Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/921609-58a5-4306-b82b-4b7dcd8777de/1/nu_LEgXreVVHHlyPVDSpIHKtPd0.mft
File: nu_LEgXreVVHHlyPVDSpIHKtPd0.mft (raw, json)
Hash identifier: UwZoNmMEyWBQQAUPHrjbiluL0FJQX8IIyA9dk9EQSeM=
Subject key identifier: D8:CA:E4:7B:03:09:C9:05:62:4A:ED:60:80:6C:82:27:8B:56:F5:1B
Authority key identifier: 9E:EF:CB:12:05:EB:79:55:47:1E:5C:8F:54:34:A9:20:72:AD:3D:DD
Certificate issuer: /CN=9eefcb1205eb7955471e5c8f5434a92072ad3ddd
Certificate serial: 01958B168A506A2D07549F99D2E2D52B6FF5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nu_LEgXreVVHHlyPVDSpIHKtPd0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/921609-58a5-4306-b82b-4b7dcd8777de/1/nu_LEgXreVVHHlyPVDSpIHKtPd0.mft
Manifest number: 0CC9
Signing time: Wed 12 Mar 2025 16:01:04 +0000
Manifest this update: Wed 12 Mar 2025 16:01:04 +0000
Manifest next update: Thu 13 Mar 2025 16:01:04 +0000
Files and hashes: 1: 1wC6QLmrFyKOInRDcmow-XqW0-M.roa (hash: Ps6eQ5zeLE+JiNNmSXdT1CgRZlmqpZpw99jqTkN18/0=)
2: nu_LEgXreVVHHlyPVDSpIHKtPd0.crl (hash: YwhH9LamiBzY8RlLpODyIoG5Awn/LfCBK3ppGpVUHr4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/09/921609-58a5-4306-b82b-4b7dcd8777de/1/nu_LEgXreVVHHlyPVDSpIHKtPd0.crl
rsync://rpki.ripe.net/repository/DEFAULT/09/921609-58a5-4306-b82b-4b7dcd8777de/1/nu_LEgXreVVHHlyPVDSpIHKtPd0.mft
rsync://rpki.ripe.net/repository/DEFAULT/nu_LEgXreVVHHlyPVDSpIHKtPd0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 13 Mar 2025 16:01:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:8b:16:8a:50:6a:2d:07:54:9f:99:d2:e2:d5:2b:6f:f5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9eefcb1205eb7955471e5c8f5434a92072ad3ddd
Validity
Not Before: Mar 12 16:01:04 2025 GMT
Not After : Mar 13 16:01:04 2025 GMT
Subject: CN=d8cae47b0309c905624aed60806c82278b56f51b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:dd:14:c1:32:ad:b6:67:d1:90:31:4a:71:f1:
02:c7:2c:99:5b:67:b6:63:1e:bd:1f:29:10:66:be:
e6:08:a5:c9:61:0d:05:85:b3:de:f0:49:b7:e8:67:
77:37:cd:62:5a:3d:e0:95:35:19:45:18:9a:b5:7c:
91:72:df:e4:e5:4d:11:a8:96:18:3a:db:17:16:70:
b8:0a:5f:3d:f6:ac:de:90:5d:ea:df:3f:46:ee:e8:
3c:53:2d:32:4e:3c:91:77:ac:c7:2e:69:c9:89:53:
4a:34:7c:1e:29:ff:f8:14:36:9f:79:d9:7c:f8:e7:
bd:f5:43:d6:f3:66:53:5f:19:27:1e:64:b9:44:c3:
08:0e:67:63:04:f6:f2:b1:4f:73:a6:ad:23:fb:c5:
10:24:9a:14:47:15:07:15:df:da:c7:8e:31:b2:11:
e3:2d:5c:e2:94:d6:ac:60:2d:62:9f:e9:ea:b8:a5:
e5:51:94:b4:0b:24:22:a8:4d:31:0a:23:3a:4e:6c:
d0:00:49:36:97:e3:47:98:42:c0:81:e6:3e:9c:bf:
8a:c2:c4:80:06:35:33:17:51:fc:d3:d3:20:cd:70:
77:9c:97:91:1c:47:d8:ab:96:09:72:e9:5b:5a:f8:
78:6e:e8:fb:36:b1:3b:1c:99:d1:e4:52:c3:7d:4f:
67:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:CA:E4:7B:03:09:C9:05:62:4A:ED:60:80:6C:82:27:8B:56:F5:1B
X509v3 Authority Key Identifier:
keyid:9E:EF:CB:12:05:EB:79:55:47:1E:5C:8F:54:34:A9:20:72:AD:3D:DD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nu_LEgXreVVHHlyPVDSpIHKtPd0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/921609-58a5-4306-b82b-4b7dcd8777de/1/nu_LEgXreVVHHlyPVDSpIHKtPd0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/09/921609-58a5-4306-b82b-4b7dcd8777de/1/nu_LEgXreVVHHlyPVDSpIHKtPd0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2d:f2:a1:9f:45:6f:d6:ac:d0:8e:e3:39:16:7c:95:2b:52:b3:
c4:59:38:17:9f:1e:f0:65:a7:60:ce:64:b7:37:09:80:0e:26:
48:99:e0:ce:53:45:03:ec:f0:49:5b:d7:96:2c:61:a2:16:c2:
29:5d:8d:a7:0f:ff:e3:95:f5:9e:ba:83:ed:8b:5b:e2:73:5c:
d1:39:9c:32:3c:f9:ef:ac:1d:0f:5b:f8:90:f6:36:cb:07:5f:
65:eb:68:44:1a:d5:7a:4e:54:cc:06:5a:ee:3b:8a:89:82:27:
03:c2:8e:9b:55:d2:31:cc:7b:b1:8c:ae:c0:ac:a9:de:52:43:
bc:0b:01:e4:9a:6d:43:50:63:a9:84:5e:f7:80:a5:d0:43:c7:
69:a7:50:73:c0:d2:72:5a:06:48:e9:05:20:59:cd:5a:4d:58:
f0:89:68:8c:d0:ea:f6:66:84:0b:b1:39:7f:a7:5a:17:3c:71:
22:df:0a:c3:31:5e:6c:c4:88:84:7c:00:f2:76:19:04:b9:36:
2e:39:8d:48:16:5a:71:f3:be:c4:aa:c5:11:82:45:26:72:e6:
ce:a4:e9:7c:d6:7c:9f:cc:56:e8:7e:75:95:c7:28:8e:b8:66:
27:89:01:1f:57:b6:5a:df:dd:da:c2:8b:6e:66:32:52:01:c3:
40:1e:c9:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 02:29:42 2025 by rpki-client