Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ad/b4f29a-a709-42ba-9632-58e4f24fabea/1/nssiK4Emoh3zLQFeTEhTlX0dl0Q.mft
File: nssiK4Emoh3zLQFeTEhTlX0dl0Q.mft (raw, json)
Hash identifier: L9mM5QSnl6g32qvQBvhtgHx2VukEDbOuGHHpzU0lEHw=
Subject key identifier: 46:D8:96:B7:67:17:96:EC:F0:F7:9A:FC:8E:F0:73:DB:48:E8:F4:06
Authority key identifier: 9E:CB:22:2B:81:26:A2:1D:F3:2D:01:5E:4C:48:53:95:7D:1D:97:44
Certificate issuer: /CN=9ecb222b8126a21df32d015e4c4853957d1d9744
Certificate serial: 019637644C61F95029F44BA09AFD07F07B51
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nssiK4Emoh3zLQFeTEhTlX0dl0Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ad/b4f29a-a709-42ba-9632-58e4f24fabea/1/nssiK4Emoh3zLQFeTEhTlX0dl0Q.mft
Manifest number: 081A
Signing time: Tue 15 Apr 2025 03:00:42 +0000
Manifest this update: Tue 15 Apr 2025 03:00:42 +0000
Manifest next update: Wed 16 Apr 2025 03:00:42 +0000
Files and hashes: 1: nssiK4Emoh3zLQFeTEhTlX0dl0Q.crl (hash: Nzws+peLyAW2Or1mYuEbdIlVFynyC/nWFuTqlvBnMi0=)
2: tONpcnjfR_-MsVEafiNaGJ4uDm4.roa (hash: SGzJp4OEszdVKR+f54x18hkn789cto3mWJ/E8xABEU0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ad/b4f29a-a709-42ba-9632-58e4f24fabea/1/nssiK4Emoh3zLQFeTEhTlX0dl0Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/ad/b4f29a-a709-42ba-9632-58e4f24fabea/1/nssiK4Emoh3zLQFeTEhTlX0dl0Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/nssiK4Emoh3zLQFeTEhTlX0dl0Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 16 Apr 2025 03:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:37:64:4c:61:f9:50:29:f4:4b:a0:9a:fd:07:f0:7b:51
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9ecb222b8126a21df32d015e4c4853957d1d9744
Validity
Not Before: Apr 15 03:00:42 2025 GMT
Not After : Apr 16 03:00:42 2025 GMT
Subject: CN=46d896b7671796ecf0f79afc8ef073db48e8f406
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:04:9a:58:a1:ca:57:d5:9f:7a:6e:2f:8f:d3:
ba:aa:d3:05:3d:a0:e4:40:00:1f:3d:ed:69:e4:81:
7f:f0:4c:ed:da:86:07:07:43:aa:c4:6a:6a:54:bf:
2b:9b:f5:7f:63:8d:ca:17:50:b4:7c:91:7c:a5:45:
bf:96:74:1f:68:a2:a9:88:07:ba:10:32:89:68:37:
d1:14:50:ff:0e:87:c5:75:69:97:75:a7:dd:44:e0:
78:bd:d2:86:3b:31:52:ef:83:81:5d:8c:02:15:f2:
78:fe:d9:4e:85:7f:28:f7:52:93:f1:4b:7b:bb:8d:
f4:b7:08:4e:b3:a7:2a:df:07:b2:6e:5a:a8:9e:c4:
2a:f1:25:d9:4c:ff:85:28:28:61:74:80:2e:da:c6:
77:65:96:f0:39:ca:fc:ea:65:90:d3:32:d7:fa:f9:
d9:8d:e3:66:53:de:ff:3e:3c:ba:54:2f:46:95:27:
73:08:95:46:bc:2c:f5:91:57:dc:fa:64:7f:8e:4a:
82:9c:d2:9a:b8:ef:8e:0e:cf:aa:d6:5f:0c:61:71:
51:6a:f7:eb:53:43:d2:ba:b8:35:70:a3:1b:06:e4:
20:84:e3:37:b9:a2:1a:4a:da:ad:f9:5a:04:67:4b:
1c:e4:00:af:37:b2:d4:85:a6:e1:a8:d9:c7:9a:f1:
f3:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:D8:96:B7:67:17:96:EC:F0:F7:9A:FC:8E:F0:73:DB:48:E8:F4:06
X509v3 Authority Key Identifier:
keyid:9E:CB:22:2B:81:26:A2:1D:F3:2D:01:5E:4C:48:53:95:7D:1D:97:44
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nssiK4Emoh3zLQFeTEhTlX0dl0Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/b4f29a-a709-42ba-9632-58e4f24fabea/1/nssiK4Emoh3zLQFeTEhTlX0dl0Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/b4f29a-a709-42ba-9632-58e4f24fabea/1/nssiK4Emoh3zLQFeTEhTlX0dl0Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
06:e9:10:20:61:4c:bf:58:06:c7:e7:52:46:5a:ed:cc:37:14:
78:27:3d:16:a1:d4:76:91:0d:fc:4b:df:47:d9:33:e2:c2:4b:
4c:ff:80:81:b2:8f:ed:c3:f2:66:af:55:65:4b:34:1c:28:02:
f7:e4:66:84:06:0d:75:76:c3:27:ff:30:36:e4:10:e5:b1:70:
b4:09:d8:a1:aa:17:88:ca:67:ac:36:38:24:7d:b9:f0:56:fc:
bd:7a:d8:e8:de:ed:51:d6:43:c7:e0:c6:6b:95:f1:a3:69:89:
e5:20:7b:e2:a6:6f:46:ef:27:14:d9:1b:e4:e3:c4:5a:21:11:
2c:8b:b3:57:e0:10:dc:0f:15:79:74:20:3d:20:55:eb:c2:c4:
65:b1:1b:1b:b6:81:43:d2:96:4a:05:82:ab:55:44:13:ce:b6:
78:29:a8:43:3c:f4:d9:2c:cd:c5:e4:1b:9f:69:ac:e9:dd:e6:
b7:d9:dd:e9:28:9a:ee:14:22:84:c9:5e:2e:f8:c4:d8:92:0d:
db:d4:7a:73:df:b0:a8:c3:92:6d:83:45:08:90:10:8e:25:8c:
70:76:78:f5:27:14:20:3a:05:fd:89:a4:ff:58:6d:ed:d1:e0:
c9:c4:dc:ed:a6:82:6c:8c:ab:1b:f6:30:17:b0:44:f7:76:33:
5b:7a:6d:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 15 11:42:17 2025 by rpki-client