Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bf/eda15a-0423-46bd-b32a-52147aae0eb4/1/nIMTOn4Fk7s5jq25J1jLySydZaU.mft
File: nIMTOn4Fk7s5jq25J1jLySydZaU.mft (raw, json)
Hash identifier: RE558dyJnyzT5/3zj2n1labCnfdhkOCvO9ksrRMdmRA=
Subject key identifier: D7:06:98:76:7D:3A:7E:59:E7:6F:2B:DD:01:76:C7:6E:66:75:6C:06
Authority key identifier: 9C:83:13:3A:7E:05:93:BB:39:8E:AD:B9:27:58:CB:C9:2C:9D:65:A5
Certificate issuer: /CN=9c83133a7e0593bb398eadb92758cbc92c9d65a5
Certificate serial: 01958B8483DAF4B8070A3BF5D1BF0A196F05
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nIMTOn4Fk7s5jq25J1jLySydZaU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bf/eda15a-0423-46bd-b32a-52147aae0eb4/1/nIMTOn4Fk7s5jq25J1jLySydZaU.mft
Manifest number: 0FCA
Signing time: Wed 12 Mar 2025 18:01:12 +0000
Manifest this update: Wed 12 Mar 2025 18:01:12 +0000
Manifest next update: Thu 13 Mar 2025 18:01:12 +0000
Files and hashes: 1: ekhJmeQnAobhvtQLQDb4UB8M1mE.roa (hash: 6CiHXbuoqrzSCFBPUfq3RLFxMNDauAW0jWPQmmN8RFM=)
2: nIMTOn4Fk7s5jq25J1jLySydZaU.crl (hash: WMS1YajrS7nHFJGkRJG4QqaKhzek0DYDDY+AacQT3qE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bf/eda15a-0423-46bd-b32a-52147aae0eb4/1/nIMTOn4Fk7s5jq25J1jLySydZaU.crl
rsync://rpki.ripe.net/repository/DEFAULT/bf/eda15a-0423-46bd-b32a-52147aae0eb4/1/nIMTOn4Fk7s5jq25J1jLySydZaU.mft
rsync://rpki.ripe.net/repository/DEFAULT/nIMTOn4Fk7s5jq25J1jLySydZaU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 13 Mar 2025 18:01:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:8b:84:83:da:f4:b8:07:0a:3b:f5:d1:bf:0a:19:6f:05
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9c83133a7e0593bb398eadb92758cbc92c9d65a5
Validity
Not Before: Mar 12 18:01:12 2025 GMT
Not After : Mar 13 18:01:12 2025 GMT
Subject: CN=d70698767d3a7e59e76f2bdd0176c76e66756c06
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:75:93:05:a0:c3:fc:01:7c:60:f7:c6:5b:da:
fd:d2:f8:d8:cd:9a:e4:f8:77:aa:c9:56:da:c1:e1:
af:b4:43:0f:06:ad:c4:0a:5e:18:31:24:19:fa:26:
7c:b1:36:5f:e9:fb:85:40:fd:c8:69:69:a9:36:bb:
a8:5b:35:05:bb:1e:10:6e:3c:35:81:06:cc:01:2b:
20:39:fd:55:8b:c2:c7:1b:5a:8d:97:08:54:7e:0f:
68:00:5d:9b:08:a5:f1:0d:32:1b:ad:3b:ba:96:98:
7f:a6:fb:ab:33:36:47:80:13:c6:21:ef:01:f9:45:
fc:8f:cc:72:9b:6b:05:59:8d:86:a2:97:2c:79:9e:
7d:08:0b:ae:f9:65:ee:d1:01:03:8d:b6:1c:88:95:
21:c0:3d:d2:c4:ab:73:7f:04:0a:c7:6f:0c:d7:94:
eb:88:33:e6:0e:c4:80:1a:99:79:6c:85:70:e1:16:
9e:ab:73:aa:63:4e:cf:d7:c8:71:be:4e:ab:e4:19:
94:f3:39:04:70:cc:b8:2d:49:67:32:7c:cc:1e:06:
f0:1b:48:07:68:c1:f9:a2:ed:7c:96:64:7d:b8:16:
db:00:ac:fc:c7:6a:fc:52:8a:33:72:12:15:b9:e6:
b5:e0:e6:09:5e:d0:2c:6e:70:2c:45:3c:a0:f5:57:
33:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:06:98:76:7D:3A:7E:59:E7:6F:2B:DD:01:76:C7:6E:66:75:6C:06
X509v3 Authority Key Identifier:
keyid:9C:83:13:3A:7E:05:93:BB:39:8E:AD:B9:27:58:CB:C9:2C:9D:65:A5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nIMTOn4Fk7s5jq25J1jLySydZaU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/eda15a-0423-46bd-b32a-52147aae0eb4/1/nIMTOn4Fk7s5jq25J1jLySydZaU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/eda15a-0423-46bd-b32a-52147aae0eb4/1/nIMTOn4Fk7s5jq25J1jLySydZaU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bc:1c:58:0d:a7:22:6a:f8:de:f4:e2:41:81:fe:d4:86:7a:f1:
7c:64:2e:92:2b:54:55:84:c1:e8:f2:ce:ca:c9:9a:40:25:c8:
27:c2:5f:7f:a6:94:99:72:a1:ed:9f:d9:c6:39:fb:ab:94:2f:
fe:9c:a3:6e:1b:ad:4f:34:da:61:12:54:aa:90:50:b9:e2:d1:
60:eb:ed:b6:31:3d:86:41:66:28:b6:e6:c4:58:31:a0:94:2b:
db:10:bf:37:6c:58:8d:e1:dd:97:be:46:77:b1:4e:da:83:23:
a1:52:4f:20:b1:f3:45:eb:6b:18:22:0e:b9:42:a4:84:5d:e1:
60:ee:f1:3f:60:28:79:87:0b:20:0b:80:30:68:f7:3a:b3:fc:
b0:a3:d6:10:e4:61:f1:ff:0f:c5:87:c9:c2:0f:3d:fb:a8:d1:
69:8a:3f:ff:79:92:55:88:2f:ad:bd:43:a7:d7:dd:cb:c8:2e:
61:a1:15:81:b7:49:bb:b5:88:d8:26:5c:af:e2:28:57:e4:2c:
64:ed:05:30:b8:8a:25:85:09:4a:0f:63:f5:b1:f2:e2:15:a2:
67:cc:47:d8:36:a0:14:30:b3:da:a0:bf:b1:9d:70:80:42:8f:
26:4e:fa:f0:c6:c6:53:d1:71:ab:3e:98:c1:74:6e:db:6e:5e:
f9:e4:85:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 02:57:56 2025 by rpki-client