Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b3/73e52f-42e3-4a31-9736-a6b7600871a6/1/nCim7Q9c_Ody1c5bA7tCkyyKZNA.mft
File: nCim7Q9c_Ody1c5bA7tCkyyKZNA.mft (raw, json)
Hash identifier: R6oePtPNlqrvElm9eogoYrlhSC4nECS9d2Zc8V4t9B0=
Subject key identifier: AB:8A:0F:0C:F7:44:B9:6C:FE:43:8F:47:11:F2:F8:B8:AD:B2:29:83
Authority key identifier: 9C:28:A6:ED:0F:5C:FC:E7:72:D5:CE:5B:03:BB:42:93:2C:8A:64:D0
Certificate issuer: /CN=9c28a6ed0f5cfce772d5ce5b03bb42932c8a64d0
Certificate serial: 01963F8BA3A1B108A9F22DED0F493F52F25F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nCim7Q9c_Ody1c5bA7tCkyyKZNA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b3/73e52f-42e3-4a31-9736-a6b7600871a6/1/nCim7Q9c_Ody1c5bA7tCkyyKZNA.mft
Manifest number: 13E9
Signing time: Wed 16 Apr 2025 17:00:38 +0000
Manifest this update: Wed 16 Apr 2025 17:00:38 +0000
Manifest next update: Thu 17 Apr 2025 17:00:38 +0000
Files and hashes: 1: D2puN1AdZ1JNvFyB30_yGN8jQe0.roa (hash: 2k+YekT8y6pWHIhQMm8Q342e5tW1eRByVypogLnX8G0=)
2: U_LNSvlDlkkr0YEu8loP_N3lVG8.roa (hash: sfDFxTDzQkmKbFdSJOmY1OQKmiVJ1hkpwWXjIhD3ogw=)
3: nCim7Q9c_Ody1c5bA7tCkyyKZNA.crl (hash: PYUxQlRNdaT7plXrX2vgHSfPojAxNAMJqmaakeE3h6Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b3/73e52f-42e3-4a31-9736-a6b7600871a6/1/nCim7Q9c_Ody1c5bA7tCkyyKZNA.crl
rsync://rpki.ripe.net/repository/DEFAULT/b3/73e52f-42e3-4a31-9736-a6b7600871a6/1/nCim7Q9c_Ody1c5bA7tCkyyKZNA.mft
rsync://rpki.ripe.net/repository/DEFAULT/nCim7Q9c_Ody1c5bA7tCkyyKZNA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 17 Apr 2025 13:16:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:3f:8b:a3:a1:b1:08:a9:f2:2d:ed:0f:49:3f:52:f2:5f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9c28a6ed0f5cfce772d5ce5b03bb42932c8a64d0
Validity
Not Before: Apr 16 17:00:38 2025 GMT
Not After : Apr 17 17:00:38 2025 GMT
Subject: CN=ab8a0f0cf744b96cfe438f4711f2f8b8adb22983
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:11:82:4c:3f:ac:0d:a4:ec:2d:56:30:e6:7f:
fe:2d:bf:74:8d:06:4d:e1:05:f1:de:a7:c0:31:31:
67:97:57:a3:87:48:e0:12:7c:c8:92:d0:c5:0c:11:
51:24:d2:91:44:7a:0d:2d:7b:36:da:ca:ee:ac:1b:
14:36:75:33:07:00:76:cb:7a:57:d6:03:43:18:69:
1c:e0:ce:c6:b0:d2:b2:05:1d:21:fa:02:69:c9:07:
90:ae:d2:32:7f:66:61:a3:65:f9:4a:23:44:6e:9b:
3d:e3:ec:63:8b:fb:17:56:40:cb:fb:ab:6a:90:d1:
9a:98:c5:1d:21:8c:06:f9:57:8b:7b:b3:d8:32:cf:
78:6c:e1:bb:b8:37:75:43:72:64:6c:e5:3c:fe:a1:
9c:a0:9f:86:13:44:9c:71:13:9f:df:bb:b6:8e:82:
7a:d1:40:6b:c0:8e:c7:91:e5:ba:31:01:a0:c4:03:
c2:26:12:2c:ee:58:ae:3d:eb:10:21:33:61:c1:58:
9b:14:b2:c0:de:38:20:34:f0:6e:6d:e2:da:cb:ba:
e4:e4:58:0b:de:58:4b:35:3d:77:26:bc:fc:29:f9:
67:e8:c6:64:5f:12:82:35:0e:48:df:88:d4:a4:22:
c2:35:61:4c:b8:f9:6a:e6:f1:e3:d3:6c:75:3d:a0:
14:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:8A:0F:0C:F7:44:B9:6C:FE:43:8F:47:11:F2:F8:B8:AD:B2:29:83
X509v3 Authority Key Identifier:
keyid:9C:28:A6:ED:0F:5C:FC:E7:72:D5:CE:5B:03:BB:42:93:2C:8A:64:D0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nCim7Q9c_Ody1c5bA7tCkyyKZNA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/73e52f-42e3-4a31-9736-a6b7600871a6/1/nCim7Q9c_Ody1c5bA7tCkyyKZNA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/73e52f-42e3-4a31-9736-a6b7600871a6/1/nCim7Q9c_Ody1c5bA7tCkyyKZNA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
81:66:f9:00:f9:8f:03:6a:60:07:aa:35:ef:29:00:dd:dd:f2:
78:43:e1:84:65:96:ff:22:0a:9e:45:e7:67:27:6d:eb:a4:db:
87:c0:18:29:58:3e:1d:a9:f7:e3:18:05:3b:2b:94:97:09:05:
24:96:da:03:b3:34:c7:05:93:df:16:9b:39:68:3d:9f:bb:86:
2e:50:d4:1e:4e:7e:9a:a9:32:af:7c:f6:ff:aa:76:e7:b0:3d:
ea:7e:18:3b:e7:fb:dc:83:ae:0f:40:34:d8:5d:db:f9:68:33:
d2:4f:d7:e9:72:b1:e4:94:a0:cb:72:c7:ee:ed:78:2c:c8:2f:
a2:cb:f1:90:51:22:cc:66:9e:87:5f:4f:5a:5a:80:51:e1:65:
b0:c3:53:e8:84:34:9f:42:e2:db:1c:78:ee:47:14:a7:09:42:
f3:6b:43:05:26:ae:3c:71:ff:a2:04:3d:37:34:7e:83:1b:95:
3a:32:53:4b:28:33:2e:5c:66:44:53:3a:7f:0d:23:37:cc:53:
e5:a2:83:7a:3f:17:e5:db:e1:24:36:bb:ab:47:8b:d0:c2:38:
b3:e0:22:70:05:47:a6:0f:c1:14:d1:fb:0b:f8:22:6a:ea:67:
f7:9b:ee:00:89:2b:4e:8f:68:a5:2a:06:c3:ed:d5:87:51:9b:
8a:60:93:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 16 21:59:45 2025 by rpki-client