Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fb/3967a6-79f3-4aff-b34b-ae0ea6643bbd/1/nkNy9jkyun_o8WG1ZLk4YGFKgLo.mft
File: nkNy9jkyun_o8WG1ZLk4YGFKgLo.mft (raw, json)
Hash identifier: 3GNa748jYl9ABDRdiECe/xpMZ/pkwmAzb3KWbEDY+50=
Subject key identifier: 0A:49:38:A6:5F:49:C8:B0:0F:30:48:73:14:5E:2D:5C:D5:B1:88:7E
Authority key identifier: 9E:43:72:F6:39:32:BA:7F:E8:F1:61:B5:64:B9:38:60:61:4A:80:BA
Certificate issuer: /CN=9e4372f63932ba7fe8f161b564b93860614a80ba
Certificate serial: 01964D7EC5093C3BEB91F3830667244B94DA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nkNy9jkyun_o8WG1ZLk4YGFKgLo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fb/3967a6-79f3-4aff-b34b-ae0ea6643bbd/1/nkNy9jkyun_o8WG1ZLk4YGFKgLo.mft
Manifest number: 04ED
Signing time: Sat 19 Apr 2025 10:01:15 +0000
Manifest this update: Sat 19 Apr 2025 10:01:15 +0000
Manifest next update: Sun 20 Apr 2025 10:01:15 +0000
Files and hashes: 1: TaAxyGE0YZ7m-xRwM6T1q9wMqQw.roa (hash: 76tscvyJdodgkrjTmEZQdEHR921zYs8tliL/2ouT7RA=)
2: nkNy9jkyun_o8WG1ZLk4YGFKgLo.crl (hash: LElUpO+c5qpteZtoVUB/sVqBW8P1hbGjbZ+gy9skdQw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fb/3967a6-79f3-4aff-b34b-ae0ea6643bbd/1/nkNy9jkyun_o8WG1ZLk4YGFKgLo.crl
rsync://rpki.ripe.net/repository/DEFAULT/fb/3967a6-79f3-4aff-b34b-ae0ea6643bbd/1/nkNy9jkyun_o8WG1ZLk4YGFKgLo.mft
rsync://rpki.ripe.net/repository/DEFAULT/nkNy9jkyun_o8WG1ZLk4YGFKgLo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 20 Apr 2025 07:26:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:4d:7e:c5:09:3c:3b:eb:91:f3:83:06:67:24:4b:94:da
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9e4372f63932ba7fe8f161b564b93860614a80ba
Validity
Not Before: Apr 19 10:01:15 2025 GMT
Not After : Apr 20 10:01:15 2025 GMT
Subject: CN=0a4938a65f49c8b00f304873145e2d5cd5b1887e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:3f:fb:1b:b2:41:79:1f:ab:35:f9:10:ba:3e:
b9:51:78:40:33:9e:a2:50:58:d1:d3:b9:f5:d8:a7:
ef:e7:09:5d:0c:7d:8a:c3:29:75:84:2a:db:a5:30:
e0:54:29:f6:b7:60:4b:46:cc:8c:8f:ca:95:56:48:
2b:ed:9e:e4:01:6f:f5:ad:9d:18:d9:d0:fe:07:59:
fb:64:79:e9:77:76:34:09:86:e5:7e:ba:08:e9:59:
cf:c4:20:9b:b7:35:4e:76:ac:d4:d4:ae:4f:84:ab:
0f:20:fb:79:d1:e4:10:53:40:dd:21:dc:f9:78:38:
e6:09:2d:9a:48:c9:8e:36:ce:a8:83:dd:c2:83:a7:
c1:44:6b:41:ed:f1:ca:61:5e:c9:e6:93:61:ab:8e:
24:05:0b:41:f3:99:42:c7:d4:38:27:28:4f:07:ba:
51:25:3e:11:e7:2d:f1:90:05:d5:da:42:72:c2:04:
5e:16:32:6e:b5:69:79:ca:aa:27:41:83:32:93:8c:
e4:cc:f4:69:20:4d:de:0a:17:8b:e7:30:5f:96:18:
24:1b:25:13:ba:1d:6c:54:15:b8:17:cb:8b:5a:d7:
b8:1a:19:c2:fb:2b:13:54:7c:2c:56:46:d3:ca:79:
bd:a4:8f:d4:de:0e:81:16:9f:c8:33:9d:0b:69:cd:
99:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:49:38:A6:5F:49:C8:B0:0F:30:48:73:14:5E:2D:5C:D5:B1:88:7E
X509v3 Authority Key Identifier:
keyid:9E:43:72:F6:39:32:BA:7F:E8:F1:61:B5:64:B9:38:60:61:4A:80:BA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nkNy9jkyun_o8WG1ZLk4YGFKgLo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/3967a6-79f3-4aff-b34b-ae0ea6643bbd/1/nkNy9jkyun_o8WG1ZLk4YGFKgLo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/3967a6-79f3-4aff-b34b-ae0ea6643bbd/1/nkNy9jkyun_o8WG1ZLk4YGFKgLo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
38:6b:81:ea:13:3d:6d:c8:9a:27:4a:6d:f9:0a:60:75:b7:6d:
ef:56:dd:0e:08:a5:fc:04:4c:38:fb:67:7f:35:fb:74:81:b1:
10:d3:1c:93:61:11:b7:82:3c:cd:51:41:11:6a:b6:4f:10:34:
e3:2a:c6:a1:6d:44:54:57:7c:65:91:37:83:28:7d:66:08:80:
12:76:78:07:d8:43:80:74:44:7b:ad:29:22:47:9e:07:e5:45:
60:3b:34:1a:f9:d4:3c:17:1c:42:52:3a:9a:65:ee:c5:38:61:
61:10:35:ef:27:79:47:c6:5e:0f:59:e7:4b:1e:1c:55:8c:62:
b9:cb:49:67:bd:d9:c1:e4:8e:1b:62:a4:9e:84:4b:a8:05:02:
09:82:0c:34:f9:e2:5d:fa:35:b7:f2:11:b2:32:3c:73:40:01:
95:31:ab:e1:c6:26:33:a7:04:43:84:f1:9a:4f:06:30:af:31:
59:76:4b:1a:78:38:64:2e:5a:35:95:98:ba:be:db:a0:03:eb:
80:bc:47:13:65:23:6e:16:cc:42:20:36:34:31:28:79:bf:7b:
be:f1:68:ce:ec:b4:0c:c8:43:d6:2d:3e:75:04:1f:fd:ae:f1:
1e:67:45:5f:7b:ed:cc:b8:6f:45:ad:e4:21:79:bf:34:c0:4f:
2d:28:8d:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 15:19:45 2025 by rpki-client