Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dc/339d29-712a-4c86-9510-e4d6bcf336b7/1/nYHLUEMmdDsX02SiBIdcOcbtvAk.mft
File: nYHLUEMmdDsX02SiBIdcOcbtvAk.mft (raw, json)
Hash identifier: /+3ltJOQvPSzKR+txKIHgg+Px1MZmKkewGblC7tL1w4=
Subject key identifier: 6F:14:D1:04:A0:A0:A3:0A:41:D6:FD:18:71:8C:6B:7C:D4:4B:E8:6B
Authority key identifier: 9D:81:CB:50:43:26:74:3B:17:D3:64:A2:04:87:5C:39:C6:ED:BC:09
Certificate issuer: /CN=9d81cb504326743b17d364a204875c39c6edbc09
Certificate serial: 0196BFDD3E1E8825CA4A5DB9DAB1042944AE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nYHLUEMmdDsX02SiBIdcOcbtvAk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dc/339d29-712a-4c86-9510-e4d6bcf336b7/1/nYHLUEMmdDsX02SiBIdcOcbtvAk.mft
Manifest number: 0ECC
Signing time: Sun 11 May 2025 15:01:09 +0000
Manifest this update: Sun 11 May 2025 15:01:09 +0000
Manifest next update: Mon 12 May 2025 15:01:09 +0000
Files and hashes: 1: JP_mk9oH8p5bvlYYSWGek7KXox0.roa (hash: QozdhhJZu+Cfz+XSJNvXYpnVEpaUzqrN6lM64Dbcl70=)
2: nYHLUEMmdDsX02SiBIdcOcbtvAk.crl (hash: mDCLYdo3XpBVHAh+iTBwdEvQoyESXdQ1MyfZ1JyILCs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dc/339d29-712a-4c86-9510-e4d6bcf336b7/1/nYHLUEMmdDsX02SiBIdcOcbtvAk.crl
rsync://rpki.ripe.net/repository/DEFAULT/dc/339d29-712a-4c86-9510-e4d6bcf336b7/1/nYHLUEMmdDsX02SiBIdcOcbtvAk.mft
rsync://rpki.ripe.net/repository/DEFAULT/nYHLUEMmdDsX02SiBIdcOcbtvAk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 12 May 2025 15:01:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:bf:dd:3e:1e:88:25:ca:4a:5d:b9:da:b1:04:29:44:ae
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9d81cb504326743b17d364a204875c39c6edbc09
Validity
Not Before: May 11 15:01:09 2025 GMT
Not After : May 12 15:01:09 2025 GMT
Subject: CN=6f14d104a0a0a30a41d6fd18718c6b7cd44be86b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:17:34:1a:a7:85:c8:33:48:d9:e1:6c:39:36:
d0:a9:b8:a3:55:15:2b:f4:38:ff:e1:4f:86:07:53:
e3:9d:de:3a:ab:12:44:53:a0:6c:9b:cb:78:b3:86:
6c:38:99:ac:8d:be:e8:0d:fe:8d:9f:ee:0a:f9:00:
52:cf:6a:9e:89:1e:f2:cb:5f:09:f7:3b:e0:91:56:
18:09:39:12:7f:4b:8a:8b:26:62:62:a6:3c:eb:23:
c2:7e:b1:23:84:57:a7:cb:c4:a5:0a:47:43:18:a8:
ee:05:8d:28:20:9a:3d:1d:1b:bf:7e:8f:a6:17:a8:
97:f7:a8:38:9a:ff:48:48:c0:93:bb:38:a5:e3:2d:
a4:dd:20:3d:8d:cc:e8:eb:2e:80:a3:e6:0a:9c:20:
88:26:22:d9:45:81:31:55:88:01:be:19:96:eb:2f:
3f:9d:fe:74:4c:fb:4d:59:f9:6a:60:6b:c9:10:10:
4f:8f:0d:3d:07:6d:58:7a:09:27:5d:44:40:82:55:
dd:17:00:6e:52:cf:6d:eb:a3:f7:a8:4b:e4:1e:58:
89:d1:5b:4e:94:65:36:66:fe:5b:fd:f1:53:8a:13:
c0:4d:fc:d3:5e:24:ec:d9:48:84:be:07:0c:09:2e:
49:bb:ec:b5:13:a1:15:b6:9d:97:90:aa:db:ac:0f:
f9:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:14:D1:04:A0:A0:A3:0A:41:D6:FD:18:71:8C:6B:7C:D4:4B:E8:6B
X509v3 Authority Key Identifier:
keyid:9D:81:CB:50:43:26:74:3B:17:D3:64:A2:04:87:5C:39:C6:ED:BC:09
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nYHLUEMmdDsX02SiBIdcOcbtvAk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/339d29-712a-4c86-9510-e4d6bcf336b7/1/nYHLUEMmdDsX02SiBIdcOcbtvAk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/339d29-712a-4c86-9510-e4d6bcf336b7/1/nYHLUEMmdDsX02SiBIdcOcbtvAk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2d:57:de:96:c4:44:4c:a5:13:8d:57:56:65:f9:bb:6e:e4:a1:
66:9a:d4:9b:26:41:2c:8e:09:d7:d1:87:fe:15:e8:30:93:78:
25:90:33:eb:e9:ff:85:35:b7:f8:52:25:d1:aa:b5:59:93:e9:
4e:d8:65:06:95:a5:67:99:6c:6f:4d:2d:9c:24:69:8e:df:c3:
3b:77:79:89:65:b6:aa:ef:b7:3d:f7:8c:4a:e5:2d:2b:ba:c9:
ad:ca:7b:ac:cd:b5:29:38:d9:e9:81:fb:cd:ad:3b:57:65:c2:
7c:09:2f:9f:c5:4b:39:3d:79:19:ee:3c:bd:a5:d6:35:2b:bb:
93:aa:49:d4:52:60:c6:9a:44:15:5d:2c:72:a5:b0:fa:a7:e8:
c3:fa:86:b8:61:8c:f6:84:03:37:d1:c0:65:96:39:c7:82:d0:
fe:9e:d9:3f:fb:5e:74:7f:32:ee:da:9c:d1:91:e3:2f:06:02:
49:86:48:31:92:92:32:f0:c3:4d:f3:f4:41:36:6e:7c:f3:a0:
d9:da:d9:64:c2:c4:54:ef:53:58:ea:69:54:10:e6:83:f1:2f:
d9:2b:88:74:a5:8a:8a:c9:99:76:1e:ff:4f:d3:17:7a:2f:4c:
e2:f7:e0:64:77:c4:3b:de:e3:dd:e1:c6:db:b9:b6:71:49:48:
f7:84:a3:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 22:13:54 2025 by rpki-client