Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d7/1d1b45-86e9-46ee-991c-0eddeb48e3ae/1/nc9e3E5q7cjfQkWmL6N_oipiDqo.mft
File: nc9e3E5q7cjfQkWmL6N_oipiDqo.mft (raw, json)
Hash identifier: hIwg3JzzeoJliw0WpCMDSlkxI/Li2SVp2rvDkWQvyiI=
Subject key identifier: A2:AF:05:F7:C3:50:52:9B:A7:A9:78:74:84:DB:11:B2:53:F4:5A:B9
Authority key identifier: 9D:CF:5E:DC:4E:6A:ED:C8:DF:42:45:A6:2F:A3:7F:A2:2A:62:0E:AA
Certificate issuer: /CN=9dcf5edc4e6aedc8df4245a62fa37fa22a620eaa
Certificate serial: 0196A0BF5749AC8ADEF1718462A82680D948
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nc9e3E5q7cjfQkWmL6N_oipiDqo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d7/1d1b45-86e9-46ee-991c-0eddeb48e3ae/1/nc9e3E5q7cjfQkWmL6N_oipiDqo.mft
Manifest number: 1291
Signing time: Mon 05 May 2025 14:00:16 +0000
Manifest this update: Mon 05 May 2025 14:00:16 +0000
Manifest next update: Tue 06 May 2025 14:00:16 +0000
Files and hashes: 1: 6mwpgZ5jMyOU3uGB0qn2Rbl29vU.roa (hash: zgnUk23gS2UF4J68R+bIiwgYj0q0EdWy/Z/fr9n8soc=)
2: nc9e3E5q7cjfQkWmL6N_oipiDqo.crl (hash: QKSlAM61Fc36ofe86HZe5bALSfP7Hix/C5v5cNdyTRE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d7/1d1b45-86e9-46ee-991c-0eddeb48e3ae/1/nc9e3E5q7cjfQkWmL6N_oipiDqo.crl
rsync://rpki.ripe.net/repository/DEFAULT/d7/1d1b45-86e9-46ee-991c-0eddeb48e3ae/1/nc9e3E5q7cjfQkWmL6N_oipiDqo.mft
rsync://rpki.ripe.net/repository/DEFAULT/nc9e3E5q7cjfQkWmL6N_oipiDqo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 06 May 2025 10:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:a0:bf:57:49:ac:8a:de:f1:71:84:62:a8:26:80:d9:48
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9dcf5edc4e6aedc8df4245a62fa37fa22a620eaa
Validity
Not Before: May 5 14:00:16 2025 GMT
Not After : May 6 14:00:16 2025 GMT
Subject: CN=a2af05f7c350529ba7a9787484db11b253f45ab9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:20:4b:12:95:45:ad:48:20:83:bf:cd:52:7a:
64:64:c0:03:25:af:17:2f:d7:48:12:32:1d:23:ff:
ff:0a:2f:ff:e2:4f:48:f4:4e:32:54:41:77:b8:d0:
5b:4e:68:f4:19:ec:27:ed:3e:c0:72:79:06:3a:48:
b0:90:b3:11:7f:03:11:a1:d0:5d:67:1c:59:71:33:
20:b1:1f:56:93:47:a9:ca:01:01:75:9c:ed:4f:49:
c5:b9:1b:1f:95:e4:13:ee:7f:5e:2e:de:05:7c:5c:
9b:af:f2:0b:eb:bf:bc:6a:00:ab:15:c4:c8:80:fd:
07:c5:b2:1f:9b:c6:d0:9f:c4:01:69:dd:91:17:bd:
f6:aa:77:70:25:74:bb:20:78:e4:b1:78:8e:25:13:
9b:80:7f:01:14:a3:b0:55:b0:a0:dc:5b:fe:53:ad:
a0:2a:74:0f:98:ce:1a:5e:81:a6:89:05:ab:b0:9f:
cf:56:73:f8:74:7c:1e:fe:b0:46:7a:89:9d:a9:cb:
fb:35:da:aa:23:4d:14:f6:16:a7:44:cf:23:fc:bb:
63:ec:c1:77:cf:93:26:64:22:d9:74:7f:00:05:50:
ca:0e:a2:5a:4f:9a:eb:9f:ae:7b:b2:a3:ec:5a:c9:
6e:65:cd:18:b9:83:13:c5:7f:f8:32:61:af:e4:45:
65:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:AF:05:F7:C3:50:52:9B:A7:A9:78:74:84:DB:11:B2:53:F4:5A:B9
X509v3 Authority Key Identifier:
keyid:9D:CF:5E:DC:4E:6A:ED:C8:DF:42:45:A6:2F:A3:7F:A2:2A:62:0E:AA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nc9e3E5q7cjfQkWmL6N_oipiDqo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/1d1b45-86e9-46ee-991c-0eddeb48e3ae/1/nc9e3E5q7cjfQkWmL6N_oipiDqo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/1d1b45-86e9-46ee-991c-0eddeb48e3ae/1/nc9e3E5q7cjfQkWmL6N_oipiDqo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
89:89:e0:37:37:47:24:cc:90:0f:55:fa:0b:ef:bb:d2:19:88:
e0:57:33:e5:26:b6:88:0e:c7:09:71:6b:ae:f8:38:e7:00:13:
91:aa:8c:9b:e7:88:9c:31:4a:aa:54:ab:0a:13:93:aa:88:4b:
5d:08:64:62:1f:31:70:b4:22:f2:06:4e:21:05:79:12:b2:f9:
bc:59:8c:5f:0e:f3:48:ea:14:fa:e4:4a:97:ea:7d:29:4d:6e:
34:ac:ff:93:d2:90:8a:c5:19:f7:05:db:d5:c8:3f:49:c2:5d:
d4:34:b8:42:ca:42:54:27:35:5d:15:04:60:e2:53:85:74:53:
2b:eb:b4:a0:d5:15:2e:84:d8:82:1a:b5:e7:fe:2e:dd:2d:11:
95:6d:bf:e4:05:62:ec:28:11:5b:28:35:2f:96:91:c4:2d:86:
a4:ba:bd:ae:10:41:97:51:46:8f:4b:27:c6:c6:31:1a:bb:b7:
aa:cb:7e:c3:b9:64:db:f2:a8:c2:5e:b4:a0:48:3f:12:4c:2a:
fd:f6:c9:e0:82:eb:b3:74:a2:28:14:63:66:33:37:76:b5:92:
fd:34:cc:b7:4a:95:dd:81:d1:a9:e1:5d:7b:08:c7:46:d0:47:
e4:77:e4:68:64:93:c4:22:d3:5d:04:be:5a:74:35:1c:bf:bf:
a8:7b:28:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 5 16:05:15 2025 by rpki-client