Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/27/dbc83e-4e42-4038-8157-8f99f9afd7a1/1/nJ_uAycbFcIzokWJ8jZacQ1DUtc.mft
File: nJ_uAycbFcIzokWJ8jZacQ1DUtc.mft (raw, json)
Hash identifier: 6atxBT02zpZKZoaHA+oujcq1ZtXD6bF04UBw+3Hph2s=
Subject key identifier: 20:AE:1B:43:91:7C:44:66:B5:69:37:3B:7A:C8:D1:19:87:35:40:F6
Authority key identifier: 9C:9F:EE:03:27:1B:15:C2:33:A2:45:89:F2:36:5A:71:0D:43:52:D7
Certificate issuer: /CN=9c9fee03271b15c233a24589f2365a710d4352d7
Certificate serial: 01963D9CED5363B834D06B76D3F24F406B7D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nJ_uAycbFcIzokWJ8jZacQ1DUtc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/27/dbc83e-4e42-4038-8157-8f99f9afd7a1/1/nJ_uAycbFcIzokWJ8jZacQ1DUtc.mft
Manifest number: 14EF
Signing time: Wed 16 Apr 2025 08:00:16 +0000
Manifest this update: Wed 16 Apr 2025 08:00:16 +0000
Manifest next update: Thu 17 Apr 2025 08:00:16 +0000
Files and hashes: 1: EpEEDO6av2BjZqXM7PJuDNRRddc.roa (hash: goR8NYgMvQvI2XaHVSHQ54m82iix34JIgDUIXRKLU78=)
2: nJ_uAycbFcIzokWJ8jZacQ1DUtc.crl (hash: M2YP1DKJ7tNgej5qNuggSujDIJPsk+1dTQJFnIMdT8w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/27/dbc83e-4e42-4038-8157-8f99f9afd7a1/1/nJ_uAycbFcIzokWJ8jZacQ1DUtc.crl
rsync://rpki.ripe.net/repository/DEFAULT/27/dbc83e-4e42-4038-8157-8f99f9afd7a1/1/nJ_uAycbFcIzokWJ8jZacQ1DUtc.mft
rsync://rpki.ripe.net/repository/DEFAULT/nJ_uAycbFcIzokWJ8jZacQ1DUtc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 17 Apr 2025 08:00:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:3d:9c:ed:53:63:b8:34:d0:6b:76:d3:f2:4f:40:6b:7d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9c9fee03271b15c233a24589f2365a710d4352d7
Validity
Not Before: Apr 16 08:00:16 2025 GMT
Not After : Apr 17 08:00:16 2025 GMT
Subject: CN=20ae1b43917c4466b569373b7ac8d119873540f6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:f7:e4:d7:77:ba:ab:15:77:4c:79:a7:a1:98:
99:3c:b3:fa:55:4a:49:ef:dc:39:56:07:8a:28:2e:
6d:a0:03:d3:27:36:d9:46:d2:96:a3:68:5b:4b:ba:
a4:9c:af:6c:62:f2:a8:3f:fa:8e:ed:6c:f4:db:43:
db:6f:98:f1:84:e3:4a:c6:ec:76:8a:23:43:88:17:
26:92:22:e7:5d:7a:cd:4b:25:11:bb:d1:0c:a3:e5:
01:36:ac:40:a8:b8:b0:e1:83:54:4d:e2:4a:04:bb:
80:c5:9c:f5:83:99:19:d2:41:f4:a7:66:f3:e3:8e:
ec:e6:31:05:12:b8:13:e1:70:6f:d0:2e:6f:7f:30:
aa:14:19:aa:f3:6b:ca:57:ea:d7:d5:23:9c:e7:a2:
01:97:61:4c:40:37:96:79:96:64:44:8c:9b:cc:73:
ef:16:93:68:b5:bb:f2:a4:99:65:c9:08:13:1b:cb:
6b:ca:3d:a2:3f:0e:31:ec:ea:03:20:df:fb:4d:af:
29:51:ee:a6:72:4e:b2:47:26:0b:18:43:e3:f5:a3:
87:94:b7:f7:1c:e7:ae:3f:c8:49:6d:3f:94:b4:5b:
12:ef:4e:67:72:89:af:d8:b4:af:61:39:a6:aa:29:
ba:22:e0:e8:fe:5f:24:0c:a7:eb:fd:58:69:aa:42:
54:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:AE:1B:43:91:7C:44:66:B5:69:37:3B:7A:C8:D1:19:87:35:40:F6
X509v3 Authority Key Identifier:
keyid:9C:9F:EE:03:27:1B:15:C2:33:A2:45:89:F2:36:5A:71:0D:43:52:D7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nJ_uAycbFcIzokWJ8jZacQ1DUtc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/dbc83e-4e42-4038-8157-8f99f9afd7a1/1/nJ_uAycbFcIzokWJ8jZacQ1DUtc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/27/dbc83e-4e42-4038-8157-8f99f9afd7a1/1/nJ_uAycbFcIzokWJ8jZacQ1DUtc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6e:33:6e:26:d6:97:d0:80:82:e2:e7:75:91:7a:54:48:de:10:
18:e2:54:b7:ab:68:ff:b9:71:8e:c7:e3:9a:e8:09:7b:62:99:
d8:e7:84:75:34:ee:3f:71:2e:71:b4:66:9f:d0:3a:a0:e3:95:
3d:a0:c2:f4:d1:0b:e3:ab:90:b6:b2:28:3b:b4:1d:e4:09:a0:
b5:69:28:20:4f:3f:06:5f:ca:d4:0f:8d:bc:40:a5:5d:40:26:
9c:ee:ce:3f:99:2c:1c:f5:ed:70:e9:34:e4:ba:a9:5c:8a:1e:
77:6a:5b:20:88:b2:1c:ec:d2:ab:a9:6f:13:9b:a4:ac:f6:8c:
b3:e9:02:87:ae:db:4e:b8:17:c2:21:6b:f5:6b:32:b9:31:79:
82:77:00:aa:1f:06:d9:9f:a6:04:c8:9c:30:3c:b7:ef:4c:4a:
1d:5b:b9:b0:32:38:15:05:36:f1:3c:74:d4:fd:1f:f0:45:9a:
f2:74:ab:41:83:53:ef:14:3e:cb:15:71:6b:97:78:74:35:a7:
5e:fc:83:b2:a8:41:4a:a8:a4:bc:ac:7a:f0:88:bb:2d:d3:52:
d9:f8:b6:e2:5a:4f:f0:a0:50:54:b3:89:f0:b6:aa:18:1d:40:
c4:3d:1c:2e:e1:b6:b4:8c:9d:3a:7e:08:91:50:3c:00:59:08:
a8:c0:ec:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 16 15:28:10 2025 by rpki-client