Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e8/6b0e0e-8be5-4bf9-b427-70d63107d05d/1/nOItyiotsKWf5WaByNHEBnenRbU.mft
File: nOItyiotsKWf5WaByNHEBnenRbU.mft (raw, json)
Hash identifier: aCsldOlzDaT0qvU1bFJKS1FVRMG9OJqyyvdXwVbC1Qg=
Subject key identifier: C6:4C:73:80:A4:F0:7D:54:98:09:99:86:F6:77:F4:1D:CE:62:E4:15
Authority key identifier: 9C:E2:2D:CA:2A:2D:B0:A5:9F:E5:66:81:C8:D1:C4:06:77:A7:45:B5
Certificate issuer: /CN=9ce22dca2a2db0a59fe56681c8d1c40677a745b5
Certificate serial: 0196CCF445BC5CCE02F16AFDB4AC5B984F0F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nOItyiotsKWf5WaByNHEBnenRbU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e8/6b0e0e-8be5-4bf9-b427-70d63107d05d/1/nOItyiotsKWf5WaByNHEBnenRbU.mft
Manifest number: 10FA
Signing time: Wed 14 May 2025 04:01:22 +0000
Manifest this update: Wed 14 May 2025 04:01:22 +0000
Manifest next update: Thu 15 May 2025 04:01:22 +0000
Files and hashes: 1: SgrL7DiM5GSLyUl02rPic8LO2xM.roa (hash: mfGk2oXMS3Dskm6xFi6bjI6ao91mV5GgJuEh/2dC5PU=)
2: nOItyiotsKWf5WaByNHEBnenRbU.crl (hash: NiE6N0QbE+1JrovW/30sovZSHj2B5+yxtMAsqk/5vqo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e8/6b0e0e-8be5-4bf9-b427-70d63107d05d/1/nOItyiotsKWf5WaByNHEBnenRbU.crl
rsync://rpki.ripe.net/repository/DEFAULT/e8/6b0e0e-8be5-4bf9-b427-70d63107d05d/1/nOItyiotsKWf5WaByNHEBnenRbU.mft
rsync://rpki.ripe.net/repository/DEFAULT/nOItyiotsKWf5WaByNHEBnenRbU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 15 May 2025 04:01:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:cc:f4:45:bc:5c:ce:02:f1:6a:fd:b4:ac:5b:98:4f:0f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9ce22dca2a2db0a59fe56681c8d1c40677a745b5
Validity
Not Before: May 14 04:01:22 2025 GMT
Not After : May 15 04:01:22 2025 GMT
Subject: CN=c64c7380a4f07d5498099986f677f41dce62e415
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:ef:ef:a8:3a:d5:d3:18:bb:91:df:c5:e2:22:
82:66:ba:5f:c3:df:f3:81:e0:68:f4:d9:64:b0:a0:
a4:f2:a5:6c:a3:3a:ab:6f:27:54:0d:63:a7:fe:4e:
7b:9c:18:f8:66:1c:56:88:42:12:7d:d1:8b:85:b5:
00:dd:11:4b:4f:1c:72:ab:41:b3:dd:19:a1:2f:bc:
e6:c5:a8:24:da:96:13:ea:a1:0f:56:73:2d:0f:22:
45:a6:2a:6e:9e:1a:86:69:de:c6:e3:7c:6a:f4:36:
88:91:67:4f:ea:53:f9:73:a3:aa:fd:20:98:a4:22:
eb:2f:86:1d:f4:6f:cd:ca:30:04:79:60:26:ae:4c:
a7:1c:9a:23:d0:22:e9:f2:77:07:6a:e1:0b:10:4d:
55:04:be:64:fc:30:4d:52:16:9b:64:fd:d7:10:39:
00:ca:47:95:0d:7e:2f:7b:19:50:96:30:97:b1:44:
1b:8f:bb:40:4b:f3:90:b0:6f:0b:02:56:6a:18:9c:
60:5b:b7:d9:40:a0:32:92:a8:86:0e:13:29:9f:47:
bc:8c:70:e1:74:ab:38:0c:30:5b:a0:ca:b2:72:e0:
b4:b8:c6:6b:54:53:1a:9f:4e:07:50:2f:b0:20:0c:
e2:b9:e4:d1:a8:41:b2:2f:24:2b:84:93:33:b1:aa:
fa:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:4C:73:80:A4:F0:7D:54:98:09:99:86:F6:77:F4:1D:CE:62:E4:15
X509v3 Authority Key Identifier:
keyid:9C:E2:2D:CA:2A:2D:B0:A5:9F:E5:66:81:C8:D1:C4:06:77:A7:45:B5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nOItyiotsKWf5WaByNHEBnenRbU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/6b0e0e-8be5-4bf9-b427-70d63107d05d/1/nOItyiotsKWf5WaByNHEBnenRbU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/6b0e0e-8be5-4bf9-b427-70d63107d05d/1/nOItyiotsKWf5WaByNHEBnenRbU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
43:4a:d9:c4:a4:dd:c0:2f:99:5f:8e:67:3d:bb:04:1f:3e:80:
7d:f9:63:78:aa:b2:f0:7c:d3:bc:eb:ff:c4:dc:9a:2c:af:e7:
9c:d1:39:49:2d:11:47:c4:7e:89:42:49:de:6b:a0:86:68:11:
03:21:6e:f1:39:f4:5e:5a:20:58:ea:1a:d0:c3:91:40:a3:a3:
8f:3a:d0:9b:90:50:f2:68:2d:62:81:08:ee:47:be:59:e2:c4:
fb:ce:91:08:97:2d:6b:53:21:54:b4:3a:a2:6b:3f:bb:37:35:
c4:1b:08:59:44:bd:68:64:19:01:99:6f:ce:e0:83:b2:f4:25:
97:87:f9:a7:f6:bf:c0:cd:9e:95:cb:f5:0b:ea:5c:40:dc:83:
71:8a:f7:12:5a:46:37:c4:7b:da:db:1c:1d:9d:7e:90:6e:2f:
d9:18:9f:78:89:21:bb:04:cd:a2:83:d5:4c:55:e6:6e:10:41:
c4:5a:47:78:ed:35:82:2e:63:ad:b4:2a:d5:d5:cf:4b:c7:1f:
0b:14:07:38:cd:2e:34:1c:f2:16:38:56:00:4f:04:6a:a1:d3:
01:2c:58:05:44:96:28:70:71:e9:08:0e:cd:20:48:08:3b:c0:
75:02:d2:86:d3:4f:ea:04:5b:7b:4e:d0:46:92:b8:f5:ef:dc:
6e:78:17:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 14 12:23:26 2025 by rpki-client