Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3c/b54641-a95a-4add-a45e-1cada6e8b1a9/1/nrUOU4bICaD65lMKpejZglJR3tA.mft
File: nrUOU4bICaD65lMKpejZglJR3tA.mft (raw, json)
Hash identifier: pkYHtdzayRGZp8GViJTLznz3zSNFcNE28JW//hS4tOA=
Subject key identifier: B1:D2:C8:75:8E:A5:7D:E8:C2:BE:D2:D6:6F:A4:33:A4:39:B6:49:4C
Authority key identifier: 9E:B5:0E:53:86:C8:09:A0:FA:E6:53:0A:A5:E8:D9:82:52:51:DE:D0
Certificate issuer: /CN=9eb50e5386c809a0fae6530aa5e8d9825251ded0
Certificate serial: 01960DC46C1817823BF589088D7693BC28DA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nrUOU4bICaD65lMKpejZglJR3tA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3c/b54641-a95a-4add-a45e-1cada6e8b1a9/1/nrUOU4bICaD65lMKpejZglJR3tA.mft
Manifest number: 0919
Signing time: Mon 07 Apr 2025 01:01:38 +0000
Manifest this update: Mon 07 Apr 2025 01:01:38 +0000
Manifest next update: Tue 08 Apr 2025 01:01:38 +0000
Files and hashes: 1: 6uPmSDff0EByzvtRkRIDzvcq-WU.roa (hash: zK2w8TbS49/+wZDp3eKjJMQhyK44gX7SwMqwg25dCxg=)
2: LUnk__H52Ka1UZQ74SFwt2XYOA0.roa (hash: STMUNAtIYTQ2D1f5QvDk6ta50/b1jlAx1bvn490hmQY=)
3: nrUOU4bICaD65lMKpejZglJR3tA.crl (hash: b4YTh1ghmoiBo81/fQu+4bWW/bDz0qJGtXfcri6aBeE=)
4: zMxPbRYvgl17LWHJg6U2GAicFt8.roa (hash: sMyOqb6B8V6aN1rTXFXBnVwwrNvJedSQ2XdYFSUKdwI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3c/b54641-a95a-4add-a45e-1cada6e8b1a9/1/nrUOU4bICaD65lMKpejZglJR3tA.crl
rsync://rpki.ripe.net/repository/DEFAULT/3c/b54641-a95a-4add-a45e-1cada6e8b1a9/1/nrUOU4bICaD65lMKpejZglJR3tA.mft
rsync://rpki.ripe.net/repository/DEFAULT/nrUOU4bICaD65lMKpejZglJR3tA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 08 Apr 2025 01:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:0d:c4:6c:18:17:82:3b:f5:89:08:8d:76:93:bc:28:da
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9eb50e5386c809a0fae6530aa5e8d9825251ded0
Validity
Not Before: Apr 7 01:01:38 2025 GMT
Not After : Apr 8 01:01:38 2025 GMT
Subject: CN=b1d2c8758ea57de8c2bed2d66fa433a439b6494c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:30:1f:b1:cb:b4:5c:c9:3e:5a:87:8b:ff:3e:
53:76:40:88:9d:dd:92:0d:44:9c:5b:ed:dd:46:d8:
83:60:69:0b:d4:1f:f4:57:37:86:01:65:79:59:4d:
40:82:a0:3e:d7:d1:22:c6:53:8e:5e:40:a9:94:bc:
55:6f:21:7f:cc:46:9e:b1:e9:b9:80:5c:b6:e0:0a:
8b:fb:aa:35:9d:b2:8f:f2:9a:60:37:68:f3:6a:84:
f4:4c:55:ef:d8:e3:1e:da:12:40:83:e6:2d:cc:55:
50:2e:2e:45:24:dd:15:67:bd:bd:a8:1c:df:80:86:
9e:13:34:99:d5:b9:bd:57:70:c6:0e:d8:df:a2:e5:
b8:14:74:8c:10:f6:75:6e:8a:6a:e0:c2:4f:14:0a:
cb:50:3b:bc:e8:7e:12:ad:bb:41:e6:e9:4c:e9:8d:
38:14:c6:a6:4f:ea:79:b4:4a:37:d3:0c:25:45:cf:
0f:10:46:20:e8:19:3f:e4:e8:2f:b0:64:40:dd:e2:
23:a0:e4:90:04:c0:9c:01:38:bd:cd:a4:81:87:63:
20:1f:6e:b2:8f:f5:cb:b8:8b:02:b8:52:7c:ff:87:
72:9e:21:5b:1d:94:4b:b2:87:de:7f:36:be:1f:3b:
79:3f:bd:ef:35:13:84:39:dd:81:a1:62:d9:6f:47:
94:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:D2:C8:75:8E:A5:7D:E8:C2:BE:D2:D6:6F:A4:33:A4:39:B6:49:4C
X509v3 Authority Key Identifier:
keyid:9E:B5:0E:53:86:C8:09:A0:FA:E6:53:0A:A5:E8:D9:82:52:51:DE:D0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nrUOU4bICaD65lMKpejZglJR3tA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/b54641-a95a-4add-a45e-1cada6e8b1a9/1/nrUOU4bICaD65lMKpejZglJR3tA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/b54641-a95a-4add-a45e-1cada6e8b1a9/1/nrUOU4bICaD65lMKpejZglJR3tA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ac:30:d9:87:d2:a2:fc:ad:81:ec:31:17:a2:12:03:3e:66:fd:
4d:e5:dc:68:e8:c7:43:50:bb:f7:76:ef:29:f0:ff:63:05:de:
95:18:18:67:b7:3c:d1:a5:49:74:ae:b4:17:cd:bf:a7:bf:df:
e9:18:2e:90:3e:c7:93:66:f1:e3:3c:8b:c8:79:8b:8f:79:34:
6b:1f:48:1f:c2:73:08:08:fd:ae:c7:2a:f0:64:56:a1:3c:28:
a5:15:43:87:34:d7:90:f6:0d:96:63:b3:0b:06:63:74:ab:f3:
50:f3:fb:16:b8:27:4e:16:c7:98:06:2b:74:44:7b:f6:5e:be:
78:25:30:0c:d3:61:05:23:d0:cf:cc:90:09:01:7e:b5:ff:61:
47:1b:1f:6b:6a:86:b0:d9:bb:2b:05:9f:22:db:ff:08:c0:76:
75:95:66:2d:54:17:d8:8b:89:80:00:1c:0a:d4:b7:a4:60:95:
b5:fd:13:d8:25:11:8c:62:31:d7:f5:b9:cf:ca:b5:7a:20:c2:
57:10:0f:76:fb:8a:cf:c0:42:de:15:a9:ad:a8:74:01:9c:5e:
84:c9:3f:df:d4:bd:d3:95:eb:a5:2e:3d:2e:a7:38:57:46:42:
bc:97:49:0b:1f:62:e2:3e:c9:66:0a:95:3c:af:17:d8:32:af:
f5:1a:11:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 08:12:45 2025 by rpki-client