Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/95/30764e-799f-4736-9686-92d5d3970a59/1/ni6I9QfNLq27IyyGT3Htum7LXaA.mft
File: ni6I9QfNLq27IyyGT3Htum7LXaA.mft (raw, json)
Hash identifier: tUIGLIBJ88VQPvbTNYN1PYVj2DFBcw1QkvsANmi1I3s=
Subject key identifier: EB:3B:39:D2:84:9C:F3:8E:F0:68:55:69:E8:E3:63:8A:34:6C:41:99
Authority key identifier: 9E:2E:88:F5:07:CD:2E:AD:BB:23:2C:86:4F:71:ED:BA:6E:CB:5D:A0
Certificate issuer: /CN=9e2e88f507cd2eadbb232c864f71edba6ecb5da0
Certificate serial: 01965F16C1DAF38542BEAE6C81BBD23A3543
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ni6I9QfNLq27IyyGT3Htum7LXaA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/95/30764e-799f-4736-9686-92d5d3970a59/1/ni6I9QfNLq27IyyGT3Htum7LXaA.mft
Manifest number: 0D5B
Signing time: Tue 22 Apr 2025 20:00:48 +0000
Manifest this update: Tue 22 Apr 2025 20:00:48 +0000
Manifest next update: Wed 23 Apr 2025 20:00:48 +0000
Files and hashes: 1: ni6I9QfNLq27IyyGT3Htum7LXaA.crl (hash: jS+6xwPzo3P+8WG9OXjS3wfFhSfnZ09XS0dnACzeIyo=)
2: uweYkDCu-qqfi3ug1YgUgTCGT6M.roa (hash: /KpNT+Dkmz13bWhCJTvJ8D+AbxL/YrXSoux1HxprkcQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/95/30764e-799f-4736-9686-92d5d3970a59/1/ni6I9QfNLq27IyyGT3Htum7LXaA.crl
rsync://rpki.ripe.net/repository/DEFAULT/95/30764e-799f-4736-9686-92d5d3970a59/1/ni6I9QfNLq27IyyGT3Htum7LXaA.mft
rsync://rpki.ripe.net/repository/DEFAULT/ni6I9QfNLq27IyyGT3Htum7LXaA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Apr 2025 20:00:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:5f:16:c1:da:f3:85:42:be:ae:6c:81:bb:d2:3a:35:43
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9e2e88f507cd2eadbb232c864f71edba6ecb5da0
Validity
Not Before: Apr 22 20:00:48 2025 GMT
Not After : Apr 23 20:00:48 2025 GMT
Subject: CN=eb3b39d2849cf38ef0685569e8e3638a346c4199
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:94:62:f5:d1:91:2a:d0:35:16:64:39:43:87:
1c:c9:3e:c5:37:80:eb:db:59:71:bc:9e:a8:83:c8:
76:ad:10:85:e7:4a:df:c0:2d:97:9c:d1:5d:e2:f2:
8a:8b:ae:df:83:2a:b3:a4:c0:19:33:e6:52:ec:ef:
fd:2c:b0:bb:ee:cb:30:1e:b5:98:fe:98:77:10:26:
53:3b:64:14:ef:47:34:53:4b:1a:c1:ec:a3:6a:a6:
2b:b9:5f:8f:79:6b:f4:42:c0:f0:3d:b4:96:bb:a3:
e3:68:f5:8d:07:5b:ea:ae:c0:02:e7:3c:19:f5:97:
5e:80:39:c2:f2:e1:65:d9:8d:42:5b:09:38:e4:bf:
8d:ca:3a:81:65:66:ac:68:8b:8f:c4:df:42:52:cf:
c4:2d:a3:31:f8:8a:35:22:52:0e:71:da:39:be:47:
fc:7f:93:67:5e:ea:bb:fe:8c:df:90:0f:72:7d:c0:
34:ac:4d:b0:4a:60:e4:87:35:25:62:3c:df:c3:f1:
6a:e8:b8:76:4b:a4:76:6b:ec:d8:93:0c:78:3d:a8:
21:ee:2d:3e:e6:8b:6b:d0:89:2b:f6:6d:25:5c:dc:
d5:28:10:7d:07:3b:b8:40:9d:ce:87:83:85:aa:fa:
0e:13:38:d0:df:5f:53:2a:60:26:cd:be:5e:b5:e2:
e0:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:3B:39:D2:84:9C:F3:8E:F0:68:55:69:E8:E3:63:8A:34:6C:41:99
X509v3 Authority Key Identifier:
keyid:9E:2E:88:F5:07:CD:2E:AD:BB:23:2C:86:4F:71:ED:BA:6E:CB:5D:A0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ni6I9QfNLq27IyyGT3Htum7LXaA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/95/30764e-799f-4736-9686-92d5d3970a59/1/ni6I9QfNLq27IyyGT3Htum7LXaA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/95/30764e-799f-4736-9686-92d5d3970a59/1/ni6I9QfNLq27IyyGT3Htum7LXaA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
02:e8:99:22:1a:f1:6c:f6:47:df:d0:d0:a0:37:d2:c5:25:5c:
a3:8d:9c:ab:cb:dc:93:f6:87:fb:25:51:05:35:74:ff:f9:36:
e1:e6:09:1e:23:46:de:a6:5b:78:2c:4d:0f:f9:c0:61:07:2b:
74:3a:a2:ca:79:fb:e8:07:0f:2a:ea:49:84:b0:47:82:20:25:
47:75:64:d6:57:8b:8e:e8:7c:28:db:6e:ec:af:fa:88:f8:fc:
cd:a8:03:b4:9c:17:35:b6:e9:e3:07:53:a8:67:f6:87:ac:fe:
79:2d:03:91:e0:8d:4e:13:37:55:ea:f6:55:c1:31:dd:19:f6:
a1:16:88:b5:f2:e7:eb:58:c8:1f:92:38:07:ce:f4:e9:0c:14:
dc:2c:76:f0:87:23:c2:60:0b:b3:f1:57:66:46:43:39:4f:22:
4e:52:8e:45:1e:e8:62:75:54:a8:1b:bc:80:d8:2b:55:ac:f8:
70:58:07:13:9a:be:ee:92:85:52:6d:eb:4d:ca:fe:86:f4:76:
9d:ac:99:cb:25:4a:d5:ab:6c:f7:d9:2d:1d:ac:fb:7d:20:84:
5f:02:b1:ec:f5:27:d0:98:fa:6e:a9:37:a2:17:11:9a:65:ad:
ac:9d:67:e0:34:a6:93:c6:f1:01:24:93:79:fb:24:dd:e2:4e:
64:2e:35:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 23 02:49:28 2025 by rpki-client