Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/74bd35-0aa8-4718-8900-ccbb6e90a19b/1/nkdckgJgbmZn6Up3npA9tpelkCU.mft
File: nkdckgJgbmZn6Up3npA9tpelkCU.mft (raw, json)
Hash identifier: ytuz8omjOMwp9xs+udZzp6mWt3WRvEFah8oJK1JUTwA=
Subject key identifier: BC:DF:82:1F:79:D8:45:05:06:F3:3D:15:10:FF:35:C4:08:6F:6D:5E
Authority key identifier: 9E:47:5C:92:02:60:6E:66:67:E9:4A:77:9E:90:3D:B6:97:A5:90:25
Certificate issuer: /CN=9e475c9202606e6667e94a779e903db697a59025
Certificate serial: 01964A0EF23D834C3C574703D3003B11203E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nkdckgJgbmZn6Up3npA9tpelkCU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/74bd35-0aa8-4718-8900-ccbb6e90a19b/1/nkdckgJgbmZn6Up3npA9tpelkCU.mft
Manifest number: 03DB
Signing time: Fri 18 Apr 2025 18:00:15 +0000
Manifest this update: Fri 18 Apr 2025 18:00:15 +0000
Manifest next update: Sat 19 Apr 2025 18:00:15 +0000
Files and hashes: 1: nkdckgJgbmZn6Up3npA9tpelkCU.crl (hash: zqp0mh1sZwm0KlUWyv7sXg7dkitX1ARt9d2Pue8nMCM=)
2: nmSg0-EK5kx_OFxZ-x2rJeid1NU.roa (hash: 8HytWsFdzKFviKTtfyGmrk77Cg5YhpoczU6o9u5sUno=)
3: qxkGe1Ztq8AC8Xy-vkslbb-4Yjc.roa (hash: Vk6as9yIInb4okYrwyyw/9HVRxpOcsbPGA6Y1uEJnuU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/80/74bd35-0aa8-4718-8900-ccbb6e90a19b/1/nkdckgJgbmZn6Up3npA9tpelkCU.crl
rsync://rpki.ripe.net/repository/DEFAULT/80/74bd35-0aa8-4718-8900-ccbb6e90a19b/1/nkdckgJgbmZn6Up3npA9tpelkCU.mft
rsync://rpki.ripe.net/repository/DEFAULT/nkdckgJgbmZn6Up3npA9tpelkCU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 19 Apr 2025 18:00:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:4a:0e:f2:3d:83:4c:3c:57:47:03:d3:00:3b:11:20:3e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9e475c9202606e6667e94a779e903db697a59025
Validity
Not Before: Apr 18 18:00:15 2025 GMT
Not After : Apr 19 18:00:15 2025 GMT
Subject: CN=bcdf821f79d8450506f33d1510ff35c4086f6d5e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:7e:67:32:04:cb:73:f4:30:7f:41:25:41:24:
31:5d:6a:a6:f9:02:63:bb:e4:d7:95:c1:fb:41:ca:
26:8c:94:21:6a:70:81:12:22:e9:ce:4e:6f:75:52:
69:90:17:3a:d8:d0:04:e4:6c:81:57:3f:96:34:22:
a0:6d:d7:14:b5:30:4e:83:14:0b:82:af:3a:1d:3b:
94:47:ee:83:97:d8:3e:57:01:dd:96:ac:58:ba:6a:
60:fc:7d:b4:f0:52:7c:93:d2:d8:c3:8c:1e:c8:01:
8b:cf:3f:e1:40:93:52:b9:0e:d5:14:c6:2d:cd:ba:
21:72:41:b4:f0:be:f2:e4:ce:1b:ad:aa:f5:d7:e7:
29:78:6c:11:f8:b1:bc:47:1b:a2:c0:40:80:66:7b:
62:99:31:17:ac:38:83:2b:fa:7b:e5:e5:ca:2b:05:
d5:c3:64:85:db:09:eb:8b:10:df:f1:ed:34:8d:0c:
8e:e0:fb:d2:8a:b6:8d:1c:c2:16:35:19:5f:a8:b3:
80:e8:e0:f2:e2:e0:aa:8c:f4:84:e7:b0:55:ce:e5:
6f:f5:65:cd:fb:fa:f8:9a:ab:a1:d6:83:d7:2f:dc:
38:3f:ad:e4:99:7f:72:39:ba:aa:11:f1:79:1d:ac:
c6:d2:cf:ea:bb:ec:b0:d0:d4:aa:f2:3e:c1:23:ff:
85:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:DF:82:1F:79:D8:45:05:06:F3:3D:15:10:FF:35:C4:08:6F:6D:5E
X509v3 Authority Key Identifier:
keyid:9E:47:5C:92:02:60:6E:66:67:E9:4A:77:9E:90:3D:B6:97:A5:90:25
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nkdckgJgbmZn6Up3npA9tpelkCU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/74bd35-0aa8-4718-8900-ccbb6e90a19b/1/nkdckgJgbmZn6Up3npA9tpelkCU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/74bd35-0aa8-4718-8900-ccbb6e90a19b/1/nkdckgJgbmZn6Up3npA9tpelkCU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5d:0d:9b:7c:71:02:2a:dc:f4:ab:84:37:2e:e3:7e:83:7e:99:
d8:9c:62:6d:d7:6f:8b:b5:e0:69:8d:cb:69:3f:41:6d:f6:22:
99:c7:b2:e7:63:6d:4c:18:22:55:7b:06:4c:9d:f7:b5:70:a2:
f3:d8:c0:f0:8f:92:ec:c5:ed:e1:b9:c0:4a:a8:8a:0c:6d:94:
9d:50:42:86:79:e7:19:34:ff:09:c8:61:db:4e:92:12:e4:6e:
ec:12:29:ae:82:04:7a:04:40:ef:d7:a7:b9:fe:08:35:07:ee:
26:ca:30:62:d3:13:5a:53:95:d2:fb:85:58:b0:8d:4d:b2:ed:
d8:d9:e8:06:5b:d0:4b:ee:dc:00:a1:2c:17:1c:50:a2:ac:70:
6c:a6:7e:7a:fa:c8:4f:60:50:4d:0f:f6:3f:36:a4:91:61:c4:
de:25:9b:db:a3:8c:2e:1f:3a:79:d0:39:be:98:be:5d:d4:00:
5e:03:b5:84:79:ba:35:9a:24:e6:d9:be:a9:0d:0a:2b:88:1c:
c5:a7:fa:35:6f:bd:b7:9f:6f:00:39:94:17:ed:1d:cc:11:3b:
ad:d1:06:d3:05:44:64:5b:fb:11:fc:83:4f:c7:5a:10:a8:7f:
ae:0e:3e:a7:e7:4a:b7:1a:e7:d5:87:84:c8:88:4e:49:c2:62:
66:26:e6:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 01:33:15 2025 by rpki-client