Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/de/5324bd-7926-4513-bd1f-68ef3238a72e/1/Nv7S1etbPFJmq6phfJYHA8VdB4U.mft
File: Nv7S1etbPFJmq6phfJYHA8VdB4U.mft (raw, json)
Hash identifier: k0SvLW8uhW3wJ990WxQFfkBqut9I7uM7OtZqlUreC2k=
Subject key identifier: 96:16:2C:83:14:72:A7:F9:44:D7:45:27:8E:C4:FF:98:2A:D4:9E:7C
Authority key identifier: 36:FE:D2:D5:EB:5B:3C:52:66:AB:AA:61:7C:96:07:03:C5:5D:07:85
Certificate issuer: /CN=36fed2d5eb5b3c5266abaa617c960703c55d0785
Certificate serial: 0196C427B3C44C1C9CEF4D78FE6EAEA53331
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Nv7S1etbPFJmq6phfJYHA8VdB4U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/de/5324bd-7926-4513-bd1f-68ef3238a72e/1/Nv7S1etbPFJmq6phfJYHA8VdB4U.mft
Manifest number: 1539
Signing time: Mon 12 May 2025 11:00:58 +0000
Manifest this update: Mon 12 May 2025 11:00:58 +0000
Manifest next update: Tue 13 May 2025 11:00:58 +0000
Files and hashes: 1: 8_VDYxYfQ3xVlWP15Ma3Tw9vIZY.roa (hash: p9ujQLih3FUP7R7lN/a7zNvyvlVnBJRzQXMR2O0trWo=)
2: Nv7S1etbPFJmq6phfJYHA8VdB4U.crl (hash: DzJNscRmzMHj1zWy3Lc+knPSjkmsPL0Mlk1Bv851Eys=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/de/5324bd-7926-4513-bd1f-68ef3238a72e/1/Nv7S1etbPFJmq6phfJYHA8VdB4U.crl
rsync://rpki.ripe.net/repository/DEFAULT/de/5324bd-7926-4513-bd1f-68ef3238a72e/1/Nv7S1etbPFJmq6phfJYHA8VdB4U.mft
rsync://rpki.ripe.net/repository/DEFAULT/Nv7S1etbPFJmq6phfJYHA8VdB4U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 13 May 2025 11:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:c4:27:b3:c4:4c:1c:9c:ef:4d:78:fe:6e:ae:a5:33:31
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=36fed2d5eb5b3c5266abaa617c960703c55d0785
Validity
Not Before: May 12 11:00:58 2025 GMT
Not After : May 13 11:00:58 2025 GMT
Subject: CN=96162c831472a7f944d745278ec4ff982ad49e7c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:ba:ad:cb:fd:9e:20:fc:8f:78:e5:4d:b3:c9:
25:85:ab:88:52:da:24:dc:b3:ab:96:13:39:9e:42:
af:db:18:87:4f:68:5c:dd:d5:3a:d1:7e:39:5c:cc:
f7:01:04:b5:9b:fa:0d:e3:8c:8a:97:d2:ca:d4:d3:
0a:ca:20:7d:d0:e0:b7:45:88:c2:5f:31:1b:2d:a1:
12:7b:c5:34:08:03:80:57:22:07:e1:ad:57:25:80:
9a:e9:f7:85:7e:6d:9c:be:74:ec:31:b6:60:60:e4:
2a:cc:ec:25:6f:e2:2b:6e:eb:35:64:f8:e8:83:c9:
b5:4b:e5:92:08:cf:13:c6:9d:c4:62:71:69:16:87:
85:14:82:02:2f:d4:54:36:9b:63:fe:7c:52:4f:ad:
8b:63:8e:1b:b5:1a:94:b8:0e:70:ec:cb:03:ab:87:
7f:a5:91:24:7c:a0:1a:d3:48:b3:c7:49:27:ee:e6:
cd:82:60:5e:ef:1f:46:4b:17:8f:2b:56:10:d3:7e:
1d:47:bb:c6:b2:93:b7:6b:fa:ff:14:18:62:86:e4:
6d:b7:1b:5f:3b:57:ae:6b:98:20:ef:7f:27:4b:16:
27:69:4f:e6:76:d1:29:65:2a:01:21:23:bc:11:ba:
9a:7a:18:ba:c9:de:e1:94:39:39:0c:11:77:a2:e2:
bf:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:16:2C:83:14:72:A7:F9:44:D7:45:27:8E:C4:FF:98:2A:D4:9E:7C
X509v3 Authority Key Identifier:
keyid:36:FE:D2:D5:EB:5B:3C:52:66:AB:AA:61:7C:96:07:03:C5:5D:07:85
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Nv7S1etbPFJmq6phfJYHA8VdB4U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/de/5324bd-7926-4513-bd1f-68ef3238a72e/1/Nv7S1etbPFJmq6phfJYHA8VdB4U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/de/5324bd-7926-4513-bd1f-68ef3238a72e/1/Nv7S1etbPFJmq6phfJYHA8VdB4U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4a:c8:c6:c8:8d:63:de:df:32:01:b3:b1:76:8c:90:8a:64:ca:
05:a8:8e:a9:96:39:70:d0:ab:1f:1d:89:fc:07:df:56:d1:fc:
24:cb:c9:f1:b9:6d:d1:48:02:e2:34:3d:f3:43:fc:43:d3:fb:
8d:0e:7b:af:ee:16:a5:c2:e5:00:66:e6:78:8d:93:21:f2:27:
d9:95:1f:10:fc:38:1f:b6:ff:f0:b7:92:8f:f1:49:0b:cc:df:
56:38:74:a9:66:a3:57:15:63:24:87:d8:44:7d:a1:de:43:49:
68:2b:e3:1c:50:1a:fa:66:a1:0e:68:62:fb:de:c6:25:39:67:
e9:6e:3b:42:64:fe:29:07:a7:2b:3c:95:c3:b6:7f:76:13:3b:
2a:a6:f2:07:fc:e2:db:51:57:d8:97:c6:df:0a:df:ae:8a:c4:
0c:f3:68:cf:2c:ce:f9:e3:78:0c:92:a7:44:4b:13:48:90:67:
10:71:1c:e6:a2:c0:27:a7:de:b4:18:0a:86:cc:e0:75:4f:52:
2a:02:a3:00:36:94:cd:19:e6:d7:54:c9:5c:ba:71:04:5b:c1:
00:e0:0e:e3:2d:e0:12:6b:20:20:ee:f5:c5:61:c5:1c:1f:ab:
a9:60:ba:4e:83:55:04:38:f7:be:d2:6a:b2:ee:b6:70:ff:a2:
29:75:08:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 12 15:59:58 2025 by rpki-client