Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d7/8f7138-46d9-498b-af6d-6d6582b2b5b6/1/Nse0TnxfKbnepAKsgFFgspjPDaY.mft
File: Nse0TnxfKbnepAKsgFFgspjPDaY.mft (raw, json)
Hash identifier: z5jvil9SrEZaDC4qLG5nm8b/qcotM8MW1BneWPDY/Hs=
Subject key identifier: DC:24:4B:BF:6D:2D:0D:96:1A:C3:E7:79:B6:AB:0A:8A:BF:D3:00:90
Authority key identifier: 36:C7:B4:4E:7C:5F:29:B9:DE:A4:02:AC:80:51:60:B2:98:CF:0D:A6
Certificate issuer: /CN=36c7b44e7c5f29b9dea402ac805160b298cf0da6
Certificate serial: 0196C8722004F1A0E8828C1358F195961B78
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Nse0TnxfKbnepAKsgFFgspjPDaY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d7/8f7138-46d9-498b-af6d-6d6582b2b5b6/1/Nse0TnxfKbnepAKsgFFgspjPDaY.mft
Manifest number: 1539
Signing time: Tue 13 May 2025 07:00:44 +0000
Manifest this update: Tue 13 May 2025 07:00:44 +0000
Manifest next update: Wed 14 May 2025 07:00:44 +0000
Files and hashes: 1: Nse0TnxfKbnepAKsgFFgspjPDaY.crl (hash: x8xP8MayVzcCV01uQqc6jQECm6Al1UL5y7MtbusFP+c=)
2: SMYfuR1vOqwT0gbQyB5G9SKEcQs.roa (hash: 790cASmrwFRWvIHgSFvW34RkdQVbe9565zpCVGOf6tw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d7/8f7138-46d9-498b-af6d-6d6582b2b5b6/1/Nse0TnxfKbnepAKsgFFgspjPDaY.crl
rsync://rpki.ripe.net/repository/DEFAULT/d7/8f7138-46d9-498b-af6d-6d6582b2b5b6/1/Nse0TnxfKbnepAKsgFFgspjPDaY.mft
rsync://rpki.ripe.net/repository/DEFAULT/Nse0TnxfKbnepAKsgFFgspjPDaY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 14 May 2025 07:00:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:c8:72:20:04:f1:a0:e8:82:8c:13:58:f1:95:96:1b:78
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=36c7b44e7c5f29b9dea402ac805160b298cf0da6
Validity
Not Before: May 13 07:00:44 2025 GMT
Not After : May 14 07:00:44 2025 GMT
Subject: CN=dc244bbf6d2d0d961ac3e779b6ab0a8abfd30090
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:08:7a:d2:54:77:51:d1:d9:10:06:6a:e2:5d:
ab:22:5e:e1:5f:e9:ff:2f:59:fe:f9:fe:61:da:75:
c6:e7:74:9e:91:7c:02:76:4e:35:3a:0d:32:8d:5b:
f8:9c:08:9a:34:06:2f:64:f1:a5:8e:63:ab:42:e8:
1d:e1:0e:66:e6:a2:c1:be:ba:f1:21:8e:6a:ec:0a:
21:43:fa:e5:71:0e:72:ab:27:03:48:2c:2c:6d:a2:
03:96:f5:a0:fc:95:0c:e8:f7:6c:89:d6:e1:41:c0:
71:56:86:a4:7c:7e:64:ec:bb:ec:39:55:c1:74:1c:
ba:07:50:63:34:1a:b3:98:26:84:63:e7:38:5e:13:
7b:08:16:3b:85:45:12:49:69:94:55:34:e4:f8:fb:
9a:7b:98:c2:f7:20:2e:ea:c8:cb:26:07:c5:00:64:
47:81:24:7f:72:25:30:02:28:1c:f6:fd:d0:2d:f3:
b5:40:d2:0e:a9:9b:7c:f5:20:9d:f1:40:44:89:51:
bb:84:73:b3:61:82:ca:bd:ee:b0:79:99:37:9f:2d:
89:5b:64:85:1a:f0:a4:18:4f:4c:16:f0:45:3a:ea:
6f:86:b9:03:e1:e6:65:c9:5d:18:72:c3:30:2b:7c:
7b:ff:0d:ae:36:d6:0e:b4:5c:03:63:8f:bd:fd:ae:
5c:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:24:4B:BF:6D:2D:0D:96:1A:C3:E7:79:B6:AB:0A:8A:BF:D3:00:90
X509v3 Authority Key Identifier:
keyid:36:C7:B4:4E:7C:5F:29:B9:DE:A4:02:AC:80:51:60:B2:98:CF:0D:A6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Nse0TnxfKbnepAKsgFFgspjPDaY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/8f7138-46d9-498b-af6d-6d6582b2b5b6/1/Nse0TnxfKbnepAKsgFFgspjPDaY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/8f7138-46d9-498b-af6d-6d6582b2b5b6/1/Nse0TnxfKbnepAKsgFFgspjPDaY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0d:42:a0:1b:81:9d:5e:ce:ae:09:09:5a:53:d9:46:94:72:74:
62:8f:e4:92:a8:55:db:92:ab:96:74:98:ae:2b:18:d1:f7:d3:
5a:55:bf:01:e9:5b:ee:74:82:5f:6e:29:da:98:ac:a1:19:83:
fe:06:e1:18:f6:52:3f:a5:d9:8b:97:2b:1d:2d:cf:4c:04:59:
9b:4c:d5:e5:0a:8d:bb:56:ca:35:fa:d7:26:f2:f7:b1:95:22:
13:34:1a:e7:9c:4d:f5:b4:f5:4a:1a:d4:1b:f4:90:c7:1b:7d:
fd:63:a7:a6:9f:a5:22:ca:40:1b:12:e7:92:3e:62:fe:2e:11:
ee:bb:ad:3b:22:e8:5c:2d:f8:2a:c7:fa:c8:7e:65:05:54:d0:
4a:a3:80:14:dc:39:d0:5c:e6:33:6a:76:ff:72:f3:44:59:0d:
f0:06:b9:67:5f:e0:8c:4b:4f:fc:f4:46:0c:75:e7:26:97:0d:
80:e8:64:5f:a3:98:04:b1:7f:db:27:00:87:fe:a2:28:87:95:
52:8e:b9:c9:54:03:dd:45:2f:c6:7c:aa:06:82:7f:b3:6f:f3:
0e:7c:37:f2:c1:09:57:1a:a3:e7:e7:0e:d8:4b:ac:8f:07:fb:
4a:12:be:75:36:0e:57:65:39:fc:8b:9f:b9:c3:9f:8b:fd:66:
b1:72:9a:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 13 09:52:02 2025 by rpki-client