
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e1/f4ca79-384f-47f2-aed8-a8d00383bcdd/1/nsRI4bHg6-TpdrEg05j-dNXhNfg.mft
File: nsRI4bHg6-TpdrEg05j-dNXhNfg.mft (raw, json)
Hash identifier: yJr1soPZvm/XGc4PY8L14rz4cytJbMY0Al1kqL4sKWE=
Subject key identifier: 90:0D:2B:6D:F9:33:7A:CD:EF:52:BA:96:46:F2:8B:82:0D:AC:CD:88
Authority key identifier: 9E:C4:48:E1:B1:E0:EB:E4:E9:76:B1:20:D3:98:FE:74:D5:E1:35:F8
Certificate issuer: /CN=9ec448e1b1e0ebe4e976b120d398fe74d5e135f8
Certificate serial: 0196C64C808027C050731D3BBAF9C0219BD1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nsRI4bHg6-TpdrEg05j-dNXhNfg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e1/f4ca79-384f-47f2-aed8-a8d00383bcdd/1/nsRI4bHg6-TpdrEg05j-dNXhNfg.mft
Manifest number: 153B
Signing time: Mon 12 May 2025 21:00:24 +0000
Manifest this update: Mon 12 May 2025 21:00:24 +0000
Manifest next update: Tue 13 May 2025 21:00:24 +0000
Files and hashes: 1: aCQlUufyFAXyfrSRh5UlYee4hhI.roa (hash: mJv4/wvWUFjjUO0qLpunwhk4Tn4azGG1QzZvm0z7rC8=)
2: nsRI4bHg6-TpdrEg05j-dNXhNfg.crl (hash: 4fkxtICsYaegpsbF4Hgo+fdSD7PA1MDbvnsm8zo6FGU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e1/f4ca79-384f-47f2-aed8-a8d00383bcdd/1/nsRI4bHg6-TpdrEg05j-dNXhNfg.crl
rsync://rpki.ripe.net/repository/DEFAULT/e1/f4ca79-384f-47f2-aed8-a8d00383bcdd/1/nsRI4bHg6-TpdrEg05j-dNXhNfg.mft
rsync://rpki.ripe.net/repository/DEFAULT/nsRI4bHg6-TpdrEg05j-dNXhNfg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 13 May 2025 21:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:c6:4c:80:80:27:c0:50:73:1d:3b:ba:f9:c0:21:9b:d1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9ec448e1b1e0ebe4e976b120d398fe74d5e135f8
Validity
Not Before: May 12 21:00:24 2025 GMT
Not After : May 13 21:00:24 2025 GMT
Subject: CN=900d2b6df9337acdef52ba9646f28b820daccd88
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:e0:e7:8c:28:91:cd:a7:23:2a:1e:e8:3f:66:
20:74:da:13:44:69:27:65:ef:98:d4:e0:2e:ba:93:
1d:61:44:77:2d:03:85:fb:02:fc:7b:6f:e3:16:ea:
7f:95:1e:6f:24:9f:4c:c3:e7:44:27:85:73:38:93:
11:93:95:be:66:0e:29:0e:e7:da:6c:18:23:ce:68:
50:d5:6a:01:5b:f6:15:3e:75:16:e4:c9:36:89:3b:
c6:a2:d6:b0:51:92:a9:8c:1a:ab:05:41:ee:aa:22:
40:46:27:b1:fe:80:88:1c:2c:b6:97:b1:3a:f3:60:
e3:62:08:11:03:ed:29:c6:0a:8e:d7:77:c8:a5:9a:
a7:cb:8c:4e:7f:22:d2:a9:82:7d:27:42:fd:ff:06:
35:51:03:63:ab:28:2a:b0:72:ec:91:49:db:2b:fe:
6a:db:be:8a:d8:93:a6:49:e3:7f:e6:aa:48:3f:0a:
83:77:de:3c:18:79:e5:aa:69:76:d2:16:9b:c4:09:
5b:c8:48:b9:df:83:f8:36:6d:f3:9f:12:ab:f2:ae:
d7:1d:14:41:97:cb:1b:70:28:19:36:a4:53:c2:0a:
10:e0:ee:70:ec:ad:8a:fd:81:42:c2:fd:85:66:8e:
d5:5b:44:b8:08:e9:b3:13:e1:07:7c:98:db:49:07:
69:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:0D:2B:6D:F9:33:7A:CD:EF:52:BA:96:46:F2:8B:82:0D:AC:CD:88
X509v3 Authority Key Identifier:
keyid:9E:C4:48:E1:B1:E0:EB:E4:E9:76:B1:20:D3:98:FE:74:D5:E1:35:F8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nsRI4bHg6-TpdrEg05j-dNXhNfg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/f4ca79-384f-47f2-aed8-a8d00383bcdd/1/nsRI4bHg6-TpdrEg05j-dNXhNfg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/f4ca79-384f-47f2-aed8-a8d00383bcdd/1/nsRI4bHg6-TpdrEg05j-dNXhNfg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
46:34:e4:fb:56:80:fc:ee:a2:af:51:da:e1:63:2f:fc:a5:55:
ef:18:51:cb:d9:49:2a:ad:30:34:fb:57:60:d0:93:dd:91:7f:
2a:72:3c:8d:13:8f:b6:92:fe:12:e7:aa:97:59:00:1c:cd:22:
e5:48:07:8e:76:8c:71:2a:39:47:a8:79:e5:e6:06:82:d4:77:
16:40:6a:3d:18:ef:8b:08:fd:cc:47:11:06:cc:b5:42:d1:5a:
89:d0:a7:42:c6:bb:7b:9d:3e:1a:c4:1a:20:25:fd:79:05:11:
da:86:82:2e:da:80:93:58:08:a9:ed:ad:68:55:dc:b9:16:04:
27:05:62:37:f2:e0:96:86:7e:33:d4:3c:55:5c:1a:34:21:97:
75:bd:05:43:6e:0c:cf:20:03:de:f9:e3:ef:03:6e:99:47:84:
ae:20:be:fa:d5:7e:88:07:0e:2f:c3:80:c3:e6:d9:74:5a:b5:
fb:d1:41:c5:71:61:d7:8e:97:d6:a4:ab:15:db:fe:87:2c:d0:
27:62:15:b3:fc:f8:ff:8f:de:88:78:14:c8:ea:e6:47:2a:97:
c9:4a:bd:0c:6b:68:33:f2:ec:93:f3:10:8f:8c:6a:59:6c:f0:
81:fd:d9:31:79:24:f7:24:4f:4f:a9:1c:8c:f4:f2:c4:7a:f0:
1c:6c:71:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 13 06:19:30 2025 by rpki-client