Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e1/825cce-0643-4b0b-94b8-b7273c8e3023/1/ndZC_U41WVtf1FikOjrKyLkTlc4.mft
File: ndZC_U41WVtf1FikOjrKyLkTlc4.mft (raw, json)
Hash identifier: V02ratspI/AnMmxjmlFNrsK2uleSt934KH8oBH7huUo=
Subject key identifier: 14:0F:2E:6A:EA:65:C4:20:F1:FC:B7:60:9F:2F:2F:FD:36:17:62:67
Authority key identifier: 9D:D6:42:FD:4E:35:59:5B:5F:D4:58:A4:3A:3A:CA:C8:B9:13:95:CE
Certificate issuer: /CN=9dd642fd4e35595b5fd458a43a3acac8b91395ce
Certificate serial: 01964CD93451D6AC0480F44613975442BB09
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ndZC_U41WVtf1FikOjrKyLkTlc4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e1/825cce-0643-4b0b-94b8-b7273c8e3023/1/ndZC_U41WVtf1FikOjrKyLkTlc4.mft
Manifest number: 0AA4
Signing time: Sat 19 Apr 2025 07:00:25 +0000
Manifest this update: Sat 19 Apr 2025 07:00:25 +0000
Manifest next update: Sun 20 Apr 2025 07:00:25 +0000
Files and hashes: 1: ECvfm0gD15erbdYEbJ2O8AxuCuo.roa (hash: GjjofPn0BcYPE+NfKTzkDKX8EBfUwYH0FkVVr77Ou74=)
2: ndZC_U41WVtf1FikOjrKyLkTlc4.crl (hash: POzmw5E09dq7HNNLOS8h12mg28kVjFdkFhhTVCAHDXg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e1/825cce-0643-4b0b-94b8-b7273c8e3023/1/ndZC_U41WVtf1FikOjrKyLkTlc4.crl
rsync://rpki.ripe.net/repository/DEFAULT/e1/825cce-0643-4b0b-94b8-b7273c8e3023/1/ndZC_U41WVtf1FikOjrKyLkTlc4.mft
rsync://rpki.ripe.net/repository/DEFAULT/ndZC_U41WVtf1FikOjrKyLkTlc4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 20 Apr 2025 04:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:4c:d9:34:51:d6:ac:04:80:f4:46:13:97:54:42:bb:09
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9dd642fd4e35595b5fd458a43a3acac8b91395ce
Validity
Not Before: Apr 19 07:00:25 2025 GMT
Not After : Apr 20 07:00:25 2025 GMT
Subject: CN=140f2e6aea65c420f1fcb7609f2f2ffd36176267
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:55:c0:f1:e3:44:af:07:48:f6:bf:c0:c2:dc:
33:ab:da:49:78:b7:e1:4f:51:80:84:fe:01:41:c0:
56:a3:fd:51:64:19:3e:8d:73:1a:88:a5:c9:c9:00:
4d:ee:66:88:21:0f:97:d9:4b:da:2a:0e:3e:05:38:
91:5c:22:a8:10:2d:03:24:ea:ff:8b:76:a3:36:4a:
17:dd:d4:98:0b:89:db:2a:de:09:9e:30:0c:b3:14:
cf:a7:c8:85:66:95:ce:75:f3:82:ee:70:af:20:a3:
6f:2a:22:ad:ab:8c:0a:cb:c3:43:45:8c:75:80:ac:
2e:10:9e:fd:a5:ad:f0:42:40:b2:6a:8e:a9:68:fa:
0f:7e:ce:d7:7b:1c:4e:d6:6a:05:c7:6a:ea:b5:3d:
cb:71:fb:ec:d4:fd:02:8f:19:33:ac:dc:9d:5d:1d:
ad:a1:bf:04:86:12:01:f8:6e:17:ca:9f:9a:84:33:
12:fb:58:73:6e:96:5f:5d:74:49:c7:0d:5f:71:36:
48:06:0f:76:98:c8:ff:1d:d0:f6:c3:ca:a6:4b:33:
89:fb:6d:bd:14:82:09:8b:fb:7c:6d:c1:8f:38:f3:
2b:a4:06:61:68:c6:49:ed:fa:95:4e:bc:be:77:13:
69:fa:f3:ba:39:5b:48:9e:7e:79:86:b9:3b:d6:65:
e7:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:0F:2E:6A:EA:65:C4:20:F1:FC:B7:60:9F:2F:2F:FD:36:17:62:67
X509v3 Authority Key Identifier:
keyid:9D:D6:42:FD:4E:35:59:5B:5F:D4:58:A4:3A:3A:CA:C8:B9:13:95:CE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ndZC_U41WVtf1FikOjrKyLkTlc4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/825cce-0643-4b0b-94b8-b7273c8e3023/1/ndZC_U41WVtf1FikOjrKyLkTlc4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/825cce-0643-4b0b-94b8-b7273c8e3023/1/ndZC_U41WVtf1FikOjrKyLkTlc4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
aa:0b:dc:66:00:e2:1f:67:0d:c7:30:ca:e0:b5:d6:6b:47:f6:
ad:71:21:7b:fb:e7:77:79:45:9f:b6:dd:0a:bd:ec:72:5a:05:
20:53:84:7b:a7:03:87:ec:85:00:c8:18:94:23:ba:91:aa:06:
8b:a1:5d:93:a1:bf:22:73:68:9c:c6:fe:4b:b4:99:b8:9d:59:
bd:69:e7:1d:a9:b4:0c:21:04:0b:60:fc:ac:51:3a:dd:a6:ff:
03:0f:eb:1a:cf:6e:a9:df:ce:88:5c:a2:f4:51:61:3f:b5:69:
d2:e3:b1:21:66:41:dd:cd:54:b1:19:bb:7e:66:a6:9c:09:3f:
18:1d:10:2f:5f:2d:4e:2c:b5:c4:b8:97:95:d9:f2:6f:d9:e9:
9a:b9:35:fd:d5:4d:48:a4:f0:ee:ba:c4:73:c0:f7:63:50:a1:
6d:99:e9:28:e5:42:eb:af:bc:b0:ce:e3:e7:fb:ce:64:ba:fb:
cf:db:38:f5:18:31:ee:c9:e4:59:fe:43:3a:b3:10:cd:31:53:
d2:a2:29:cb:91:5b:d0:a7:85:4b:03:c5:de:b7:79:01:6d:80:
84:3e:86:e3:01:c1:20:78:cf:44:15:c3:6f:1b:21:b5:e9:26:
cd:1b:38:59:3b:e3:d3:8b:a8:ec:a4:ce:4a:da:94:5d:bf:4b:
c7:e3:a2:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 12:07:08 2025 by rpki-client