Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0b/464260-8d7e-4507-b44b-2864707b2b3f/1/nHIayAejJvhxu6oYSWPNYCtcwtY.mft
File: nHIayAejJvhxu6oYSWPNYCtcwtY.mft (raw, json)
Hash identifier: Q6CmqG+4wg7fPrCq0/VBcfTX4434G1Zqu7CO857q7qE=
Subject key identifier: E8:9A:25:2A:DF:6A:7B:50:1E:50:C5:BA:C4:34:8E:75:91:64:21:A7
Authority key identifier: 9C:72:1A:C8:07:A3:26:F8:71:BB:AA:18:49:63:CD:60:2B:5C:C2:D6
Certificate issuer: /CN=9c721ac807a326f871bbaa184963cd602b5cc2d6
Certificate serial: 01965C15470AF23B34B14EB0B63506D3B411
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nHIayAejJvhxu6oYSWPNYCtcwtY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0b/464260-8d7e-4507-b44b-2864707b2b3f/1/nHIayAejJvhxu6oYSWPNYCtcwtY.mft
Manifest number: 1502
Signing time: Tue 22 Apr 2025 06:00:20 +0000
Manifest this update: Tue 22 Apr 2025 06:00:20 +0000
Manifest next update: Wed 23 Apr 2025 06:00:20 +0000
Files and hashes: 1: 9jfoHjHhXlQUp0QHnvy8Xfhd38g.roa (hash: /upMq7FxxL/VBqHPpqBK/s+Z/2QbORhxGy0ijXbQbKE=)
2: nHIayAejJvhxu6oYSWPNYCtcwtY.crl (hash: LuVgeHDiowLox3CRj5ZrYDHgo/L/cKUlp8FzB1eVLXA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0b/464260-8d7e-4507-b44b-2864707b2b3f/1/nHIayAejJvhxu6oYSWPNYCtcwtY.crl
rsync://rpki.ripe.net/repository/DEFAULT/0b/464260-8d7e-4507-b44b-2864707b2b3f/1/nHIayAejJvhxu6oYSWPNYCtcwtY.mft
rsync://rpki.ripe.net/repository/DEFAULT/nHIayAejJvhxu6oYSWPNYCtcwtY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Apr 2025 04:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:5c:15:47:0a:f2:3b:34:b1:4e:b0:b6:35:06:d3:b4:11
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9c721ac807a326f871bbaa184963cd602b5cc2d6
Validity
Not Before: Apr 22 06:00:20 2025 GMT
Not After : Apr 23 06:00:20 2025 GMT
Subject: CN=e89a252adf6a7b501e50c5bac4348e75916421a7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:62:da:1f:ea:19:66:b2:9f:23:fd:cb:c9:74:
ce:6f:2a:50:32:c5:36:3d:1b:c0:6d:73:33:5e:1d:
d2:b1:ea:ec:1f:c7:76:b6:bd:8d:41:72:4f:42:f4:
5f:8f:e6:be:29:b9:9e:af:9f:65:1c:2b:90:43:3e:
92:b4:5e:b5:04:54:0c:85:6d:d6:d7:8d:59:b8:17:
9f:58:94:04:20:ce:65:de:71:f3:e4:ed:48:bf:48:
2d:4e:d5:f0:aa:05:5f:ca:7f:a3:40:ad:03:3f:64:
78:1b:07:52:17:95:1d:7d:b5:86:b7:d3:c2:18:5d:
b4:3d:7c:b4:c8:07:b2:ce:82:0b:1e:65:2c:b7:52:
88:d6:d7:84:b1:7f:96:b2:8b:80:3c:ab:9c:a4:b2:
94:e5:87:b6:14:8e:64:7e:70:14:36:b3:ef:d5:5d:
53:ac:c0:91:e1:61:94:19:44:db:a5:da:8c:20:1d:
b7:6f:76:65:76:7d:6d:f0:f4:eb:36:24:6c:c3:b3:
e2:c3:b8:2c:a5:b4:e5:f5:57:5d:76:1d:ec:56:33:
08:d3:f8:70:97:48:bf:45:bd:fe:13:d5:bc:69:9d:
19:d2:f9:18:84:34:b9:9b:a8:31:28:3d:be:cc:f2:
cb:3d:c8:8d:7a:35:40:d0:e0:30:ca:7b:24:74:a5:
85:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:9A:25:2A:DF:6A:7B:50:1E:50:C5:BA:C4:34:8E:75:91:64:21:A7
X509v3 Authority Key Identifier:
keyid:9C:72:1A:C8:07:A3:26:F8:71:BB:AA:18:49:63:CD:60:2B:5C:C2:D6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nHIayAejJvhxu6oYSWPNYCtcwtY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/464260-8d7e-4507-b44b-2864707b2b3f/1/nHIayAejJvhxu6oYSWPNYCtcwtY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/464260-8d7e-4507-b44b-2864707b2b3f/1/nHIayAejJvhxu6oYSWPNYCtcwtY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9b:a3:c0:53:9f:00:7a:2e:02:3e:c0:c2:3e:12:28:e3:e7:18:
df:7b:0a:99:6f:41:18:63:df:8b:03:a7:23:ad:90:73:11:52:
59:6c:1c:7d:05:75:34:2c:d8:8f:df:bb:e7:ac:28:23:d3:23:
4f:23:32:d1:21:7b:78:90:4e:36:ea:6d:66:bf:3f:1b:39:72:
b2:fa:fb:15:93:74:c7:0a:49:ee:c4:db:53:4d:e3:af:d1:35:
f2:38:31:76:8b:22:cb:b6:ce:cf:de:0f:dd:6e:0b:05:2b:d3:
c7:f5:1e:31:1c:23:ce:12:95:4e:16:ec:98:da:3d:e6:00:1a:
30:cb:66:67:0b:da:79:9a:e8:b1:db:fa:4a:91:96:7a:b6:73:
cb:aa:40:d7:e7:70:3e:55:7c:dc:92:99:bf:f5:73:c6:31:b0:
64:a9:34:dd:c0:55:d0:97:bf:70:0f:31:aa:46:7e:ed:ce:4d:
da:36:fd:d1:e7:19:47:bd:02:4c:96:f1:5d:8d:84:2e:60:f6:
03:09:a0:41:ae:7a:de:50:82:ab:34:e7:e7:03:16:ca:e5:cc:
76:9b:c1:1c:63:02:3d:40:c6:03:ea:7f:b6:22:22:3a:75:c5:
c8:55:cd:74:fe:61:aa:8b:f3:ca:60:60:45:79:f3:72:49:a8:
9d:e5:2a:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 11:16:10 2025 by rpki-client