Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/48/fb7864-5795-4208-abe0-08542454d16b/1/nlBfLmeh5gSz-WPOTDZ9GVi9S3g.mft
File: nlBfLmeh5gSz-WPOTDZ9GVi9S3g.mft (raw, json)
Hash identifier: zZly9g58J5zCBumyWdKBA+WDghl5Ya80qadnAjjLhdY=
Subject key identifier: C8:2B:47:5B:26:86:88:35:14:D1:02:68:21:0C:84:1B:2A:24:2A:41
Authority key identifier: 9E:50:5F:2E:67:A1:E6:04:B3:F9:63:CE:4C:36:7D:19:58:BD:4B:78
Certificate issuer: /CN=9e505f2e67a1e604b3f963ce4c367d1958bd4b78
Certificate serial: 01965B706CF5039A30C78266605674C70479
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nlBfLmeh5gSz-WPOTDZ9GVi9S3g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/48/fb7864-5795-4208-abe0-08542454d16b/1/nlBfLmeh5gSz-WPOTDZ9GVi9S3g.mft
Manifest number: 1503
Signing time: Tue 22 Apr 2025 03:00:16 +0000
Manifest this update: Tue 22 Apr 2025 03:00:16 +0000
Manifest next update: Wed 23 Apr 2025 03:00:16 +0000
Files and hashes: 1: 9v5VLNQmHUC6c_AtiguXiv9VBlw.roa (hash: iNy4HwSBG8Jz28fsrZBO8bxra5HKthytWN8pQ51S61o=)
2: hvWaFS0EttocYGvPpBWtHglH1UU.roa (hash: 5kJHcJE58dfjo4vnxy+41rEzTCWfIQJ14p7YHDvJKE4=)
3: nlBfLmeh5gSz-WPOTDZ9GVi9S3g.crl (hash: zuG9kW7mQSU/m6IaSBciqRvA8WdS/0TqUzT1GAbRM24=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/48/fb7864-5795-4208-abe0-08542454d16b/1/nlBfLmeh5gSz-WPOTDZ9GVi9S3g.crl
rsync://rpki.ripe.net/repository/DEFAULT/48/fb7864-5795-4208-abe0-08542454d16b/1/nlBfLmeh5gSz-WPOTDZ9GVi9S3g.mft
rsync://rpki.ripe.net/repository/DEFAULT/nlBfLmeh5gSz-WPOTDZ9GVi9S3g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Apr 2025 03:00:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:5b:70:6c:f5:03:9a:30:c7:82:66:60:56:74:c7:04:79
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9e505f2e67a1e604b3f963ce4c367d1958bd4b78
Validity
Not Before: Apr 22 03:00:16 2025 GMT
Not After : Apr 23 03:00:16 2025 GMT
Subject: CN=c82b475b2686883514d10268210c841b2a242a41
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:4d:26:80:12:8e:a5:40:c5:ff:f4:1d:70:f5:
68:25:c8:fe:db:9b:10:c3:ca:c0:f4:01:42:88:ca:
fa:41:8a:f4:b4:9d:3f:0c:90:e0:8a:b2:59:12:bc:
0e:16:42:bc:66:aa:10:05:31:e5:4a:d1:a3:8b:7d:
8c:ad:0c:06:2d:4b:3a:5a:2e:39:8e:6f:77:d9:ae:
21:16:98:ba:1f:ae:8b:ef:b7:4b:ac:03:b2:19:fa:
8d:d4:37:ba:05:a8:cd:e5:a1:75:4e:f6:14:e8:f0:
ab:ba:32:92:29:0f:e2:94:7a:4b:8a:67:4c:2b:b5:
6e:b1:42:06:0d:f2:36:31:f6:4d:1a:30:39:7c:ca:
45:4d:54:1f:10:dc:4b:19:ee:a3:fd:8b:30:2d:bd:
40:08:55:28:4f:f1:c4:9f:a1:9b:62:b2:8b:92:86:
8a:32:26:da:73:1b:3f:f7:df:e7:38:02:73:7a:07:
ac:ea:bf:29:b2:ff:10:3b:44:7d:66:dd:5c:ea:69:
dc:ed:f2:7f:5e:9c:2a:a6:25:d1:41:52:a5:ef:9c:
64:66:ed:c7:c0:ae:c3:a7:33:15:90:e1:c7:da:38:
cb:ed:6b:37:9f:cb:79:c8:c9:9f:2e:3f:51:7c:e9:
06:69:ff:3f:5a:a9:40:8d:cf:2f:cc:35:7c:5d:67:
80:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:2B:47:5B:26:86:88:35:14:D1:02:68:21:0C:84:1B:2A:24:2A:41
X509v3 Authority Key Identifier:
keyid:9E:50:5F:2E:67:A1:E6:04:B3:F9:63:CE:4C:36:7D:19:58:BD:4B:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nlBfLmeh5gSz-WPOTDZ9GVi9S3g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/48/fb7864-5795-4208-abe0-08542454d16b/1/nlBfLmeh5gSz-WPOTDZ9GVi9S3g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/48/fb7864-5795-4208-abe0-08542454d16b/1/nlBfLmeh5gSz-WPOTDZ9GVi9S3g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4c:0a:61:71:94:70:cd:53:41:99:6d:af:40:2e:c0:ce:63:05:
db:b5:7c:ac:13:14:8e:3c:bf:9a:83:b8:80:8a:13:f6:66:fb:
a1:d6:4b:8e:1a:e6:4c:59:d3:42:cf:e8:8f:22:7b:6b:0c:66:
98:06:23:ab:c2:07:63:b6:91:6a:1c:84:38:5a:51:d9:c5:10:
71:b4:b5:31:fe:d4:03:d1:90:7f:3d:8b:9d:9d:f5:93:f7:0c:
e2:3f:f7:f6:22:68:70:46:f3:3c:56:78:e0:d9:3c:bf:0f:2c:
67:cb:03:b8:1d:ca:25:1e:aa:12:fb:9d:48:e7:73:ab:42:7e:
64:2e:af:f7:0d:b6:c7:9a:3a:51:e6:df:70:94:fa:0b:3a:79:
c9:bf:b4:fa:15:f5:fa:be:fc:1a:97:1d:04:f9:bd:6c:2d:e4:
1d:49:33:50:40:25:88:ce:e2:03:be:67:63:9a:f0:3c:71:36:
b5:c0:94:f2:5d:87:8b:dc:6f:92:6b:b5:4f:01:1b:77:2a:90:
6f:63:c1:fb:f2:31:c8:13:1a:91:42:d1:5b:2f:4d:73:3d:54:
d7:fb:0a:6a:fd:c9:ab:ff:6a:e4:e3:fc:5a:77:61:7f:f8:4c:
11:a1:33:fe:52:3b:4b:ac:ae:b6:b8:56:c8:d9:14:84:99:08:
93:7b:88:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 11:31:27 2025 by rpki-client