Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/5dd7b1-e337-404d-b764-ddb0b148e46b/1/nLls5ZxZVXUw8OqkTGZFA9nEAe0.mft
File: nLls5ZxZVXUw8OqkTGZFA9nEAe0.mft (raw, json)
Hash identifier: x3gLT6twXSIvZjS2PA9qzrZz/qzDFrU8l/sNOzf0bkI=
Subject key identifier: 0B:10:F5:FF:D5:71:44:93:16:CE:6C:45:E3:47:72:66:81:B9:19:31
Authority key identifier: 9C:B9:6C:E5:9C:59:55:75:30:F0:EA:A4:4C:66:45:03:D9:C4:01:ED
Certificate issuer: /CN=9cb96ce59c59557530f0eaa44c664503d9c401ed
Certificate serial: 0196835A064996588DE9B593B55B07D29CCC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nLls5ZxZVXUw8OqkTGZFA9nEAe0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/19/5dd7b1-e337-404d-b764-ddb0b148e46b/1/nLls5ZxZVXUw8OqkTGZFA9nEAe0.mft
Manifest number: 07E2
Signing time: Tue 29 Apr 2025 21:00:37 +0000
Manifest this update: Tue 29 Apr 2025 21:00:37 +0000
Manifest next update: Wed 30 Apr 2025 21:00:37 +0000
Files and hashes: 1: CAv9rzPv7Heix16M5AOoPXOPd4Q.roa (hash: LMRzKo9NjTluip/QqjWWZG7E9ryz+Y9CDOMAPiGo6ag=)
2: HvZFP08B7xYA2IQmujw7UzbkG0Q.roa (hash: 7DGwHO9AiazjzBsJl92PU2yw56tPjljLpvn/rYKQLdM=)
3: nLls5ZxZVXUw8OqkTGZFA9nEAe0.crl (hash: tpm2f/+l/40VHCdiz+JSoUbPppkTs/t74si9B82rAeQ=)
4: oR-FUhbEvQx9rEQNZ_WugrEWdnk.roa (hash: BD8t2aBzJsutTWI6CA4SIZqGlJUGz2L2fZecOB/8228=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/19/5dd7b1-e337-404d-b764-ddb0b148e46b/1/nLls5ZxZVXUw8OqkTGZFA9nEAe0.crl
rsync://rpki.ripe.net/repository/DEFAULT/19/5dd7b1-e337-404d-b764-ddb0b148e46b/1/nLls5ZxZVXUw8OqkTGZFA9nEAe0.mft
rsync://rpki.ripe.net/repository/DEFAULT/nLls5ZxZVXUw8OqkTGZFA9nEAe0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 30 Apr 2025 15:02:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:83:5a:06:49:96:58:8d:e9:b5:93:b5:5b:07:d2:9c:cc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9cb96ce59c59557530f0eaa44c664503d9c401ed
Validity
Not Before: Apr 29 21:00:37 2025 GMT
Not After : Apr 30 21:00:37 2025 GMT
Subject: CN=0b10f5ffd571449316ce6c45e347726681b91931
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:1b:cc:a8:5e:29:c4:80:6b:bd:94:11:0a:1e:
e5:34:23:b7:ae:62:33:20:a7:2d:b3:3c:ce:81:49:
d0:a7:f1:74:12:0e:81:4f:0a:ee:38:fd:41:80:48:
cf:a1:22:be:c7:5a:ca:f3:25:6b:92:cd:77:92:dd:
7b:42:6f:78:77:11:38:2e:46:33:47:28:b5:e9:2a:
9c:70:a3:8e:2e:eb:bd:d1:40:84:81:3d:a1:3a:e7:
be:61:0d:24:2f:3d:da:af:c1:58:5e:fa:b2:3d:5e:
b0:a9:82:05:94:e3:6a:b9:0a:aa:94:28:22:11:95:
eb:ab:af:bf:54:38:81:52:2c:d6:29:be:2c:0b:69:
7d:6a:ed:1c:d7:ee:ed:59:24:1c:28:01:f5:1e:bf:
1c:fd:8c:f9:dd:5e:3a:57:0e:04:5c:cd:c4:7d:f1:
dc:af:a8:04:49:2b:ec:9d:3e:45:6c:ff:8e:2c:88:
6e:1b:68:b9:b2:69:1f:ec:48:9c:17:a8:76:fa:17:
69:93:49:9f:ab:12:16:30:50:89:ac:dc:e3:4e:da:
39:04:db:c0:a7:d0:69:76:2f:ac:86:8f:73:70:9d:
28:da:6e:a3:f9:4c:ab:ca:ab:6f:12:58:18:02:14:
1d:cb:df:f3:ce:39:2c:0b:40:f4:6a:df:4a:b4:68:
93:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:10:F5:FF:D5:71:44:93:16:CE:6C:45:E3:47:72:66:81:B9:19:31
X509v3 Authority Key Identifier:
keyid:9C:B9:6C:E5:9C:59:55:75:30:F0:EA:A4:4C:66:45:03:D9:C4:01:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nLls5ZxZVXUw8OqkTGZFA9nEAe0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/5dd7b1-e337-404d-b764-ddb0b148e46b/1/nLls5ZxZVXUw8OqkTGZFA9nEAe0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/19/5dd7b1-e337-404d-b764-ddb0b148e46b/1/nLls5ZxZVXUw8OqkTGZFA9nEAe0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0d:fc:69:e6:60:1a:71:ea:62:e4:eb:ee:ef:3f:bb:32:75:1f:
91:03:40:29:94:b1:68:f9:37:83:0e:5b:90:28:b6:75:35:7a:
b3:e5:45:c9:09:73:0d:83:1b:5c:1d:50:59:e9:9f:d3:b5:b8:
bd:41:70:db:30:d8:4e:aa:62:ae:be:4f:cc:cf:61:f5:60:d8:
83:95:b1:a7:4c:83:b7:92:ac:4d:4c:09:b5:2f:3f:bf:d6:cb:
08:85:f2:38:30:ed:6b:dd:8d:cd:e9:2a:7e:08:05:4f:5f:1e:
5a:e7:18:39:ce:6b:8d:3f:4b:f0:6b:ba:9d:51:b1:0a:1d:32:
cb:f7:5d:6a:8c:cd:3b:cf:22:c3:07:f9:2c:07:1c:4e:45:bd:
27:fa:b1:38:3b:2a:48:de:28:e7:63:cb:85:40:0b:44:b6:bf:
b7:d6:87:e8:0f:b7:2e:cb:b9:ec:95:70:a7:4a:11:ec:e6:9e:
d1:d5:61:ce:75:7b:4c:e2:40:d6:de:c0:6b:f1:0e:cc:55:0a:
54:1d:c0:e7:7a:89:8b:f9:2e:9e:c6:5c:c1:7a:b8:82:e6:7b:
e7:a5:f3:7a:c7:9a:3e:20:28:96:f1:45:1b:76:4f:00:a8:4b:
93:b9:68:43:42:f7:37:1c:67:93:1f:f3:7a:b0:6a:7a:96:9c:
7b:1c:5f:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 00:45:29 2025 by rpki-client