Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5c/3433fe-6408-468d-81e4-f03eb8740c3e/1/nAMai2oolAx5NrpueCuUoJYr-yc.mft
File: nAMai2oolAx5NrpueCuUoJYr-yc.mft (raw, json)
Hash identifier: py+5ltdsfEj33BUMBUgZ9luD/vDORlaxCR4Ft+HQ3XQ=
Subject key identifier: B9:CE:06:51:54:D8:2C:48:5D:EF:9B:DF:BC:60:E1:09:3E:7F:08:92
Authority key identifier: 9C:03:1A:8B:6A:28:94:0C:79:36:BA:6E:78:2B:94:A0:96:2B:FB:27
Certificate issuer: /CN=9c031a8b6a28940c7936ba6e782b94a0962bfb27
Certificate serial: 01965500DCE15821978D4AC400A7700F907F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nAMai2oolAx5NrpueCuUoJYr-yc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5c/3433fe-6408-468d-81e4-f03eb8740c3e/1/nAMai2oolAx5NrpueCuUoJYr-yc.mft
Manifest number: 028D
Signing time: Sun 20 Apr 2025 21:00:41 +0000
Manifest this update: Sun 20 Apr 2025 21:00:41 +0000
Manifest next update: Mon 21 Apr 2025 21:00:41 +0000
Files and hashes: 1: nAMai2oolAx5NrpueCuUoJYr-yc.crl (hash: T92tM1bmrHDc0Rz87eh918Ra7PeKPA8ovWKjdwMP0LI=)
2: sazfzVz6q9bIns0N5tJ_KIxOhyU.roa (hash: 7Dx7RnLHW4HsXUHgAbio+tOs+19yMbUTjmWX8tX1e1E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5c/3433fe-6408-468d-81e4-f03eb8740c3e/1/nAMai2oolAx5NrpueCuUoJYr-yc.crl
rsync://rpki.ripe.net/repository/DEFAULT/5c/3433fe-6408-468d-81e4-f03eb8740c3e/1/nAMai2oolAx5NrpueCuUoJYr-yc.mft
rsync://rpki.ripe.net/repository/DEFAULT/nAMai2oolAx5NrpueCuUoJYr-yc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Apr 2025 21:00:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:55:00:dc:e1:58:21:97:8d:4a:c4:00:a7:70:0f:90:7f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9c031a8b6a28940c7936ba6e782b94a0962bfb27
Validity
Not Before: Apr 20 21:00:41 2025 GMT
Not After : Apr 21 21:00:41 2025 GMT
Subject: CN=b9ce065154d82c485def9bdfbc60e1093e7f0892
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:08:5e:ce:5d:8c:99:1e:a9:5f:8a:8f:eb:00:
7d:be:49:9d:b0:96:c6:ea:c5:05:31:e9:9c:f1:80:
b1:3f:ae:68:0b:a4:df:21:bb:fb:07:44:c5:bb:7f:
51:e0:9b:4e:0f:40:c7:e2:cb:d7:d7:f0:b3:49:86:
15:d3:bb:1c:0d:56:a1:2e:4e:4b:42:91:fb:ad:50:
e0:e6:9a:31:d8:61:1f:ff:f6:8a:c1:2a:11:83:dd:
ec:40:9d:c4:26:0f:b2:ed:16:06:9f:0a:b6:ba:e2:
5b:90:3a:c5:ff:be:f3:aa:8a:ef:a1:a4:3e:d9:e4:
67:ea:05:a4:1f:df:8d:0a:72:56:7d:c0:7a:24:fc:
5c:83:ba:f3:b3:72:52:da:7a:ac:3a:e4:f5:eb:d0:
b0:b7:d5:1c:b3:9b:d1:e5:2b:14:f8:17:02:90:64:
f9:73:1e:0d:b5:8c:8e:5c:30:55:fc:58:b9:85:c9:
6c:19:89:4e:58:ec:69:96:48:f9:8b:09:d3:ba:81:
9d:82:7d:ba:c7:a6:dd:d7:0f:5d:8c:8b:50:09:3b:
03:00:00:46:ee:4d:70:88:e2:79:6d:a7:06:be:16:
c0:26:64:73:57:a5:30:d6:a5:0d:a2:25:c5:03:25:
62:5e:ef:82:8a:cc:90:97:ef:15:f7:b5:cb:f7:69:
6c:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:CE:06:51:54:D8:2C:48:5D:EF:9B:DF:BC:60:E1:09:3E:7F:08:92
X509v3 Authority Key Identifier:
keyid:9C:03:1A:8B:6A:28:94:0C:79:36:BA:6E:78:2B:94:A0:96:2B:FB:27
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nAMai2oolAx5NrpueCuUoJYr-yc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/3433fe-6408-468d-81e4-f03eb8740c3e/1/nAMai2oolAx5NrpueCuUoJYr-yc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/3433fe-6408-468d-81e4-f03eb8740c3e/1/nAMai2oolAx5NrpueCuUoJYr-yc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
67:c6:9f:44:61:e8:a9:6d:63:1c:d8:35:87:08:0c:e6:d1:a6:
c4:e3:33:49:67:b0:83:44:5f:16:e7:7d:39:dc:a3:23:70:ed:
13:df:e1:f7:1b:96:a5:df:65:48:0b:45:fb:12:52:70:e0:f9:
48:30:94:0e:98:7f:3e:14:52:66:fe:b5:97:0a:b7:8e:2e:f0:
1d:0c:cf:e7:6c:9d:25:9d:a1:58:ec:3f:57:60:f7:fb:8c:62:
82:27:94:bc:fb:74:26:d8:72:09:13:8b:94:ac:fc:4a:b4:d5:
6f:f1:a6:d3:ff:b3:72:94:3f:ae:bf:ff:4f:d8:75:27:ac:87:
81:74:5e:a0:19:fd:48:ac:fa:c9:8c:ac:27:75:4e:6b:38:9f:
1e:eb:74:86:97:bc:27:e5:67:14:2f:f5:4b:72:d0:5f:5f:fa:
3f:98:ea:83:ba:53:e0:d9:b9:62:19:e2:5f:9b:a3:fd:ae:ca:
ab:b7:36:66:9e:51:c4:0d:6a:bb:b7:cd:41:72:ee:89:a1:3f:
da:94:73:71:6d:88:3a:63:ce:be:9a:cc:57:84:fb:b2:65:88:
47:60:77:29:6d:26:0e:7a:67:9a:ff:a3:6d:70:5d:95:3d:c9:
33:94:d2:c0:60:59:2c:7b:21:c0:7a:f8:31:57:90:a9:a4:eb:
62:13:f5:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 04:12:58 2025 by rpki-client