Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/20/acf2a2-4d52-40cd-a5f8-59591389e242/1/naTpXS9Mw0pzdrc8DwObPhWPUVI.mft
File: naTpXS9Mw0pzdrc8DwObPhWPUVI.mft (raw, json)
Hash identifier: r0N4LEbB3DAECsWf4KGSgmByM0RfI1xUOt4P5u9idCw=
Subject key identifier: BB:14:23:E3:16:C3:C4:D3:A2:E8:9E:C3:F7:E3:4B:0E:D7:66:D8:01
Authority key identifier: 9D:A4:E9:5D:2F:4C:C3:4A:73:76:B7:3C:0F:03:9B:3E:15:8F:51:52
Certificate issuer: /CN=9da4e95d2f4cc34a7376b73c0f039b3e158f5152
Certificate serial: 019673AFF0E0BB06A369F275AEEC053C0D61
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/naTpXS9Mw0pzdrc8DwObPhWPUVI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/20/acf2a2-4d52-40cd-a5f8-59591389e242/1/naTpXS9Mw0pzdrc8DwObPhWPUVI.mft
Manifest number: 141A
Signing time: Sat 26 Apr 2025 20:00:32 +0000
Manifest this update: Sat 26 Apr 2025 20:00:32 +0000
Manifest next update: Sun 27 Apr 2025 20:00:32 +0000
Files and hashes: 1: WYyFBT5nmwxFR4gPo5unCY2UhVc.roa (hash: Z4ZpbpPZKoHHj3yG0X2Ro2qP/JaWFIzV9WlYUI0Hg8s=)
2: j9lH8J7G3WobH4lsD15m-VsHfXA.roa (hash: qeHJX0Tapm1zxSb8XB+NF4p89KIeCYI5mpUGKGseBY0=)
3: naTpXS9Mw0pzdrc8DwObPhWPUVI.crl (hash: +EQVj7wy5FPvcAdfvf52okg2KCgdnAEGuVxOvl/IC7g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/20/acf2a2-4d52-40cd-a5f8-59591389e242/1/naTpXS9Mw0pzdrc8DwObPhWPUVI.crl
rsync://rpki.ripe.net/repository/DEFAULT/20/acf2a2-4d52-40cd-a5f8-59591389e242/1/naTpXS9Mw0pzdrc8DwObPhWPUVI.mft
rsync://rpki.ripe.net/repository/DEFAULT/naTpXS9Mw0pzdrc8DwObPhWPUVI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Apr 2025 20:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:73:af:f0:e0:bb:06:a3:69:f2:75:ae:ec:05:3c:0d:61
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9da4e95d2f4cc34a7376b73c0f039b3e158f5152
Validity
Not Before: Apr 26 20:00:32 2025 GMT
Not After : Apr 27 20:00:32 2025 GMT
Subject: CN=bb1423e316c3c4d3a2e89ec3f7e34b0ed766d801
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:b9:f8:c4:b2:c1:bc:82:22:2f:f8:07:35:1e:
9b:2c:19:3d:71:44:bb:ca:1f:7d:5d:8d:e7:11:14:
a6:e2:92:61:2d:b5:a5:e1:8a:cb:05:fd:9f:a8:5d:
79:21:9e:53:cb:70:a4:27:3e:eb:91:c9:1c:8a:a3:
b7:f5:a9:73:44:a6:c0:69:b3:f0:5c:b1:ec:e1:81:
ef:b2:1f:4e:5a:f1:a8:d9:91:05:8c:22:fe:ae:d4:
6f:b4:c9:c8:f1:a8:f6:2c:df:82:13:fd:85:d4:9c:
67:8d:78:da:9d:ee:1b:62:78:fe:9d:3b:bf:39:2b:
e7:d7:a2:da:4b:8a:c1:94:0a:8f:5f:75:3d:43:d2:
37:9f:db:8e:f7:81:aa:c3:bd:64:8e:95:77:fa:dc:
89:dd:c3:b8:26:d7:b6:2c:f3:4c:4e:bb:b4:e9:f8:
e0:6c:35:5c:b2:e7:df:5e:39:c5:7f:a7:21:3b:e9:
79:64:c5:92:50:e8:15:8f:01:e6:d0:56:9e:74:b6:
62:a3:26:ca:6f:14:6f:01:6b:b4:ce:9b:63:77:81:
90:90:22:19:5d:ac:3b:66:17:30:27:8d:50:b7:7a:
82:81:8b:52:ec:1a:42:9c:5e:2c:eb:1e:f9:42:8f:
44:66:d8:97:37:80:1a:8d:99:c6:e4:66:f3:a4:19:
67:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:14:23:E3:16:C3:C4:D3:A2:E8:9E:C3:F7:E3:4B:0E:D7:66:D8:01
X509v3 Authority Key Identifier:
keyid:9D:A4:E9:5D:2F:4C:C3:4A:73:76:B7:3C:0F:03:9B:3E:15:8F:51:52
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/naTpXS9Mw0pzdrc8DwObPhWPUVI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/20/acf2a2-4d52-40cd-a5f8-59591389e242/1/naTpXS9Mw0pzdrc8DwObPhWPUVI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/20/acf2a2-4d52-40cd-a5f8-59591389e242/1/naTpXS9Mw0pzdrc8DwObPhWPUVI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3c:59:e6:0d:04:e2:93:1f:c0:3f:23:a8:e6:e2:d2:bc:b6:80:
74:ac:ea:fc:0c:b9:7e:33:67:7b:87:ed:82:3f:1c:b5:f1:7f:
08:d2:d4:a7:47:c5:95:ce:ad:3a:0e:c1:cc:1e:4a:38:66:d3:
53:b4:bd:3c:fa:77:49:6b:ee:71:77:0f:37:4f:b6:22:bb:02:
21:2d:a4:52:e3:3d:67:5c:85:07:3b:80:dd:e6:44:83:26:3b:
0f:30:f4:d4:22:06:8b:1d:3e:22:7e:6e:46:be:5a:b0:4a:d6:
54:fa:94:bd:7d:e3:0f:89:56:34:18:9c:13:f4:8a:95:ff:42:
cb:ca:09:42:e9:be:96:11:10:92:4b:73:e5:d8:03:7d:00:2b:
ef:cb:55:c4:bd:c9:5b:a2:e5:f4:e5:6d:35:0c:e0:ff:13:b2:
a7:b0:99:c2:9c:e3:68:d5:db:51:61:0e:73:19:12:ca:c7:56:
00:df:5f:c6:7f:d8:f0:3d:d1:ee:2c:2b:dc:68:73:50:75:52:
03:7e:6a:68:2f:48:ae:fc:76:25:5c:96:b9:d3:e3:28:1e:93:
bd:47:49:e7:55:da:6a:95:7d:73:ab:74:57:63:11:f8:c3:f1:
d9:2d:97:66:51:99:a5:6d:0d:97:20:60:02:45:f1:da:bd:f4:
3e:f7:fc:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 04:06:23 2025 by rpki-client