Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/d8ac58-9a61-4852-9f2f-26f39384874f/1/nQ4wgHks-p8V8D6z_XbKaMjN4iA.mft
File: nQ4wgHks-p8V8D6z_XbKaMjN4iA.mft (raw, json)
Hash identifier: 4/6BRnKCux3WlQDL7oZE8FYITw7R70WZIUPPt2Rw70k=
Subject key identifier: F2:C7:4E:AC:A6:3F:F6:67:9F:72:7F:18:7D:F2:4F:CD:64:B8:6E:3F
Authority key identifier: 9D:0E:30:80:79:2C:FA:9F:15:F0:3E:B3:FD:76:CA:68:C8:CD:E2:20
Certificate issuer: /CN=9d0e3080792cfa9f15f03eb3fd76ca68c8cde220
Certificate serial: 019636BFDD6E6D38876B080DA0A861C3952B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nQ4wgHks-p8V8D6z_XbKaMjN4iA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/d8ac58-9a61-4852-9f2f-26f39384874f/1/nQ4wgHks-p8V8D6z_XbKaMjN4iA.mft
Manifest number: 080A
Signing time: Tue 15 Apr 2025 00:01:05 +0000
Manifest this update: Tue 15 Apr 2025 00:01:05 +0000
Manifest next update: Wed 16 Apr 2025 00:01:05 +0000
Files and hashes: 1: nQ4wgHks-p8V8D6z_XbKaMjN4iA.crl (hash: f4bGgulu2t9dsOH0DdUdj273Hdrm9QB0w2MegvwOd8I=)
2: rXxUdbIPPXIqdDVbiUA9acHyJIM.roa (hash: 5bx7bg2hnSlwIm9l4N1LRlEvMvEQpIFQjXIt7GUC0r0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8b/d8ac58-9a61-4852-9f2f-26f39384874f/1/nQ4wgHks-p8V8D6z_XbKaMjN4iA.crl
rsync://rpki.ripe.net/repository/DEFAULT/8b/d8ac58-9a61-4852-9f2f-26f39384874f/1/nQ4wgHks-p8V8D6z_XbKaMjN4iA.mft
rsync://rpki.ripe.net/repository/DEFAULT/nQ4wgHks-p8V8D6z_XbKaMjN4iA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 15 Apr 2025 23:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:36:bf:dd:6e:6d:38:87:6b:08:0d:a0:a8:61:c3:95:2b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9d0e3080792cfa9f15f03eb3fd76ca68c8cde220
Validity
Not Before: Apr 15 00:01:05 2025 GMT
Not After : Apr 16 00:01:05 2025 GMT
Subject: CN=f2c74eaca63ff6679f727f187df24fcd64b86e3f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:2a:e3:f9:ff:f3:38:37:17:c7:3c:b2:3b:af:
1c:4a:a9:83:e0:32:08:cb:94:ef:42:a5:54:6e:9c:
51:13:c4:ed:be:bf:a6:20:79:a7:16:5f:fa:9e:f4:
d7:98:2d:29:a0:b0:0e:09:c3:78:f0:f5:2d:df:4c:
e2:ee:92:e9:a9:6e:f9:ce:46:01:64:ce:d8:c6:d1:
88:40:57:ef:95:ca:c8:ac:b4:b3:53:3e:a4:16:93:
42:6a:f3:fa:fe:7f:bd:e1:5c:f8:34:a0:b4:b8:31:
b6:d5:e7:65:5e:58:4f:43:f9:a3:ce:3c:16:1c:5a:
4e:0f:c4:15:40:fe:83:bf:c1:04:ac:01:8e:b5:8b:
ec:f4:6b:f5:ed:fa:46:df:25:68:2d:98:2d:e3:fa:
08:53:ff:54:6a:4a:53:1b:89:c1:ca:6f:6e:fa:2e:
b9:83:24:f6:33:9f:ab:4b:66:d0:c6:cf:d5:85:20:
ea:ac:42:21:a1:d1:93:dd:b6:a3:cd:a2:aa:8c:84:
cc:72:34:7a:fc:4c:2e:54:9b:42:cf:ff:c7:9e:84:
c8:df:81:ec:f4:14:ad:b5:20:2b:3b:8b:e7:dc:8c:
5d:dd:63:6b:d6:2a:b7:fb:3a:6a:6b:e6:c2:46:63:
82:b5:f4:e9:18:20:27:ce:22:bb:e8:f0:1b:62:35:
cf:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:C7:4E:AC:A6:3F:F6:67:9F:72:7F:18:7D:F2:4F:CD:64:B8:6E:3F
X509v3 Authority Key Identifier:
keyid:9D:0E:30:80:79:2C:FA:9F:15:F0:3E:B3:FD:76:CA:68:C8:CD:E2:20
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nQ4wgHks-p8V8D6z_XbKaMjN4iA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/d8ac58-9a61-4852-9f2f-26f39384874f/1/nQ4wgHks-p8V8D6z_XbKaMjN4iA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/d8ac58-9a61-4852-9f2f-26f39384874f/1/nQ4wgHks-p8V8D6z_XbKaMjN4iA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1e:5b:74:35:71:d9:fd:b5:6d:39:3d:af:ec:86:c7:9b:e7:a8:
52:f2:3e:90:45:db:26:ff:70:f0:3d:6d:3c:38:9f:d7:be:7c:
94:83:67:94:3d:e7:45:64:ff:22:f1:34:3f:24:6e:a1:08:b7:
73:12:48:83:53:b9:e6:b2:f5:57:25:f4:5b:a8:96:0d:d1:6d:
48:0a:f1:ba:17:52:1c:e0:54:fc:1f:75:01:de:41:f4:6e:57:
8f:74:00:83:7c:99:31:52:8f:a6:14:5d:db:59:ed:9a:4f:91:
5d:14:ea:b2:ce:18:2c:18:ca:11:95:fc:ee:ba:c2:dd:bb:e0:
9f:0e:75:40:cc:2b:14:dd:6b:c7:2b:c9:ad:10:3d:ac:7a:7f:
1b:56:3b:29:a3:7d:3b:db:21:87:59:c6:fb:5c:20:1b:27:3f:
e6:f7:2e:dd:ce:c9:5c:d8:cb:d3:88:00:79:8e:3c:51:83:49:
47:a5:91:26:fa:2a:95:72:60:e2:8e:7a:2e:db:d9:f6:70:ea:
52:d9:c2:ff:a3:36:7a:17:87:b4:98:3f:8e:5d:3a:00:08:4e:
08:ec:92:e1:20:cc:c4:4a:a2:91:af:33:73:21:23:43:0f:3f:
b7:d1:96:ef:7a:d7:6a:ca:2a:f9:a8:63:de:25:c6:6c:e1:e1:
84:e0:9e:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 15 09:59:47 2025 by rpki-client