Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/7f3546-4a87-4627-a019-341b9d64645d/1/b_nKXHa7Nak1PpsT4_zoDzYxYYA.mft
File: b_nKXHa7Nak1PpsT4_zoDzYxYYA.mft (raw, json)
Hash identifier: bhgGgEeNdSj0/iaKEbqX+uWFtoklWqXQ6PAQztuEDkA=
Subject key identifier: 26:3D:AB:B1:14:E5:F1:4C:44:47:92:89:DF:16:82:B5:36:51:BB:50
Authority key identifier: 6F:F9:CA:5C:76:BB:35:A9:35:3E:9B:13:E3:FC:E8:0F:36:31:61:80
Certificate issuer: /CN=6ff9ca5c76bb35a9353e9b13e3fce80f36316180
Certificate serial: 01964CA28434575DDA8429AB91B8A55E02D2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/b_nKXHa7Nak1PpsT4_zoDzYxYYA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/7f3546-4a87-4627-a019-341b9d64645d/1/b_nKXHa7Nak1PpsT4_zoDzYxYYA.mft
Manifest number: 1089
Signing time: Sat 19 Apr 2025 06:00:41 +0000
Manifest this update: Sat 19 Apr 2025 06:00:41 +0000
Manifest next update: Sun 20 Apr 2025 06:00:41 +0000
Files and hashes: 1: K1yirsr-iaS7nREQciotspB8RVo.roa (hash: hy+JqcAOeQKytaM3EAomiIfLy4MHrS39bRFVCLNpTzc=)
2: b_nKXHa7Nak1PpsT4_zoDzYxYYA.crl (hash: VW0prxhdvbJWqbLA3OmKpcQ91XpvjiBTkhNesJYRqcg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/7f3546-4a87-4627-a019-341b9d64645d/1/b_nKXHa7Nak1PpsT4_zoDzYxYYA.crl
rsync://rpki.ripe.net/repository/DEFAULT/92/7f3546-4a87-4627-a019-341b9d64645d/1/b_nKXHa7Nak1PpsT4_zoDzYxYYA.mft
rsync://rpki.ripe.net/repository/DEFAULT/b_nKXHa7Nak1PpsT4_zoDzYxYYA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 20 Apr 2025 04:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:4c:a2:84:34:57:5d:da:84:29:ab:91:b8:a5:5e:02:d2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ff9ca5c76bb35a9353e9b13e3fce80f36316180
Validity
Not Before: Apr 19 06:00:41 2025 GMT
Not After : Apr 20 06:00:41 2025 GMT
Subject: CN=263dabb114e5f14c44479289df1682b53651bb50
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:16:1d:c0:51:dd:42:ba:e4:da:3f:e1:5e:76:
ff:05:a1:d8:32:68:c1:11:6e:9f:a1:ba:7b:2f:92:
b9:0b:55:a9:79:97:8c:ff:7f:a6:1b:96:8a:09:88:
e0:1c:40:f1:72:20:8e:86:27:ca:16:d5:cb:50:0e:
33:0b:fa:67:fe:30:6f:dd:4a:0a:52:50:f4:78:6f:
93:86:33:7b:0c:f8:f4:fc:58:1b:78:35:a2:5f:10:
45:e9:a6:78:69:c8:a2:c4:74:54:cf:ac:fe:52:36:
de:0f:04:c6:58:bb:fe:de:f1:f7:83:3d:84:25:cf:
6d:72:1f:b5:c9:ed:cf:37:35:28:a8:2c:42:97:0b:
32:f0:9d:f5:8d:ef:42:ca:a3:c3:ab:b9:37:45:d1:
6c:0b:d6:72:8a:cd:e8:08:9c:36:65:c7:0c:ac:60:
5a:ac:cd:10:0b:ec:01:64:d9:75:f8:0e:60:3a:64:
7e:25:d8:fa:64:a8:08:3b:03:af:a2:f3:4f:a1:59:
b8:ad:9c:f3:c1:a8:6f:11:0d:2f:25:4c:81:53:89:
da:87:f2:0e:77:31:5c:48:98:07:43:0d:91:a1:64:
81:5b:c6:92:a7:a4:e8:be:75:1a:3a:9d:c0:f2:34:
dc:5a:eb:fb:10:1c:fb:49:f7:27:50:6b:53:ff:bb:
17:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:3D:AB:B1:14:E5:F1:4C:44:47:92:89:DF:16:82:B5:36:51:BB:50
X509v3 Authority Key Identifier:
keyid:6F:F9:CA:5C:76:BB:35:A9:35:3E:9B:13:E3:FC:E8:0F:36:31:61:80
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b_nKXHa7Nak1PpsT4_zoDzYxYYA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/7f3546-4a87-4627-a019-341b9d64645d/1/b_nKXHa7Nak1PpsT4_zoDzYxYYA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/7f3546-4a87-4627-a019-341b9d64645d/1/b_nKXHa7Nak1PpsT4_zoDzYxYYA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
30:9c:21:06:ff:e8:42:c6:9c:29:a1:51:39:5b:6d:63:87:c9:
5f:7c:5b:f4:f7:51:26:72:05:62:27:dd:ee:41:94:bf:de:c8:
bc:a1:3c:85:1a:a6:c5:38:f6:6a:df:94:da:0b:c3:a6:18:be:
8d:b8:c1:48:2d:73:43:a2:11:7b:ed:06:69:18:99:58:77:7a:
fb:d6:bc:eb:08:99:b8:78:65:d8:fa:e9:3d:3d:c8:14:74:8a:
0b:82:79:15:16:c1:1d:d0:69:09:a7:91:f5:d1:50:8b:0d:4d:
db:7d:3d:a0:48:f4:b9:2f:c0:13:62:fb:ed:6a:73:9f:81:1a:
51:c6:db:f6:2d:3c:ca:fd:78:dc:0b:27:69:92:a1:0e:b9:a5:
5f:3d:0e:67:18:0b:e6:43:2e:7c:b2:95:56:89:db:e3:ef:32:
d0:e2:33:c4:90:3d:dd:f3:9c:79:45:42:43:7e:f6:ed:9e:d0:
c7:47:51:41:59:3e:07:7c:eb:ff:f5:c3:cd:f9:b4:8a:32:25:
95:7f:13:63:0a:96:08:dd:e9:11:26:67:75:59:7b:0c:83:af:
fd:8d:10:4d:6a:c7:8a:0d:09:39:90:a8:df:a5:c6:92:f2:ed:
a3:d7:05:e7:71:c7:25:b8:a6:b2:42:b3:ee:b1:c2:ad:75:de:
bc:6b:5f:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 12:42:50 2025 by rpki-client