Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d5/d2dc9b-bcdc-42de-a1ae-42ce2d2be097/1/_Nbe4Pi6PCIpPWLscB7yULzI0uc.mft
File: _Nbe4Pi6PCIpPWLscB7yULzI0uc.mft (raw, json)
Hash identifier: bTo1gV/2SOPG/kYvk4xamYVQPtkOB4qSa/3w9QtLxwg=
Subject key identifier: 85:4C:48:C7:60:B2:DC:92:03:3C:74:E0:12:A6:19:5B:F2:A3:83:1C
Authority key identifier: FC:D6:DE:E0:F8:BA:3C:22:29:3D:62:EC:70:1E:F2:50:BC:C8:D2:E7
Certificate issuer: /CN=fcd6dee0f8ba3c22293d62ec701ef250bcc8d2e7
Certificate serial: 0196A79DB0DEC086431AB0E03653B9B7C084
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_Nbe4Pi6PCIpPWLscB7yULzI0uc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d5/d2dc9b-bcdc-42de-a1ae-42ce2d2be097/1/_Nbe4Pi6PCIpPWLscB7yULzI0uc.mft
Manifest number: 0503
Signing time: Tue 06 May 2025 22:00:51 +0000
Manifest this update: Tue 06 May 2025 22:00:51 +0000
Manifest next update: Wed 07 May 2025 22:00:51 +0000
Files and hashes: 1: _Nbe4Pi6PCIpPWLscB7yULzI0uc.crl (hash: usYtSkojq6BiGb9/NM9Shm7leCKHrrcUC08Oe3XmjQ4=)
2: uDZZBTPRRP5MQogb2OjdT8pUiBA.roa (hash: T9yL9Bw5mv08XIGrA3/0U3W6rC1uZNivZ+GrYQ4KE/k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d5/d2dc9b-bcdc-42de-a1ae-42ce2d2be097/1/_Nbe4Pi6PCIpPWLscB7yULzI0uc.crl
rsync://rpki.ripe.net/repository/DEFAULT/d5/d2dc9b-bcdc-42de-a1ae-42ce2d2be097/1/_Nbe4Pi6PCIpPWLscB7yULzI0uc.mft
rsync://rpki.ripe.net/repository/DEFAULT/_Nbe4Pi6PCIpPWLscB7yULzI0uc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 07 May 2025 22:00:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:a7:9d:b0:de:c0:86:43:1a:b0:e0:36:53:b9:b7:c0:84
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fcd6dee0f8ba3c22293d62ec701ef250bcc8d2e7
Validity
Not Before: May 6 22:00:51 2025 GMT
Not After : May 7 22:00:51 2025 GMT
Subject: CN=854c48c760b2dc92033c74e012a6195bf2a3831c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:13:b5:cc:dd:2f:9f:c2:ca:d1:9d:05:a1:67:
49:5c:68:c9:b4:6c:9f:f2:52:cd:61:e3:e3:68:ff:
6c:fd:7c:f7:7f:38:d9:9f:68:03:9d:d6:68:af:61:
a8:7e:c7:69:0c:23:64:c4:18:bd:b6:7a:a2:ef:ad:
a8:25:3f:90:96:b6:a9:d1:11:eb:24:ca:11:8f:38:
20:75:bd:af:de:1b:14:b4:55:c4:97:c5:46:ab:0b:
ea:3d:00:2f:d9:5b:15:49:db:90:65:15:c4:bc:d9:
2e:69:fc:fe:c6:fb:f3:d8:8a:f6:95:ef:43:0a:2b:
2e:8e:7a:71:05:4d:28:64:15:ff:2b:f3:32:c3:48:
1a:cf:fc:81:59:c8:5a:62:e9:42:68:79:e3:e1:6d:
5d:8f:9c:df:90:af:0b:8f:39:e3:96:dc:90:0a:eb:
bb:37:03:59:4a:e9:99:8b:87:00:f1:1b:2f:fe:f0:
5d:ab:be:4b:ae:a8:fe:b3:98:3a:83:71:ee:cb:d2:
79:35:2c:d9:b5:71:03:02:28:f5:a1:a0:dc:7f:b5:
39:99:46:55:6e:04:9c:e6:19:a5:0b:d4:c0:77:1f:
8e:bc:fb:f5:a1:34:69:81:17:5c:00:43:6e:26:f6:
75:6c:ea:17:30:13:7d:a0:52:b6:37:ee:c6:9d:6e:
67:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:4C:48:C7:60:B2:DC:92:03:3C:74:E0:12:A6:19:5B:F2:A3:83:1C
X509v3 Authority Key Identifier:
keyid:FC:D6:DE:E0:F8:BA:3C:22:29:3D:62:EC:70:1E:F2:50:BC:C8:D2:E7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_Nbe4Pi6PCIpPWLscB7yULzI0uc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/d2dc9b-bcdc-42de-a1ae-42ce2d2be097/1/_Nbe4Pi6PCIpPWLscB7yULzI0uc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/d2dc9b-bcdc-42de-a1ae-42ce2d2be097/1/_Nbe4Pi6PCIpPWLscB7yULzI0uc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3b:0a:ed:89:f7:40:50:7f:a7:9b:da:a9:9d:cd:0a:c9:e4:22:
dd:7e:4e:04:7a:ef:fb:dc:68:77:c6:ef:cc:6b:95:6e:5f:81:
65:d8:91:31:4b:e2:8f:42:27:ba:a1:26:82:e3:50:3d:93:8c:
a5:12:64:7a:a5:a0:99:cf:b0:23:5e:6b:08:60:22:dd:27:96:
39:a6:4a:06:19:2b:76:c8:e6:c8:6d:04:6e:6c:25:3a:e3:6f:
9a:91:c4:58:66:a4:f5:fd:73:09:6e:3d:5b:51:2f:b4:ed:db:
8a:bc:f4:38:ed:e5:f2:08:a8:b6:48:99:b4:0c:3b:2a:bb:54:
48:86:62:d1:38:a3:ab:12:6b:b4:b0:30:44:e2:c9:40:9d:82:
2c:af:cc:56:ee:6c:d7:69:bc:95:6b:84:93:d6:9e:e0:e2:80:
02:f7:2f:e5:3e:ce:5f:6e:9a:12:c3:25:7d:c9:36:e1:cc:7b:
8b:21:ae:87:6a:c6:c1:9d:ce:78:4e:de:c9:c1:b3:fe:43:67:
ab:73:3f:b1:18:60:a9:a5:0d:66:04:fb:28:a6:ab:1c:0b:53:
8e:da:45:d6:c3:54:6f:34:e1:12:9b:8f:e6:a3:8f:cd:16:f0:
17:f2:34:a5:fc:62:3d:a5:5e:10:de:e2:d5:76:ea:14:08:61:
db:5e:a8:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 7 06:57:18 2025 by rpki-client