Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3e/229182-4bdc-4234-a989-90d58c603256/1/nLt3urQ4qT002dXAqOC57zKuXaA.mft
File: nLt3urQ4qT002dXAqOC57zKuXaA.mft (raw, json)
Hash identifier: tvhUwFWKOQMy7W7gq7HKQMBdb3atKamQAnDdN/F4ebI=
Subject key identifier: CD:6D:73:C4:5E:0D:65:04:AA:75:58:F4:82:E8:DE:83:CD:92:D0:EC
Authority key identifier: 9C:BB:77:BA:B4:38:A9:3D:34:D9:D5:C0:A8:E0:B9:EF:32:AE:5D:A0
Certificate issuer: /CN=9cbb77bab438a93d34d9d5c0a8e0b9ef32ae5da0
Certificate serial: 01965CF1A310CAB5FEA090B4940A6C59A56B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nLt3urQ4qT002dXAqOC57zKuXaA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3e/229182-4bdc-4234-a989-90d58c603256/1/nLt3urQ4qT002dXAqOC57zKuXaA.mft
Manifest number: 0688
Signing time: Tue 22 Apr 2025 10:01:01 +0000
Manifest this update: Tue 22 Apr 2025 10:01:01 +0000
Manifest next update: Wed 23 Apr 2025 10:01:01 +0000
Files and hashes: 1: TAsOnRZq8fiVm7IgWJUxtwQKXQw.roa (hash: uvW+4Cm/xTtLLngk0h3md/Re7mjqyVC2fS5xyiOuuj4=)
2: nLt3urQ4qT002dXAqOC57zKuXaA.crl (hash: +gjnfsBxBs7nQTUBsAxYbYdNw9KeXA2eSrRnzmBT4jo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3e/229182-4bdc-4234-a989-90d58c603256/1/nLt3urQ4qT002dXAqOC57zKuXaA.crl
rsync://rpki.ripe.net/repository/DEFAULT/3e/229182-4bdc-4234-a989-90d58c603256/1/nLt3urQ4qT002dXAqOC57zKuXaA.mft
rsync://rpki.ripe.net/repository/DEFAULT/nLt3urQ4qT002dXAqOC57zKuXaA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Apr 2025 10:01:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:5c:f1:a3:10:ca:b5:fe:a0:90:b4:94:0a:6c:59:a5:6b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9cbb77bab438a93d34d9d5c0a8e0b9ef32ae5da0
Validity
Not Before: Apr 22 10:01:01 2025 GMT
Not After : Apr 23 10:01:01 2025 GMT
Subject: CN=cd6d73c45e0d6504aa7558f482e8de83cd92d0ec
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:78:67:45:e4:73:50:d0:c0:14:5a:b7:e6:b0:
d8:bd:f4:ee:d3:46:16:a9:a1:e5:3d:fe:0b:50:00:
1d:bf:c9:7f:52:b9:43:74:75:74:17:c3:dc:84:1e:
b7:29:31:23:12:98:97:cb:40:30:11:f7:7f:72:cb:
ed:e7:e2:18:12:8d:5c:ba:33:56:fb:c6:76:0e:7f:
21:54:e5:ae:ce:fd:fb:d9:0b:1e:a9:8a:57:4e:a8:
07:2e:f9:5c:12:0c:11:d8:75:91:7f:3e:ea:29:99:
3b:ad:8b:2a:c9:04:4c:db:f8:67:00:b9:66:82:56:
14:61:e2:c4:10:e3:2a:30:20:96:64:de:8a:6f:ba:
ed:25:b2:6f:13:79:7b:1c:40:29:89:e9:04:ff:3f:
5b:d4:a6:20:ae:16:e1:1d:4b:63:03:c9:76:a0:ae:
70:9e:c1:6e:9a:16:5d:a3:ac:13:42:42:44:f6:a8:
a0:99:bd:be:04:7e:3e:8c:51:84:60:96:13:2a:b6:
7c:33:44:5f:75:10:4d:f1:0e:d7:32:55:35:a9:9e:
e5:e0:33:64:f6:13:5d:76:76:6c:ea:62:4a:1d:f0:
22:a8:d6:d2:29:ce:e4:16:ea:40:ab:56:37:0c:c1:
d4:7a:ae:59:f4:e7:34:d4:b5:66:54:b7:72:be:3b:
22:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:6D:73:C4:5E:0D:65:04:AA:75:58:F4:82:E8:DE:83:CD:92:D0:EC
X509v3 Authority Key Identifier:
keyid:9C:BB:77:BA:B4:38:A9:3D:34:D9:D5:C0:A8:E0:B9:EF:32:AE:5D:A0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nLt3urQ4qT002dXAqOC57zKuXaA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/229182-4bdc-4234-a989-90d58c603256/1/nLt3urQ4qT002dXAqOC57zKuXaA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/229182-4bdc-4234-a989-90d58c603256/1/nLt3urQ4qT002dXAqOC57zKuXaA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7d:b4:1a:81:d6:d5:01:63:78:a1:a9:fe:53:e8:67:8b:c5:fa:
b0:a1:49:4b:9e:dd:57:4d:14:c8:a2:3f:5d:84:fc:a4:16:8b:
6d:ce:ac:14:ef:17:2a:c3:34:96:80:3c:49:f6:86:6b:4b:98:
47:2b:68:b1:27:3f:a7:b9:dc:b4:e3:8c:5e:dc:13:0e:72:4c:
7f:3f:d4:d8:9e:e6:80:41:de:1d:e9:97:2b:66:6e:cc:15:c6:
d2:d5:e8:af:3f:de:bb:fd:5e:6b:91:63:d0:d3:41:d7:ea:97:
78:aa:a4:80:d5:d5:97:72:a0:b5:b5:22:fb:fa:a9:b1:80:22:
5b:f3:a8:7c:b9:1d:36:bb:90:8d:87:90:81:58:c4:13:27:03:
0e:a4:fa:74:e1:42:a6:ec:4d:9d:f3:92:9e:7a:33:48:9f:4c:
cc:0a:53:08:04:13:8b:72:9a:a8:16:15:96:d9:2e:0e:15:d4:
5f:12:00:d9:61:c1:28:7d:2b:e9:4f:82:23:d9:be:70:25:36:
c3:cb:86:34:9c:e0:54:ba:72:4f:a3:5e:b4:cc:49:85:6b:2f:
11:f4:ad:ad:0c:0b:c7:da:b3:99:32:17:e8:63:58:a2:d8:1c:
7a:4c:29:66:ac:ed:fd:24:b7:4b:09:ff:da:c2:a3:eb:b3:fa:
03:47:de:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 18:55:11 2025 by rpki-client