Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/5dd7b1-e337-404d-b764-ddb0b148e46b/1/nLls5ZxZVXUw8OqkTGZFA9nEAe0.mft
File: nLls5ZxZVXUw8OqkTGZFA9nEAe0.mft (raw, json)
Hash identifier: 9RYq5UkCSPdjSTFAEtxVDc+m59poxU/4bpOtWrafOM0=
Subject key identifier: D3:2C:CB:CE:3E:BA:31:AC:BD:9D:C1:DB:7F:E0:FD:C5:94:EA:86:0F
Authority key identifier: 9C:B9:6C:E5:9C:59:55:75:30:F0:EA:A4:4C:66:45:03:D9:C4:01:ED
Certificate issuer: /CN=9cb96ce59c59557530f0eaa44c664503d9c401ed
Certificate serial: 01961546584DC709696B033B6798FC9BAF98
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nLls5ZxZVXUw8OqkTGZFA9nEAe0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/19/5dd7b1-e337-404d-b764-ddb0b148e46b/1/nLls5ZxZVXUw8OqkTGZFA9nEAe0.mft
Manifest number: 07A9
Signing time: Tue 08 Apr 2025 12:00:53 +0000
Manifest this update: Tue 08 Apr 2025 12:00:53 +0000
Manifest next update: Wed 09 Apr 2025 12:00:53 +0000
Files and hashes: 1: CAv9rzPv7Heix16M5AOoPXOPd4Q.roa (hash: LMRzKo9NjTluip/QqjWWZG7E9ryz+Y9CDOMAPiGo6ag=)
2: HvZFP08B7xYA2IQmujw7UzbkG0Q.roa (hash: 7DGwHO9AiazjzBsJl92PU2yw56tPjljLpvn/rYKQLdM=)
3: nLls5ZxZVXUw8OqkTGZFA9nEAe0.crl (hash: P6rzaGj3Ix86wMaPvATloS22uvH7jsFfkpBXYCQfWwo=)
4: oR-FUhbEvQx9rEQNZ_WugrEWdnk.roa (hash: BD8t2aBzJsutTWI6CA4SIZqGlJUGz2L2fZecOB/8228=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/19/5dd7b1-e337-404d-b764-ddb0b148e46b/1/nLls5ZxZVXUw8OqkTGZFA9nEAe0.crl
rsync://rpki.ripe.net/repository/DEFAULT/19/5dd7b1-e337-404d-b764-ddb0b148e46b/1/nLls5ZxZVXUw8OqkTGZFA9nEAe0.mft
rsync://rpki.ripe.net/repository/DEFAULT/nLls5ZxZVXUw8OqkTGZFA9nEAe0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 09 Apr 2025 12:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:15:46:58:4d:c7:09:69:6b:03:3b:67:98:fc:9b:af:98
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9cb96ce59c59557530f0eaa44c664503d9c401ed
Validity
Not Before: Apr 8 12:00:53 2025 GMT
Not After : Apr 9 12:00:53 2025 GMT
Subject: CN=d32ccbce3eba31acbd9dc1db7fe0fdc594ea860f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:64:65:ef:2f:34:a0:7a:82:03:13:aa:f3:a1:
04:3f:3c:62:3d:12:b6:4d:27:53:24:2e:5f:72:14:
63:5c:2f:39:e5:bb:92:62:50:d3:e9:1c:a1:da:99:
c8:34:2a:73:dd:29:9e:01:c0:22:ec:c7:ba:83:ae:
68:29:36:fc:1a:31:ab:57:10:b1:3e:6e:b1:48:a0:
d7:cb:b2:05:80:76:37:4d:2f:dd:64:43:6f:3c:e8:
12:0a:d7:05:7d:50:5c:8b:40:ab:bc:06:76:65:c7:
50:9b:3a:b1:7f:a4:e1:9b:2a:e5:88:55:5a:88:75:
cb:b0:9c:e0:87:f6:73:c4:dd:4f:cb:47:c0:f7:ba:
57:b0:0b:57:41:d5:4e:f5:8d:dd:fc:1e:46:55:f0:
66:57:be:0d:38:14:3e:e0:ef:30:aa:2c:1b:9e:9d:
80:6a:6f:9b:69:a4:d6:2a:6d:c2:b2:ac:a2:82:4a:
55:e0:3d:9c:23:d2:a7:62:3d:69:f6:80:50:65:b9:
93:4d:f7:b3:e6:98:ff:16:e5:be:70:8d:f2:60:13:
c8:f5:52:43:94:4a:9e:a5:f8:9a:2b:9b:28:bc:d9:
34:14:7c:92:57:e9:ec:79:08:9d:ac:54:96:88:28:
0e:2e:8a:85:9b:14:36:d2:f5:96:26:13:3b:6e:e7:
d0:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:2C:CB:CE:3E:BA:31:AC:BD:9D:C1:DB:7F:E0:FD:C5:94:EA:86:0F
X509v3 Authority Key Identifier:
keyid:9C:B9:6C:E5:9C:59:55:75:30:F0:EA:A4:4C:66:45:03:D9:C4:01:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nLls5ZxZVXUw8OqkTGZFA9nEAe0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/5dd7b1-e337-404d-b764-ddb0b148e46b/1/nLls5ZxZVXUw8OqkTGZFA9nEAe0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/19/5dd7b1-e337-404d-b764-ddb0b148e46b/1/nLls5ZxZVXUw8OqkTGZFA9nEAe0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
34:d9:d7:06:f6:52:80:44:89:d2:90:a1:76:43:e5:de:2b:23:
7a:bd:cd:69:52:c0:66:62:61:ad:55:fb:ef:ef:cb:60:cc:05:
3d:67:8f:6e:af:7c:01:82:3d:b3:2a:c4:8a:17:66:71:58:0a:
53:2f:ec:84:41:a7:96:50:c5:80:c5:38:d4:84:46:e7:5b:7c:
90:f2:25:28:e9:51:e2:06:63:43:d7:19:c3:30:71:8f:15:7e:
b6:ef:63:e2:ad:73:3a:94:e4:07:a4:7f:3d:a3:a2:e3:49:eb:
b6:4e:b9:05:b9:ba:c7:a5:70:83:13:c9:f8:fd:44:80:1e:a4:
9b:85:01:cb:36:c7:f5:00:54:9e:c9:ae:e7:57:43:45:d4:8a:
f7:62:06:e5:d3:d7:d0:3f:34:f0:4c:55:9f:c1:f1:65:09:dc:
77:83:0d:84:26:5a:13:52:06:9d:09:0e:04:16:ac:2b:1c:d6:
4c:95:8c:e1:06:7d:c4:33:a5:63:7a:1f:4e:d5:ce:d6:e9:48:
fb:0d:88:18:00:6c:eb:21:59:16:95:4a:4f:24:88:9b:b5:22:
df:92:32:ae:cf:2b:81:a0:7f:be:88:df:28:6e:6d:45:39:b2:
44:ad:87:11:fd:96:ef:62:1a:51:1e:69:a6:40:16:79:f4:7c:
ee:06:e9:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 18:29:35 2025 by rpki-client