Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/921609-58a5-4306-b82b-4b7dcd8777de/1/nu_LEgXreVVHHlyPVDSpIHKtPd0.mft
File: nu_LEgXreVVHHlyPVDSpIHKtPd0.mft (raw, json)
Hash identifier: UJ2+DNKoZZr0PcncjFeYHO+Xk0FJS9UCKXvyCpfRlic=
Subject key identifier: 5F:61:98:13:2F:4C:1F:FB:41:E8:D0:79:58:C8:D8:53:41:28:E4:B7
Authority key identifier: 9E:EF:CB:12:05:EB:79:55:47:1E:5C:8F:54:34:A9:20:72:AD:3D:DD
Certificate issuer: /CN=9eefcb1205eb7955471e5c8f5434a92072ad3ddd
Certificate serial: 019655DD12229C70F6FFD681F1B2EC915426
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nu_LEgXreVVHHlyPVDSpIHKtPd0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/921609-58a5-4306-b82b-4b7dcd8777de/1/nu_LEgXreVVHHlyPVDSpIHKtPd0.mft
Manifest number: 0D32
Signing time: Mon 21 Apr 2025 01:01:13 +0000
Manifest this update: Mon 21 Apr 2025 01:01:13 +0000
Manifest next update: Tue 22 Apr 2025 01:01:13 +0000
Files and hashes: 1: 1wC6QLmrFyKOInRDcmow-XqW0-M.roa (hash: Ps6eQ5zeLE+JiNNmSXdT1CgRZlmqpZpw99jqTkN18/0=)
2: nu_LEgXreVVHHlyPVDSpIHKtPd0.crl (hash: cbwym8kXEkthDjDxGIV/SSZOIwCixkPPLzAIsg3pASw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/09/921609-58a5-4306-b82b-4b7dcd8777de/1/nu_LEgXreVVHHlyPVDSpIHKtPd0.crl
rsync://rpki.ripe.net/repository/DEFAULT/09/921609-58a5-4306-b82b-4b7dcd8777de/1/nu_LEgXreVVHHlyPVDSpIHKtPd0.mft
rsync://rpki.ripe.net/repository/DEFAULT/nu_LEgXreVVHHlyPVDSpIHKtPd0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Apr 2025 01:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:55:dd:12:22:9c:70:f6:ff:d6:81:f1:b2:ec:91:54:26
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9eefcb1205eb7955471e5c8f5434a92072ad3ddd
Validity
Not Before: Apr 21 01:01:13 2025 GMT
Not After : Apr 22 01:01:13 2025 GMT
Subject: CN=5f6198132f4c1ffb41e8d07958c8d8534128e4b7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:3f:d5:2e:6d:a4:32:f7:b1:ee:7e:6e:d2:8b:
0a:c4:80:0a:2d:06:a5:df:de:a8:e5:ab:35:30:bc:
15:12:1e:f2:c5:ac:7c:70:fb:ee:58:5f:c7:5d:9d:
cf:0c:cf:30:38:69:9d:dc:dc:39:45:da:4c:53:7a:
6f:d3:28:d1:1b:64:10:10:bd:03:e4:5b:5b:79:ff:
6b:a6:90:d0:8c:3e:01:98:52:7d:15:56:39:31:ee:
38:1d:76:50:44:f4:a2:65:86:31:28:ab:77:a5:8c:
86:47:fc:28:8f:9e:95:2c:c5:cd:e3:7b:28:f4:a7:
c2:52:47:e7:22:74:03:d4:2a:ce:f8:0f:5b:36:16:
67:e9:ee:e8:d2:c7:a8:c7:e4:10:98:f5:f3:69:dc:
71:bd:35:79:6b:a9:2d:66:39:39:a1:f0:19:bf:2f:
ed:71:2e:91:01:dd:b0:9d:8d:33:8a:b8:1f:c4:e4:
cd:55:00:e5:47:ad:16:5b:db:6a:96:b5:77:f9:ab:
ca:f9:da:d4:82:85:4f:5d:e2:6e:60:1f:96:5b:54:
be:4a:aa:1e:49:d5:0a:8a:ee:c3:41:f3:51:3d:f8:
3c:4d:26:0f:20:b6:4b:60:f2:6c:7d:63:81:ab:f3:
f4:ec:5b:da:17:52:c7:28:ed:44:34:ca:8b:ab:e2:
03:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:61:98:13:2F:4C:1F:FB:41:E8:D0:79:58:C8:D8:53:41:28:E4:B7
X509v3 Authority Key Identifier:
keyid:9E:EF:CB:12:05:EB:79:55:47:1E:5C:8F:54:34:A9:20:72:AD:3D:DD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nu_LEgXreVVHHlyPVDSpIHKtPd0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/921609-58a5-4306-b82b-4b7dcd8777de/1/nu_LEgXreVVHHlyPVDSpIHKtPd0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/09/921609-58a5-4306-b82b-4b7dcd8777de/1/nu_LEgXreVVHHlyPVDSpIHKtPd0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
25:88:9b:ff:4b:c1:32:66:b5:c8:a6:da:9d:df:c9:77:8a:b7:
22:d2:c2:73:37:9b:44:b5:0f:6a:b6:79:0b:3e:de:59:8d:dd:
dd:63:63:54:c1:b9:7e:04:66:f0:26:18:5e:e1:e4:b4:4d:4f:
de:a2:2b:31:f9:a6:5d:37:76:24:7f:9e:67:94:41:56:06:16:
60:70:6f:20:28:9a:ff:76:05:12:2f:59:ce:a6:c3:2f:cb:89:
d2:77:c0:c5:a2:96:75:52:12:a6:67:5a:d2:8d:35:3c:b3:85:
1b:e7:1f:d0:d4:17:86:b0:ad:ca:be:60:b6:63:67:20:bc:45:
ed:2e:e2:d6:a1:a6:7b:b8:1f:29:08:59:eb:8d:46:d7:87:96:
63:40:46:e7:7a:2f:70:5a:46:03:7b:3c:1a:9d:19:c0:be:6c:
1d:61:55:38:57:bb:c3:fa:e0:63:7c:bf:c0:bd:5f:df:a2:36:
b2:1f:26:ce:50:2a:b9:e7:a9:2c:e8:90:83:01:5a:8d:47:43:
f3:54:db:5a:ab:79:87:45:34:e1:f1:92:7a:4b:19:40:7e:b7:
23:57:05:c5:52:a7:6f:ec:54:23:f6:f1:d1:a2:70:fe:88:c7:
8e:c1:55:78:6f:a3:76:ff:ae:8c:ed:4a:3f:84:35:c2:e7:fa:
a6:2c:2d:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 03:30:31 2025 by rpki-client