Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f3/4c7379-3649-41de-89f7-d56374e1157a/1/nAqMF3kR9kwwVXNogVueZ9j8PA8.mft
File: nAqMF3kR9kwwVXNogVueZ9j8PA8.mft (raw, json)
Hash identifier: henWFisZvpzSJ1Ali9dD5gww78qRFOZK3e6qpMf/NHA=
Subject key identifier: 63:02:79:AA:4D:B1:79:AC:3F:7E:3F:30:BA:8E:6D:01:FA:4E:D3:56
Authority key identifier: 9C:0A:8C:17:79:11:F6:4C:30:55:73:68:81:5B:9E:67:D8:FC:3C:0F
Certificate issuer: /CN=9c0a8c177911f64c30557368815b9e67d8fc3c0f
Certificate serial: 01965649F86280BCD4B5E98F87986910230A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nAqMF3kR9kwwVXNogVueZ9j8PA8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f3/4c7379-3649-41de-89f7-d56374e1157a/1/nAqMF3kR9kwwVXNogVueZ9j8PA8.mft
Manifest number: 0B10
Signing time: Mon 21 Apr 2025 03:00:10 +0000
Manifest this update: Mon 21 Apr 2025 03:00:10 +0000
Manifest next update: Tue 22 Apr 2025 03:00:10 +0000
Files and hashes: 1: d6blSjaqO2EcEPuhj7EsQzjBTt0.roa (hash: 4jd/vZVphNUOF+ezj/NTHKtL7kzqYpJOJYm6eI+27Hw=)
2: nAqMF3kR9kwwVXNogVueZ9j8PA8.crl (hash: idZJvJnSH882s8V3sw+JIP3nYWwcYg2nxzmAHSltviM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f3/4c7379-3649-41de-89f7-d56374e1157a/1/nAqMF3kR9kwwVXNogVueZ9j8PA8.crl
rsync://rpki.ripe.net/repository/DEFAULT/f3/4c7379-3649-41de-89f7-d56374e1157a/1/nAqMF3kR9kwwVXNogVueZ9j8PA8.mft
rsync://rpki.ripe.net/repository/DEFAULT/nAqMF3kR9kwwVXNogVueZ9j8PA8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Apr 2025 01:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:56:49:f8:62:80:bc:d4:b5:e9:8f:87:98:69:10:23:0a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9c0a8c177911f64c30557368815b9e67d8fc3c0f
Validity
Not Before: Apr 21 03:00:10 2025 GMT
Not After : Apr 22 03:00:10 2025 GMT
Subject: CN=630279aa4db179ac3f7e3f30ba8e6d01fa4ed356
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:ba:43:58:1d:8c:7b:e5:61:64:4d:f6:41:9a:
52:40:58:ed:18:ad:86:3e:a4:e9:91:92:60:12:9a:
41:36:dc:b9:73:96:58:79:bc:7d:39:a0:6e:6a:74:
1a:e3:bb:0a:dd:ea:b9:7e:26:a3:af:8d:15:f6:35:
c9:05:0b:66:77:11:64:71:b9:0c:33:0b:92:d4:9f:
fa:23:e0:da:d7:94:9f:d7:01:ec:81:83:8b:06:97:
c4:a7:4d:50:4c:42:ec:45:f9:b1:e8:bb:c3:54:f4:
3c:3c:29:46:5a:bb:9c:42:ec:7d:8d:74:bf:7b:c3:
a4:72:c8:1e:95:a6:41:81:fe:c6:8f:0f:2e:ed:df:
b2:57:8b:17:eb:a0:5a:eb:ce:dc:7e:36:58:1b:31:
db:68:0c:3a:40:97:75:f2:a0:02:fb:f8:b5:73:37:
58:36:90:c7:1e:34:e8:11:80:14:18:18:28:eb:72:
8c:8d:45:9d:75:49:56:cb:aa:cd:ce:ce:fc:bb:11:
00:dc:1a:29:90:49:e8:71:cb:36:0d:4b:73:a4:bc:
fe:cf:21:17:b5:b3:eb:0e:35:86:4e:18:61:e4:1f:
3e:b8:a7:ae:63:b7:e9:34:5e:6c:69:07:7f:31:f4:
1a:44:44:dc:64:20:eb:9c:71:b3:7d:4a:3b:9d:3a:
b5:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:02:79:AA:4D:B1:79:AC:3F:7E:3F:30:BA:8E:6D:01:FA:4E:D3:56
X509v3 Authority Key Identifier:
keyid:9C:0A:8C:17:79:11:F6:4C:30:55:73:68:81:5B:9E:67:D8:FC:3C:0F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nAqMF3kR9kwwVXNogVueZ9j8PA8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/4c7379-3649-41de-89f7-d56374e1157a/1/nAqMF3kR9kwwVXNogVueZ9j8PA8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/4c7379-3649-41de-89f7-d56374e1157a/1/nAqMF3kR9kwwVXNogVueZ9j8PA8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8c:34:97:28:bd:cc:bd:01:e6:1f:85:10:ff:16:83:ed:e5:e3:
1d:fc:a7:59:13:12:fe:02:23:09:80:56:5d:6f:a9:05:68:fd:
83:2c:c1:ac:94:dc:a2:a4:12:97:c4:d2:6f:b5:36:0f:c0:47:
ca:27:e7:c3:ae:5a:43:9e:19:12:32:79:16:55:17:66:75:fc:
f5:65:cc:52:cd:11:7f:54:25:f8:09:7a:02:50:45:97:a5:27:
2a:12:83:65:cf:1e:5f:46:06:44:10:51:87:48:8a:c9:73:4e:
0a:22:03:f0:05:7a:0d:4b:f2:e4:29:a8:d9:50:3f:37:39:08:
13:c7:d1:39:cf:c2:93:4e:ce:0c:ef:6f:3e:6b:3a:71:62:28:
1d:bd:30:69:af:c4:7d:de:1d:0f:e2:68:bc:93:0b:16:63:2d:
10:0b:fb:45:f1:ce:96:1e:1c:c4:5b:15:37:50:30:8a:23:2f:
29:1f:7e:9a:c7:86:4b:c5:ab:4f:75:13:94:1b:b7:c1:aa:39:
5f:f7:c9:77:62:33:ba:51:b9:8b:0e:9b:a6:be:2d:76:a0:95:
8a:33:f2:99:27:72:c9:29:2d:0e:2f:f9:be:a0:06:66:bc:4e:
73:ba:f7:45:d3:d6:19:29:44:fa:a2:da:ef:98:41:1c:c0:98:
c0:5e:1b:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 05:51:36 2025 by rpki-client