Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/88/86a426-56ee-46dd-9425-7f92c34eb07c/1/nCy3-coO_XK-JYpKCTWIBjdLRmI.mft
File: nCy3-coO_XK-JYpKCTWIBjdLRmI.mft (raw, json)
Hash identifier: jGuaEzhjZxFz0LcRerkL/oWFn4vDcoNLcbTJC7B7G9U=
Subject key identifier: 62:F7:9A:0A:F5:34:B6:D5:DD:C0:8E:35:44:59:DF:EE:E5:97:57:F0
Authority key identifier: 9C:2C:B7:F9:CA:0E:FD:72:BE:25:8A:4A:09:35:88:06:37:4B:46:62
Certificate issuer: /CN=9c2cb7f9ca0efd72be258a4a09358806374b4662
Certificate serial: 01958BF298F43E02CB12B0C4BDE27A3499A3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nCy3-coO_XK-JYpKCTWIBjdLRmI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/88/86a426-56ee-46dd-9425-7f92c34eb07c/1/nCy3-coO_XK-JYpKCTWIBjdLRmI.mft
Manifest number: 0AE9
Signing time: Wed 12 Mar 2025 20:01:26 +0000
Manifest this update: Wed 12 Mar 2025 20:01:26 +0000
Manifest next update: Thu 13 Mar 2025 20:01:26 +0000
Files and hashes: 1: Dotq45i-CIL8miP4blqY3J6J13s.roa (hash: AeEyJtBFVLSGPDiSeedlZidCthzwYAlppOftvZd9mwo=)
2: nCy3-coO_XK-JYpKCTWIBjdLRmI.crl (hash: 2gDh1wGN+OHmMHkn25qulUijbiJ37RZtmUi4ZsMhKDQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/88/86a426-56ee-46dd-9425-7f92c34eb07c/1/nCy3-coO_XK-JYpKCTWIBjdLRmI.crl
rsync://rpki.ripe.net/repository/DEFAULT/88/86a426-56ee-46dd-9425-7f92c34eb07c/1/nCy3-coO_XK-JYpKCTWIBjdLRmI.mft
rsync://rpki.ripe.net/repository/DEFAULT/nCy3-coO_XK-JYpKCTWIBjdLRmI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 13 Mar 2025 19:14:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:8b:f2:98:f4:3e:02:cb:12:b0:c4:bd:e2:7a:34:99:a3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9c2cb7f9ca0efd72be258a4a09358806374b4662
Validity
Not Before: Mar 12 20:01:26 2025 GMT
Not After : Mar 13 20:01:26 2025 GMT
Subject: CN=62f79a0af534b6d5ddc08e354459dfeee59757f0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:33:ca:6e:c4:ca:b7:07:d0:92:3a:63:05:97:
34:19:01:f7:12:3a:2f:5a:02:56:f9:0b:be:f7:d6:
30:80:ab:19:29:c4:fd:03:b4:20:b6:1c:21:61:2b:
f9:8f:69:f1:7e:3e:c2:29:24:1c:6c:03:5f:e5:b5:
0d:ba:b6:45:8a:54:0e:0e:9d:36:95:09:e6:bf:29:
2f:98:4d:6b:2c:5b:5a:a5:eb:36:35:c3:f4:5f:5d:
19:25:47:29:12:6c:aa:ce:78:20:6d:8b:e5:3c:48:
9e:6c:b9:c6:93:00:f1:b3:e6:02:6d:f6:e1:ae:fe:
ed:63:23:f3:a7:e6:a0:91:91:6c:cb:c0:e6:99:6a:
50:14:be:12:07:33:5d:5e:28:09:6b:74:d3:96:76:
2f:59:ce:88:ab:da:20:15:2a:04:30:69:31:f8:20:
c3:f8:1d:27:a6:1e:2f:23:0a:09:64:a2:66:90:a5:
bf:36:bd:6d:32:a2:3d:3e:71:f6:a6:2b:ad:96:60:
04:81:6d:03:b6:62:a0:fc:2e:f9:de:ab:91:c5:d6:
2b:51:eb:3a:28:8c:44:4f:46:d6:9a:59:fe:9a:f6:
8c:8c:88:24:cc:96:ee:50:65:ac:9d:9b:1f:e3:28:
7e:af:b0:4f:c3:de:9c:3e:ce:b2:24:67:6c:4a:de:
ee:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:F7:9A:0A:F5:34:B6:D5:DD:C0:8E:35:44:59:DF:EE:E5:97:57:F0
X509v3 Authority Key Identifier:
keyid:9C:2C:B7:F9:CA:0E:FD:72:BE:25:8A:4A:09:35:88:06:37:4B:46:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nCy3-coO_XK-JYpKCTWIBjdLRmI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/88/86a426-56ee-46dd-9425-7f92c34eb07c/1/nCy3-coO_XK-JYpKCTWIBjdLRmI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/88/86a426-56ee-46dd-9425-7f92c34eb07c/1/nCy3-coO_XK-JYpKCTWIBjdLRmI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
75:29:95:af:de:ee:d7:82:e4:58:7d:e9:fe:8f:d2:1a:0b:a3:
1b:e4:cb:5d:d4:f9:a7:f4:d5:b3:70:ac:78:fe:df:86:47:63:
d7:76:5f:f3:0a:4a:3b:9e:f3:b0:80:74:41:88:83:67:1d:52:
05:e9:79:ac:8d:69:c0:57:86:e0:c0:d8:18:d4:60:43:85:c3:
4c:8c:a2:03:1a:ec:b3:68:a5:c1:13:08:b1:d6:c0:57:ca:ab:
6f:ac:47:a7:59:32:bd:5d:e6:9c:28:a0:de:56:21:50:c8:b5:
03:98:d5:dc:41:c7:21:8d:8f:11:ba:f9:93:62:44:da:3b:5f:
cf:a5:9f:cd:eb:c6:05:ea:c3:40:51:b1:3c:bd:ed:49:9e:3c:
83:05:d2:85:04:5a:d6:27:96:4b:1f:73:79:60:d7:ed:29:54:
8c:07:cf:06:55:49:ca:7a:36:d9:7e:33:f7:3e:10:7b:85:35:
f8:bb:61:40:31:ed:0a:97:fd:39:c7:4e:78:50:b3:a2:4b:9c:
a3:aa:26:f6:a0:c7:89:d4:4d:d5:4d:a5:b2:04:5a:bb:66:b3:
de:ca:0a:73:a7:9e:bc:85:03:d4:e7:ee:42:20:8f:2b:f9:b2:
62:9a:11:25:4e:dd:d4:bf:62:5d:fc:9f:d7:4c:4e:de:45:b3:
b6:b7:04:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 02:50:35 2025 by rpki-client