Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5c/3433fe-6408-468d-81e4-f03eb8740c3e/1/nAMai2oolAx5NrpueCuUoJYr-yc.mft
File: nAMai2oolAx5NrpueCuUoJYr-yc.mft (raw, json)
Hash identifier: CEWS+1EZcXFJ0n3rn8bVgBY0YsyzfNXX9Bz2DEO6CL4=
Subject key identifier: 6E:33:4A:49:B3:03:9E:EA:CA:EB:7E:66:CE:7E:E6:B0:D1:01:73:FF
Authority key identifier: 9C:03:1A:8B:6A:28:94:0C:79:36:BA:6E:78:2B:94:A0:96:2B:FB:27
Certificate issuer: /CN=9c031a8b6a28940c7936ba6e782b94a0962bfb27
Certificate serial: 01959005EB9C46A45F5B02AD1FA24E07CAC6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nAMai2oolAx5NrpueCuUoJYr-yc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5c/3433fe-6408-468d-81e4-f03eb8740c3e/1/nAMai2oolAx5NrpueCuUoJYr-yc.mft
Manifest number: 0227
Signing time: Thu 13 Mar 2025 15:01:01 +0000
Manifest this update: Thu 13 Mar 2025 15:01:01 +0000
Manifest next update: Fri 14 Mar 2025 15:01:01 +0000
Files and hashes: 1: nAMai2oolAx5NrpueCuUoJYr-yc.crl (hash: zMXaR6fZx0lbZpZNowMpFPBwBP17z1rqp1KRyfGHy7E=)
2: sazfzVz6q9bIns0N5tJ_KIxOhyU.roa (hash: 7Dx7RnLHW4HsXUHgAbio+tOs+19yMbUTjmWX8tX1e1E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5c/3433fe-6408-468d-81e4-f03eb8740c3e/1/nAMai2oolAx5NrpueCuUoJYr-yc.crl
rsync://rpki.ripe.net/repository/DEFAULT/5c/3433fe-6408-468d-81e4-f03eb8740c3e/1/nAMai2oolAx5NrpueCuUoJYr-yc.mft
rsync://rpki.ripe.net/repository/DEFAULT/nAMai2oolAx5NrpueCuUoJYr-yc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 14 Mar 2025 09:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:90:05:eb:9c:46:a4:5f:5b:02:ad:1f:a2:4e:07:ca:c6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9c031a8b6a28940c7936ba6e782b94a0962bfb27
Validity
Not Before: Mar 13 15:01:01 2025 GMT
Not After : Mar 14 15:01:01 2025 GMT
Subject: CN=6e334a49b3039eeacaeb7e66ce7ee6b0d10173ff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f0:ad:e5:4d:ec:66:61:bd:f2:b9:14:53:a7:b0:
02:58:cf:66:f8:46:ad:42:00:2f:2c:a5:d8:39:42:
6a:08:8e:88:58:20:e9:f5:86:07:15:95:98:10:a1:
93:bf:b0:d6:c5:2a:cd:cd:32:12:a6:6f:66:ee:11:
34:a2:37:8b:ff:db:c7:ee:f2:85:ed:61:8a:20:e6:
f6:2b:9b:df:55:38:1f:b8:71:f8:ad:48:44:7c:de:
f9:d4:04:80:19:97:b4:48:bc:83:39:d7:04:62:52:
40:5e:17:3a:55:ea:d9:7f:66:f5:2e:81:91:d0:59:
f1:85:78:bf:7b:89:2a:91:f0:9c:3e:e5:fd:74:ca:
f7:58:fd:8e:82:04:b1:8c:ca:61:f2:f3:03:f5:db:
7a:ac:2d:d3:aa:3a:4c:3e:18:ad:f2:9e:ef:a7:0f:
66:56:45:60:6a:f7:d7:0f:a1:19:6e:21:a3:8d:16:
35:1f:1e:a8:7d:8e:71:f1:01:bd:5b:dc:5e:f0:6f:
18:22:2c:ff:64:02:16:0e:6c:4c:f1:c4:55:dd:f9:
91:49:bb:04:f2:bb:f4:cf:11:8c:99:1a:1d:10:1e:
e1:ef:5b:e3:c4:13:79:41:30:67:5d:c9:98:63:51:
22:d2:ec:70:6a:68:52:b5:a2:bb:92:31:ff:27:08:
f7:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6E:33:4A:49:B3:03:9E:EA:CA:EB:7E:66:CE:7E:E6:B0:D1:01:73:FF
X509v3 Authority Key Identifier:
keyid:9C:03:1A:8B:6A:28:94:0C:79:36:BA:6E:78:2B:94:A0:96:2B:FB:27
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nAMai2oolAx5NrpueCuUoJYr-yc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/3433fe-6408-468d-81e4-f03eb8740c3e/1/nAMai2oolAx5NrpueCuUoJYr-yc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/3433fe-6408-468d-81e4-f03eb8740c3e/1/nAMai2oolAx5NrpueCuUoJYr-yc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8d:c4:57:c4:07:23:82:43:a3:4d:db:b4:37:4e:6d:9c:44:7f:
6b:51:9a:e2:29:1f:06:33:1f:75:f6:ea:d0:8b:bc:72:16:3b:
2a:03:c6:01:4f:70:c2:ec:77:1b:e1:ea:a8:ce:ae:45:ad:89:
a8:9b:8e:2c:c2:2f:0b:2a:ef:51:6e:52:51:3f:d2:fb:6e:42:
ad:30:08:52:b1:ec:53:23:18:54:1d:b2:69:ab:62:db:99:8e:
ee:7c:b3:40:b4:d2:82:f6:29:8a:28:83:32:b0:a5:06:99:b3:
70:88:ba:64:fb:ba:02:4e:ff:4e:b0:f8:83:a1:79:7e:d0:b0:
8c:f5:5a:77:61:ee:2d:01:76:10:9d:43:a2:06:74:7f:87:46:
26:b7:a6:2d:26:8c:08:c3:a2:f8:cd:7c:bd:56:b8:df:5a:a5:
8d:6a:f4:2f:91:d2:31:ec:fa:fb:4e:77:ab:49:13:92:a9:cf:
3d:a5:8c:bf:a8:50:af:03:c9:55:a6:64:b1:00:08:d0:84:c5:
07:64:fe:bd:bf:a7:34:72:60:15:55:e8:b2:65:1e:31:f6:78:
b0:e0:49:c4:8c:9b:09:e6:a2:65:44:b8:d3:08:c1:26:29:b4:
85:bd:eb:a6:ca:78:7b:bf:0d:5a:20:ec:af:88:50:ab:bc:76:
8f:6a:dc:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 19:37:24 2025 by rpki-client