Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0d/ce16f7-b868-4b4c-9d9b-932d16b08df0/1/nkQennBa2j-cHoJ80nbb0JdIdgg.mft
File: nkQennBa2j-cHoJ80nbb0JdIdgg.mft (raw, json)
Hash identifier: ujF3pmTu7SsKPKQ3mvPea7Bph41UoKSUuUpzkKTg1tI=
Subject key identifier: CC:80:72:90:7F:6A:78:F1:A6:56:3C:3B:6C:AC:C9:A6:CC:30:C3:17
Authority key identifier: 9E:44:1E:9E:70:5A:DA:3F:9C:1E:82:7C:D2:76:DB:D0:97:48:76:08
Certificate issuer: /CN=9e441e9e705ada3f9c1e827cd276dbd097487608
Certificate serial: 01967D2134A4A976A753B13F4099B2E40240
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nkQennBa2j-cHoJ80nbb0JdIdgg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0d/ce16f7-b868-4b4c-9d9b-932d16b08df0/1/nkQennBa2j-cHoJ80nbb0JdIdgg.mft
Manifest number: 0E91
Signing time: Mon 28 Apr 2025 16:00:50 +0000
Manifest this update: Mon 28 Apr 2025 16:00:50 +0000
Manifest next update: Tue 29 Apr 2025 16:00:50 +0000
Files and hashes: 1: BJvFiCQhGiEcXR3ndqL7T5BbDaU.roa (hash: Z+0E4ULnb/cJktOfFSiZcNmisROmxseIx6dqsZlDt4s=)
2: bKdFeyVH_r7HsHfe9GqBe_UUrg8.roa (hash: vnPbAxKFKizMFdUh2dDG9y/SGopR40zinaRVaCXXct4=)
3: d-A9abVhzoyR77GP5fjse5opquk.roa (hash: SH9taC665HXJXvPloMTs2WsTRMUAVA4wBqAM/eu3n6o=)
4: nkQennBa2j-cHoJ80nbb0JdIdgg.crl (hash: bAYkzqC0hlXdvzu+1yHLbOSTwbA0MQvKFlp2IXsbFUM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0d/ce16f7-b868-4b4c-9d9b-932d16b08df0/1/nkQennBa2j-cHoJ80nbb0JdIdgg.crl
rsync://rpki.ripe.net/repository/DEFAULT/0d/ce16f7-b868-4b4c-9d9b-932d16b08df0/1/nkQennBa2j-cHoJ80nbb0JdIdgg.mft
rsync://rpki.ripe.net/repository/DEFAULT/nkQennBa2j-cHoJ80nbb0JdIdgg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Apr 2025 15:01:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:7d:21:34:a4:a9:76:a7:53:b1:3f:40:99:b2:e4:02:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9e441e9e705ada3f9c1e827cd276dbd097487608
Validity
Not Before: Apr 28 16:00:50 2025 GMT
Not After : Apr 29 16:00:50 2025 GMT
Subject: CN=cc8072907f6a78f1a6563c3b6cacc9a6cc30c317
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:f3:d9:64:4c:1f:38:16:b5:00:7a:4a:f4:2c:
21:72:4b:84:dc:58:cc:0d:71:1c:8d:45:ae:c4:31:
d9:8a:92:5c:02:c4:6c:79:53:4d:3d:e3:e0:33:a2:
de:be:de:27:6e:3a:b9:46:02:44:4d:00:84:c7:bd:
22:d2:64:ed:d8:19:14:73:06:10:a3:f7:b8:ba:8b:
14:f2:19:50:bd:4f:92:a3:65:c7:b2:51:e2:e6:49:
5e:57:2e:90:e3:2a:71:a4:cd:5a:cc:ae:db:9d:b6:
43:b2:82:ab:c8:a2:08:27:19:e4:ec:3e:c4:f6:10:
be:90:c9:a0:39:90:62:f1:7f:b8:ad:ea:d7:7b:25:
66:8b:d2:ba:99:a3:e3:30:2a:85:7e:d8:62:25:f0:
6f:ec:3d:f4:e1:d5:6a:81:86:2d:77:03:14:70:91:
a4:42:01:e8:5c:1d:18:8c:ae:71:44:4f:98:2c:2c:
23:2b:1c:b6:3b:92:6c:f5:df:9d:18:65:28:af:f5:
26:2b:c3:fa:2e:16:d0:49:db:96:cc:11:60:89:7e:
f9:62:74:06:0f:f8:bf:de:83:59:51:44:8f:4a:0d:
f7:1a:10:23:c4:13:32:1c:cf:c6:e2:7e:5d:de:fd:
60:d0:8c:88:5d:5d:23:96:53:97:cb:b2:ba:d6:8a:
8a:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:80:72:90:7F:6A:78:F1:A6:56:3C:3B:6C:AC:C9:A6:CC:30:C3:17
X509v3 Authority Key Identifier:
keyid:9E:44:1E:9E:70:5A:DA:3F:9C:1E:82:7C:D2:76:DB:D0:97:48:76:08
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nkQennBa2j-cHoJ80nbb0JdIdgg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/ce16f7-b868-4b4c-9d9b-932d16b08df0/1/nkQennBa2j-cHoJ80nbb0JdIdgg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/ce16f7-b868-4b4c-9d9b-932d16b08df0/1/nkQennBa2j-cHoJ80nbb0JdIdgg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
62:5e:25:5f:c5:9f:a5:12:15:f6:33:ba:14:8a:90:42:13:48:
c2:1f:94:8e:a6:da:1d:54:12:1e:85:65:69:1f:4b:38:4c:a7:
cf:52:8b:06:00:39:6c:ef:80:18:58:dd:d6:96:2a:2c:87:1c:
aa:a3:d5:01:fb:13:d9:83:64:49:6e:87:b5:91:ec:b2:64:87:
8a:d4:5e:22:34:30:21:4b:41:1d:d3:da:d3:60:30:1b:04:cc:
1a:ee:1b:8c:00:eb:aa:a1:b8:f8:cd:5f:45:19:f7:eb:ff:fc:
6c:db:1a:dd:2d:b6:78:47:9e:f1:79:9b:a4:73:1d:ab:5d:a3:
0d:98:87:59:18:e1:b1:4c:ab:30:e8:41:42:9c:25:f7:d3:9f:
df:5b:27:4d:2c:78:46:b9:90:fc:37:e6:28:dd:48:66:ee:08:
09:6c:6f:b4:20:bf:bd:4c:28:4d:f8:b3:82:99:65:9f:bc:39:
d5:b0:7d:9e:2b:c6:00:0f:43:a9:a5:71:ef:6a:af:f3:58:c2:
a2:b1:7a:5b:e4:9f:1e:3f:93:75:d0:ff:d8:c4:d8:7d:63:6f:
ac:9d:d7:c5:48:a2:3d:62:ff:04:9f:6d:2e:b6:a4:b7:e3:16:
5e:73:db:05:55:55:e2:b3:7a:19:58:3f:cd:9a:3e:9d:22:41:
2f:a9:5b:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 22:53:01 2025 by rpki-client