Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ea/e4e81c-4e84-4524-8ddc-4010a36d9cdd/1/nkuBjJLE5paGs8KBAIVd-lA6BXo.mft
File: nkuBjJLE5paGs8KBAIVd-lA6BXo.mft (raw, json)
Hash identifier: R+n90nrihKNTNjD6RjT9UDUZpJGZQxH3nf0P20oM7F8=
Subject key identifier: D4:25:A4:57:47:47:C3:91:5D:3C:20:8C:BC:1C:29:0F:9E:F3:BA:80
Authority key identifier: 9E:4B:81:8C:92:C4:E6:96:86:B3:C2:81:00:85:5D:FA:50:3A:05:7A
Certificate issuer: /CN=9e4b818c92c4e69686b3c28100855dfa503a057a
Certificate serial: 019651FFB287A4AF996D40A3F7CFCC3EAD42
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nkuBjJLE5paGs8KBAIVd-lA6BXo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ea/e4e81c-4e84-4524-8ddc-4010a36d9cdd/1/nkuBjJLE5paGs8KBAIVd-lA6BXo.mft
Manifest number: 14F9
Signing time: Sun 20 Apr 2025 07:00:33 +0000
Manifest this update: Sun 20 Apr 2025 07:00:33 +0000
Manifest next update: Mon 21 Apr 2025 07:00:33 +0000
Files and hashes: 1: nkuBjJLE5paGs8KBAIVd-lA6BXo.crl (hash: n7ycYMdXNgkxjGcFFq/OOWpwlJV0o3i5DRXQcn6bDLo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ea/e4e81c-4e84-4524-8ddc-4010a36d9cdd/1/nkuBjJLE5paGs8KBAIVd-lA6BXo.crl
rsync://rpki.ripe.net/repository/DEFAULT/ea/e4e81c-4e84-4524-8ddc-4010a36d9cdd/1/nkuBjJLE5paGs8KBAIVd-lA6BXo.mft
rsync://rpki.ripe.net/repository/DEFAULT/nkuBjJLE5paGs8KBAIVd-lA6BXo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Apr 2025 07:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:51:ff:b2:87:a4:af:99:6d:40:a3:f7:cf:cc:3e:ad:42
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9e4b818c92c4e69686b3c28100855dfa503a057a
Validity
Not Before: Apr 20 07:00:33 2025 GMT
Not After : Apr 21 07:00:33 2025 GMT
Subject: CN=d425a4574747c3915d3c208cbc1c290f9ef3ba80
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:4c:df:a8:43:c3:54:3c:da:86:4d:42:a5:91:
5a:e7:f2:61:cd:b9:53:40:fe:98:e8:09:b2:8e:1e:
7a:d0:e7:49:aa:2a:32:e3:cd:85:6e:e6:72:b1:ef:
00:05:39:1b:55:8d:79:dc:ed:fb:d4:df:c4:87:1b:
c9:98:03:bc:15:4c:57:f4:b3:bf:83:c8:57:08:bf:
ab:5a:a2:bb:89:85:2f:6e:db:5c:0b:8e:ed:59:44:
31:a5:ac:fd:ee:a9:fd:0a:4c:5c:32:b7:32:78:5a:
32:97:4c:a0:fd:92:23:97:6c:f5:4d:41:bd:58:ef:
5d:ef:91:f4:68:10:07:ff:da:ef:9b:90:1e:ee:ad:
07:80:54:4f:04:3a:91:bf:7d:8c:29:18:39:8b:43:
28:03:9a:d2:8a:7d:b7:49:29:00:74:04:82:34:2c:
b4:10:76:70:64:30:ce:7d:c0:0d:a9:e2:0d:0b:00:
3c:a9:03:ca:d5:f6:3b:ac:06:ae:f8:20:71:4e:e0:
0e:e3:84:17:ae:68:37:bf:cc:95:01:e2:ee:f4:b0:
8e:30:96:4c:8e:be:07:91:a8:95:32:10:cf:8d:91:
aa:11:62:db:b2:38:a5:29:25:6b:db:32:92:c0:36:
e7:cb:2d:15:a4:08:9f:66:44:23:71:fd:81:21:11:
2f:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:25:A4:57:47:47:C3:91:5D:3C:20:8C:BC:1C:29:0F:9E:F3:BA:80
X509v3 Authority Key Identifier:
keyid:9E:4B:81:8C:92:C4:E6:96:86:B3:C2:81:00:85:5D:FA:50:3A:05:7A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nkuBjJLE5paGs8KBAIVd-lA6BXo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/e4e81c-4e84-4524-8ddc-4010a36d9cdd/1/nkuBjJLE5paGs8KBAIVd-lA6BXo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/e4e81c-4e84-4524-8ddc-4010a36d9cdd/1/nkuBjJLE5paGs8KBAIVd-lA6BXo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0e:1e:e4:cb:40:79:3c:5a:75:3d:21:bc:6f:76:4c:62:e2:c2:
28:e1:d1:8b:2e:e8:e7:f1:ca:42:2e:ca:de:4d:aa:ff:69:18:
40:dd:a9:02:32:71:38:6f:b2:65:16:0f:f6:72:9b:d5:3d:06:
5a:9a:70:42:03:26:06:12:b9:a0:2c:8d:9b:e2:6c:87:dc:ac:
7a:5f:ff:c7:3b:51:7f:99:50:bc:f8:1e:99:7e:31:5b:fb:3b:
bf:86:7e:70:98:8e:7a:e4:32:33:09:dc:06:de:c5:b1:5c:1a:
27:a0:50:6b:60:7b:ee:1f:df:e8:0d:0a:5d:15:70:a0:76:8a:
a9:5f:56:7d:f3:55:51:bc:3b:44:8f:72:1d:c6:eb:56:b6:4c:
21:50:b8:02:59:34:87:af:50:c3:70:57:56:33:73:ab:41:69:
0d:09:e3:2c:87:f9:db:7f:3f:14:1c:3a:87:a8:b7:64:7b:eb:
47:8e:31:20:97:02:90:7d:de:c3:19:7d:c7:a8:72:19:87:51:
73:88:4f:ba:fa:23:68:3e:5b:6f:42:b5:b4:61:83:bc:6f:d3:
37:f8:87:3d:39:f0:6a:72:27:b3:9d:e7:b6:a8:99:0e:e4:f0:
11:4f:19:4d:9d:a7:34:2a:f7:1e:eb:5c:47:55:80:b1:9d:68:
6c:23:d4:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 12:29:47 2025 by rpki-client