Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/a9bd93-92bd-4bf9-b655-adcefdaa1028/1/m-NDwvs9a40jeJq02m_NRlppBYM.mft
File: m-NDwvs9a40jeJq02m_NRlppBYM.mft (raw, json)
Hash identifier: 3aROhDtOLVJVPaUl0qQcX9qTfoBNGnFWhG8Y27YIUI0=
Subject key identifier: 8D:A9:F9:E9:7F:31:A1:1D:7A:31:80:86:77:BD:96:7C:B7:8D:C1:8E
Authority key identifier: 9B:E3:43:C2:FB:3D:6B:8D:23:78:9A:B4:DA:6F:CD:46:5A:69:05:83
Certificate issuer: /CN=9be343c2fb3d6b8d23789ab4da6fcd465a690583
Certificate serial: 0196545C22945F3F978C6A9CEC94D9AED289
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/m-NDwvs9a40jeJq02m_NRlppBYM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e4/a9bd93-92bd-4bf9-b655-adcefdaa1028/1/m-NDwvs9a40jeJq02m_NRlppBYM.mft
Manifest number: 08E8
Signing time: Sun 20 Apr 2025 18:00:46 +0000
Manifest this update: Sun 20 Apr 2025 18:00:46 +0000
Manifest next update: Mon 21 Apr 2025 18:00:46 +0000
Files and hashes: 1: V1rYVkHJ4iIIHNg29wauYpELwcg.roa (hash: 7R1pOTL7gS5y/fLoZFKL53bP7clTOjblHiZzRpiMJxQ=)
2: m-NDwvs9a40jeJq02m_NRlppBYM.crl (hash: mQZn7WYX8OR7Vo2A58VlkImIac6jgJHVuZHNKg6wqi8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e4/a9bd93-92bd-4bf9-b655-adcefdaa1028/1/m-NDwvs9a40jeJq02m_NRlppBYM.crl
rsync://rpki.ripe.net/repository/DEFAULT/e4/a9bd93-92bd-4bf9-b655-adcefdaa1028/1/m-NDwvs9a40jeJq02m_NRlppBYM.mft
rsync://rpki.ripe.net/repository/DEFAULT/m-NDwvs9a40jeJq02m_NRlppBYM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Apr 2025 16:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:54:5c:22:94:5f:3f:97:8c:6a:9c:ec:94:d9:ae:d2:89
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9be343c2fb3d6b8d23789ab4da6fcd465a690583
Validity
Not Before: Apr 20 18:00:46 2025 GMT
Not After : Apr 21 18:00:46 2025 GMT
Subject: CN=8da9f9e97f31a11d7a31808677bd967cb78dc18e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:4c:51:6d:70:b5:41:45:40:19:b4:c1:26:f1:
42:e6:17:b2:bd:10:7f:77:c2:4b:7c:27:d2:cd:01:
94:dd:6c:2d:8f:c7:f4:52:5c:76:6a:4a:90:b2:3f:
59:a7:f5:13:0b:ae:a9:f2:d6:15:67:ac:a3:c8:c3:
da:c8:06:5e:26:cd:8a:31:74:c5:f9:ce:b9:be:84:
3d:e0:7c:bc:d9:13:e7:71:da:d5:f4:83:4a:c8:8a:
f5:8a:93:43:c5:94:72:cd:34:c1:d3:da:47:21:92:
9a:c7:1e:7b:ab:ae:0f:78:1d:21:ba:b2:f5:7f:8c:
4d:17:96:ef:61:0f:98:ba:85:ca:64:fe:35:4a:af:
79:9b:1d:02:a9:95:bd:dd:6b:19:1b:00:19:89:89:
2e:81:8a:36:5e:45:42:ff:ab:ae:61:69:ac:7b:d9:
ee:d5:db:c1:2f:05:e9:0d:68:a8:33:f0:21:43:72:
ed:bd:90:34:42:57:42:93:1d:6e:43:60:e5:5f:5a:
26:1a:81:de:de:a9:1b:33:1f:32:2f:92:6d:2d:8e:
a8:07:82:f3:5c:e0:d5:9c:f8:0f:67:39:55:be:09:
46:06:bf:b8:b4:92:05:43:10:39:ee:c8:81:4b:6d:
a6:74:90:09:22:31:25:85:99:f9:1a:94:cb:1a:0d:
b2:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:A9:F9:E9:7F:31:A1:1D:7A:31:80:86:77:BD:96:7C:B7:8D:C1:8E
X509v3 Authority Key Identifier:
keyid:9B:E3:43:C2:FB:3D:6B:8D:23:78:9A:B4:DA:6F:CD:46:5A:69:05:83
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m-NDwvs9a40jeJq02m_NRlppBYM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/a9bd93-92bd-4bf9-b655-adcefdaa1028/1/m-NDwvs9a40jeJq02m_NRlppBYM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/a9bd93-92bd-4bf9-b655-adcefdaa1028/1/m-NDwvs9a40jeJq02m_NRlppBYM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
09:0b:f7:c4:15:c5:12:96:c8:b7:28:4b:cd:41:b3:75:60:a7:
2e:7d:9a:1c:aa:5e:e3:52:e7:0c:6e:ba:0f:7a:c6:40:15:e9:
6c:9e:2c:7a:d9:58:f9:59:48:de:12:8c:94:59:4c:e3:dc:41:
9b:12:42:42:55:1d:7f:68:ab:b5:67:5c:02:58:96:cb:37:17:
77:51:d4:42:2f:1b:68:02:eb:28:98:51:36:ae:11:0f:0a:7d:
28:67:cf:2d:61:d7:8b:27:9e:f0:56:a5:f0:2e:08:26:74:50:
89:80:8d:a9:8e:d5:c8:a2:14:df:c0:96:a5:34:91:e6:26:b1:
c4:96:81:78:4f:aa:88:fa:a4:bc:03:12:70:2b:08:f0:b4:d4:
6b:40:37:7d:34:c8:fe:c9:57:77:03:95:d9:a2:de:7e:e7:77:
ef:63:e3:b1:c6:f2:36:5d:13:99:1c:79:1a:0b:55:50:18:9b:
45:07:b7:61:ea:d2:8c:f1:70:25:da:3b:ed:6d:ef:06:0a:ad:
46:4c:1f:33:bf:e1:cb:c2:6a:a3:e6:61:7e:4e:46:f6:c5:99:
72:0a:49:42:19:c6:ff:54:73:0c:4b:1b:a8:21:8d:a2:f4:25:
7c:54:83:0c:e9:10:2e:a7:bc:be:77:e6:83:d0:a9:0f:dd:d9:
d3:72:07:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 01:18:59 2025 by rpki-client