Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6a/832edd-488f-44d8-810b-f7ad97c0ecbd/1/nj3BkwnmeMFIJfxyCDyh3seEP00.mft
File: nj3BkwnmeMFIJfxyCDyh3seEP00.mft (raw, json)
Hash identifier: m1zp1pLwl1c5dhfv6SV7/b0b+9tA4jpqaSSIXhCLu1s=
Subject key identifier: 49:E2:84:05:44:C4:08:33:F7:24:BB:57:A6:FE:B7:B5:AE:15:EA:E7
Authority key identifier: 9E:3D:C1:93:09:E6:78:C1:48:25:FC:72:08:3C:A1:DE:C7:84:3F:4D
Certificate issuer: /CN=9e3dc19309e678c14825fc72083ca1dec7843f4d
Certificate serial: 019644B1E69F97745363F6536D7DBF126814
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nj3BkwnmeMFIJfxyCDyh3seEP00.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6a/832edd-488f-44d8-810b-f7ad97c0ecbd/1/nj3BkwnmeMFIJfxyCDyh3seEP00.mft
Manifest number: 1312
Signing time: Thu 17 Apr 2025 17:00:31 +0000
Manifest this update: Thu 17 Apr 2025 17:00:31 +0000
Manifest next update: Fri 18 Apr 2025 17:00:31 +0000
Files and hashes: 1: JbUoXDLL57xF-6BVNBln0RftcZM.roa (hash: t8EC2530fZ+9x7+BNfg3gfNISOK9q19vZC97hYMQk9g=)
2: nj3BkwnmeMFIJfxyCDyh3seEP00.crl (hash: twypycj1jQWMVgZJd7EjQnCuO1fQyoZ0YOp09f+77fA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6a/832edd-488f-44d8-810b-f7ad97c0ecbd/1/nj3BkwnmeMFIJfxyCDyh3seEP00.crl
rsync://rpki.ripe.net/repository/DEFAULT/6a/832edd-488f-44d8-810b-f7ad97c0ecbd/1/nj3BkwnmeMFIJfxyCDyh3seEP00.mft
rsync://rpki.ripe.net/repository/DEFAULT/nj3BkwnmeMFIJfxyCDyh3seEP00.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 18 Apr 2025 16:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:44:b1:e6:9f:97:74:53:63:f6:53:6d:7d:bf:12:68:14
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9e3dc19309e678c14825fc72083ca1dec7843f4d
Validity
Not Before: Apr 17 17:00:31 2025 GMT
Not After : Apr 18 17:00:31 2025 GMT
Subject: CN=49e2840544c40833f724bb57a6feb7b5ae15eae7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:b9:c1:6b:59:19:c4:e6:28:38:c1:16:c7:d0:
30:2e:ef:08:0a:e7:85:41:13:a8:07:d7:3d:cd:5b:
85:77:95:1a:8f:ef:24:36:f8:ed:2b:38:bc:f8:9b:
66:c2:c3:10:cf:3a:24:49:6a:ce:4f:99:98:94:3b:
33:ec:fe:de:ae:a4:e6:84:46:c7:2c:71:40:eb:7a:
6f:3b:1f:e2:ac:33:5a:98:35:db:ad:61:bd:f7:80:
6c:c5:b6:7c:fa:41:cb:86:8c:77:05:df:ff:9f:ba:
2c:96:2e:c3:3c:84:54:2f:a9:0d:17:a9:ad:0d:c3:
e5:08:92:e3:ec:1a:ee:d7:30:0b:c4:e7:cd:d2:5c:
f3:c5:95:6b:e4:8b:c5:a5:a1:10:d5:38:5f:dd:4c:
8f:75:b1:f8:2d:80:44:7a:d1:4a:56:74:59:f7:02:
83:d3:6c:a0:44:8b:d9:ad:f7:f0:1e:9b:c3:1a:2e:
e0:7b:de:64:51:f2:b9:06:9e:5f:9f:90:a0:a9:81:
6f:0b:ea:19:95:ff:ae:36:6a:f4:9f:51:fe:77:4e:
be:b5:0a:02:1f:e6:d3:fc:d4:b4:69:b1:75:cc:b5:
92:67:c0:33:2a:ba:ed:2c:86:fe:a1:49:c0:e0:74:
2b:d4:4a:2a:e2:73:fb:e7:ab:c9:85:37:40:80:fc:
c0:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:E2:84:05:44:C4:08:33:F7:24:BB:57:A6:FE:B7:B5:AE:15:EA:E7
X509v3 Authority Key Identifier:
keyid:9E:3D:C1:93:09:E6:78:C1:48:25:FC:72:08:3C:A1:DE:C7:84:3F:4D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nj3BkwnmeMFIJfxyCDyh3seEP00.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/832edd-488f-44d8-810b-f7ad97c0ecbd/1/nj3BkwnmeMFIJfxyCDyh3seEP00.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/832edd-488f-44d8-810b-f7ad97c0ecbd/1/nj3BkwnmeMFIJfxyCDyh3seEP00.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
57:ea:5d:5e:be:f7:ad:58:7d:f0:4c:89:6a:45:a1:d0:c8:0f:
a9:10:92:46:00:5b:39:71:0c:15:e2:3e:f0:08:e5:c3:c1:cd:
85:e5:de:f6:89:fd:49:eb:eb:a6:44:3e:38:69:2c:a6:56:aa:
4c:0f:c7:43:4d:39:06:cb:15:be:2e:a0:4f:5f:40:e2:ef:20:
2e:55:9b:31:5e:a3:95:65:92:d7:ca:52:1b:3d:c0:5e:5a:7d:
18:5a:25:61:5f:ab:2c:35:3e:e8:6f:b0:59:d4:71:23:ee:5b:
1d:9e:10:8b:ab:64:47:b7:52:7c:35:00:55:65:4b:a8:88:b5:
d7:24:7f:15:f1:7f:03:71:3f:70:51:b7:53:86:9d:a5:5c:e0:
b8:73:27:29:8a:77:c0:4e:cf:fb:9d:9f:8c:6e:3c:e7:54:a0:
0d:65:b8:91:44:40:27:53:ab:80:e0:cc:ad:b9:fe:52:36:60:
0f:ea:dc:9a:01:bb:e3:86:70:f7:47:bd:3b:39:b0:66:48:5d:
14:94:fc:7b:d6:b6:a0:20:93:2b:71:ed:4f:ef:81:45:81:43:
3f:e0:bb:fd:bc:c1:76:2f:87:6e:d5:51:ea:77:d3:10:25:20:
da:43:c3:3e:18:6c:ff:a6:02:84:56:e3:d3:a7:31:11:28:53:
ee:f6:d9:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 17 22:57:45 2025 by rpki-client