Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fb/dcb613-93eb-4e86-895b-b1e698708f59/1/nJB6oEaogfuAUFGVIBYwYCYNfzE.mft
File: nJB6oEaogfuAUFGVIBYwYCYNfzE.mft (raw, json)
Hash identifier: 3xM9XRpCeu9ACGY08/H+W75CUbdYIb0uRWAa9CbOWjM=
Subject key identifier: 09:22:C1:F3:F2:9C:CB:A7:1D:9E:74:3E:29:A4:9A:C7:CE:20:73:77
Authority key identifier: 9C:90:7A:A0:46:A8:81:FB:80:50:51:95:20:16:30:60:26:0D:7F:31
Certificate issuer: /CN=9c907aa046a881fb8050519520163060260d7f31
Certificate serial: 01965F8488433D973A04B47BABDC2CE48A77
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nJB6oEaogfuAUFGVIBYwYCYNfzE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fb/dcb613-93eb-4e86-895b-b1e698708f59/1/nJB6oEaogfuAUFGVIBYwYCYNfzE.mft
Manifest number: DE
Signing time: Tue 22 Apr 2025 22:00:43 +0000
Manifest this update: Tue 22 Apr 2025 22:00:43 +0000
Manifest next update: Wed 23 Apr 2025 22:00:43 +0000
Files and hashes: 1: F86xC6xwpLDuhs7A8wZygejUMX8.roa (hash: hqY5dyyDkeBwJW2ZEKNHXzfFF8UT2R+EbGGyWHizujw=)
2: nJB6oEaogfuAUFGVIBYwYCYNfzE.crl (hash: C6FzKZRLNoxjAL7Ng7a52XoSHEtDj+m+zYf9qyhitiI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fb/dcb613-93eb-4e86-895b-b1e698708f59/1/nJB6oEaogfuAUFGVIBYwYCYNfzE.crl
rsync://rpki.ripe.net/repository/DEFAULT/fb/dcb613-93eb-4e86-895b-b1e698708f59/1/nJB6oEaogfuAUFGVIBYwYCYNfzE.mft
rsync://rpki.ripe.net/repository/DEFAULT/nJB6oEaogfuAUFGVIBYwYCYNfzE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Apr 2025 14:46:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:5f:84:88:43:3d:97:3a:04:b4:7b:ab:dc:2c:e4:8a:77
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9c907aa046a881fb8050519520163060260d7f31
Validity
Not Before: Apr 22 22:00:43 2025 GMT
Not After : Apr 23 22:00:43 2025 GMT
Subject: CN=0922c1f3f29ccba71d9e743e29a49ac7ce207377
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:80:1b:bc:1d:98:07:83:48:a9:bf:00:e6:8a:
c5:19:4f:b8:24:f2:75:a7:a1:f0:1d:5b:b7:57:60:
1f:90:61:a8:41:c7:e5:f5:5f:ac:27:5f:32:22:27:
cf:d0:87:87:ec:67:09:5f:a1:96:80:a8:16:ab:1f:
ed:e2:02:51:da:5d:95:14:df:35:e2:03:20:aa:6e:
17:38:eb:0f:04:9f:70:0d:23:d7:7c:18:81:e5:c4:
67:a5:60:6b:37:67:21:17:cc:1e:1d:63:b8:24:a0:
38:e0:d7:88:83:89:96:2a:b6:a0:b3:e1:3f:d6:d3:
82:5d:fe:d2:9a:f4:ed:20:ef:e5:66:ef:6e:5c:93:
b9:f4:06:80:ac:d5:84:4e:82:71:8d:37:da:77:bd:
94:6c:09:30:86:46:13:da:77:68:ed:b5:71:46:81:
27:3d:6d:df:83:fe:2f:d0:55:0e:f6:0e:a2:4b:22:
ff:de:25:5e:fb:9f:37:37:6e:40:ad:b8:3c:8b:80:
e0:9b:e1:bd:23:a8:dc:b3:da:bc:72:f3:88:8c:3d:
db:5d:bd:d8:5d:58:41:06:52:e9:f3:47:1c:13:ac:
60:2b:f2:a4:d3:89:b2:f4:1f:86:d3:24:81:ac:5b:
00:b6:75:4a:cc:69:67:02:6f:9f:1a:2a:e8:d6:b8:
7e:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:22:C1:F3:F2:9C:CB:A7:1D:9E:74:3E:29:A4:9A:C7:CE:20:73:77
X509v3 Authority Key Identifier:
keyid:9C:90:7A:A0:46:A8:81:FB:80:50:51:95:20:16:30:60:26:0D:7F:31
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nJB6oEaogfuAUFGVIBYwYCYNfzE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/dcb613-93eb-4e86-895b-b1e698708f59/1/nJB6oEaogfuAUFGVIBYwYCYNfzE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/dcb613-93eb-4e86-895b-b1e698708f59/1/nJB6oEaogfuAUFGVIBYwYCYNfzE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
31:4c:7d:42:70:05:ae:07:b6:bb:cc:3f:26:b5:d5:f4:5b:64:
ad:62:a9:fe:47:46:c6:b1:7b:08:96:63:59:e7:8b:f2:ca:94:
3b:43:61:64:8c:4e:52:d6:0b:8a:72:6c:20:ae:93:13:b5:04:
26:8e:a5:da:5f:63:82:3d:08:ef:af:fa:7d:17:5f:9b:d6:bc:
e3:e4:2b:c9:4d:21:48:3d:47:ce:a8:f4:d3:b3:ff:34:9a:79:
e8:de:08:4e:d2:55:29:8a:20:cf:96:09:09:3b:42:82:51:b8:
ba:de:54:cc:dd:85:ff:f9:57:87:ef:75:5d:19:6b:1a:35:e5:
b2:84:0a:ca:ba:57:ec:7a:fa:12:c5:9d:bd:a7:51:d6:bd:53:
d1:e1:b4:6f:c5:85:a6:fa:47:82:5d:54:0f:5b:45:fa:d2:33:
33:f7:35:8a:3d:e6:ef:90:2a:3f:a9:97:93:f5:32:fc:cc:33:
67:a7:05:90:40:e8:c6:9d:ac:3f:30:31:aa:60:ab:23:a4:ed:
b7:9c:77:ea:f7:05:2f:24:89:39:3a:26:08:60:45:66:41:53:
77:09:e9:d3:0e:0a:41:39:bb:ab:eb:d1:85:80:18:0a:bc:2f:
95:ca:fd:24:74:7e:ed:ee:db:eb:7c:37:94:f2:66:b6:c8:86:
b5:62:30:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 23 01:15:08 2025 by rpki-client