Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6f/5d6ebd-a8ee-474c-b71a-a642cc85bc71/1/niN_MrrhSoH9on6ylGDDoO2jQkA.mft
File: niN_MrrhSoH9on6ylGDDoO2jQkA.mft (raw, json)
Hash identifier: Xfph8X6h5ZMqxjs5QqfeSbKcKIF4ZqBHwHc8BnKPn84=
Subject key identifier: 10:2B:7F:47:3D:09:EE:D9:A8:B2:5C:D8:A1:1C:EB:38:40:E4:3B:50
Authority key identifier: 9E:23:7F:32:BA:E1:4A:81:FD:A2:7E:B2:94:60:C3:A0:ED:A3:42:40
Certificate issuer: /CN=9e237f32bae14a81fda27eb29460c3a0eda34240
Certificate serial: 0196CC4ECCAEAE8630B4758AADDCA1681A47
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/niN_MrrhSoH9on6ylGDDoO2jQkA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6f/5d6ebd-a8ee-474c-b71a-a642cc85bc71/1/niN_MrrhSoH9on6ylGDDoO2jQkA.mft
Manifest number: 0D42
Signing time: Wed 14 May 2025 01:00:38 +0000
Manifest this update: Wed 14 May 2025 01:00:38 +0000
Manifest next update: Thu 15 May 2025 01:00:38 +0000
Files and hashes: 1: duyGpoRiUSXpX71VT4XYnZHmGlA.roa (hash: BUaqTN98K6qCPpPRz7Abj2KUlyE692OgtKSmoKCDJkM=)
2: niN_MrrhSoH9on6ylGDDoO2jQkA.crl (hash: /L+zyRg6513dr5VnGeig1w7bMvdYgXn3ZoWnS1gEJ+A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6f/5d6ebd-a8ee-474c-b71a-a642cc85bc71/1/niN_MrrhSoH9on6ylGDDoO2jQkA.crl
rsync://rpki.ripe.net/repository/DEFAULT/6f/5d6ebd-a8ee-474c-b71a-a642cc85bc71/1/niN_MrrhSoH9on6ylGDDoO2jQkA.mft
rsync://rpki.ripe.net/repository/DEFAULT/niN_MrrhSoH9on6ylGDDoO2jQkA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 15 May 2025 01:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:cc:4e:cc:ae:ae:86:30:b4:75:8a:ad:dc:a1:68:1a:47
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9e237f32bae14a81fda27eb29460c3a0eda34240
Validity
Not Before: May 14 01:00:38 2025 GMT
Not After : May 15 01:00:38 2025 GMT
Subject: CN=102b7f473d09eed9a8b25cd8a11ceb3840e43b50
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:c8:56:04:f5:b8:db:3c:2f:92:67:9a:d8:f9:
e5:65:7e:75:31:e1:fc:1a:9d:61:e7:16:98:5b:a1:
09:1f:98:a0:90:16:0b:6f:6b:41:d5:5a:21:de:a5:
97:4c:12:ea:78:b9:f3:a5:90:4e:ce:df:68:4c:4a:
85:4e:95:91:5a:1d:fa:20:9e:81:dd:7c:de:97:96:
54:50:d6:6b:44:62:1c:88:0e:aa:71:82:ce:c5:32:
6b:e8:51:26:9d:13:80:ff:c3:39:12:e1:31:a8:79:
21:84:1a:e1:cf:47:b7:c6:06:ec:ff:08:41:0e:6e:
f5:1f:ef:aa:9a:65:48:a2:d9:3b:d0:44:04:7a:4c:
7f:f2:7e:86:80:20:14:cd:b0:25:68:9a:ce:8a:98:
a0:05:7b:01:14:63:d5:44:c2:87:b7:3a:e9:b9:fc:
38:66:44:09:03:9e:5e:33:7b:31:e9:34:ce:f9:0d:
c7:79:65:1e:42:b9:df:ce:fd:73:50:ce:99:27:4a:
b7:73:b3:a0:26:9e:9e:18:91:a7:ae:7d:9f:17:e6:
d9:64:e6:a7:57:41:fe:86:ad:0d:16:65:ea:70:d4:
a4:a1:0d:c2:09:27:71:fe:68:65:f8:f3:c7:ba:c2:
ea:51:9f:1d:b0:1d:04:a5:60:2e:4d:42:f0:73:f6:
1d:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:2B:7F:47:3D:09:EE:D9:A8:B2:5C:D8:A1:1C:EB:38:40:E4:3B:50
X509v3 Authority Key Identifier:
keyid:9E:23:7F:32:BA:E1:4A:81:FD:A2:7E:B2:94:60:C3:A0:ED:A3:42:40
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/niN_MrrhSoH9on6ylGDDoO2jQkA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/5d6ebd-a8ee-474c-b71a-a642cc85bc71/1/niN_MrrhSoH9on6ylGDDoO2jQkA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/5d6ebd-a8ee-474c-b71a-a642cc85bc71/1/niN_MrrhSoH9on6ylGDDoO2jQkA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
93:bc:ab:af:61:e9:bb:36:4b:18:33:ea:57:13:07:a3:97:b7:
96:ab:db:09:ed:9a:e7:67:1c:7e:31:8c:17:9c:33:10:56:fc:
ac:b5:c4:0e:b4:9a:47:92:aa:55:32:dd:b9:1f:a3:8e:54:4b:
c2:42:e3:40:aa:85:49:80:5e:a6:e9:28:4d:77:a8:04:62:57:
31:39:19:d6:96:9f:45:c1:65:3f:26:0b:e9:80:40:f6:df:af:
63:bf:46:3c:be:93:76:02:43:7f:2e:13:29:b6:0d:29:e5:df:
53:1c:cd:14:4d:76:ad:9b:33:2a:d4:45:e2:b1:4b:53:f2:0e:
99:0a:8c:e5:cd:91:bc:7f:72:fa:05:c3:b7:88:2b:56:e6:5a:
94:a6:8f:8b:63:aa:8d:40:09:8c:d9:83:bf:65:32:29:57:fb:
d6:66:34:07:dd:3b:2c:30:9f:67:f5:31:80:ea:71:5d:e3:b9:
19:d5:4d:b1:7f:24:f1:d7:1b:60:20:a6:13:8f:e7:22:1c:c2:
b1:03:a9:4e:d7:27:37:16:94:f3:da:cf:1f:86:63:b5:99:15:
ab:eb:1d:c7:2f:47:cb:63:f5:0b:cf:67:79:68:7e:0f:d1:cd:
fb:71:48:89:74:c4:3e:fe:eb:0d:a2:9b:cb:30:bc:a0:12:90:
67:9a:0d:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 14 11:55:57 2025 by rpki-client