Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0b/32b61c-ce82-463c-8f64-2775de5202fb/1/nkJ08Tm9Zpqu93TWUDso2ZZje70.mft
File: nkJ08Tm9Zpqu93TWUDso2ZZje70.mft (raw, json)
Hash identifier: 6ZmJkdDfUvn+zKinc2akZsOzLmwm/jZHSybcvq8w9+I=
Subject key identifier: 9F:87:21:A3:DA:27:15:31:AC:2A:62:37:FE:00:75:F2:B8:7F:67:28
Authority key identifier: 9E:42:74:F1:39:BD:66:9A:AE:F7:74:D6:50:3B:28:D9:96:63:7B:BD
Certificate issuer: /CN=9e4274f139bd669aaef774d6503b28d996637bbd
Certificate serial: 0196A2E53F3E010CF3847F6DEE23B8808903
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nkJ08Tm9Zpqu93TWUDso2ZZje70.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0b/32b61c-ce82-463c-8f64-2775de5202fb/1/nkJ08Tm9Zpqu93TWUDso2ZZje70.mft
Manifest number: 1527
Signing time: Tue 06 May 2025 00:00:54 +0000
Manifest this update: Tue 06 May 2025 00:00:54 +0000
Manifest next update: Wed 07 May 2025 00:00:54 +0000
Files and hashes: 1: j4Iq2zixx3mYag3J5EZ9oVMKB3Q.roa (hash: /Gl9L/9VfxRkLzepVwRrDXgXI17GQGF8IKxBmlZI9QI=)
2: nkJ08Tm9Zpqu93TWUDso2ZZje70.crl (hash: y9G2WMWRnFEugeiglCmNJuyHFaDLFdxPFeNXX6abF/o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0b/32b61c-ce82-463c-8f64-2775de5202fb/1/nkJ08Tm9Zpqu93TWUDso2ZZje70.crl
rsync://rpki.ripe.net/repository/DEFAULT/0b/32b61c-ce82-463c-8f64-2775de5202fb/1/nkJ08Tm9Zpqu93TWUDso2ZZje70.mft
rsync://rpki.ripe.net/repository/DEFAULT/nkJ08Tm9Zpqu93TWUDso2ZZje70.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 06 May 2025 18:19:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:a2:e5:3f:3e:01:0c:f3:84:7f:6d:ee:23:b8:80:89:03
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9e4274f139bd669aaef774d6503b28d996637bbd
Validity
Not Before: May 6 00:00:54 2025 GMT
Not After : May 7 00:00:54 2025 GMT
Subject: CN=9f8721a3da271531ac2a6237fe0075f2b87f6728
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:dc:50:62:49:ca:e9:3f:51:c9:23:57:bc:47:
e7:5c:1a:ba:de:e8:d9:75:fe:27:52:92:73:37:fd:
ed:1e:03:6b:98:e2:57:23:16:1f:c9:48:dc:ad:ff:
a0:04:b1:02:73:52:9f:9d:3e:4f:45:81:f1:d5:92:
26:4b:46:90:4c:b3:af:9d:bb:cc:6e:55:8d:2b:da:
dc:c6:a5:5b:f5:5a:b4:00:04:aa:1b:52:54:84:d7:
d5:da:95:38:6e:be:f6:a3:32:31:0d:c9:4f:a2:5b:
d6:b0:9c:e0:a5:11:9a:07:05:dc:bc:f8:64:90:f3:
2b:ae:9b:f9:f5:10:75:97:d7:c0:44:b4:a9:b9:27:
42:40:fb:66:ed:4f:45:64:fe:a8:a4:cd:04:f0:e3:
1e:08:03:0f:83:99:1a:23:cc:26:d9:8b:69:d9:93:
76:03:83:61:37:2b:2b:f7:d9:02:86:cc:e7:c9:73:
73:6c:9c:49:2b:8c:00:67:1f:dc:d4:21:38:d5:ea:
ec:97:b0:67:63:f2:32:39:67:45:c4:e5:35:b6:b2:
89:29:f0:e9:9e:e0:a4:70:d6:d8:86:dd:04:d6:62:
59:90:7d:e4:0d:94:93:3e:12:f0:88:09:ac:f3:80:
a3:45:d9:b1:36:4f:35:e7:5b:2a:dc:7e:5d:7c:f8:
b8:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:87:21:A3:DA:27:15:31:AC:2A:62:37:FE:00:75:F2:B8:7F:67:28
X509v3 Authority Key Identifier:
keyid:9E:42:74:F1:39:BD:66:9A:AE:F7:74:D6:50:3B:28:D9:96:63:7B:BD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nkJ08Tm9Zpqu93TWUDso2ZZje70.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/32b61c-ce82-463c-8f64-2775de5202fb/1/nkJ08Tm9Zpqu93TWUDso2ZZje70.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/32b61c-ce82-463c-8f64-2775de5202fb/1/nkJ08Tm9Zpqu93TWUDso2ZZje70.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
63:26:1b:bd:83:f2:56:02:09:c0:9a:d3:62:0a:6c:f9:85:bb:
fb:66:24:ce:17:38:45:2b:c6:15:79:c8:f3:31:5a:40:14:44:
49:18:54:36:51:ac:2c:27:34:fb:dd:39:fb:99:81:b1:5c:32:
a7:2f:be:d2:c1:2b:56:69:fc:66:79:fb:fb:66:db:d8:92:04:
b7:4a:fa:6f:b0:a2:37:27:f5:82:78:12:6c:b0:70:f9:de:8d:
2f:c7:1f:c7:48:ca:26:e6:3e:22:3b:0b:c5:43:10:6f:27:36:
76:05:2b:1e:0c:92:9c:f6:65:b1:59:38:52:a9:0a:4b:1a:21:
dc:88:36:53:21:e5:ea:a9:72:de:c3:be:12:1f:fc:e7:f0:51:
a7:be:5e:a3:fe:7c:0a:34:2c:a7:b2:4b:21:72:6e:35:7b:4f:
f1:98:72:97:d4:29:19:eb:9c:51:9b:b1:e9:88:22:9c:99:db:
dd:02:45:74:63:b8:d6:7c:70:b1:21:6e:ff:84:57:d7:0f:14:
57:82:62:03:ca:9f:64:a3:ec:ac:76:6f:35:34:26:20:b7:ce:
3f:84:d7:c6:0f:37:c6:7d:d4:c4:78:09:de:99:f3:3b:7a:4f:
a6:84:e9:65:02:9e:b0:64:87:a3:43:4a:25:b4:51:79:b1:c4:
99:80:90:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 6 03:43:08 2025 by rpki-client