Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/b6768f-d395-4681-a3f3-3cf306807a7e/1/nkz1EkerV_Um84ByWaeNKwJZBgM.mft
File: nkz1EkerV_Um84ByWaeNKwJZBgM.mft (raw, json)
Hash identifier: 5yHb878l4fGUf83lFhLMmN3QhYCSHsRFpbgTVAQNMnQ=
Subject key identifier: 70:C8:6D:62:8F:BF:BC:30:26:F8:EC:2C:22:4E:A0:F6:01:4C:33:E8
Authority key identifier: 9E:4C:F5:12:47:AB:57:F5:26:F3:80:72:59:A7:8D:2B:02:59:06:03
Certificate issuer: /CN=9e4cf51247ab57f526f3807259a78d2b02590603
Certificate serial: 01967ED8CEABB26D6F299A1D9FC457D9555C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nkz1EkerV_Um84ByWaeNKwJZBgM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/b6768f-d395-4681-a3f3-3cf306807a7e/1/nkz1EkerV_Um84ByWaeNKwJZBgM.mft
Manifest number: 1512
Signing time: Tue 29 Apr 2025 00:00:59 +0000
Manifest this update: Tue 29 Apr 2025 00:00:59 +0000
Manifest next update: Wed 30 Apr 2025 00:00:59 +0000
Files and hashes: 1: bUexMEG5KZ30YS3AFv2LLIm5VUk.roa (hash: 73jcglvdcT9moQ9QgtlZoUeROl6dwy33TWezKXRJ6GM=)
2: nkz1EkerV_Um84ByWaeNKwJZBgM.crl (hash: akq0l+wVNtBQKDrfF9cF2uQ0dwXUx2IvD3V0rGkJUOo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0c/b6768f-d395-4681-a3f3-3cf306807a7e/1/nkz1EkerV_Um84ByWaeNKwJZBgM.crl
rsync://rpki.ripe.net/repository/DEFAULT/0c/b6768f-d395-4681-a3f3-3cf306807a7e/1/nkz1EkerV_Um84ByWaeNKwJZBgM.mft
rsync://rpki.ripe.net/repository/DEFAULT/nkz1EkerV_Um84ByWaeNKwJZBgM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 30 Apr 2025 00:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:7e:d8:ce:ab:b2:6d:6f:29:9a:1d:9f:c4:57:d9:55:5c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9e4cf51247ab57f526f3807259a78d2b02590603
Validity
Not Before: Apr 29 00:00:59 2025 GMT
Not After : Apr 30 00:00:59 2025 GMT
Subject: CN=70c86d628fbfbc3026f8ec2c224ea0f6014c33e8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:c7:6e:09:16:bb:76:f7:46:6f:96:9f:db:7e:
7d:e7:f7:27:04:7a:7f:1a:89:49:0e:ab:e0:90:07:
47:7f:d0:40:f0:b5:07:ba:ed:ee:24:c4:60:9c:04:
38:9f:95:12:2a:b4:49:2c:51:55:db:ca:c2:ff:bf:
8e:69:99:f9:7b:7e:32:fb:a4:43:30:ef:bd:43:a4:
0f:57:7e:c0:96:0d:ad:17:ee:6d:e4:e3:69:0b:08:
4d:36:40:c3:a6:14:7c:6f:6d:0d:93:b1:1a:f1:ab:
ff:b8:92:56:f6:6c:70:82:91:a1:c0:71:b9:4d:64:
57:f2:aa:cf:08:ee:c0:d6:96:11:4d:5c:33:86:1e:
67:e7:80:f1:9a:9b:2c:4e:72:71:e4:e3:19:5f:88:
1a:0f:ff:9b:22:dc:81:da:96:d5:61:8d:f4:dd:39:
7d:cc:48:43:09:cc:2e:33:07:d5:c4:45:a1:3c:d3:
e8:41:b5:ae:40:cf:50:52:ba:03:e2:3d:34:65:13:
a7:d7:96:6e:ad:84:2c:27:fd:85:46:6f:0f:80:86:
3a:e3:73:4c:ea:3f:62:a9:0e:66:a7:fc:4f:e8:a0:
3b:2a:82:ed:9f:06:5e:14:af:e0:b5:81:31:99:3a:
54:a6:85:45:14:a1:dd:a0:48:76:39:4a:96:5c:4d:
70:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:C8:6D:62:8F:BF:BC:30:26:F8:EC:2C:22:4E:A0:F6:01:4C:33:E8
X509v3 Authority Key Identifier:
keyid:9E:4C:F5:12:47:AB:57:F5:26:F3:80:72:59:A7:8D:2B:02:59:06:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nkz1EkerV_Um84ByWaeNKwJZBgM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/b6768f-d395-4681-a3f3-3cf306807a7e/1/nkz1EkerV_Um84ByWaeNKwJZBgM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/b6768f-d395-4681-a3f3-3cf306807a7e/1/nkz1EkerV_Um84ByWaeNKwJZBgM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
59:0c:a8:17:b3:7c:75:55:31:62:89:51:4c:8c:ef:de:aa:65:
3b:3b:54:39:6e:58:d8:90:28:b5:a4:0f:52:28:25:06:35:d5:
9a:e1:51:8a:84:5f:6d:7f:c6:0f:b2:49:1c:0b:9c:8f:3e:6c:
82:50:b4:64:9f:33:42:69:c7:26:a5:a4:97:35:6f:e6:7a:b5:
aa:ec:8d:9c:14:6e:19:f9:14:de:a7:df:97:23:9f:57:cc:6f:
9f:c9:45:68:c6:26:65:75:12:7b:23:a4:46:43:b3:e8:5c:c0:
ae:68:7e:8f:18:ca:95:3f:23:83:f0:13:97:09:f9:eb:ad:9c:
02:93:89:a1:c7:f4:5a:59:e9:ed:2f:f4:4f:c9:62:a1:91:01:
aa:1c:f5:12:7a:65:59:1f:31:82:f1:b3:41:88:47:04:93:de:
06:a1:79:31:2d:6c:55:fb:a1:52:9b:67:36:99:28:22:53:e1:
3c:f8:e6:25:ed:d3:b1:ee:1b:73:43:4d:87:f3:69:73:2e:bb:
dd:a0:ed:13:db:30:60:b2:19:9b:b4:f8:43:e5:78:b4:a9:91:
6e:cb:7a:ba:82:96:b3:36:6c:76:79:46:c3:af:51:10:67:be:
a5:ed:c8:bc:41:0b:62:61:51:c3:b3:2d:47:91:06:63:1c:bb:
3b:3d:b3:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 09:10:40 2025 by rpki-client