Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/64/7d0efe-709d-4d11-b692-0e230806b579/1/nlf4Q7F__OqpuGNlgf5NVONG3cw.mft
File: nlf4Q7F__OqpuGNlgf5NVONG3cw.mft (raw, json)
Hash identifier: 3M/rOA3PHIyZAkCEqNO3ixGg0xxIgvp0aQJe9Jais6c=
Subject key identifier: 98:CF:6B:4A:90:36:8E:3A:66:F9:95:B4:36:51:F0:2F:9F:1C:64:1A
Authority key identifier: 9E:57:F8:43:B1:7F:FC:EA:A9:B8:63:65:81:FE:4D:54:E3:46:DD:CC
Certificate issuer: /CN=9e57f843b17ffceaa9b8636581fe4d54e346ddcc
Certificate serial: 01965E3AD4B433E4D6FF6A78916988A39EF2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nlf4Q7F__OqpuGNlgf5NVONG3cw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/64/7d0efe-709d-4d11-b692-0e230806b579/1/nlf4Q7F__OqpuGNlgf5NVONG3cw.mft
Manifest number: 0B57
Signing time: Tue 22 Apr 2025 16:00:35 +0000
Manifest this update: Tue 22 Apr 2025 16:00:35 +0000
Manifest next update: Wed 23 Apr 2025 16:00:35 +0000
Files and hashes: 1: IFXNgHuEN8ycsfhuA4dEpX7GYeY.roa (hash: 0NAgcHKOW4VLEuD8zIQn9OzSwjmjjTPr1tkjSBELdjk=)
2: nlf4Q7F__OqpuGNlgf5NVONG3cw.crl (hash: yYhqd7ct7PAs8Y1616FAmdYwIvDrsgkzXqN+60onH38=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/64/7d0efe-709d-4d11-b692-0e230806b579/1/nlf4Q7F__OqpuGNlgf5NVONG3cw.crl
rsync://rpki.ripe.net/repository/DEFAULT/64/7d0efe-709d-4d11-b692-0e230806b579/1/nlf4Q7F__OqpuGNlgf5NVONG3cw.mft
rsync://rpki.ripe.net/repository/DEFAULT/nlf4Q7F__OqpuGNlgf5NVONG3cw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Apr 2025 14:46:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:5e:3a:d4:b4:33:e4:d6:ff:6a:78:91:69:88:a3:9e:f2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9e57f843b17ffceaa9b8636581fe4d54e346ddcc
Validity
Not Before: Apr 22 16:00:35 2025 GMT
Not After : Apr 23 16:00:35 2025 GMT
Subject: CN=98cf6b4a90368e3a66f995b43651f02f9f1c641a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:3f:92:4d:5a:e5:c5:33:a6:f7:4f:70:75:c1:
3a:fb:00:6c:3a:16:55:f4:29:d5:c9:c8:03:02:d6:
a0:6f:f0:ca:c7:4a:fe:50:90:b2:47:24:77:9e:9c:
1a:4d:6d:5d:d2:dc:8f:a8:a3:e7:0d:86:e1:d5:69:
c6:0d:a5:ca:6e:df:3f:6a:07:b3:5b:9c:f4:5a:bf:
2b:d5:87:be:65:73:d6:85:81:71:e8:4c:eb:b7:b3:
86:a0:3e:b6:82:3d:65:a6:a7:03:6d:58:0e:a4:7e:
df:60:3d:bf:82:2a:ee:69:e5:d2:dd:46:31:66:92:
f5:7a:1e:1f:7e:b0:e9:81:3f:b0:3c:a8:0e:69:21:
ef:b4:84:77:e8:5b:13:06:b1:52:8f:1a:75:2a:45:
36:5c:1d:9b:cd:e7:57:83:26:a7:e5:fb:d4:16:c0:
9d:5a:68:0f:47:13:63:da:cb:54:b1:e5:76:94:d9:
ac:e6:e1:df:7f:7e:b8:f1:51:97:5a:cd:0d:e4:80:
8a:97:43:4c:8d:40:78:d5:bf:53:bb:8d:9d:32:09:
e1:d5:8c:15:48:a6:64:bd:13:42:34:85:6a:4d:60:
14:67:6d:24:95:5c:09:29:74:60:df:c4:25:6c:d3:
a3:23:4f:24:ac:7f:4a:cc:c5:5c:0b:aa:f7:6a:8d:
45:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:CF:6B:4A:90:36:8E:3A:66:F9:95:B4:36:51:F0:2F:9F:1C:64:1A
X509v3 Authority Key Identifier:
keyid:9E:57:F8:43:B1:7F:FC:EA:A9:B8:63:65:81:FE:4D:54:E3:46:DD:CC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nlf4Q7F__OqpuGNlgf5NVONG3cw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/7d0efe-709d-4d11-b692-0e230806b579/1/nlf4Q7F__OqpuGNlgf5NVONG3cw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/64/7d0efe-709d-4d11-b692-0e230806b579/1/nlf4Q7F__OqpuGNlgf5NVONG3cw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
52:ac:3f:b8:ce:ff:c3:de:93:e5:70:ec:4e:ff:4b:27:ea:91:
21:0d:69:34:09:06:81:bb:6d:c3:11:4b:ae:46:7a:a4:c9:e0:
3d:32:3f:42:78:2b:e7:76:62:98:77:8d:8f:ba:e1:10:da:75:
21:cf:55:4a:2d:e2:e7:86:e7:e1:02:71:cd:a7:f2:85:ae:55:
22:f2:19:12:d1:6b:9c:a8:77:5b:88:79:9c:3c:c9:69:84:76:
a1:98:c1:6d:b4:b7:63:82:79:cb:c8:67:4a:a5:ea:8d:a1:b7:
47:56:26:da:e8:ad:c1:b3:4d:18:66:da:8c:c7:63:d8:ef:15:
78:33:d2:7e:0a:7c:4a:dd:ef:a3:43:b9:a9:ed:5c:ae:21:03:
60:02:3f:71:51:a5:b8:96:84:40:aa:bc:f5:43:bd:69:4c:1b:
42:3f:b8:fe:96:6e:8b:0a:63:b4:5a:04:25:40:5e:70:33:ef:
76:d6:fd:83:9f:ed:01:d6:0b:46:fb:f0:7f:e8:5c:bb:29:f5:
f4:ca:d6:66:49:5d:ad:3e:f1:65:0b:cc:05:78:a4:13:96:66:
23:62:5a:81:77:9d:40:34:b9:30:e3:89:41:e5:2b:6a:23:ab:
11:bd:62:e5:d7:ea:cd:6a:e4:30:00:dc:3e:58:63:c7:33:76:
1a:83:a0:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 19:28:34 2025 by rpki-client