Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/ba3577-ccb3-4ea6-8368-7458608f8d99/1/nqHn4vjzF3WfNGj9gVvxTrNuIcg.mft
File: nqHn4vjzF3WfNGj9gVvxTrNuIcg.mft (raw, json)
Hash identifier: qGGy2EBFnDD4rDpQKbFZfDXhnkNcsQ4+OV+1aBufucE=
Subject key identifier: D7:C1:11:3F:FE:B9:DD:96:72:63:3F:E1:0A:71:0D:E0:EC:E1:88:ED
Authority key identifier: 9E:A1:E7:E2:F8:F3:17:75:9F:34:68:FD:81:5B:F1:4E:B3:6E:21:C8
Certificate issuer: /CN=9ea1e7e2f8f317759f3468fd815bf14eb36e21c8
Certificate serial: 01968D3917B876FC4601F47FE5D8FA5F8AAC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nqHn4vjzF3WfNGj9gVvxTrNuIcg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2a/ba3577-ccb3-4ea6-8368-7458608f8d99/1/nqHn4vjzF3WfNGj9gVvxTrNuIcg.mft
Manifest number: 1039
Signing time: Thu 01 May 2025 19:00:51 +0000
Manifest this update: Thu 01 May 2025 19:00:51 +0000
Manifest next update: Fri 02 May 2025 19:00:51 +0000
Files and hashes: 1: nqHn4vjzF3WfNGj9gVvxTrNuIcg.crl (hash: jav9+uoQy01JAFnbsstRpa/UnWSQOzS1vsvvZalpfDM=)
2: vMWejL_WfAw5UGYBVG882HdQDVU.roa (hash: UfokJ9esFOS4de6evRWO+CcRCXAegKzSyR2ErWU1fPQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2a/ba3577-ccb3-4ea6-8368-7458608f8d99/1/nqHn4vjzF3WfNGj9gVvxTrNuIcg.crl
rsync://rpki.ripe.net/repository/DEFAULT/2a/ba3577-ccb3-4ea6-8368-7458608f8d99/1/nqHn4vjzF3WfNGj9gVvxTrNuIcg.mft
rsync://rpki.ripe.net/repository/DEFAULT/nqHn4vjzF3WfNGj9gVvxTrNuIcg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 02 May 2025 19:00:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:8d:39:17:b8:76:fc:46:01:f4:7f:e5:d8:fa:5f:8a:ac
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9ea1e7e2f8f317759f3468fd815bf14eb36e21c8
Validity
Not Before: May 1 19:00:51 2025 GMT
Not After : May 2 19:00:51 2025 GMT
Subject: CN=d7c1113ffeb9dd9672633fe10a710de0ece188ed
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:c2:0c:33:bf:9a:5c:85:ea:ef:32:c5:f3:b1:
6b:99:85:48:98:09:67:af:72:9d:3e:82:db:49:3b:
87:c2:34:32:cb:67:ec:2b:61:6c:b2:46:55:29:0d:
68:42:fd:4f:15:a8:c9:7d:68:32:ce:c9:af:5f:bf:
62:f4:39:79:62:11:02:6a:0c:2e:a8:d6:13:bb:5e:
83:da:79:1e:ac:35:80:27:1a:b8:ef:1b:5e:0f:a6:
84:04:36:d4:24:d5:ec:d6:ee:77:09:68:fb:04:19:
95:e7:a1:4b:04:95:47:e6:a4:e9:38:34:3b:76:1d:
1f:9e:42:61:9a:d0:ac:6f:13:95:e8:08:c2:be:34:
f9:97:db:b7:63:b8:72:13:49:ec:11:7b:08:78:e1:
c2:70:59:f2:e3:15:a3:21:70:a4:bc:4c:cc:64:e6:
87:1f:f2:fb:c3:b1:4e:55:7c:ab:f9:50:fa:d0:a6:
62:45:4a:cb:38:62:74:b4:00:a2:5d:a3:00:b3:54:
7d:68:36:0d:25:e8:84:d3:8e:19:f7:b3:c3:d5:11:
c6:1a:57:4d:ab:0f:c5:ce:76:40:d4:1a:c1:f3:e5:
be:08:64:f8:f0:25:bb:c7:3c:df:dd:79:79:a3:d4:
20:13:17:dd:4e:33:42:33:10:34:a9:4a:01:12:b7:
5a:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:C1:11:3F:FE:B9:DD:96:72:63:3F:E1:0A:71:0D:E0:EC:E1:88:ED
X509v3 Authority Key Identifier:
keyid:9E:A1:E7:E2:F8:F3:17:75:9F:34:68:FD:81:5B:F1:4E:B3:6E:21:C8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nqHn4vjzF3WfNGj9gVvxTrNuIcg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/ba3577-ccb3-4ea6-8368-7458608f8d99/1/nqHn4vjzF3WfNGj9gVvxTrNuIcg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/ba3577-ccb3-4ea6-8368-7458608f8d99/1/nqHn4vjzF3WfNGj9gVvxTrNuIcg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5c:0e:1f:20:eb:54:2f:59:9e:c7:6e:7d:7c:cb:80:9e:aa:f1:
98:6f:94:31:5b:73:06:bc:7d:78:14:94:a8:52:60:f7:0e:11:
b3:83:5c:2f:35:ad:92:63:2a:c4:5c:26:36:0e:76:87:c1:22:
35:da:a3:c8:c0:ae:9b:6a:e6:54:6b:b4:a5:4e:14:80:d5:8c:
07:47:d8:b8:f9:d6:a1:c4:44:9e:47:72:3f:bc:07:bb:40:e7:
b8:bb:57:06:e9:fa:4a:64:cc:b1:e9:10:fe:51:34:57:25:85:
7f:44:19:e4:e3:f9:4c:eb:6f:ca:82:2e:8a:2b:f0:65:2d:16:
75:4e:23:ae:9a:9d:cd:ee:0d:b7:21:ec:6f:e8:f3:56:f1:e5:
2c:18:39:c3:42:fc:14:9f:1a:11:69:a8:7c:80:ef:7c:6f:f9:
1d:32:5d:95:8d:55:e2:7d:03:2b:f5:18:da:97:d9:21:5a:5b:
e7:d8:0b:ff:eb:6f:f4:92:17:1a:43:0f:55:30:ac:90:f8:20:
50:37:d6:73:91:95:8a:c1:2b:aa:78:d7:67:0b:89:55:15:6c:
b6:a8:1d:5d:05:2e:ab:da:4c:30:1c:cd:49:59:81:48:69:88:
de:09:b9:75:6e:c1:8c:d6:83:3c:7b:66:35:fa:5f:f6:b2:0e:
d8:7c:35:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 2 05:02:44 2025 by rpki-client