Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a4/a33b29-bef3-461d-8878-2155126b1643/1/nPxi7NyR0Rl5zB0hpHxuw3jfpDY.mft
File: nPxi7NyR0Rl5zB0hpHxuw3jfpDY.mft (raw, json)
Hash identifier: rG06ni1Ju8UeRaUGc066LycmNF3wPBM8ZiWGZ8Kprpc=
Subject key identifier: 1E:62:1E:4E:2A:29:A2:A4:2C:FA:B0:AC:E3:B9:31:FA:D7:F7:81:D5
Authority key identifier: 9C:FC:62:EC:DC:91:D1:19:79:CC:1D:21:A4:7C:6E:C3:78:DF:A4:36
Certificate issuer: /CN=9cfc62ecdc91d11979cc1d21a47c6ec378dfa436
Certificate serial: 0196556E776FB83B5A1B7EED5AD28C8DC3C4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nPxi7NyR0Rl5zB0hpHxuw3jfpDY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a4/a33b29-bef3-461d-8878-2155126b1643/1/nPxi7NyR0Rl5zB0hpHxuw3jfpDY.mft
Manifest number: 0EF8
Signing time: Sun 20 Apr 2025 23:00:24 +0000
Manifest this update: Sun 20 Apr 2025 23:00:24 +0000
Manifest next update: Mon 21 Apr 2025 23:00:24 +0000
Files and hashes: 1: BuFdaMS1qY4jt-i_y_cN4QOcG_g.roa (hash: ltXbKfkdHFu9ibmOqMdLpCxXbbDufLPF6M4KyVnL37o=)
2: nPxi7NyR0Rl5zB0hpHxuw3jfpDY.crl (hash: Rn//zk7JfIYyELWC3GcP59u5p983FlDuf5m4egCD4wg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a4/a33b29-bef3-461d-8878-2155126b1643/1/nPxi7NyR0Rl5zB0hpHxuw3jfpDY.crl
rsync://rpki.ripe.net/repository/DEFAULT/a4/a33b29-bef3-461d-8878-2155126b1643/1/nPxi7NyR0Rl5zB0hpHxuw3jfpDY.mft
rsync://rpki.ripe.net/repository/DEFAULT/nPxi7NyR0Rl5zB0hpHxuw3jfpDY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Apr 2025 23:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:55:6e:77:6f:b8:3b:5a:1b:7e:ed:5a:d2:8c:8d:c3:c4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9cfc62ecdc91d11979cc1d21a47c6ec378dfa436
Validity
Not Before: Apr 20 23:00:24 2025 GMT
Not After : Apr 21 23:00:24 2025 GMT
Subject: CN=1e621e4e2a29a2a42cfab0ace3b931fad7f781d5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:29:a8:91:02:d3:7e:44:e0:84:e7:d5:3d:bb:
5b:42:68:c6:24:d6:a8:df:b4:43:83:7e:76:14:63:
58:d0:16:cc:ec:bc:4a:b6:09:0f:7e:87:f0:f1:23:
af:36:b8:69:d3:29:9f:ee:35:5e:21:ae:90:d1:02:
6f:01:5e:d7:67:0c:f3:af:18:6d:e5:22:88:6c:f4:
e1:ba:eb:53:d8:c0:b5:b7:c8:da:40:de:fc:61:c5:
94:c0:db:14:7d:8a:7f:55:bb:e5:04:43:23:19:09:
0b:0f:05:db:ea:b8:18:25:3f:98:72:51:98:5e:41:
cb:bf:06:a4:39:3c:4e:2f:7c:97:e2:c1:e4:a3:8f:
b7:aa:62:a2:e3:0b:e3:be:4a:1f:97:80:e0:da:10:
5f:5f:1f:05:36:94:98:de:34:bf:6a:61:f4:e7:05:
52:f4:34:d0:42:7b:97:c7:97:19:7f:e8:9f:e3:50:
1e:90:26:83:47:d0:e7:7d:31:55:20:ee:70:8e:f9:
ee:ff:e2:fb:17:4f:ce:3d:0c:68:a8:f9:36:83:dd:
4b:1f:5f:37:6f:1a:40:9d:12:6d:a8:17:e5:73:75:
74:70:12:36:fc:54:76:fa:29:63:d1:bf:12:4f:29:
4e:9b:8f:f7:c1:54:7f:43:da:36:ca:95:df:b6:b4:
31:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:62:1E:4E:2A:29:A2:A4:2C:FA:B0:AC:E3:B9:31:FA:D7:F7:81:D5
X509v3 Authority Key Identifier:
keyid:9C:FC:62:EC:DC:91:D1:19:79:CC:1D:21:A4:7C:6E:C3:78:DF:A4:36
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nPxi7NyR0Rl5zB0hpHxuw3jfpDY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/a33b29-bef3-461d-8878-2155126b1643/1/nPxi7NyR0Rl5zB0hpHxuw3jfpDY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/a33b29-bef3-461d-8878-2155126b1643/1/nPxi7NyR0Rl5zB0hpHxuw3jfpDY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
51:ff:86:44:8c:b4:1f:19:e3:6b:21:09:e3:d9:7e:76:10:30:
77:56:16:e1:f8:60:44:54:8e:b3:36:dc:63:f9:8e:42:79:50:
c6:a1:eb:08:15:21:16:33:30:ac:cd:31:51:61:63:e1:df:00:
f4:f2:5e:95:d3:a1:83:4a:68:97:2d:72:10:24:b4:d9:cd:d8:
21:b4:12:4f:bd:8e:2e:cb:fe:5a:b3:1c:81:78:1b:bb:e1:68:
ee:d6:88:cd:a6:fe:4f:0f:cb:63:a2:d6:5c:99:65:da:23:c8:
d1:3e:86:ab:f9:be:38:cb:d3:4d:62:82:4f:05:89:a3:0e:19:
2c:ab:4e:bb:0f:7d:20:58:91:71:c9:65:c8:57:03:b7:68:4f:
89:2c:1f:39:7f:44:05:58:2a:d0:5b:f9:ba:9a:e8:d7:04:90:
16:b3:27:3c:d3:bf:8a:e3:82:d1:73:73:ba:b4:5c:7e:8b:d9:
9a:46:43:a2:d4:5f:64:8b:4f:58:7c:b1:23:8d:84:6b:76:ea:
41:8e:de:b7:c8:51:21:2e:23:c9:97:60:33:89:71:72:3d:b8:
0e:4c:67:34:79:a5:89:a0:8a:33:04:37:7b:e1:79:1d:ca:3b:
2d:6d:db:f6:73:b8:78:83:b3:74:db:2d:97:45:cd:59:67:f9:
a3:73:cb:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 03:25:38 2025 by rpki-client