Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fb/3967a6-79f3-4aff-b34b-ae0ea6643bbd/1/nkNy9jkyun_o8WG1ZLk4YGFKgLo.mft
File: nkNy9jkyun_o8WG1ZLk4YGFKgLo.mft (raw, json)
Hash identifier: MSqniCwqFtbMNEM6gbgNFKpi+o04nqNGguaNrtAARPE=
Subject key identifier: 4F:3D:DC:EC:9F:E7:2C:D2:44:DF:7E:68:DF:E6:2A:90:3B:57:3F:36
Authority key identifier: 9E:43:72:F6:39:32:BA:7F:E8:F1:61:B5:64:B9:38:60:61:4A:80:BA
Certificate issuer: /CN=9e4372f63932ba7fe8f161b564b93860614a80ba
Certificate serial: 01969CAC4E42C36DCC11270BA7D89D788531
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nkNy9jkyun_o8WG1ZLk4YGFKgLo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fb/3967a6-79f3-4aff-b34b-ae0ea6643bbd/1/nkNy9jkyun_o8WG1ZLk4YGFKgLo.mft
Manifest number: 0516
Signing time: Sun 04 May 2025 19:00:59 +0000
Manifest this update: Sun 04 May 2025 19:00:59 +0000
Manifest next update: Mon 05 May 2025 19:00:59 +0000
Files and hashes: 1: TaAxyGE0YZ7m-xRwM6T1q9wMqQw.roa (hash: 76tscvyJdodgkrjTmEZQdEHR921zYs8tliL/2ouT7RA=)
2: nkNy9jkyun_o8WG1ZLk4YGFKgLo.crl (hash: eJfdouHFQ41Sw2u8x7IxxglFT4oLXc33FIKteiMXKa0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fb/3967a6-79f3-4aff-b34b-ae0ea6643bbd/1/nkNy9jkyun_o8WG1ZLk4YGFKgLo.crl
rsync://rpki.ripe.net/repository/DEFAULT/fb/3967a6-79f3-4aff-b34b-ae0ea6643bbd/1/nkNy9jkyun_o8WG1ZLk4YGFKgLo.mft
rsync://rpki.ripe.net/repository/DEFAULT/nkNy9jkyun_o8WG1ZLk4YGFKgLo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 05 May 2025 19:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:9c:ac:4e:42:c3:6d:cc:11:27:0b:a7:d8:9d:78:85:31
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9e4372f63932ba7fe8f161b564b93860614a80ba
Validity
Not Before: May 4 19:00:59 2025 GMT
Not After : May 5 19:00:59 2025 GMT
Subject: CN=4f3ddcec9fe72cd244df7e68dfe62a903b573f36
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:63:c3:39:03:6f:3e:c7:0d:ed:02:ec:2c:83:
9b:61:f9:7d:e9:e9:a1:5a:4d:79:73:7d:31:18:b8:
a0:2d:cb:2a:13:b7:a9:3a:a9:3d:83:08:71:49:c8:
a1:99:30:f5:fe:1a:33:55:a6:af:ea:59:37:98:b6:
86:07:c9:e5:34:25:8d:e4:a4:d2:80:d4:be:d0:be:
06:5f:c6:ab:ea:40:e1:9f:8b:66:43:14:f9:9b:bc:
04:f8:8b:61:d5:42:36:1f:36:f5:2a:b4:33:7b:a5:
b6:13:56:4c:0c:4a:5a:60:6e:e8:2c:aa:b0:43:23:
a2:ab:dd:ff:82:a0:ba:5b:a1:f3:1d:a9:d0:84:8f:
f8:54:09:46:ce:55:24:79:9a:0d:0e:e8:31:98:0a:
10:fc:bd:e4:ad:71:ad:f9:0d:64:a0:3e:93:90:ef:
a6:9e:58:70:c1:e0:37:22:fc:4e:27:52:44:e6:ff:
dc:98:7b:8e:ea:2c:ec:be:99:60:9c:da:28:e6:be:
7f:c5:7e:22:ea:da:70:82:85:22:cd:62:76:3f:15:
40:4b:84:d2:c4:ef:b1:17:0d:3b:46:1a:bd:40:b5:
34:6c:56:c4:23:04:69:a1:58:03:e2:b2:a6:22:a1:
d5:34:b9:d0:f1:63:e4:22:b0:25:80:62:f8:ac:ba:
8a:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:3D:DC:EC:9F:E7:2C:D2:44:DF:7E:68:DF:E6:2A:90:3B:57:3F:36
X509v3 Authority Key Identifier:
keyid:9E:43:72:F6:39:32:BA:7F:E8:F1:61:B5:64:B9:38:60:61:4A:80:BA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nkNy9jkyun_o8WG1ZLk4YGFKgLo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/3967a6-79f3-4aff-b34b-ae0ea6643bbd/1/nkNy9jkyun_o8WG1ZLk4YGFKgLo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/3967a6-79f3-4aff-b34b-ae0ea6643bbd/1/nkNy9jkyun_o8WG1ZLk4YGFKgLo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3e:f8:a2:2b:d5:37:1d:3c:c3:4e:2d:79:ca:76:30:ba:6b:29:
b4:e7:4a:57:59:9b:37:36:37:72:fb:bd:70:98:68:86:50:59:
00:31:9e:b8:97:01:b4:32:2b:df:2b:6c:1a:dc:df:76:45:7c:
ed:58:f9:b2:24:9b:85:99:47:40:c5:b9:06:0e:35:2e:47:6f:
92:12:fb:c1:42:b1:70:1a:0f:73:59:c5:0c:14:d1:62:41:68:
57:0a:cf:28:a5:0c:07:8e:2e:22:58:16:24:9f:e8:b1:e4:32:
9d:50:bc:bb:22:98:ff:3f:50:60:b5:91:34:5b:fe:4a:53:97:
3f:6d:11:b1:fc:6e:3d:20:d0:85:43:f3:69:16:9d:44:f7:47:
9c:83:b2:40:14:c6:2d:c4:70:6b:8b:26:01:9f:dd:37:0a:9b:
a3:dd:b6:9e:6e:7a:b2:92:4e:68:c9:ae:43:e8:07:bc:dd:c5:
ac:9e:9a:7a:7b:a4:20:07:32:1d:2f:f8:fe:61:d5:ed:3d:58:
7b:53:a4:60:e1:89:75:69:11:af:2a:bb:31:d9:f9:12:c8:a4:
ad:3c:58:79:da:9c:02:75:e7:8d:66:c8:29:50:c1:76:9a:53:
b4:dc:91:04:78:73:6f:1e:6b:3d:4c:c8:f3:3f:27:50:be:af:
96:2b:04:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 5 05:29:00 2025 by rpki-client