Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c1/680589-8472-43eb-b034-21769de4a1a8/1/n4dSHxXgRXKIqfGWqMiGXDaSIVA.mft
File: n4dSHxXgRXKIqfGWqMiGXDaSIVA.mft (raw, json)
Hash identifier: bwZQjN1dxzLBxBm2gg+xuT18cLhFcGn8m1yXNeehzMs=
Subject key identifier: 9A:E4:50:13:4E:6C:9D:71:36:62:9E:DA:82:3D:1F:CF:60:7A:57:77
Authority key identifier: 9F:87:52:1F:15:E0:45:72:88:A9:F1:96:A8:C8:86:5C:36:92:21:50
Certificate issuer: /CN=9f87521f15e0457288a9f196a8c8865c36922150
Certificate serial: 0196586FCB93C1AEE45596695FD0C18C2BA9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/n4dSHxXgRXKIqfGWqMiGXDaSIVA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c1/680589-8472-43eb-b034-21769de4a1a8/1/n4dSHxXgRXKIqfGWqMiGXDaSIVA.mft
Manifest number: 1501
Signing time: Mon 21 Apr 2025 13:00:43 +0000
Manifest this update: Mon 21 Apr 2025 13:00:43 +0000
Manifest next update: Tue 22 Apr 2025 13:00:43 +0000
Files and hashes: 1: ItUfI_e5TZV8Ja35X57TtR81NmA.roa (hash: IR3NcH60QSQHq12hzjVbCSbj+J8hOMovAsbbfhH0qaA=)
2: n4dSHxXgRXKIqfGWqMiGXDaSIVA.crl (hash: Aq2wqbZybZ1Yv4sq4jjFlVQHrzCF3oSDc6NTAnRW0r8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c1/680589-8472-43eb-b034-21769de4a1a8/1/n4dSHxXgRXKIqfGWqMiGXDaSIVA.crl
rsync://rpki.ripe.net/repository/DEFAULT/c1/680589-8472-43eb-b034-21769de4a1a8/1/n4dSHxXgRXKIqfGWqMiGXDaSIVA.mft
rsync://rpki.ripe.net/repository/DEFAULT/n4dSHxXgRXKIqfGWqMiGXDaSIVA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Apr 2025 10:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:58:6f:cb:93:c1:ae:e4:55:96:69:5f:d0:c1:8c:2b:a9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9f87521f15e0457288a9f196a8c8865c36922150
Validity
Not Before: Apr 21 13:00:43 2025 GMT
Not After : Apr 22 13:00:43 2025 GMT
Subject: CN=9ae450134e6c9d7136629eda823d1fcf607a5777
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:c9:9b:0b:48:69:4c:86:22:2f:87:f8:83:ef:
7d:17:d2:3a:e8:ff:83:34:4c:31:af:b5:c7:66:b9:
41:a4:cb:38:f1:5f:da:e4:67:c8:72:6f:28:ff:cd:
9e:cc:1e:ce:15:64:6a:3c:a4:83:85:9c:ca:09:24:
06:94:39:22:60:89:16:6b:47:02:8c:32:68:5b:e8:
6b:b2:78:18:94:54:06:8e:25:ce:7c:da:04:fe:3e:
49:e8:1a:b2:ba:8a:93:59:af:72:e3:2b:71:de:b7:
60:07:b0:af:2f:5e:f6:5e:64:6f:d3:15:4a:d1:96:
0b:71:f2:97:b6:cd:22:16:8c:28:bc:be:3c:12:ee:
06:66:3a:c0:dc:30:01:3c:78:86:39:b7:cb:25:89:
bb:e3:50:ae:b7:32:11:79:a4:6d:46:d0:f9:9b:0b:
da:d4:fa:ca:f8:63:5c:9d:88:05:95:6c:e1:b7:29:
2f:9e:5c:40:76:80:b9:68:f6:21:0a:82:d3:6c:3e:
f6:ab:a3:ad:46:80:e4:cd:49:ff:86:ce:02:17:a9:
d0:01:8e:27:fb:30:4c:42:4d:e4:6b:57:59:15:c0:
64:4e:53:aa:47:47:c8:56:40:57:3d:d0:a7:6a:94:
8e:ed:cf:b5:fd:6f:b9:75:1c:08:dd:6c:22:68:58:
7e:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:E4:50:13:4E:6C:9D:71:36:62:9E:DA:82:3D:1F:CF:60:7A:57:77
X509v3 Authority Key Identifier:
keyid:9F:87:52:1F:15:E0:45:72:88:A9:F1:96:A8:C8:86:5C:36:92:21:50
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/n4dSHxXgRXKIqfGWqMiGXDaSIVA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/680589-8472-43eb-b034-21769de4a1a8/1/n4dSHxXgRXKIqfGWqMiGXDaSIVA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/680589-8472-43eb-b034-21769de4a1a8/1/n4dSHxXgRXKIqfGWqMiGXDaSIVA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6b:39:ec:b0:32:3d:e6:f9:c8:b1:24:8e:d0:16:f3:cb:9c:0e:
90:ba:e8:06:ae:95:a5:82:92:a3:42:45:e8:1e:08:d7:49:75:
c9:19:9e:ef:29:fb:38:95:c1:a2:a9:04:58:c2:c2:88:66:c0:
4e:05:5c:19:f6:61:20:81:76:77:c6:2d:31:b0:b3:33:db:0c:
97:74:ef:fb:7a:93:c2:23:f6:a0:c1:f0:2d:f2:2e:8c:56:39:
98:d2:87:13:69:10:d9:40:ec:73:3d:91:54:f7:ab:e5:76:7b:
19:ce:db:77:e1:89:dc:5f:e1:a5:1a:62:8f:67:30:8a:ab:45:
57:03:c5:f1:71:c3:59:46:76:f1:63:0e:21:3c:66:31:e5:df:
ae:0a:ff:4b:03:f3:b7:47:ec:d3:42:74:70:bb:99:b1:0b:d8:
5c:01:0c:97:01:18:3a:a5:46:2b:f8:dc:b7:45:93:50:f4:2e:
12:ef:5a:94:42:67:c4:20:61:dd:96:fc:08:7d:6d:03:3c:8d:
7f:cc:16:2f:cd:4f:80:54:32:ad:87:eb:d1:26:59:19:20:e9:
bb:42:12:7a:a8:4f:f0:bc:72:e0:ca:c3:89:6e:95:2a:ae:34:
2f:30:86:4d:7c:f3:c7:74:7b:1a:11:e4:64:b0:b4:6b:77:38:
3c:d6:55:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 15:39:44 2025 by rpki-client