Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/22/c920ec-07dc-469d-b884-b98bbb1637c0/1/nAqubUXQbffEJ4708hjkLbgHCUw.mft
File: nAqubUXQbffEJ4708hjkLbgHCUw.mft (raw, json)
Hash identifier: mZ5Td79FtLDHXwaxskRqu6FUFbGvIWx4cqraUrrZ+TY=
Subject key identifier: 07:3B:04:E4:1F:4C:B5:93:6B:25:A0:4A:C3:2F:E9:3D:2D:5F:6B:1A
Authority key identifier: 9C:0A:AE:6D:45:D0:6D:F7:C4:27:8E:F4:F2:18:E4:2D:B8:07:09:4C
Certificate issuer: /CN=9c0aae6d45d06df7c4278ef4f218e42db807094c
Certificate serial: 01967642F3AE616420F45741893316F82BD2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nAqubUXQbffEJ4708hjkLbgHCUw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/22/c920ec-07dc-469d-b884-b98bbb1637c0/1/nAqubUXQbffEJ4708hjkLbgHCUw.mft
Manifest number: 150F
Signing time: Sun 27 Apr 2025 08:00:21 +0000
Manifest this update: Sun 27 Apr 2025 08:00:21 +0000
Manifest next update: Mon 28 Apr 2025 08:00:21 +0000
Files and hashes: 1: MJMdhZnjDE7HHdif7jOifgXeBWw.roa (hash: OAM+4dNU25EOni1NCJmygQc3McNUoy2zZaTz7W6MCZg=)
2: nAqubUXQbffEJ4708hjkLbgHCUw.crl (hash: T0eZgHZxwSF6bLv0btSEw2zL7z5684ZE4/OIgBQ3qxU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/22/c920ec-07dc-469d-b884-b98bbb1637c0/1/nAqubUXQbffEJ4708hjkLbgHCUw.crl
rsync://rpki.ripe.net/repository/DEFAULT/22/c920ec-07dc-469d-b884-b98bbb1637c0/1/nAqubUXQbffEJ4708hjkLbgHCUw.mft
rsync://rpki.ripe.net/repository/DEFAULT/nAqubUXQbffEJ4708hjkLbgHCUw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 05:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:76:42:f3:ae:61:64:20:f4:57:41:89:33:16:f8:2b:d2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9c0aae6d45d06df7c4278ef4f218e42db807094c
Validity
Not Before: Apr 27 08:00:21 2025 GMT
Not After : Apr 28 08:00:21 2025 GMT
Subject: CN=073b04e41f4cb5936b25a04ac32fe93d2d5f6b1a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:88:6f:76:be:8c:b4:b2:57:a0:51:2e:28:02:
37:c7:ab:1a:d5:99:ae:d6:a8:7a:c5:19:27:7a:9d:
7d:fc:ea:cc:3d:39:ca:ce:fd:b8:32:2c:64:a9:ed:
ac:19:51:4f:d7:0f:de:2b:46:ec:c9:f5:50:52:13:
49:df:4c:db:e1:8b:ae:1a:0d:e5:30:1f:8d:94:42:
98:2b:d7:ac:af:c0:be:37:b7:73:dc:7a:6f:ee:f8:
9b:ed:de:7e:1e:c6:82:a0:08:00:80:c5:42:1f:76:
66:69:c9:92:b8:f1:64:b1:18:7b:59:50:ba:c3:f7:
08:31:a1:0e:76:01:76:a0:f1:d7:e3:9c:9a:15:99:
80:ae:ab:8c:f3:dd:5f:2f:22:74:d7:7c:b1:1c:00:
83:11:78:61:af:e4:c1:1a:2d:6f:60:ef:89:47:20:
cd:81:96:1a:fa:e1:60:b6:e2:0f:c6:83:27:01:8b:
c9:a8:e4:b2:25:07:e0:1d:a3:03:75:17:96:53:22:
60:c0:b4:ff:ca:1d:1b:b7:ba:b3:c0:93:76:3d:0a:
3f:94:fc:8e:e2:75:c7:94:6f:29:46:22:dc:c2:95:
86:9d:ab:e0:0b:8f:76:7a:31:8a:33:a5:b2:77:a1:
7f:75:bd:63:8a:67:d2:8a:60:3b:5b:ad:6c:fc:65:
4d:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:3B:04:E4:1F:4C:B5:93:6B:25:A0:4A:C3:2F:E9:3D:2D:5F:6B:1A
X509v3 Authority Key Identifier:
keyid:9C:0A:AE:6D:45:D0:6D:F7:C4:27:8E:F4:F2:18:E4:2D:B8:07:09:4C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nAqubUXQbffEJ4708hjkLbgHCUw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/c920ec-07dc-469d-b884-b98bbb1637c0/1/nAqubUXQbffEJ4708hjkLbgHCUw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/22/c920ec-07dc-469d-b884-b98bbb1637c0/1/nAqubUXQbffEJ4708hjkLbgHCUw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2d:ff:3a:07:42:35:5b:bd:b7:4b:03:02:11:41:22:19:f7:b4:
19:1e:c8:bf:41:3d:eb:b8:4e:51:85:5b:57:10:49:10:b3:2f:
3b:53:a8:1c:f7:c6:25:1e:ba:95:d4:dd:d5:8e:46:ee:97:59:
37:cb:6f:f4:a4:3e:1f:60:c3:b2:85:0d:03:e2:70:98:46:88:
c8:6c:47:db:68:45:71:ae:0c:93:19:33:72:74:22:84:e1:32:
62:3e:9d:c9:5a:86:b0:c8:41:6d:85:62:d8:ed:6c:37:2c:1f:
79:85:98:85:ce:c6:1d:bb:38:50:70:dd:5e:5f:6d:85:84:10:
e3:36:87:2f:bb:e2:98:96:eb:d0:8d:0d:47:1e:8c:5a:3a:ad:
0a:e4:57:f2:dc:5b:f0:85:2d:01:b0:26:29:fd:65:20:fb:02:
a6:75:0b:78:61:3b:d0:11:fa:10:66:28:1c:a1:2e:5a:a1:58:
84:7f:76:cb:96:be:34:49:46:bf:01:5f:7c:bc:ec:f2:e2:e9:
e2:f1:c6:b8:f6:46:9c:12:7e:c1:4b:bd:ca:9e:ab:7b:b6:ad:
ad:0c:d4:b7:ef:04:e6:8f:f3:5e:b9:47:89:83:9a:5a:53:6e:
cb:34:2f:ec:1e:c5:4d:99:6b:10:87:0c:4d:93:2a:8b:54:51:
d1:51:65:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 12:46:28 2025 by rpki-client