Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/12/bd9e02-c424-4e14-aab7-39461aaa5be7/1/nUMDoKmZ2BGLvH6WrTjvuxRJbqI.mft
File: nUMDoKmZ2BGLvH6WrTjvuxRJbqI.mft (raw, json)
Hash identifier: /b1VZmWlHYoVYUh/O2jp+9OJwvhlqmK3DQ1dsIvV78Y=
Subject key identifier: 29:9F:FA:E1:50:BD:0D:C5:23:51:21:AA:C2:77:68:25:80:3B:8E:CD
Authority key identifier: 9D:43:03:A0:A9:99:D8:11:8B:BC:7E:96:AD:38:EF:BB:14:49:6E:A2
Certificate issuer: /CN=9d4303a0a999d8118bbc7e96ad38efbb14496ea2
Certificate serial: 01964A0F24D099A44AC6ABD26F0F9446B685
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nUMDoKmZ2BGLvH6WrTjvuxRJbqI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/12/bd9e02-c424-4e14-aab7-39461aaa5be7/1/nUMDoKmZ2BGLvH6WrTjvuxRJbqI.mft
Manifest number: 068C
Signing time: Fri 18 Apr 2025 18:00:28 +0000
Manifest this update: Fri 18 Apr 2025 18:00:28 +0000
Manifest next update: Sat 19 Apr 2025 18:00:28 +0000
Files and hashes: 1: bre9O2wrDggeCO-gClQtVcXHgMs.roa (hash: TZRQyZuvSyRj0lGzf2b/FG9R/6ZAoSht1L/fXzqCZUg=)
2: nUMDoKmZ2BGLvH6WrTjvuxRJbqI.crl (hash: h3cNYUqzxMPJ0edv+4yHafovQb66mJ277Up4b4dENcw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/12/bd9e02-c424-4e14-aab7-39461aaa5be7/1/nUMDoKmZ2BGLvH6WrTjvuxRJbqI.crl
rsync://rpki.ripe.net/repository/DEFAULT/12/bd9e02-c424-4e14-aab7-39461aaa5be7/1/nUMDoKmZ2BGLvH6WrTjvuxRJbqI.mft
rsync://rpki.ripe.net/repository/DEFAULT/nUMDoKmZ2BGLvH6WrTjvuxRJbqI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 19 Apr 2025 14:20:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:4a:0f:24:d0:99:a4:4a:c6:ab:d2:6f:0f:94:46:b6:85
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9d4303a0a999d8118bbc7e96ad38efbb14496ea2
Validity
Not Before: Apr 18 18:00:28 2025 GMT
Not After : Apr 19 18:00:28 2025 GMT
Subject: CN=299ffae150bd0dc5235121aac2776825803b8ecd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:d1:18:43:32:74:2d:f5:7d:1b:63:9c:f6:9c:
71:4d:94:57:34:98:9a:bf:4c:8c:60:04:fd:21:5e:
f0:d3:83:bb:c2:dd:31:90:bd:15:1b:de:16:63:de:
79:33:e5:9f:e6:04:40:47:31:aa:39:e3:13:cc:0d:
ac:70:8a:fd:91:8f:5f:e2:7a:5b:37:c3:b9:e9:ab:
82:e6:37:09:cb:36:df:f7:a4:bf:0e:07:a1:3c:e6:
9a:bb:6e:78:85:d1:83:65:5f:0b:84:98:ff:07:04:
81:c2:3f:b2:04:c1:94:58:49:06:8c:90:c1:33:99:
4a:7d:5b:1e:8f:5b:4c:ce:a2:e0:e9:66:d7:0f:df:
7b:20:e3:96:69:32:ad:7d:ca:c2:4b:60:71:b3:b0:
1d:31:61:91:03:c1:9c:1a:fd:06:08:ae:8a:7f:1d:
b4:f2:43:82:b0:f3:7c:b9:90:f6:50:ad:09:54:79:
74:3a:12:be:45:63:4b:32:50:3a:e0:3f:de:d4:4e:
b2:e9:49:db:9c:1c:78:00:c5:22:72:84:78:d6:a9:
d2:b0:67:79:d5:1d:c5:17:25:84:be:a3:d2:11:87:
64:1d:1a:23:ce:a8:a8:1e:50:c2:80:f9:c4:76:ed:
0a:1d:d5:c2:d4:77:00:67:8d:27:3b:61:90:9b:50:
4b:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:9F:FA:E1:50:BD:0D:C5:23:51:21:AA:C2:77:68:25:80:3B:8E:CD
X509v3 Authority Key Identifier:
keyid:9D:43:03:A0:A9:99:D8:11:8B:BC:7E:96:AD:38:EF:BB:14:49:6E:A2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nUMDoKmZ2BGLvH6WrTjvuxRJbqI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/bd9e02-c424-4e14-aab7-39461aaa5be7/1/nUMDoKmZ2BGLvH6WrTjvuxRJbqI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/12/bd9e02-c424-4e14-aab7-39461aaa5be7/1/nUMDoKmZ2BGLvH6WrTjvuxRJbqI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
97:b8:b9:b0:49:2b:99:fe:84:2c:5d:9d:9b:e6:75:a3:b7:af:
d8:00:1b:88:ac:0c:de:65:13:b8:be:33:1c:ff:8f:46:f3:f4:
ba:2e:ae:0a:93:1f:9f:58:e0:55:a8:a3:0e:2c:06:d5:08:81:
c4:42:82:d9:61:f4:10:a4:bb:86:ad:04:d7:f3:7f:30:18:6c:
26:2e:de:c5:4d:ba:8f:81:27:a3:42:60:64:ec:57:d8:da:1b:
b9:b0:39:28:90:db:8b:15:9d:0c:89:2f:5d:99:91:a8:2a:f3:
17:4b:20:32:0e:fc:1c:45:ed:65:f3:c4:0a:63:04:c3:1e:c8:
85:9a:c4:43:93:98:20:a5:91:73:19:07:48:e4:41:a8:2e:18:
b7:a7:be:0e:60:b1:dd:3a:dd:08:89:15:47:d1:84:da:4f:f4:
2a:d1:55:b0:d5:02:dd:7b:70:75:4c:49:31:15:71:f8:28:88:
97:21:c5:4a:93:35:93:32:4e:97:3e:ea:79:f6:b6:84:b0:f5:
00:b4:64:80:bc:d4:37:76:9c:01:d6:5c:a6:6e:80:05:b1:da:
c7:8d:eb:bf:22:9e:7f:ee:54:9a:a4:bd:d7:bf:7b:e1:ac:ba:
85:a3:ab:ae:14:2d:94:2f:ee:1b:16:f8:06:32:f7:22:6f:d0:
88:27:d7:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 23:59:33 2025 by rpki-client