Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/83/d04f1b-074c-495e-a431-76b1ae62f072/1/nXXPbGAZ8FnkZeTesgTNJCvUtGU.mft
File: nXXPbGAZ8FnkZeTesgTNJCvUtGU.mft (raw, json)
Hash identifier: v1ujy/ZV/utkHHrbUEfv3vgq2rpNZMUoI1GGE1JocZg=
Subject key identifier: 46:2A:44:91:6D:0A:E7:B1:C2:C6:11:73:84:51:0C:46:74:F2:09:CA
Authority key identifier: 9D:75:CF:6C:60:19:F0:59:E4:65:E4:DE:B2:04:CD:24:2B:D4:B4:65
Certificate issuer: /CN=9d75cf6c6019f059e465e4deb204cd242bd4b465
Certificate serial: 01964C34992078F60362CB9D56AE8F812196
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nXXPbGAZ8FnkZeTesgTNJCvUtGU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/83/d04f1b-074c-495e-a431-76b1ae62f072/1/nXXPbGAZ8FnkZeTesgTNJCvUtGU.mft
Manifest number: 111B
Signing time: Sat 19 Apr 2025 04:00:37 +0000
Manifest this update: Sat 19 Apr 2025 04:00:37 +0000
Manifest next update: Sun 20 Apr 2025 04:00:37 +0000
Files and hashes: 1: k3gz5duj9CFhYELeViKRfCBvdLQ.roa (hash: sqXEDoIPEFamPJfQ+MXgutDdyy3EAS9+6SZZLlnP/eE=)
2: nXXPbGAZ8FnkZeTesgTNJCvUtGU.crl (hash: OuA0i3t3h7BlFfgYkftHANDCDkS5KEdl0hacL4pWR70=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/83/d04f1b-074c-495e-a431-76b1ae62f072/1/nXXPbGAZ8FnkZeTesgTNJCvUtGU.crl
rsync://rpki.ripe.net/repository/DEFAULT/83/d04f1b-074c-495e-a431-76b1ae62f072/1/nXXPbGAZ8FnkZeTesgTNJCvUtGU.mft
rsync://rpki.ripe.net/repository/DEFAULT/nXXPbGAZ8FnkZeTesgTNJCvUtGU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 20 Apr 2025 04:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:4c:34:99:20:78:f6:03:62:cb:9d:56:ae:8f:81:21:96
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9d75cf6c6019f059e465e4deb204cd242bd4b465
Validity
Not Before: Apr 19 04:00:37 2025 GMT
Not After : Apr 20 04:00:37 2025 GMT
Subject: CN=462a44916d0ae7b1c2c6117384510c4674f209ca
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:65:0f:da:6e:ac:89:c5:57:93:5e:15:30:59:
f8:0d:fb:61:57:6f:e4:89:99:a3:08:13:27:43:26:
99:b3:2b:ac:5a:88:c9:3e:d2:0d:8c:f2:3b:1e:2c:
52:71:eb:c0:57:0a:3a:ce:9c:08:31:cd:c5:ae:13:
b9:80:92:62:86:0d:86:8c:38:72:6a:b1:41:a4:ef:
86:f4:3b:b9:7e:58:54:8d:6f:e5:6d:72:2f:8e:6f:
91:8d:b3:f1:f4:28:11:9d:cc:ad:2b:97:05:b9:58:
8f:04:6c:60:24:41:f1:a2:ff:1a:08:e5:db:99:7a:
78:54:53:5a:f0:f3:a6:59:92:83:8e:5a:cc:e1:16:
bc:13:3a:2c:2f:9e:85:d2:b4:6c:0f:35:16:19:e9:
31:ba:24:df:f4:0c:1c:e5:e3:0f:c5:68:8b:8a:c7:
71:26:f8:1b:e6:b1:c0:9f:18:b4:37:3c:ee:43:40:
7d:38:7e:21:90:ed:6e:b0:8d:e8:0d:3b:d3:c3:8e:
69:54:25:b6:16:bb:5b:95:92:3b:52:8e:23:b9:f0:
c0:44:23:b7:3e:17:fc:67:84:0e:5a:87:50:c6:94:
09:ee:45:bd:d9:83:2c:62:fb:87:ba:50:74:15:d0:
fc:1f:ca:79:4b:71:da:44:5f:13:57:f4:c8:40:49:
40:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:2A:44:91:6D:0A:E7:B1:C2:C6:11:73:84:51:0C:46:74:F2:09:CA
X509v3 Authority Key Identifier:
keyid:9D:75:CF:6C:60:19:F0:59:E4:65:E4:DE:B2:04:CD:24:2B:D4:B4:65
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nXXPbGAZ8FnkZeTesgTNJCvUtGU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/83/d04f1b-074c-495e-a431-76b1ae62f072/1/nXXPbGAZ8FnkZeTesgTNJCvUtGU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/83/d04f1b-074c-495e-a431-76b1ae62f072/1/nXXPbGAZ8FnkZeTesgTNJCvUtGU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
07:cb:fe:84:33:70:57:e2:a5:b0:af:ae:84:0c:43:20:2d:ab:
ab:8e:25:ca:b7:c4:1e:b6:7f:65:73:fa:3b:8a:6b:a5:44:f8:
67:d2:c3:0d:25:28:27:4b:c9:33:0c:bb:15:dc:37:1a:8e:42:
bc:ff:f0:2b:1f:b5:4a:7c:45:42:36:08:ef:5c:a2:0d:27:ef:
27:d6:3a:5c:44:c8:3e:6a:77:98:bc:8c:16:b4:00:12:4e:67:
cc:59:97:ac:5f:a3:61:e7:83:37:2e:eb:bb:a8:1b:b9:9e:ab:
cd:39:09:cf:96:e6:9e:6e:ba:0c:55:84:ab:10:4e:55:24:d4:
26:8a:21:26:6a:e7:30:fc:16:f2:16:fe:32:47:7e:48:dc:26:
6b:4b:14:2b:0d:e3:0f:7d:f5:99:c7:ff:d1:f6:36:83:53:49:
56:01:45:ef:d9:4b:9d:12:8e:27:fe:b7:44:8e:d3:e6:e8:af:
ed:c5:de:b1:06:c1:0f:28:12:64:d7:ed:c3:93:ac:49:30:50:
b0:19:80:59:3e:ca:ee:5e:c6:7d:1a:59:07:80:5b:b1:27:4a:
46:de:63:35:35:06:20:3f:d3:71:b7:b8:ef:97:55:13:87:b8:
c5:a2:26:30:0a:21:bf:a9:27:03:e1:9a:ce:01:3a:49:af:d8:
d3:41:32:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 14:05:36 2025 by rpki-client