Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f3/9ea68f-743d-47da-b71c-709fbe84cdfb/1/nIoYdv3cK2N0i0V7dwt5p-ZueTw.mft
File: nIoYdv3cK2N0i0V7dwt5p-ZueTw.mft (raw, json)
Hash identifier: 6MiXe/1NwO6h4S01flEKlxEC7gAHgjcfyDqx6MVyggI=
Subject key identifier: 14:48:2D:E1:37:6D:FD:BC:02:4A:BA:5E:FC:EA:59:78:63:D0:EE:1E
Authority key identifier: 9C:8A:18:76:FD:DC:2B:63:74:8B:45:7B:77:0B:79:A7:E6:6E:79:3C
Certificate issuer: /CN=9c8a1876fddc2b63748b457b770b79a7e66e793c
Certificate serial: 01965011AB22F197DBE6BEF7541F762B5547
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nIoYdv3cK2N0i0V7dwt5p-ZueTw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f3/9ea68f-743d-47da-b71c-709fbe84cdfb/1/nIoYdv3cK2N0i0V7dwt5p-ZueTw.mft
Manifest number: 14FC
Signing time: Sat 19 Apr 2025 22:00:57 +0000
Manifest this update: Sat 19 Apr 2025 22:00:57 +0000
Manifest next update: Sun 20 Apr 2025 22:00:57 +0000
Files and hashes: 1: MPwSmw7TKMOSUXcFrOOlFixZc2g.roa (hash: QP+dxlkmxIyI9F9hcSk4trG33k+WqitL0NMMPJjf69Q=)
2: O_fqEW14QhPRGqjQoVa9vmGmVmM.roa (hash: V1ztdeLVNvewuDYhom6BXL6CS05sk8OmHCsK+DDqUrE=)
3: nIoYdv3cK2N0i0V7dwt5p-ZueTw.crl (hash: 1QsemFRRhTGXfBWo5gsmFIMFSfQxXedveZ6PbDs34Qs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f3/9ea68f-743d-47da-b71c-709fbe84cdfb/1/nIoYdv3cK2N0i0V7dwt5p-ZueTw.crl
rsync://rpki.ripe.net/repository/DEFAULT/f3/9ea68f-743d-47da-b71c-709fbe84cdfb/1/nIoYdv3cK2N0i0V7dwt5p-ZueTw.mft
rsync://rpki.ripe.net/repository/DEFAULT/nIoYdv3cK2N0i0V7dwt5p-ZueTw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 20 Apr 2025 16:41:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:50:11:ab:22:f1:97:db:e6:be:f7:54:1f:76:2b:55:47
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9c8a1876fddc2b63748b457b770b79a7e66e793c
Validity
Not Before: Apr 19 22:00:57 2025 GMT
Not After : Apr 20 22:00:57 2025 GMT
Subject: CN=14482de1376dfdbc024aba5efcea597863d0ee1e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:a0:26:f1:be:09:ef:ab:c1:89:a6:89:5b:8a:
7c:57:0c:e5:07:ea:bb:60:a5:62:46:89:af:e4:38:
3e:d1:50:f0:86:c5:33:24:98:57:6d:04:07:b8:4c:
a8:dd:20:e2:72:58:7a:02:da:92:18:6e:18:06:3b:
85:97:50:66:94:27:40:72:a9:4c:e6:27:e4:a0:a1:
81:bc:18:b1:76:83:01:9a:94:e8:fb:7e:83:39:10:
e0:16:46:0d:1e:e1:7d:7e:f7:b8:d6:03:76:b6:80:
06:bd:d8:c7:9e:7f:51:19:fe:a6:ba:53:00:4b:23:
eb:24:4c:9d:23:ce:2c:17:27:f7:ff:e2:3d:12:71:
b1:ee:4a:28:ff:0f:f5:ed:4b:75:36:a5:f0:f6:46:
74:5f:0a:71:27:73:ce:f1:5a:8a:f5:81:92:e3:02:
f2:65:09:c9:cd:d4:fa:50:54:4a:1e:a7:da:f7:c4:
8c:11:1c:f1:e7:a0:b4:8c:db:00:c5:46:b8:ae:39:
7a:c5:cb:de:2e:86:58:3f:4f:87:26:d3:9c:14:7b:
42:13:04:a4:6b:90:2b:8d:75:82:68:43:88:77:a1:
5d:e6:dd:0d:ab:0d:0a:9e:c3:b4:3b:05:8c:df:07:
a6:3f:ae:43:71:c2:29:10:ff:a0:e0:f2:e2:e3:a6:
f8:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:48:2D:E1:37:6D:FD:BC:02:4A:BA:5E:FC:EA:59:78:63:D0:EE:1E
X509v3 Authority Key Identifier:
keyid:9C:8A:18:76:FD:DC:2B:63:74:8B:45:7B:77:0B:79:A7:E6:6E:79:3C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nIoYdv3cK2N0i0V7dwt5p-ZueTw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/9ea68f-743d-47da-b71c-709fbe84cdfb/1/nIoYdv3cK2N0i0V7dwt5p-ZueTw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/9ea68f-743d-47da-b71c-709fbe84cdfb/1/nIoYdv3cK2N0i0V7dwt5p-ZueTw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
95:ca:e9:09:27:7d:58:17:3e:18:22:93:db:ab:0b:18:21:bf:
94:d7:19:98:f0:15:cb:5d:65:3f:78:47:ee:e5:f7:ef:f1:46:
71:8e:7f:50:d6:53:85:65:07:47:6a:6f:39:a4:cd:e0:64:ab:
75:ea:af:b6:ac:3a:f2:c1:bf:be:66:fe:5a:09:b2:7b:7e:05:
80:45:57:96:1c:7d:e0:85:b5:19:4f:9b:90:d4:bc:74:d3:0b:
ac:75:30:da:bc:ed:14:a7:77:0a:19:03:bb:9a:d4:71:39:57:
4e:fe:93:ad:60:9c:3c:30:8d:f2:87:44:b2:59:48:08:a9:98:
bb:38:11:55:f2:d9:95:13:f5:88:0b:d4:63:40:86:a0:82:a7:
f1:c3:35:68:e2:fd:9a:44:cb:72:67:e3:39:fc:8a:5e:e6:eb:
1d:7d:57:a4:42:ad:ed:c7:db:09:40:1f:8a:da:a4:91:72:55:
78:0c:a9:7b:bb:50:7a:5a:c1:4c:83:73:a1:11:6c:ca:1e:c6:
14:ab:02:45:17:f9:3c:a8:82:d2:60:1e:b7:4a:fc:05:bf:98:
87:57:b0:c1:26:a9:6c:30:0f:1f:f6:0c:7a:7a:e6:3e:82:2c:
85:85:57:6d:17:d2:02:59:e0:15:d0:c6:0b:69:6d:6c:2b:4d:
08:d7:f9:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 02:03:18 2025 by rpki-client