Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ff/ac3260-7069-44f2-9ea9-394ff928f570/1/nk-ubSwl3V8vsWtPvqKE5mWMEro.mft
File: nk-ubSwl3V8vsWtPvqKE5mWMEro.mft (raw, json)
Hash identifier: tW16fb8ITjk8o3v6yoAtCPKKEUfnQGf47RkhJK9VMmQ=
Subject key identifier: 3C:43:42:0E:0B:27:93:9C:32:40:AA:CC:A3:F8:A9:15:B9:3E:52:DB
Authority key identifier: 9E:4F:AE:6D:2C:25:DD:5F:2F:B1:6B:4F:BE:A2:84:E6:65:8C:12:BA
Certificate issuer: /CN=9e4fae6d2c25dd5f2fb16b4fbea284e6658c12ba
Certificate serial: 019655A59ED867455503227B14B8AFF89070
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nk-ubSwl3V8vsWtPvqKE5mWMEro.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ff/ac3260-7069-44f2-9ea9-394ff928f570/1/nk-ubSwl3V8vsWtPvqKE5mWMEro.mft
Manifest number: 0EF9
Signing time: Mon 21 Apr 2025 00:00:39 +0000
Manifest this update: Mon 21 Apr 2025 00:00:39 +0000
Manifest next update: Tue 22 Apr 2025 00:00:39 +0000
Files and hashes: 1: FLJa1uRgHO4pR545s0EjhCR4g9I.roa (hash: 5Qe+7lHXv9Hk16E4Tqlbe5q64TOWj9YSYqv2nWFzqeY=)
2: nk-ubSwl3V8vsWtPvqKE5mWMEro.crl (hash: oh13QGzyMzsFgGKnBfcTkRSvXBz9gpKPI9Hl1joje9w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ff/ac3260-7069-44f2-9ea9-394ff928f570/1/nk-ubSwl3V8vsWtPvqKE5mWMEro.crl
rsync://rpki.ripe.net/repository/DEFAULT/ff/ac3260-7069-44f2-9ea9-394ff928f570/1/nk-ubSwl3V8vsWtPvqKE5mWMEro.mft
rsync://rpki.ripe.net/repository/DEFAULT/nk-ubSwl3V8vsWtPvqKE5mWMEro.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Apr 2025 00:00:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:55:a5:9e:d8:67:45:55:03:22:7b:14:b8:af:f8:90:70
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9e4fae6d2c25dd5f2fb16b4fbea284e6658c12ba
Validity
Not Before: Apr 21 00:00:39 2025 GMT
Not After : Apr 22 00:00:39 2025 GMT
Subject: CN=3c43420e0b27939c3240aacca3f8a915b93e52db
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:5e:9c:2d:90:a4:33:10:a1:ce:b9:f6:af:40:
68:d6:49:24:ef:56:04:d6:03:db:29:41:f4:cf:34:
82:cc:aa:89:49:4a:72:ee:43:04:57:de:4b:10:de:
f4:19:e2:ee:3b:8a:2a:89:c8:28:83:bc:34:38:a9:
52:81:05:55:3c:68:a1:ef:82:18:7a:7d:2d:a0:39:
29:af:08:a4:11:0d:de:d0:2c:59:17:7e:a5:7c:19:
81:3e:ea:62:75:80:27:c3:32:41:32:33:9d:a0:f2:
e2:f1:03:78:e4:3b:b6:b1:95:a2:80:07:5f:5a:f6:
7d:d1:2e:1d:11:6a:92:97:13:50:43:b8:ae:4b:2a:
4f:a3:01:1b:11:e8:2e:8b:5b:4a:fe:40:43:aa:7c:
32:a6:03:c8:c2:29:d3:eb:f6:10:0e:fd:54:2c:51:
cb:4f:38:cc:c1:a8:c1:42:fd:c5:f9:39:b2:d4:58:
36:76:2d:7b:98:1a:44:44:b7:2c:17:0e:ed:39:8a:
3a:e1:3a:15:15:d8:d4:87:87:38:8b:32:b7:67:cc:
dd:57:d3:03:51:cd:57:a7:98:c9:ce:98:98:f1:e5:
91:e8:5b:ed:e6:46:b9:bf:69:fe:96:57:7e:be:21:
1a:02:07:01:21:6e:7f:05:56:8f:d5:12:99:b9:de:
3b:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:43:42:0E:0B:27:93:9C:32:40:AA:CC:A3:F8:A9:15:B9:3E:52:DB
X509v3 Authority Key Identifier:
keyid:9E:4F:AE:6D:2C:25:DD:5F:2F:B1:6B:4F:BE:A2:84:E6:65:8C:12:BA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nk-ubSwl3V8vsWtPvqKE5mWMEro.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/ac3260-7069-44f2-9ea9-394ff928f570/1/nk-ubSwl3V8vsWtPvqKE5mWMEro.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/ac3260-7069-44f2-9ea9-394ff928f570/1/nk-ubSwl3V8vsWtPvqKE5mWMEro.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1a:79:ac:43:d0:a9:28:cd:02:a1:81:3f:ff:0b:12:17:3c:f7:
4c:13:8b:bf:6f:ae:ee:6f:32:aa:93:7d:33:78:95:67:0e:13:
00:44:7d:45:d5:3f:33:25:06:fe:35:5a:d6:c4:99:4a:53:2f:
1e:62:11:63:33:7e:82:2c:f9:4b:c8:35:4b:54:e3:03:75:93:
8c:d8:46:8a:b7:7f:66:17:d4:82:9c:34:9a:08:d3:5f:bf:2a:
7b:5c:51:26:20:d7:ee:cc:7e:99:50:a1:82:54:a1:f9:09:54:
f2:c0:5a:04:65:4a:5e:0e:93:31:49:af:22:51:1b:66:6c:45:
51:8e:1b:31:64:82:46:06:7b:cc:0a:f8:64:b6:a8:9b:3c:58:
82:cf:b0:37:ee:ef:51:ca:6c:8b:7e:d8:9b:ad:ff:b3:e8:ed:
a6:37:da:29:4c:50:6a:5f:60:f5:7c:c5:9e:3b:04:06:54:15:
6f:d3:2b:ad:ad:fa:ba:8a:f9:5a:87:9b:b1:30:1a:84:dd:d4:
a7:81:a4:4d:d1:27:4b:52:dd:ff:c9:b9:6d:9f:c3:e3:56:81:
7a:30:98:37:e5:52:00:43:74:08:33:75:6f:95:dd:ab:89:2d:
72:60:6d:fc:c2:63:c9:9f:d4:1f:df:b7:03:e5:c0:b8:ce:d7:
c1:ed:2a:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 04:08:03 2025 by rpki-client