Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/4c1642-80f3-4523-974d-4fc1cad8ab22/1/nHjvvmeG-eICxCeI4bv3F4HKjEc.mft
File: nHjvvmeG-eICxCeI4bv3F4HKjEc.mft (raw, json)
Hash identifier: 3QQv41uJGZAmAZn9xY2E0wzhHZbYJgBDCHexQgLDLhQ=
Subject key identifier: 14:F3:F8:EF:05:A7:09:14:DF:1C:C3:07:00:08:87:D8:B4:4F:85:79
Authority key identifier: 9C:78:EF:BE:67:86:F9:E2:02:C4:27:88:E1:BB:F7:17:81:CA:8C:47
Certificate issuer: /CN=9c78efbe6786f9e202c42788e1bbf71781ca8c47
Certificate serial: 01958CCEE0B6EB4AC2B15E41CD771689FF8D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nHjvvmeG-eICxCeI4bv3F4HKjEc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a0/4c1642-80f3-4523-974d-4fc1cad8ab22/1/nHjvvmeG-eICxCeI4bv3F4HKjEc.mft
Manifest number: 1497
Signing time: Thu 13 Mar 2025 00:02:02 +0000
Manifest this update: Thu 13 Mar 2025 00:02:02 +0000
Manifest next update: Fri 14 Mar 2025 00:02:02 +0000
Files and hashes: 1: BhSQf1yX1uLwgzRbSbyaxC2Eyyk.roa (hash: QYypOcFPdcc9ArENcLdBU9X1TsVQ+7g/yqAYCtsdaqk=)
2: nHjvvmeG-eICxCeI4bv3F4HKjEc.crl (hash: 7oZv0vCbsjZW/szb+tPbqHFAq4tjGUd/gFwDCjt9DLg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a0/4c1642-80f3-4523-974d-4fc1cad8ab22/1/nHjvvmeG-eICxCeI4bv3F4HKjEc.crl
rsync://rpki.ripe.net/repository/DEFAULT/a0/4c1642-80f3-4523-974d-4fc1cad8ab22/1/nHjvvmeG-eICxCeI4bv3F4HKjEc.mft
rsync://rpki.ripe.net/repository/DEFAULT/nHjvvmeG-eICxCeI4bv3F4HKjEc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 13 Mar 2025 19:14:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:8c:ce:e0:b6:eb:4a:c2:b1:5e:41:cd:77:16:89:ff:8d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9c78efbe6786f9e202c42788e1bbf71781ca8c47
Validity
Not Before: Mar 13 00:02:02 2025 GMT
Not After : Mar 14 00:02:02 2025 GMT
Subject: CN=14f3f8ef05a70914df1cc307000887d8b44f8579
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:a9:f1:4e:76:f9:27:03:a9:76:1d:ad:11:df:
51:91:50:2d:ab:d4:5c:a2:e8:a3:99:b0:c0:db:79:
1e:5e:89:73:c5:43:7b:f8:9d:29:26:cf:c7:3d:b5:
c3:27:f0:d0:81:ab:32:28:23:81:48:aa:bc:71:ce:
4a:5b:95:46:6d:9c:e0:74:41:ff:13:0e:6f:b7:ca:
78:04:ed:1c:91:37:6f:41:01:e4:32:ff:6f:44:79:
86:05:31:e1:7e:74:7c:de:cf:d4:42:d6:32:6c:86:
4d:ca:b5:c4:f7:b3:b2:dd:2a:29:d9:49:5c:83:8e:
e3:2a:5e:8a:37:96:95:85:26:6b:7c:d8:06:11:90:
42:c4:48:ef:87:c0:09:1f:66:fd:83:25:62:0d:17:
c4:77:c5:38:9c:c4:21:c2:83:73:da:6e:71:f8:77:
bd:b9:56:21:49:92:6d:66:77:7c:6a:cf:26:a7:c3:
b7:6a:2b:3c:e4:2a:4d:ab:c6:51:85:5b:79:76:b7:
fd:7b:6e:43:a5:cb:c4:df:ec:b5:8b:98:6e:0d:60:
b6:13:a1:91:f0:8e:9c:99:f3:67:04:d6:81:8e:44:
68:ba:33:b0:29:ba:46:5e:4d:b3:da:f3:a5:d2:8c:
97:66:7f:c5:51:d7:38:d0:28:39:36:0e:ff:3d:cc:
4f:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:F3:F8:EF:05:A7:09:14:DF:1C:C3:07:00:08:87:D8:B4:4F:85:79
X509v3 Authority Key Identifier:
keyid:9C:78:EF:BE:67:86:F9:E2:02:C4:27:88:E1:BB:F7:17:81:CA:8C:47
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nHjvvmeG-eICxCeI4bv3F4HKjEc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/4c1642-80f3-4523-974d-4fc1cad8ab22/1/nHjvvmeG-eICxCeI4bv3F4HKjEc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/4c1642-80f3-4523-974d-4fc1cad8ab22/1/nHjvvmeG-eICxCeI4bv3F4HKjEc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
01:e0:3f:45:93:d5:5e:3e:b8:98:cb:a3:03:8f:cf:0e:35:c4:
c4:44:78:d8:a7:30:39:f5:47:5a:d5:96:a3:df:45:f0:b1:f0:
8e:90:c9:0b:6d:49:5d:6a:10:6a:ba:6f:9a:b6:dd:fc:83:98:
94:39:e3:00:dd:15:31:05:ca:33:a0:a6:86:c6:a7:1f:98:07:
fd:16:8f:c3:0d:77:6e:68:7a:27:b5:fd:9f:75:58:61:5a:24:
cc:ef:1c:2c:0b:1d:5a:54:90:4b:5e:88:03:c2:00:44:31:d9:
26:b5:83:a8:8f:42:31:29:90:8f:7f:00:1d:1f:f3:db:78:f5:
44:9d:1b:d9:73:e8:d9:27:ca:fc:35:5b:ea:79:55:1c:a3:ee:
1f:7e:df:27:65:aa:ea:1e:9c:96:34:96:07:a4:08:0c:3f:70:
02:9c:cc:6f:53:85:61:d8:fa:20:42:d6:1a:70:e9:aa:86:d7:
be:ec:75:92:9d:8b:f6:2d:15:27:58:71:10:fa:eb:90:10:60:
49:86:8c:e5:04:e6:03:8e:26:56:69:0e:80:a5:e1:19:5a:fa:
03:79:a5:a8:4f:60:66:17:45:40:eb:3b:6a:e3:90:65:6d:ee:
96:f4:93:d2:d6:a6:ec:05:40:9a:96:77:51:8a:85:e7:94:78:
7a:7b:16:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 02:41:02 2025 by rpki-client