Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/faf2ae-6a83-445b-974b-8fb3779b8704/1/nEDjB9Es4FaMKZ4XzWWmaybNsE0.mft
File: nEDjB9Es4FaMKZ4XzWWmaybNsE0.mft (raw, json)
Hash identifier: Owvj5nEdvsdCAK3XHGjqCttwTvIdZhvzo0BW/IUwfV8=
Subject key identifier: 8E:FD:58:E5:83:98:1D:13:D0:91:F6:1D:AF:A6:D1:5F:8F:10:22:84
Authority key identifier: 9C:40:E3:07:D1:2C:E0:56:8C:29:9E:17:CD:65:A6:6B:26:CD:B0:4D
Certificate issuer: /CN=9c40e307d12ce0568c299e17cd65a66b26cdb04d
Certificate serial: 0196BD1248CE69668AAB27C03E2E94A5469F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nEDjB9Es4FaMKZ4XzWWmaybNsE0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e2/faf2ae-6a83-445b-974b-8fb3779b8704/1/nEDjB9Es4FaMKZ4XzWWmaybNsE0.mft
Manifest number: 130E
Signing time: Sun 11 May 2025 02:00:14 +0000
Manifest this update: Sun 11 May 2025 02:00:14 +0000
Manifest next update: Mon 12 May 2025 02:00:14 +0000
Files and hashes: 1: EovVJfg3z9mSoPRLqdQrySDONz0.roa (hash: oZlmneGtk7nFcNF1eQjRZHNEgK8ZEfrOqUTxDl2I1wI=)
2: nEDjB9Es4FaMKZ4XzWWmaybNsE0.crl (hash: WJQrQBj6hA/J8fUfgTO8SIyVjckqs3KekcANA4kZV6E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e2/faf2ae-6a83-445b-974b-8fb3779b8704/1/nEDjB9Es4FaMKZ4XzWWmaybNsE0.crl
rsync://rpki.ripe.net/repository/DEFAULT/e2/faf2ae-6a83-445b-974b-8fb3779b8704/1/nEDjB9Es4FaMKZ4XzWWmaybNsE0.mft
rsync://rpki.ripe.net/repository/DEFAULT/nEDjB9Es4FaMKZ4XzWWmaybNsE0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 11 May 2025 22:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:bd:12:48:ce:69:66:8a:ab:27:c0:3e:2e:94:a5:46:9f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9c40e307d12ce0568c299e17cd65a66b26cdb04d
Validity
Not Before: May 11 02:00:14 2025 GMT
Not After : May 12 02:00:14 2025 GMT
Subject: CN=8efd58e583981d13d091f61dafa6d15f8f102284
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:52:ac:64:8d:4c:be:f1:db:14:1e:ef:c7:94:
9b:9d:8c:2d:5f:29:44:8a:5c:1d:a5:1e:b0:d2:89:
5e:c6:86:79:25:e5:1c:36:53:3e:fc:d1:47:67:1b:
58:f1:2b:0f:10:8f:db:64:71:c2:87:68:fd:03:d7:
7b:d9:91:86:8e:f3:29:17:47:31:6b:96:a2:66:7f:
1a:28:f6:38:7b:43:fb:7d:e4:65:40:67:3d:f5:41:
18:37:1b:b4:c0:06:f2:a0:f0:65:6a:48:06:79:7f:
5a:05:d4:89:dc:c1:0f:7a:49:53:18:57:78:9c:d9:
a1:c4:0e:4f:59:be:ba:ab:05:f9:a5:ce:5e:07:98:
75:cf:b8:78:90:a4:ad:28:79:4d:7d:a7:ee:80:4b:
ed:90:22:26:91:72:78:0c:7c:df:28:72:13:ee:e1:
52:12:68:70:c5:89:d3:77:fc:fc:7b:57:9d:27:45:
1a:c4:97:6d:1d:9d:ad:e3:8b:96:b6:23:34:29:8b:
58:c5:e3:7c:8f:14:dd:3c:14:85:fa:81:fe:3e:e8:
b7:1e:d6:82:be:55:a6:23:fc:b3:52:40:96:c8:f7:
e5:f8:8e:36:b6:29:22:d4:a3:f5:3a:f5:a5:de:c6:
10:4d:d6:02:82:31:72:2a:ff:62:2a:e7:d5:c9:6a:
97:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:FD:58:E5:83:98:1D:13:D0:91:F6:1D:AF:A6:D1:5F:8F:10:22:84
X509v3 Authority Key Identifier:
keyid:9C:40:E3:07:D1:2C:E0:56:8C:29:9E:17:CD:65:A6:6B:26:CD:B0:4D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nEDjB9Es4FaMKZ4XzWWmaybNsE0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/faf2ae-6a83-445b-974b-8fb3779b8704/1/nEDjB9Es4FaMKZ4XzWWmaybNsE0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/faf2ae-6a83-445b-974b-8fb3779b8704/1/nEDjB9Es4FaMKZ4XzWWmaybNsE0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9b:4c:40:cb:09:2b:54:92:21:0c:d5:bb:51:14:4d:45:41:15:
b2:13:c1:c9:89:12:ba:4c:53:1a:3a:48:72:85:89:b0:ff:e5:
1e:06:ff:7d:0b:c5:b2:81:8f:fc:e8:e2:a6:a6:3e:4f:69:3b:
55:40:a5:e4:1c:86:93:df:f5:4a:45:17:78:c6:1b:2f:08:b7:
4c:36:d0:7b:18:57:35:31:1e:aa:27:a1:36:35:fb:11:17:6d:
1e:46:52:f9:1e:82:b7:9e:e7:83:57:72:03:10:1a:1b:73:76:
7c:32:2b:71:b3:e3:1c:6d:7b:41:7f:ae:d3:4d:a7:3d:b5:e2:
d8:ad:bb:0b:d0:c5:92:b7:f0:02:30:7c:aa:a4:ba:d7:b2:29:
fa:8f:ad:37:7b:4a:51:ef:f2:cb:84:3c:83:f5:a3:82:26:e9:
b9:f6:1b:c2:a6:1b:93:8d:37:55:e1:b3:9d:14:15:8a:c4:d3:
ae:b6:38:1c:f4:46:54:02:95:77:9a:de:3e:fd:3b:9a:53:4f:
15:3b:e7:c1:fc:18:48:8e:42:1b:7a:64:49:e9:0d:ae:d8:93:
4d:f3:41:d3:d7:c2:fe:d2:27:9d:b0:a9:73:8b:71:a5:59:1b:
28:c3:ca:a6:81:68:0f:d1:2d:32:82:86:3e:6c:3b:b3:f0:64:
11:7a:36:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 08:30:54 2025 by rpki-client