Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f3/25f375-140f-46e9-967e-6e459a58e1d6/1/nKkOfa8VwXwbmrxXIVe8fZF7OZE.mft
File: nKkOfa8VwXwbmrxXIVe8fZF7OZE.mft (raw, json)
Hash identifier: kpSDbbC7JS30iMtcFwIaLzfwa/aADiE3zNMohS+rp2w=
Subject key identifier: 9D:7C:2F:21:03:2C:CB:E0:D6:7C:49:58:25:BC:DD:7F:F1:EB:3E:9E
Authority key identifier: 9C:A9:0E:7D:AF:15:C1:7C:1B:9A:BC:57:21:57:BC:7D:91:7B:39:91
Certificate issuer: /CN=9ca90e7daf15c17c1b9abc572157bc7d917b3991
Certificate serial: 0196C31479724348CB4FF0521815681B314C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nKkOfa8VwXwbmrxXIVe8fZF7OZE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f3/25f375-140f-46e9-967e-6e459a58e1d6/1/nKkOfa8VwXwbmrxXIVe8fZF7OZE.mft
Manifest number: 10BD
Signing time: Mon 12 May 2025 06:00:21 +0000
Manifest this update: Mon 12 May 2025 06:00:21 +0000
Manifest next update: Tue 13 May 2025 06:00:21 +0000
Files and hashes: 1: nKkOfa8VwXwbmrxXIVe8fZF7OZE.crl (hash: LVzcQlDmmzc8GuTX7zxLkBTOwKBory07WTbzTz0IRCk=)
2: rbFhRWy7PnH1-c74EqjQ8O_SsH8.roa (hash: +OgMhgDQLZldm2bdOQKGi3uI3dnjtK1GBopk2ba9vPU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f3/25f375-140f-46e9-967e-6e459a58e1d6/1/nKkOfa8VwXwbmrxXIVe8fZF7OZE.crl
rsync://rpki.ripe.net/repository/DEFAULT/f3/25f375-140f-46e9-967e-6e459a58e1d6/1/nKkOfa8VwXwbmrxXIVe8fZF7OZE.mft
rsync://rpki.ripe.net/repository/DEFAULT/nKkOfa8VwXwbmrxXIVe8fZF7OZE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 13 May 2025 01:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:c3:14:79:72:43:48:cb:4f:f0:52:18:15:68:1b:31:4c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9ca90e7daf15c17c1b9abc572157bc7d917b3991
Validity
Not Before: May 12 06:00:21 2025 GMT
Not After : May 13 06:00:21 2025 GMT
Subject: CN=9d7c2f21032ccbe0d67c495825bcdd7ff1eb3e9e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:b0:83:f3:e1:57:94:87:1b:0b:b0:35:27:fd:
70:b7:c4:20:2c:82:45:03:da:a6:94:55:01:4b:fb:
f3:46:f8:35:3d:25:e3:af:2b:d9:a8:65:8b:29:9f:
0d:2b:34:13:7a:39:f1:31:4a:1f:2c:79:3f:1d:0b:
54:85:50:8a:04:ac:87:b2:3b:1f:2c:88:f2:68:12:
a0:23:1e:52:42:90:73:da:43:61:ef:44:da:45:c5:
1d:e4:e7:a3:c5:04:65:eb:72:87:9a:6d:c2:62:02:
cd:bc:df:cd:db:3e:30:6c:54:36:df:c8:a1:5e:52:
9d:cd:3f:2e:cf:d3:27:bc:00:63:fc:97:9d:11:89:
18:79:15:cf:1d:d1:cb:74:4b:d2:5d:14:b6:7a:6f:
f4:e2:3a:3d:8e:c8:86:5e:a6:46:ba:89:01:fc:8c:
ef:31:35:62:4d:92:bf:ad:cf:41:3c:34:fb:03:2d:
4a:be:51:f7:cb:1e:3f:67:90:f9:eb:48:62:5c:a1:
c8:90:a1:78:06:eb:3a:a7:52:f7:5e:db:f5:8f:8f:
3a:d9:94:08:cf:74:44:fa:89:ff:34:4c:c6:61:23:
8c:0b:7b:a3:17:64:30:34:73:25:bf:94:4a:05:70:
81:d8:1f:12:06:ca:04:a9:97:d2:d4:b8:96:76:36:
77:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:7C:2F:21:03:2C:CB:E0:D6:7C:49:58:25:BC:DD:7F:F1:EB:3E:9E
X509v3 Authority Key Identifier:
keyid:9C:A9:0E:7D:AF:15:C1:7C:1B:9A:BC:57:21:57:BC:7D:91:7B:39:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nKkOfa8VwXwbmrxXIVe8fZF7OZE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/25f375-140f-46e9-967e-6e459a58e1d6/1/nKkOfa8VwXwbmrxXIVe8fZF7OZE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/25f375-140f-46e9-967e-6e459a58e1d6/1/nKkOfa8VwXwbmrxXIVe8fZF7OZE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7c:23:32:8a:0d:3e:23:23:1c:e5:ae:d7:b1:c5:2e:1a:2b:ce:
34:41:a1:dc:6d:65:c0:5d:c3:ba:5f:5d:c3:ad:ce:e6:18:83:
4f:43:d7:9a:c3:37:14:bf:d5:dd:67:fc:42:6e:ab:84:01:19:
80:60:da:a3:13:6f:48:6e:46:1a:87:0c:49:06:ba:41:2e:d2:
30:3c:bf:6e:8a:ea:f6:af:ab:de:d4:f5:63:bc:5f:2f:7f:76:
73:67:4a:ce:01:a9:69:78:d0:1a:74:15:54:ee:a8:b5:f5:cb:
11:cb:ed:53:b3:44:84:3f:e6:6f:14:54:21:59:92:92:14:76:
b6:5e:8b:b7:25:07:ba:62:ba:3e:02:49:b5:07:0e:b6:97:e2:
a8:0e:58:21:a9:0a:fc:7f:5e:ea:a4:06:00:bb:a3:f0:61:59:
e6:04:57:8a:db:76:43:83:9c:d9:13:d9:65:f3:83:96:b3:38:
18:fd:db:6d:aa:56:a0:33:bb:7b:d0:19:c5:45:95:ff:89:19:
66:ae:71:4e:51:5d:92:36:da:9e:06:f7:23:47:2c:4f:39:c9:
89:99:da:7a:77:06:4f:d5:7d:4d:8e:3f:f3:78:8d:30:a0:9a:
b2:ff:7f:b2:9a:93:c0:4f:d4:99:1f:2c:b1:01:c9:3b:05:e6:
8b:c0:4f:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 12 10:44:13 2025 by rpki-client