Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ba/ed4e2c-e5ad-417a-8788-11824406bd5d/1/nOTmWuzJXURqDLZAuXZvoPgVDjw.mft
File: nOTmWuzJXURqDLZAuXZvoPgVDjw.mft (raw, json)
Hash identifier: oiEF2WG3w62kk3y5sa5ydH1UomUhYi3KwejUymqrjdY=
Subject key identifier: B8:15:96:7A:82:89:65:19:D7:E5:7E:71:CC:0E:D5:E8:6A:95:8E:0E
Authority key identifier: 9C:E4:E6:5A:EC:C9:5D:44:6A:0C:B6:40:B9:76:6F:A0:F8:15:0E:3C
Certificate issuer: /CN=9ce4e65aecc95d446a0cb640b9766fa0f8150e3c
Certificate serial: 0196550071E7099AB1D53E8A86D1E035BD44
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nOTmWuzJXURqDLZAuXZvoPgVDjw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ba/ed4e2c-e5ad-417a-8788-11824406bd5d/1/nOTmWuzJXURqDLZAuXZvoPgVDjw.mft
Manifest number: 0E01
Signing time: Sun 20 Apr 2025 21:00:14 +0000
Manifest this update: Sun 20 Apr 2025 21:00:14 +0000
Manifest next update: Mon 21 Apr 2025 21:00:14 +0000
Files and hashes: 1: nOTmWuzJXURqDLZAuXZvoPgVDjw.crl (hash: kIwb606JE/lYq/x6zu6iT5xCGKpZ7DgBGIgKaJzai+s=)
2: wnex2LpnDh2tDYAOL_JlA2jqYbg.roa (hash: jkFPmngwGBf/VR9fqzS0+q+xo9EQNuNbpIxHsY+rxw0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ba/ed4e2c-e5ad-417a-8788-11824406bd5d/1/nOTmWuzJXURqDLZAuXZvoPgVDjw.crl
rsync://rpki.ripe.net/repository/DEFAULT/ba/ed4e2c-e5ad-417a-8788-11824406bd5d/1/nOTmWuzJXURqDLZAuXZvoPgVDjw.mft
rsync://rpki.ripe.net/repository/DEFAULT/nOTmWuzJXURqDLZAuXZvoPgVDjw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Apr 2025 21:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:55:00:71:e7:09:9a:b1:d5:3e:8a:86:d1:e0:35:bd:44
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9ce4e65aecc95d446a0cb640b9766fa0f8150e3c
Validity
Not Before: Apr 20 21:00:14 2025 GMT
Not After : Apr 21 21:00:14 2025 GMT
Subject: CN=b815967a82896519d7e57e71cc0ed5e86a958e0e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:6b:1f:9f:68:f3:a3:e4:f2:09:e1:a2:d5:98:
a6:45:ef:61:ea:70:d7:e3:8f:be:44:a4:6a:68:6b:
cf:e5:82:97:32:9d:de:1d:36:d8:d7:d6:f5:30:59:
77:85:b5:48:a0:03:1b:e4:ab:05:a9:40:23:90:8f:
87:08:82:b1:06:d3:86:75:c8:48:c1:5e:8b:00:61:
33:59:ac:0e:c6:98:3f:83:92:75:95:fd:82:39:3d:
8f:89:44:0a:2a:a7:68:8c:9d:64:60:4c:5b:21:5a:
e6:5c:bc:b0:9e:e2:4b:cf:0d:bc:99:62:f4:40:e8:
6d:a1:0c:3b:39:e9:a1:b3:d6:10:a6:60:a5:1f:bb:
37:b8:4c:e7:10:82:55:de:6b:09:48:16:c8:ad:3f:
6b:fd:19:8c:df:d0:9f:8a:3a:2b:43:16:a4:91:50:
12:a4:52:9a:76:44:dd:b3:0b:c9:e7:6f:87:ea:48:
3c:4e:54:b4:4b:18:60:50:e2:49:1f:59:24:f8:6b:
b7:59:70:39:69:1c:3a:54:a5:7a:ca:66:0e:a8:da:
ac:44:a3:c0:c0:4b:02:40:88:eb:2b:3e:d5:8a:23:
83:9c:18:16:22:eb:58:33:2a:21:3b:7b:79:5b:28:
ee:12:93:8d:97:38:65:97:7f:1f:68:52:d5:8a:e4:
32:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:15:96:7A:82:89:65:19:D7:E5:7E:71:CC:0E:D5:E8:6A:95:8E:0E
X509v3 Authority Key Identifier:
keyid:9C:E4:E6:5A:EC:C9:5D:44:6A:0C:B6:40:B9:76:6F:A0:F8:15:0E:3C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nOTmWuzJXURqDLZAuXZvoPgVDjw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/ed4e2c-e5ad-417a-8788-11824406bd5d/1/nOTmWuzJXURqDLZAuXZvoPgVDjw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/ed4e2c-e5ad-417a-8788-11824406bd5d/1/nOTmWuzJXURqDLZAuXZvoPgVDjw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b2:7a:29:e4:b3:33:f4:ca:be:98:15:9c:41:7a:67:9e:8f:45:
af:f1:40:fb:65:67:d8:61:5f:07:07:c1:a8:ab:86:19:b8:71:
1f:7c:57:ba:85:73:a7:0b:8b:c6:42:2d:ea:05:9c:8f:95:7f:
6b:c5:de:91:d5:39:30:8c:45:37:bc:0e:18:96:7e:01:0c:5d:
55:fe:cd:bf:5b:23:04:36:84:35:09:50:86:44:35:e4:da:ec:
ba:c5:db:0b:e2:99:ce:a2:a1:8a:6f:3a:ea:29:31:e0:b8:30:
3b:86:c8:f7:ac:1a:06:6d:0e:78:8d:63:fd:94:19:17:a4:59:
fa:d4:4d:c2:0b:7a:92:c2:85:ac:94:6c:2e:90:e1:b3:b7:15:
ea:1e:83:fe:a4:af:01:17:82:42:14:da:1a:bd:6f:cd:18:f8:
32:c2:5c:7a:8c:b3:ee:ad:da:30:21:7d:12:3d:30:ef:20:e5:
82:f0:5d:29:8f:ee:09:cf:c8:e5:21:a2:28:59:c6:a7:5f:d1:
a3:7a:c6:1c:69:c5:9d:f1:9d:27:a8:b5:f0:90:5c:de:91:60:
dd:a9:e6:38:7e:07:0b:c8:1f:70:ff:42:b6:42:8d:80:0c:09:
a6:07:b4:26:f7:38:e8:ea:47:2a:1b:2e:e1:14:66:dc:46:a9:
fd:6c:10:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 07:50:33 2025 by rpki-client