Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f4/0c3d1b-fc23-41fb-af9c-a163f573b6d9/1/nR_TKOt-elrN5RmPDX6b4mhHbXE.mft
File: nR_TKOt-elrN5RmPDX6b4mhHbXE.mft (raw, json)
Hash identifier: /vxe6L87vK0TfRY3kOtd8EZJOxm9WNKKJaEmwAv38dM=
Subject key identifier: 17:4B:C1:07:55:5B:D6:4A:A4:48:09:1C:51:F3:7E:E0:A5:20:55:88
Authority key identifier: 9D:1F:D3:28:EB:7E:7A:5A:CD:E5:19:8F:0D:7E:9B:E2:68:47:6D:71
Certificate issuer: /CN=9d1fd328eb7e7a5acde5198f0d7e9be268476d71
Certificate serial: 0196C20264852799D6B0B76A6EB14F2F3888
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nR_TKOt-elrN5RmPDX6b4mhHbXE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f4/0c3d1b-fc23-41fb-af9c-a163f573b6d9/1/nR_TKOt-elrN5RmPDX6b4mhHbXE.mft
Manifest number: 0FDE
Signing time: Mon 12 May 2025 01:00:58 +0000
Manifest this update: Mon 12 May 2025 01:00:58 +0000
Manifest next update: Tue 13 May 2025 01:00:58 +0000
Files and hashes: 1: nR_TKOt-elrN5RmPDX6b4mhHbXE.crl (hash: yRc4byzGQZInlORIUSHQ05duMNQvjFxsS6aRXtOIzvs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f4/0c3d1b-fc23-41fb-af9c-a163f573b6d9/1/nR_TKOt-elrN5RmPDX6b4mhHbXE.crl
rsync://rpki.ripe.net/repository/DEFAULT/f4/0c3d1b-fc23-41fb-af9c-a163f573b6d9/1/nR_TKOt-elrN5RmPDX6b4mhHbXE.mft
rsync://rpki.ripe.net/repository/DEFAULT/nR_TKOt-elrN5RmPDX6b4mhHbXE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 13 May 2025 01:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:c2:02:64:85:27:99:d6:b0:b7:6a:6e:b1:4f:2f:38:88
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9d1fd328eb7e7a5acde5198f0d7e9be268476d71
Validity
Not Before: May 12 01:00:58 2025 GMT
Not After : May 13 01:00:58 2025 GMT
Subject: CN=174bc107555bd64aa448091c51f37ee0a5205588
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:97:39:81:19:33:b9:62:78:05:58:33:b8:9d:
cb:79:37:97:d2:fe:94:da:e4:91:c1:79:1b:09:1f:
61:2a:1e:34:11:33:a3:12:29:07:76:7f:f3:84:d8:
bf:23:6f:27:84:4b:c7:0c:f7:ca:90:00:3a:c4:83:
d5:46:bf:2f:aa:17:f2:e5:74:87:6e:76:e6:86:77:
c2:96:c5:73:f5:14:0f:8a:4c:9c:66:03:5f:f7:90:
f0:50:64:11:8b:8b:93:c8:c5:97:af:18:71:5f:31:
22:6a:f8:85:78:8d:3c:04:bf:58:8a:09:f3:9a:ba:
a6:40:24:65:fc:52:a6:07:10:3e:36:ba:52:09:26:
ee:aa:60:75:8e:7f:22:98:6a:26:8d:e7:d1:4e:b5:
f4:45:23:22:ef:48:4d:7f:9e:26:3f:40:d3:bf:8c:
3f:3a:91:4a:0c:39:a3:17:03:30:2b:cb:fb:d6:fb:
7b:d3:75:30:c1:6f:3d:b5:27:25:7b:71:91:b4:91:
ad:f3:3c:bb:be:32:a2:20:55:48:c9:ac:44:45:d1:
c3:df:e7:d6:92:3e:88:16:67:9e:9a:7b:60:07:15:
42:f8:68:71:13:43:5c:2b:33:8d:72:1d:3e:89:10:
02:bf:48:9b:12:3f:0f:db:a1:c3:00:d3:45:a8:43:
57:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:4B:C1:07:55:5B:D6:4A:A4:48:09:1C:51:F3:7E:E0:A5:20:55:88
X509v3 Authority Key Identifier:
keyid:9D:1F:D3:28:EB:7E:7A:5A:CD:E5:19:8F:0D:7E:9B:E2:68:47:6D:71
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nR_TKOt-elrN5RmPDX6b4mhHbXE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/0c3d1b-fc23-41fb-af9c-a163f573b6d9/1/nR_TKOt-elrN5RmPDX6b4mhHbXE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/0c3d1b-fc23-41fb-af9c-a163f573b6d9/1/nR_TKOt-elrN5RmPDX6b4mhHbXE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
38:9b:be:98:56:30:ea:bb:f1:b7:70:9a:c7:52:9a:7e:9e:b0:
c2:7e:63:d0:f3:e7:07:d6:3f:37:0b:38:46:69:7f:e3:af:97:
1d:78:ec:a8:61:26:5f:0a:e2:0e:8e:f2:4a:42:88:a1:c9:84:
fa:e5:ec:17:cb:a3:85:e5:47:30:51:43:5d:fa:1b:f8:e4:c7:
36:09:24:76:72:32:be:ee:87:af:13:9a:1d:63:81:83:ea:be:
fa:78:7c:4a:b8:d4:0d:90:49:c8:e6:77:94:46:3f:d5:46:33:
b6:8a:4d:4b:8a:cf:09:f3:ef:05:93:22:41:46:e1:f7:19:6c:
a6:31:d0:16:ea:4b:e6:8c:77:84:78:d7:78:4b:af:76:19:fc:
57:6d:41:5b:1b:33:75:00:0e:88:fb:5c:9b:1e:e4:db:2b:c4:
62:57:74:a2:de:8a:9b:6b:30:a3:f1:71:c3:00:df:c4:2d:d0:
e0:68:61:0c:87:f6:78:44:ba:f2:e1:7b:84:71:5f:f0:94:41:
f7:cb:57:9e:c8:4c:f5:54:f4:0e:99:40:44:e8:1d:63:1b:78:
cb:2c:fe:99:fb:e8:48:55:c2:73:e2:d3:00:d0:28:9d:9a:f9:
2b:eb:12:cf:2b:18:7c:9f:50:61:8f:ca:1f:a8:b7:ec:5a:ff:
10:90:5d:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 12 10:30:31 2025 by rpki-client