Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f9/c284cd-b2b7-4911-b20b-b2cea7690837/1/nTbpG2LT3HwTeiiqoAbt6bnqH-Q.mft
File: nTbpG2LT3HwTeiiqoAbt6bnqH-Q.mft (raw, json)
Hash identifier: tGLYSU8yikEcupP18T77WiXNg3GlxwJxKHuOPuMITpw=
Subject key identifier: 99:2E:89:8B:23:16:EE:F2:6A:4D:A3:13:F5:6A:4F:FD:50:84:B6:29
Authority key identifier: 9D:36:E9:1B:62:D3:DC:7C:13:7A:28:AA:A0:06:ED:E9:B9:EA:1F:E4
Certificate issuer: /CN=9d36e91b62d3dc7c137a28aaa006ede9b9ea1fe4
Certificate serial: 0196CC4EE23504C1B0A46F8C1FD6F4AC6803
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nTbpG2LT3HwTeiiqoAbt6bnqH-Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f9/c284cd-b2b7-4911-b20b-b2cea7690837/1/nTbpG2LT3HwTeiiqoAbt6bnqH-Q.mft
Manifest number: 0D06
Signing time: Wed 14 May 2025 01:00:43 +0000
Manifest this update: Wed 14 May 2025 01:00:43 +0000
Manifest next update: Thu 15 May 2025 01:00:43 +0000
Files and hashes: 1: 1-Vqync9hKf6VKIrN5RpK5cxJuZ4.roa (hash: MtCth/AQ0N933cYX7VqkRS/iFY3KEw9X6YIsPg3Pp/U=)
2: OXX9g3YRUJUzVcg_bBkk4JValdo.roa (hash: ZCgBMUHW1tIAOZ4DRx/DGMhGuGDo8XA3rdIaP/zAdak=)
3: nTbpG2LT3HwTeiiqoAbt6bnqH-Q.crl (hash: ne970cDWTMuhec79/dNmtAGArr63IwnrEEHym+Wm3Vc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f9/c284cd-b2b7-4911-b20b-b2cea7690837/1/nTbpG2LT3HwTeiiqoAbt6bnqH-Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/f9/c284cd-b2b7-4911-b20b-b2cea7690837/1/nTbpG2LT3HwTeiiqoAbt6bnqH-Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/nTbpG2LT3HwTeiiqoAbt6bnqH-Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 14 May 2025 22:19:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:cc:4e:e2:35:04:c1:b0:a4:6f:8c:1f:d6:f4:ac:68:03
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9d36e91b62d3dc7c137a28aaa006ede9b9ea1fe4
Validity
Not Before: May 14 01:00:43 2025 GMT
Not After : May 15 01:00:43 2025 GMT
Subject: CN=992e898b2316eef26a4da313f56a4ffd5084b629
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:38:b3:01:fc:e3:e2:2f:2c:4f:76:f6:44:0a:
35:02:72:f8:ec:9d:94:3c:0c:3a:6a:f8:22:a0:d0:
bb:d5:9f:43:2f:ec:ab:c7:b9:1a:57:41:75:04:5b:
33:ab:2d:73:d5:7b:28:47:62:4d:45:be:b4:9b:88:
77:37:7a:95:79:f7:ec:86:e4:95:aa:1c:41:6d:52:
51:e4:38:e5:22:d4:46:2f:70:a3:34:ed:0e:2d:15:
4d:08:84:6a:bd:b3:50:47:32:3e:4a:16:98:44:1a:
be:98:f7:56:fa:ad:6b:c8:16:b7:73:74:af:06:8c:
b4:8b:8a:f4:c1:eb:33:17:27:88:24:78:ae:fb:9e:
b0:fd:35:e5:52:e7:3d:87:93:48:04:b9:3c:d3:74:
b4:7a:53:82:2b:82:36:73:31:0b:b6:c6:8b:8d:ff:
ea:0b:98:29:32:36:b6:65:34:25:c3:52:5e:66:1a:
28:59:64:5b:3d:c0:ea:8d:03:fc:e5:1f:bb:07:73:
01:0d:5f:ad:b1:9b:a8:48:a4:38:52:af:06:a7:7c:
8a:41:b9:99:75:66:2d:d6:b4:80:d8:3f:0a:bc:0b:
c1:82:e2:e6:90:08:9d:ec:62:64:1b:8d:81:78:0d:
15:38:2d:5b:05:1a:c5:47:ec:bb:12:24:8d:c1:7d:
55:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:2E:89:8B:23:16:EE:F2:6A:4D:A3:13:F5:6A:4F:FD:50:84:B6:29
X509v3 Authority Key Identifier:
keyid:9D:36:E9:1B:62:D3:DC:7C:13:7A:28:AA:A0:06:ED:E9:B9:EA:1F:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nTbpG2LT3HwTeiiqoAbt6bnqH-Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/c284cd-b2b7-4911-b20b-b2cea7690837/1/nTbpG2LT3HwTeiiqoAbt6bnqH-Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/c284cd-b2b7-4911-b20b-b2cea7690837/1/nTbpG2LT3HwTeiiqoAbt6bnqH-Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1c:de:34:9d:59:a5:80:2b:6f:11:c2:e0:22:6a:38:00:fa:7f:
d6:32:46:34:e5:c0:46:0a:84:4d:20:81:f0:5b:63:0f:a3:78:
68:45:30:54:f0:22:d4:74:d4:77:7b:3e:3d:db:18:12:05:db:
b2:be:35:ed:16:e6:c3:d7:9e:6f:7e:4b:42:d9:0a:76:dd:1e:
47:32:b2:46:af:d7:fa:db:cd:7d:c7:77:04:99:04:91:79:1e:
88:99:e7:eb:1d:5e:fb:af:66:00:0f:63:39:5f:37:15:07:ec:
ea:8a:d7:8b:28:fd:80:b3:84:34:69:b4:5e:08:9d:20:eb:14:
b0:6f:57:2e:08:5d:79:6b:63:22:17:3d:3c:57:46:87:1c:b1:
b5:66:71:d3:c8:b7:bc:96:9c:ff:41:ff:9a:35:b4:9d:19:9d:
2f:98:72:83:52:87:f0:07:6c:bb:8c:9d:28:7b:a9:46:75:e4:
f1:ae:88:7a:4d:ec:d6:b4:70:89:b7:b5:16:c6:03:c6:38:d2:
c7:2e:ca:e9:3f:10:ff:61:9f:5d:42:79:d2:1b:a3:58:be:d3:
26:8b:6e:54:4b:75:81:8e:c4:3c:d4:92:c9:27:7b:86:d5:f4:
71:4d:8c:b7:ee:3d:6c:b1:e0:7d:07:03:99:38:cf:f3:48:34:
ad:b5:37:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 14 06:11:33 2025 by rpki-client