Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/eca327-d58f-491c-94c8-e3d045483412/1/nmFAOsaeKHT1Yi1-5Wjo5J8GTC4.mft
File: nmFAOsaeKHT1Yi1-5Wjo5J8GTC4.mft (raw, json)
Hash identifier: BVY2m+wIbn+pE9NpUojwzj2HYAl+C1WkNGho4RMGGIM=
Subject key identifier: 4B:A6:C8:45:7A:EB:DA:21:BF:FE:41:DB:25:22:0C:45:95:E9:5F:BA
Authority key identifier: 9E:61:40:3A:C6:9E:28:74:F5:62:2D:7E:E5:68:E8:E4:9F:06:4C:2E
Certificate issuer: /CN=9e61403ac69e2874f5622d7ee568e8e49f064c2e
Certificate serial: 01964EC7FB74AC678C5ED086C0963EE2CEBC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nmFAOsaeKHT1Yi1-5Wjo5J8GTC4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/eca327-d58f-491c-94c8-e3d045483412/1/nmFAOsaeKHT1Yi1-5Wjo5J8GTC4.mft
Manifest number: 14FD
Signing time: Sat 19 Apr 2025 16:00:50 +0000
Manifest this update: Sat 19 Apr 2025 16:00:50 +0000
Manifest next update: Sun 20 Apr 2025 16:00:50 +0000
Files and hashes: 1: k80BCKNHzgDvKK_3k-MEya8lNoM.roa (hash: XRBQsFrhhLJ6RMDFPAKpPWk13Lc3Ws+YcSUdoLvIOo8=)
2: nmFAOsaeKHT1Yi1-5Wjo5J8GTC4.crl (hash: +5mjkSuRTPV0nZQZ9/b3PvOfxfVXL+sNJ+LJAUrTIvU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4c/eca327-d58f-491c-94c8-e3d045483412/1/nmFAOsaeKHT1Yi1-5Wjo5J8GTC4.crl
rsync://rpki.ripe.net/repository/DEFAULT/4c/eca327-d58f-491c-94c8-e3d045483412/1/nmFAOsaeKHT1Yi1-5Wjo5J8GTC4.mft
rsync://rpki.ripe.net/repository/DEFAULT/nmFAOsaeKHT1Yi1-5Wjo5J8GTC4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 20 Apr 2025 16:00:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:4e:c7:fb:74:ac:67:8c:5e:d0:86:c0:96:3e:e2:ce:bc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9e61403ac69e2874f5622d7ee568e8e49f064c2e
Validity
Not Before: Apr 19 16:00:50 2025 GMT
Not After : Apr 20 16:00:50 2025 GMT
Subject: CN=4ba6c8457aebda21bffe41db25220c4595e95fba
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:c1:d8:72:03:da:42:16:5b:9c:43:13:19:20:
ca:67:c6:75:a2:d0:52:0c:e6:0b:bd:99:0b:95:cf:
10:ec:d4:e5:7d:21:46:f9:d8:16:63:3a:01:8a:22:
f1:ce:04:47:4f:65:20:07:1d:d2:ae:11:b3:47:fc:
33:ff:40:a5:cd:b5:d0:a1:ea:62:f4:55:1b:88:7c:
4c:97:7f:46:a9:5d:7c:fd:74:5f:54:47:4a:19:67:
7e:8a:26:67:f1:54:6c:e7:a2:0b:91:1c:28:ad:2c:
78:24:66:fe:03:65:eb:71:71:33:e8:8f:86:f8:48:
ad:e1:c8:b9:2d:e5:11:28:27:c3:26:b8:a9:d0:f2:
37:44:c8:e0:53:bd:9c:aa:22:97:ec:6e:22:15:e1:
64:c0:b7:0d:ef:bb:65:d3:db:e4:71:b3:80:11:8a:
34:11:73:37:03:06:69:cd:db:9a:76:2f:b7:08:02:
7b:5e:9d:9e:8a:0a:80:9c:2e:c0:6e:41:f8:f4:e0:
ad:27:70:fa:56:61:74:cc:56:52:bd:e9:86:20:1e:
f9:d8:e6:f4:65:1c:f7:0f:de:ea:13:74:f0:41:a9:
42:50:0d:d4:d5:bb:ce:f3:8e:46:54:d6:85:bf:00:
82:8a:e6:fd:13:13:ef:66:67:af:42:55:83:7e:f4:
8e:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:A6:C8:45:7A:EB:DA:21:BF:FE:41:DB:25:22:0C:45:95:E9:5F:BA
X509v3 Authority Key Identifier:
keyid:9E:61:40:3A:C6:9E:28:74:F5:62:2D:7E:E5:68:E8:E4:9F:06:4C:2E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nmFAOsaeKHT1Yi1-5Wjo5J8GTC4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/eca327-d58f-491c-94c8-e3d045483412/1/nmFAOsaeKHT1Yi1-5Wjo5J8GTC4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/eca327-d58f-491c-94c8-e3d045483412/1/nmFAOsaeKHT1Yi1-5Wjo5J8GTC4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bf:28:a3:ff:19:e7:c0:1a:0c:58:b7:c3:54:72:d2:0c:a1:a1:
4d:5c:5a:11:45:73:c1:e4:0e:e8:53:b6:10:f0:95:51:57:8e:
26:ca:7b:d7:81:de:f7:5e:be:91:54:a6:3f:e2:2a:3a:4a:7e:
f1:2b:b2:ce:73:07:53:17:46:f1:bd:c6:1f:8b:e6:6c:83:69:
eb:10:eb:2e:24:b7:05:71:c3:2b:0d:11:73:2a:d4:02:a2:c6:
c7:4a:07:05:a4:c3:a0:ec:56:c8:41:8b:eb:e5:c1:ad:3b:77:
f5:54:40:74:14:2c:00:eb:a8:74:4c:96:fd:69:5b:4d:c6:65:
c5:f5:66:f9:08:bf:c1:71:b2:a4:70:e3:dc:e8:e0:db:1a:a3:
c2:cc:18:55:c3:d9:1d:2a:84:8a:df:2d:6d:44:13:08:fd:c8:
06:82:e2:a0:33:91:a4:c3:26:97:6c:f2:5a:b7:48:92:57:05:
a0:d5:e0:7f:c0:02:bf:57:b9:35:d9:16:74:07:0a:03:0d:5d:
13:11:d8:70:db:e8:cb:74:3d:13:54:95:5f:b0:92:cd:0c:69:
a3:64:a7:a4:d7:58:48:25:6f:12:16:50:3e:fb:42:d1:7d:f1:
6a:1c:62:cd:1c:e4:6e:55:e3:e5:9e:21:47:09:73:ed:6b:a6:
a8:be:3a:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 02:09:30 2025 by rpki-client