:68:57:2a:d9:ed:2c:d8:ec:
2d:0b:da:c7:91:95:44:2a:55:c0:a2:06:c8:6b:cc:66:cb:c1:
2e:c5:93:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 13 06:53:45 2025 by rpki-client