Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/eaa4d0-8d1d-4cc1-8b22-450395fb88fa/1/nJKqU9MpCqgDeZNTNdufzD_9Kao.mft
File: nJKqU9MpCqgDeZNTNdufzD_9Kao.mft (raw, json)
Hash identifier: dHF1l8/q9i11FFxhn5Rgev7azOchWB5DYUC+mn/YY1w=
Subject key identifier: 4D:80:03:32:CC:E9:C2:93:F2:29:06:BD:A1:82:2D:69:CE:EE:9F:A6
Authority key identifier: 9C:92:AA:53:D3:29:0A:A8:03:79:93:53:35:DB:9F:CC:3F:FD:29:AA
Certificate issuer: /CN=9c92aa53d3290aa80379935335db9fcc3ffd29aa
Certificate serial: 01964B588CA0CECA1AA4D446BBA396E6A945
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nJKqU9MpCqgDeZNTNdufzD_9Kao.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/eaa4d0-8d1d-4cc1-8b22-450395fb88fa/1/nJKqU9MpCqgDeZNTNdufzD_9Kao.mft
Manifest number: 01E1
Signing time: Sat 19 Apr 2025 00:00:16 +0000
Manifest this update: Sat 19 Apr 2025 00:00:16 +0000
Manifest next update: Sun 20 Apr 2025 00:00:16 +0000
Files and hashes: 1: If4EKlwd9K1sFMswbVmwiqIL9EU.roa (hash: Xi+2lm3juwWtv3l4CgI611xVpcAT1z+T6D2yne87CLU=)
2: nJKqU9MpCqgDeZNTNdufzD_9Kao.crl (hash: QvIJ5kjyODC1tGE8sLkhoJUA+gYvGfBpmZy+duKHw+M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4c/eaa4d0-8d1d-4cc1-8b22-450395fb88fa/1/nJKqU9MpCqgDeZNTNdufzD_9Kao.crl
rsync://rpki.ripe.net/repository/DEFAULT/4c/eaa4d0-8d1d-4cc1-8b22-450395fb88fa/1/nJKqU9MpCqgDeZNTNdufzD_9Kao.mft
rsync://rpki.ripe.net/repository/DEFAULT/nJKqU9MpCqgDeZNTNdufzD_9Kao.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 19 Apr 2025 19:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:4b:58:8c:a0:ce:ca:1a:a4:d4:46:bb:a3:96:e6:a9:45
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9c92aa53d3290aa80379935335db9fcc3ffd29aa
Validity
Not Before: Apr 19 00:00:16 2025 GMT
Not After : Apr 20 00:00:16 2025 GMT
Subject: CN=4d800332cce9c293f22906bda1822d69ceee9fa6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:e7:c3:6f:cd:51:20:d8:62:85:0c:72:86:d1:
c9:7d:5e:e0:c1:79:f7:fb:13:00:8c:c8:fa:71:a0:
6e:e1:94:39:98:68:5f:21:07:a7:ce:ad:ba:b9:4f:
ae:65:a8:05:42:e0:21:fe:0c:b9:5b:5e:a7:63:24:
0f:1c:85:ed:3f:7b:db:8b:ee:33:9f:90:d1:b1:8a:
ff:46:e1:7f:a9:01:ae:28:09:78:95:3b:77:12:bf:
aa:82:72:23:ea:b0:75:68:47:a4:c0:84:e1:84:fb:
bc:c7:53:dd:52:24:e4:2b:25:c3:bc:0f:aa:df:03:
96:85:c3:96:4b:14:8f:d5:64:b6:04:f5:31:58:01:
aa:8a:fb:e1:00:a5:49:bd:8a:26:a6:08:2b:71:a6:
46:28:70:fd:64:fe:24:88:21:4f:c9:eb:1b:8e:35:
3b:af:c1:f3:b1:11:2a:89:5a:2b:d4:15:e3:06:70:
d9:4a:12:c9:fe:39:75:bf:d1:14:57:8b:25:8c:b2:
a3:01:44:2d:13:9b:70:dd:35:4e:14:e4:92:f5:85:
8d:ef:88:11:2b:ed:cd:40:30:a2:79:ff:b8:1f:3d:
8d:f4:21:30:f7:51:cf:28:e0:d0:87:22:d1:fc:ce:
d2:26:98:6e:9d:02:8f:61:b7:61:65:4f:de:97:07:
e2:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:80:03:32:CC:E9:C2:93:F2:29:06:BD:A1:82:2D:69:CE:EE:9F:A6
X509v3 Authority Key Identifier:
keyid:9C:92:AA:53:D3:29:0A:A8:03:79:93:53:35:DB:9F:CC:3F:FD:29:AA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nJKqU9MpCqgDeZNTNdufzD_9Kao.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/eaa4d0-8d1d-4cc1-8b22-450395fb88fa/1/nJKqU9MpCqgDeZNTNdufzD_9Kao.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/eaa4d0-8d1d-4cc1-8b22-450395fb88fa/1/nJKqU9MpCqgDeZNTNdufzD_9Kao.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
06:48:60:d5:56:0b:5c:e5:0d:32:46:b9:82:76:2f:ce:62:69:
e0:05:93:ae:b6:a9:cf:09:0c:b1:ad:ad:d0:34:f8:57:a0:44:
06:16:bc:f6:14:7e:82:26:b1:f8:c9:4c:5a:fe:c2:a9:5f:10:
d4:16:32:fa:b7:cb:c5:c1:7e:c4:f5:22:48:bd:3c:f2:53:b6:
61:cc:a7:19:cf:d8:67:28:44:45:8b:3b:fe:4d:21:bc:7a:0e:
fa:06:d4:59:a4:5f:b8:4c:cb:b6:fb:b7:23:4e:53:5e:cc:eb:
d5:6a:4c:cd:69:fa:85:7e:fd:34:bc:71:ae:35:74:66:7b:d1:
52:5f:20:dd:ed:01:32:4a:eb:24:c3:67:be:eb:76:0b:48:89:
a6:f1:2e:ba:0a:56:06:2e:53:7f:95:46:1f:a8:66:7b:69:67:
c7:6a:06:ca:cf:b0:ca:d6:04:aa:63:52:e0:a4:ba:84:b7:db:
19:d2:0b:18:e7:a5:da:75:63:31:0d:28:ad:70:57:73:be:62:
08:49:9b:95:62:32:7f:14:34:fe:9e:35:96:f0:02:05:31:55:
2b:98:2f:dd:30:32:f5:07:1c:26:6d:f0:46:ee:64:e3:e0:20:
92:85:06:3a:02:f7:cc:90:75:1e:02:b2:07:60:d0:35:57:2a:
2f:7a:e7:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 02:41:48 2025 by rpki-client