Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/51ea49-7128-46e0-838d-7d5ecb4f181f/1/n5dNpF1ZFO3hOB7q-cK7FkW2ZDo.mft
File: n5dNpF1ZFO3hOB7q-cK7FkW2ZDo.mft (raw, json)
Hash identifier: oILv1TqNroQ218NcjKuLdlRVzj7ycAJNwTplYUEcI18=
Subject key identifier: C6:6A:1F:D1:C0:D9:34:31:55:13:B1:35:9D:6B:BA:42:71:40:DB:F0
Authority key identifier: 9F:97:4D:A4:5D:59:14:ED:E1:38:1E:EA:F9:C2:BB:16:45:B6:64:3A
Certificate issuer: /CN=9f974da45d5914ede1381eeaf9c2bb1645b6643a
Certificate serial: 0196545C32BB1F3D9B534172EB044044AD1E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/n5dNpF1ZFO3hOB7q-cK7FkW2ZDo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/51ea49-7128-46e0-838d-7d5ecb4f181f/1/n5dNpF1ZFO3hOB7q-cK7FkW2ZDo.mft
Manifest number: 0466
Signing time: Sun 20 Apr 2025 18:00:50 +0000
Manifest this update: Sun 20 Apr 2025 18:00:50 +0000
Manifest next update: Mon 21 Apr 2025 18:00:50 +0000
Files and hashes: 1: FKRN7VX-M9zNuJ0Xi5mXAJ-i93Y.roa (hash: tPWo9Bc4jubOwnfbiLhbqZLh4bX+yga6cCmXXhQ2NPA=)
2: n5dNpF1ZFO3hOB7q-cK7FkW2ZDo.crl (hash: xHNzFDlTkNhCNeKdn4cX+1JSSA15t507UVf3bLehCAE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5b/51ea49-7128-46e0-838d-7d5ecb4f181f/1/n5dNpF1ZFO3hOB7q-cK7FkW2ZDo.crl
rsync://rpki.ripe.net/repository/DEFAULT/5b/51ea49-7128-46e0-838d-7d5ecb4f181f/1/n5dNpF1ZFO3hOB7q-cK7FkW2ZDo.mft
rsync://rpki.ripe.net/repository/DEFAULT/n5dNpF1ZFO3hOB7q-cK7FkW2ZDo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Apr 2025 16:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:54:5c:32:bb:1f:3d:9b:53:41:72:eb:04:40:44:ad:1e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9f974da45d5914ede1381eeaf9c2bb1645b6643a
Validity
Not Before: Apr 20 18:00:50 2025 GMT
Not After : Apr 21 18:00:50 2025 GMT
Subject: CN=c66a1fd1c0d934315513b1359d6bba427140dbf0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:40:f7:71:f1:75:f7:7e:0b:39:7a:d2:5c:e8:
ec:14:5e:b7:4d:f7:10:e4:e6:f7:3e:1b:a0:7c:86:
df:66:a8:81:c5:a5:bc:12:47:69:d9:17:23:b4:f0:
e3:25:55:90:42:c6:51:2d:fa:86:b0:bd:60:6b:ba:
c1:17:d0:97:4e:08:57:1e:d2:7f:84:70:2d:83:fe:
5a:ff:6c:1c:b8:f0:08:0a:82:2c:ea:1f:b3:c1:e5:
a6:b5:66:bf:b0:40:d0:46:93:9b:bf:0a:f2:9f:ad:
db:a1:df:1e:b0:d8:c3:9b:63:19:f8:25:a0:1c:4e:
87:db:fe:fe:fd:44:8c:33:15:1e:7f:53:5e:93:01:
0b:29:13:e2:a0:8b:ce:01:62:b7:fe:4d:25:99:a1:
42:f2:52:d4:ab:41:1b:36:3e:ea:52:4d:0d:84:6d:
0f:24:76:9f:40:d9:c3:da:c3:00:79:fe:39:b9:ce:
6e:14:ed:36:ac:e9:85:61:76:df:c2:4d:04:4d:25:
1e:f9:2d:dd:13:7b:aa:b0:e1:4b:bf:6e:79:96:d2:
8a:ce:10:d0:c4:93:ff:45:74:1c:4e:93:4e:af:10:
0a:57:18:65:33:cd:06:e0:f5:a0:ab:59:70:15:fe:
5c:1d:da:44:5d:e7:6d:62:fd:dc:80:6a:bd:04:d1:
e5:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:6A:1F:D1:C0:D9:34:31:55:13:B1:35:9D:6B:BA:42:71:40:DB:F0
X509v3 Authority Key Identifier:
keyid:9F:97:4D:A4:5D:59:14:ED:E1:38:1E:EA:F9:C2:BB:16:45:B6:64:3A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/n5dNpF1ZFO3hOB7q-cK7FkW2ZDo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/51ea49-7128-46e0-838d-7d5ecb4f181f/1/n5dNpF1ZFO3hOB7q-cK7FkW2ZDo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/51ea49-7128-46e0-838d-7d5ecb4f181f/1/n5dNpF1ZFO3hOB7q-cK7FkW2ZDo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a4:a5:6e:40:33:52:9c:06:fa:a2:b0:47:02:91:66:ef:f7:3a:
f7:f1:f5:dc:a4:f4:6d:f2:97:89:8e:e9:79:ed:06:77:69:0d:
33:3b:52:53:c0:4a:01:64:69:5b:8b:4a:c0:62:8d:39:fa:40:
2d:4b:45:6e:23:87:88:ba:85:72:e1:35:1b:5f:e2:41:07:0f:
aa:73:2f:9a:f0:43:ba:af:bb:75:ef:ea:10:d1:64:ec:f2:08:
19:1e:97:46:c0:80:57:61:b5:46:90:db:2e:68:43:09:16:db:
4b:d6:69:20:03:39:4b:df:4c:a5:16:ab:1c:42:c9:30:2c:04:
ed:e6:d4:ee:d8:ca:67:bb:33:7f:1e:44:f0:37:81:ca:57:d2:
bb:39:35:b1:dd:aa:b0:86:d4:9b:b0:b8:8f:1b:81:85:50:c4:
56:18:de:7a:71:fc:63:94:5a:99:47:51:91:19:7d:8a:c5:12:
93:bb:c5:df:36:16:6c:e3:51:51:20:c4:d4:1d:49:d1:fd:de:
b4:b2:76:b9:a6:20:4e:29:ca:14:08:62:46:6a:de:ff:c8:e3:
c0:c8:87:ea:05:05:3e:ae:d0:c5:ac:da:ba:0f:c0:a5:79:f0:
b4:a0:e3:8d:14:d8:99:28:a7:d3:8a:76:44:52:33:dc:6f:8d:
81:5c:1b:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 01:28:22 2025 by rpki-client