Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/86/faa50f-4de1-4d1c-b803-19bf7810961b/1/nYwI9K2P6tNx2j58ArbP1on8pbo.mft
File: nYwI9K2P6tNx2j58ArbP1on8pbo.mft (raw, json)
Hash identifier: h93nJtoE1cfytsBdoTgtgL3P/sIoLS1eQMZHZIRLRvg=
Subject key identifier: 5A:7B:7A:27:1C:99:2B:A5:A7:F2:AD:2C:E9:2E:79:E5:D1:76:F1:F8
Authority key identifier: 9D:8C:08:F4:AD:8F:EA:D3:71:DA:3E:7C:02:B6:CF:D6:89:FC:A5:BA
Certificate issuer: /CN=9d8c08f4ad8fead371da3e7c02b6cfd689fca5ba
Certificate serial: 01965BA7B5F9BE32D06A1EB7030FA0E9BABD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nYwI9K2P6tNx2j58ArbP1on8pbo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/86/faa50f-4de1-4d1c-b803-19bf7810961b/1/nYwI9K2P6tNx2j58ArbP1on8pbo.mft
Manifest number: 085E
Signing time: Tue 22 Apr 2025 04:00:39 +0000
Manifest this update: Tue 22 Apr 2025 04:00:39 +0000
Manifest next update: Wed 23 Apr 2025 04:00:39 +0000
Files and hashes: 1: nJBx_aFvLLmg9WQ03TK76fpJWGM.roa (hash: 02dNoeVE9Sy74k3q/XOECz/G2VHIiUVMONX/87WPyrU=)
2: nYwI9K2P6tNx2j58ArbP1on8pbo.crl (hash: Sjq5j0XLMcMpgS7nWRRqcl6VIOy1oekuAO9au47yxik=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/86/faa50f-4de1-4d1c-b803-19bf7810961b/1/nYwI9K2P6tNx2j58ArbP1on8pbo.crl
rsync://rpki.ripe.net/repository/DEFAULT/86/faa50f-4de1-4d1c-b803-19bf7810961b/1/nYwI9K2P6tNx2j58ArbP1on8pbo.mft
rsync://rpki.ripe.net/repository/DEFAULT/nYwI9K2P6tNx2j58ArbP1on8pbo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Apr 2025 04:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:5b:a7:b5:f9:be:32:d0:6a:1e:b7:03:0f:a0:e9:ba:bd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9d8c08f4ad8fead371da3e7c02b6cfd689fca5ba
Validity
Not Before: Apr 22 04:00:39 2025 GMT
Not After : Apr 23 04:00:39 2025 GMT
Subject: CN=5a7b7a271c992ba5a7f2ad2ce92e79e5d176f1f8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:db:f6:6f:d7:75:e7:29:97:3a:b5:d0:d2:55:
20:d3:bd:9e:ca:90:a1:a4:72:40:07:3f:50:40:b0:
51:3c:60:5e:61:0f:0d:71:0a:7f:f4:18:d2:31:1a:
7d:ae:f6:38:05:dc:17:3e:c0:f7:0e:67:a6:fe:44:
21:dd:d8:5a:d0:b5:e3:3a:a9:22:5d:33:e5:49:87:
19:ea:77:ac:83:25:2e:b9:ad:3e:7b:f8:77:6b:73:
f3:dd:e3:52:32:97:85:a6:d2:a6:7f:f7:5c:16:9f:
aa:7e:47:d1:22:83:eb:8a:29:88:bf:bf:b9:38:f6:
77:e9:a9:b7:cd:cf:02:c9:22:c4:35:01:eb:1e:d6:
79:6c:1f:a3:58:7a:cc:44:05:e7:f1:ea:5b:60:1a:
88:84:ca:e2:8c:6b:7f:e7:b6:0a:19:a4:7a:cd:70:
91:74:91:3f:b0:50:03:3b:0b:e8:85:20:24:f0:79:
f8:b6:84:df:df:25:8e:fc:9e:7f:af:a0:58:0b:e6:
df:05:00:21:e8:1c:f5:03:a2:0b:e6:ac:9c:a5:51:
e5:71:55:21:20:b0:08:2e:d1:ef:0d:da:e7:93:c2:
72:a6:9d:a9:a1:f8:b3:e9:8c:eb:a2:62:53:82:54:
15:ce:7d:3e:a5:ec:8f:6a:0e:c7:be:f2:f5:45:12:
1b:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:7B:7A:27:1C:99:2B:A5:A7:F2:AD:2C:E9:2E:79:E5:D1:76:F1:F8
X509v3 Authority Key Identifier:
keyid:9D:8C:08:F4:AD:8F:EA:D3:71:DA:3E:7C:02:B6:CF:D6:89:FC:A5:BA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nYwI9K2P6tNx2j58ArbP1on8pbo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/faa50f-4de1-4d1c-b803-19bf7810961b/1/nYwI9K2P6tNx2j58ArbP1on8pbo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/86/faa50f-4de1-4d1c-b803-19bf7810961b/1/nYwI9K2P6tNx2j58ArbP1on8pbo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
51:39:26:7f:87:93:8c:8a:02:03:ba:08:9f:f1:ad:b8:6f:0f:
b2:f0:20:64:32:da:83:0b:02:56:b1:d8:ac:9f:99:68:6d:da:
14:1a:16:bc:b6:cc:8e:d3:64:3f:8b:7c:43:b4:c5:5d:67:0b:
c0:34:bb:6e:d3:95:ff:99:72:de:46:a9:40:ee:87:ed:22:e2:
fd:76:36:0c:fa:44:c7:1b:f0:5c:54:eb:8a:af:e8:94:99:81:
9c:a9:14:dd:a2:55:89:14:f1:98:a2:f4:7e:42:4b:54:51:fe:
b9:d1:d6:bf:30:3e:2e:68:78:ea:b5:99:05:20:1f:bc:62:e6:
1a:50:c5:43:30:0f:b3:b5:bc:a9:17:39:03:85:b6:2d:88:af:
90:21:09:e3:08:dc:47:9e:2d:4e:f2:bc:34:48:35:89:ea:72:
d9:2d:20:ef:bf:ca:82:6d:27:6c:b9:8c:44:7b:ff:c9:a9:78:
3b:36:64:a6:72:c2:3d:62:76:a8:cf:05:28:b0:ef:c2:da:db:
2c:b8:58:c7:6e:2c:3d:66:f1:df:3a:73:f7:2c:26:7b:32:a5:
0a:30:9c:c4:55:1d:37:31:5a:fd:9c:0f:30:46:4e:53:ee:58:
31:60:60:ce:3f:09:0c:cc:16:e0:07:8f:44:64:7e:e6:50:ba:
b5:27:09:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 10:26:49 2025 by rpki-client