Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/3c034f-c243-4a88-9070-6879cc26d7b6/1/nDz83hO2YLXIMdr74b-_aN-fvjk.mft
File: nDz83hO2YLXIMdr74b-_aN-fvjk.mft (raw, json)
Hash identifier: CPqgcUEL7i6D2+P/ekd9lga2COT0GSmehyx29BGDAMw=
Subject key identifier: 2A:DF:8D:43:89:13:66:84:7F:71:83:A9:04:1A:3F:7C:BB:B3:0F:25
Authority key identifier: 9C:3C:FC:DE:13:B6:60:B5:C8:31:DA:FB:E1:BF:BF:68:DF:9F:BE:39
Certificate issuer: /CN=9c3cfcde13b660b5c831dafbe1bfbf68df9fbe39
Certificate serial: 019655DD44A4E451D3E06E05DCE5E0292206
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nDz83hO2YLXIMdr74b-_aN-fvjk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a2/3c034f-c243-4a88-9070-6879cc26d7b6/1/nDz83hO2YLXIMdr74b-_aN-fvjk.mft
Manifest number: 04BB
Signing time: Mon 21 Apr 2025 01:01:26 +0000
Manifest this update: Mon 21 Apr 2025 01:01:26 +0000
Manifest next update: Tue 22 Apr 2025 01:01:26 +0000
Files and hashes: 1: 1-o7g3L28fO-PQjnRpt-UgWkTHQw.roa (hash: eDwV2kux0bA6vYCRB0ZxUOPv76wEVLU7G2rZyoTStqs=)
2: nDz83hO2YLXIMdr74b-_aN-fvjk.crl (hash: 5hTDXDbSCGPBiFfz5xrs1V6U+OfXk8r+9sleFf4Q2k4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a2/3c034f-c243-4a88-9070-6879cc26d7b6/1/nDz83hO2YLXIMdr74b-_aN-fvjk.crl
rsync://rpki.ripe.net/repository/DEFAULT/a2/3c034f-c243-4a88-9070-6879cc26d7b6/1/nDz83hO2YLXIMdr74b-_aN-fvjk.mft
rsync://rpki.ripe.net/repository/DEFAULT/nDz83hO2YLXIMdr74b-_aN-fvjk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Apr 2025 01:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:55:dd:44:a4:e4:51:d3:e0:6e:05:dc:e5:e0:29:22:06
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9c3cfcde13b660b5c831dafbe1bfbf68df9fbe39
Validity
Not Before: Apr 21 01:01:26 2025 GMT
Not After : Apr 22 01:01:26 2025 GMT
Subject: CN=2adf8d43891366847f7183a9041a3f7cbbb30f25
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:30:23:83:18:52:02:28:e1:ab:d2:45:30:47:
c7:33:a5:60:78:4d:c6:68:df:a5:6b:9b:57:58:a7:
47:7a:97:3c:fc:be:8e:04:1c:2d:b9:38:ea:39:c1:
0d:9e:ff:46:92:fd:3c:82:53:36:4f:55:7c:b9:ac:
1a:84:3f:7f:55:d0:60:e6:c9:83:b1:e1:2b:87:5c:
0a:99:93:f9:05:cf:69:9e:e5:1f:b6:30:2b:1c:01:
8d:4a:a7:7a:f0:61:56:3d:dd:7c:bc:b2:82:11:c1:
74:7a:40:e7:06:05:93:13:e8:ae:e1:1d:e6:b2:ba:
5a:b4:1a:9f:89:37:07:aa:6d:16:f3:19:8a:ac:99:
29:11:40:c5:e3:02:cd:e2:5a:8f:65:61:6a:d9:b8:
fe:2a:62:60:be:81:ad:f9:f2:34:b7:ad:e9:39:13:
d7:d5:3c:e5:4d:6b:dd:c7:06:33:dd:fb:4c:52:e7:
fe:cf:2c:f5:05:1d:e4:10:8b:a5:83:82:c8:48:cf:
6f:5e:89:d9:3a:38:a3:d0:05:c4:b6:be:db:77:33:
61:2f:1c:e4:8a:e7:43:b8:c2:29:f2:9e:17:1d:1b:
e4:5f:44:ed:2e:8d:d8:ad:6d:70:cc:30:b2:e6:57:
75:88:74:93:4d:0a:30:a6:f2:13:1b:e9:94:7b:48:
bd:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:DF:8D:43:89:13:66:84:7F:71:83:A9:04:1A:3F:7C:BB:B3:0F:25
X509v3 Authority Key Identifier:
keyid:9C:3C:FC:DE:13:B6:60:B5:C8:31:DA:FB:E1:BF:BF:68:DF:9F:BE:39
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nDz83hO2YLXIMdr74b-_aN-fvjk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/3c034f-c243-4a88-9070-6879cc26d7b6/1/nDz83hO2YLXIMdr74b-_aN-fvjk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/3c034f-c243-4a88-9070-6879cc26d7b6/1/nDz83hO2YLXIMdr74b-_aN-fvjk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
26:d4:01:80:74:d8:53:62:6e:88:e7:ad:4a:31:5c:1f:47:eb:
87:cf:cb:98:d2:ee:83:a5:47:ab:d7:2d:7e:c1:e6:f2:55:17:
da:c6:66:82:d0:e7:ec:a1:df:d0:1c:76:a6:27:11:4d:8a:89:
6c:b6:53:d6:42:48:72:6f:a9:c5:e8:43:5d:52:45:8a:19:2c:
02:a8:61:3d:a4:35:1a:18:d5:78:65:0d:dd:ad:b8:4a:ac:42:
76:69:97:d3:ac:cd:9b:f8:2c:d4:af:2d:1b:d3:27:ab:45:ed:
94:cc:6c:92:29:cc:74:b8:32:8e:e8:41:df:b9:b1:02:0f:e5:
77:21:6b:14:49:cb:84:5d:df:75:50:cc:6f:21:78:a0:6c:ce:
c1:09:3f:54:eb:c6:4c:d6:f5:5d:a6:8d:59:1b:a6:a0:3e:b3:
ae:35:95:e4:f1:54:d0:f4:fd:b5:2b:3f:14:a0:76:18:e3:77:
e1:29:f7:af:80:69:21:6c:a4:5c:5e:d4:8a:98:b6:0c:3b:05:
0c:ea:fa:49:ff:33:89:b3:92:21:af:5e:c1:da:3c:b1:25:60:
8d:4f:5e:5c:8e:44:38:16:79:d7:74:10:1d:93:69:32:ff:43:
a0:d2:09:78:8f:9a:da:ad:44:80:b0:9a:91:bd:66:cc:6a:98:
13:11:9c:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 10:51:40 2025 by rpki-client