Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/43/269f66-0fc1-4658-b367-9c30f656fd5b/1/nfWJZyvCo0XcEen_FiUA7BXa3R0.mft
File: nfWJZyvCo0XcEen_FiUA7BXa3R0.mft (raw, json)
Hash identifier: 5bLR0A8rZd7WW9aaXooO2Af24DF0gXxYr52bPDDq2CQ=
Subject key identifier: 93:6B:DD:04:36:1E:23:3E:19:D3:C3:2E:D1:C6:15:F7:30:15:31:DF
Authority key identifier: 9D:F5:89:67:2B:C2:A3:45:DC:11:E9:FF:16:25:00:EC:15:DA:DD:1D
Certificate issuer: /CN=9df589672bc2a345dc11e9ff162500ec15dadd1d
Certificate serial: 019653807CFA4A80C1A8DEE2FF775B6FEB67
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nfWJZyvCo0XcEen_FiUA7BXa3R0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/43/269f66-0fc1-4658-b367-9c30f656fd5b/1/nfWJZyvCo0XcEen_FiUA7BXa3R0.mft
Manifest number: 0DCC
Signing time: Sun 20 Apr 2025 14:00:51 +0000
Manifest this update: Sun 20 Apr 2025 14:00:51 +0000
Manifest next update: Mon 21 Apr 2025 14:00:51 +0000
Files and hashes: 1: 780G3tJoSimhDwBBemUbFtRI2CY.roa (hash: K/WGt3LrpuzCwaOqtNr/s3mgohgZ+wpctIfbdhQTaX0=)
2: nfWJZyvCo0XcEen_FiUA7BXa3R0.crl (hash: vRvpmgepJsjSSMrO6YW+SH/jMlGuRvP/2IJI5nVfcJU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/43/269f66-0fc1-4658-b367-9c30f656fd5b/1/nfWJZyvCo0XcEen_FiUA7BXa3R0.crl
rsync://rpki.ripe.net/repository/DEFAULT/43/269f66-0fc1-4658-b367-9c30f656fd5b/1/nfWJZyvCo0XcEen_FiUA7BXa3R0.mft
rsync://rpki.ripe.net/repository/DEFAULT/nfWJZyvCo0XcEen_FiUA7BXa3R0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Apr 2025 14:00:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:53:80:7c:fa:4a:80:c1:a8:de:e2:ff:77:5b:6f:eb:67
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9df589672bc2a345dc11e9ff162500ec15dadd1d
Validity
Not Before: Apr 20 14:00:51 2025 GMT
Not After : Apr 21 14:00:51 2025 GMT
Subject: CN=936bdd04361e233e19d3c32ed1c615f7301531df
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:23:1d:26:b6:4e:54:09:a1:f4:84:c6:ca:5c:
ea:23:5a:5c:6c:0e:3c:ee:fd:b4:b3:87:fa:6e:aa:
e3:7d:09:77:41:f3:31:51:b2:41:71:b9:46:c4:07:
04:b0:20:1f:d1:2f:04:b9:b1:af:36:d9:9e:00:1c:
4f:e6:c3:2c:2c:29:c2:e5:8b:1c:7d:58:42:ee:0f:
99:f9:ed:40:2c:79:54:ba:8a:83:ac:06:47:2b:d0:
c0:71:cf:c7:7e:2c:76:91:c1:fe:b3:a2:40:b4:e4:
0d:1d:56:38:4a:32:00:27:42:51:10:5c:69:75:1a:
69:d2:7a:10:75:ee:75:01:2e:f8:ce:5c:d4:27:f7:
9e:02:89:78:64:91:ff:ed:4a:dc:dc:d7:bf:a8:6e:
00:3f:26:a1:e7:4a:d8:d9:5a:10:49:68:aa:95:21:
f5:6e:70:69:95:68:e1:c2:08:0c:8f:68:76:f9:fe:
3c:b7:bf:d2:67:6f:77:fd:23:54:f7:12:e8:37:ba:
66:2d:22:a6:0f:de:fa:d1:4d:a2:4d:f0:d8:4d:1f:
4e:ac:20:ef:4b:e6:0b:dd:79:cc:79:11:4b:bb:c0:
bc:d2:71:24:6d:66:26:7a:da:ea:1f:1d:9f:60:c6:
d7:9a:b3:be:7b:ef:a8:47:8e:98:5e:77:76:45:0a:
f7:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:6B:DD:04:36:1E:23:3E:19:D3:C3:2E:D1:C6:15:F7:30:15:31:DF
X509v3 Authority Key Identifier:
keyid:9D:F5:89:67:2B:C2:A3:45:DC:11:E9:FF:16:25:00:EC:15:DA:DD:1D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nfWJZyvCo0XcEen_FiUA7BXa3R0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/43/269f66-0fc1-4658-b367-9c30f656fd5b/1/nfWJZyvCo0XcEen_FiUA7BXa3R0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/43/269f66-0fc1-4658-b367-9c30f656fd5b/1/nfWJZyvCo0XcEen_FiUA7BXa3R0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
97:de:ec:c9:67:cc:04:29:56:86:f5:48:b2:47:0a:d4:11:41:
4d:91:03:10:a0:88:fb:be:2b:d2:b8:98:6e:7f:60:71:86:39:
b0:b9:56:69:b7:2f:da:ab:65:07:a1:31:5a:d8:51:3c:3a:48:
a5:14:78:4c:55:a5:97:9e:68:0c:84:96:80:66:89:a4:79:3f:
b7:e6:5b:3d:cb:4f:3a:14:7b:bf:14:c6:cf:b8:10:c4:81:76:
04:63:8a:af:6c:3a:8e:f4:6c:fc:fe:63:39:f1:a9:d7:ae:fc:
b1:b8:30:7f:a8:d5:fa:f1:f2:30:a5:77:0e:4f:7c:a7:4c:f5:
20:3a:99:f4:9f:5d:49:7c:95:cc:4f:f5:58:07:6e:3b:fb:79:
4d:1f:da:89:2c:4f:8c:aa:47:f7:b6:d7:7e:10:33:c2:71:a4:
a7:b8:cd:d6:89:35:c5:bd:81:2c:b1:e8:eb:f0:da:a9:86:83:
a2:87:0d:86:a4:89:5a:fe:56:61:54:8e:d5:95:ce:fb:a4:86:
de:f8:e7:be:0d:53:30:5e:74:f7:9b:89:23:b6:6c:bc:c5:b1:
39:4e:d5:55:6a:0d:79:c9:10:af:6b:58:b9:4a:34:06:bc:bc:
4c:5d:77:5f:9c:12:af:07:fd:d3:6b:d8:96:21:11:f7:fc:35:
c5:15:16:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 18:12:01 2025 by rpki-client