Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3a/16661c-e77b-41c3-80e4-14ee32fc5d06/1/nwM4t9tUQAKUEDl1Fckw60UtdbA.mft
File: nwM4t9tUQAKUEDl1Fckw60UtdbA.mft (raw, json)
Hash identifier: 5324G/gvLUHQMbWxHl9A5xbCVz4CESspuRoNOQi9k94=
Subject key identifier: 8E:6E:0B:78:6C:F1:FC:59:45:40:CA:4A:62:5C:44:F1:A3:9B:92:15
Authority key identifier: 9F:03:38:B7:DB:54:40:02:94:10:39:75:15:C9:30:EB:45:2D:75:B0
Certificate issuer: /CN=9f0338b7db5440029410397515c930eb452d75b0
Certificate serial: 01968E82C97A90DEC7422CB56235598ADB4D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nwM4t9tUQAKUEDl1Fckw60UtdbA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3a/16661c-e77b-41c3-80e4-14ee32fc5d06/1/nwM4t9tUQAKUEDl1Fckw60UtdbA.mft
Manifest number: 151A
Signing time: Fri 02 May 2025 01:00:58 +0000
Manifest this update: Fri 02 May 2025 01:00:58 +0000
Manifest next update: Sat 03 May 2025 01:00:58 +0000
Files and hashes: 1: HhSxQEAct_Hilmn4S8Eq6DvrLvI.roa (hash: crLyXY2X5OyUyjzwP0FotFChrfWXLKr+2gME4D4k2t8=)
2: nwM4t9tUQAKUEDl1Fckw60UtdbA.crl (hash: wXuizbhtDpSF/nVIEIof+0nYWG9fi++ArzPS7Y9YkLc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3a/16661c-e77b-41c3-80e4-14ee32fc5d06/1/nwM4t9tUQAKUEDl1Fckw60UtdbA.crl
rsync://rpki.ripe.net/repository/DEFAULT/3a/16661c-e77b-41c3-80e4-14ee32fc5d06/1/nwM4t9tUQAKUEDl1Fckw60UtdbA.mft
rsync://rpki.ripe.net/repository/DEFAULT/nwM4t9tUQAKUEDl1Fckw60UtdbA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 03 May 2025 01:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:8e:82:c9:7a:90:de:c7:42:2c:b5:62:35:59:8a:db:4d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9f0338b7db5440029410397515c930eb452d75b0
Validity
Not Before: May 2 01:00:58 2025 GMT
Not After : May 3 01:00:58 2025 GMT
Subject: CN=8e6e0b786cf1fc594540ca4a625c44f1a39b9215
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:af:be:b7:5a:7b:ca:7a:c6:3c:5b:4a:59:0c:
28:bc:11:cd:55:34:67:4e:a5:9e:5c:b3:b2:62:f2:
a4:a5:98:e3:75:ba:c5:a8:76:77:9c:fa:25:01:ef:
5b:8e:43:cc:cf:ac:20:91:60:1b:bf:74:88:49:35:
2e:a4:ae:e6:34:e5:c4:32:c2:89:88:06:2d:4f:c8:
eb:5a:b2:0c:27:7c:fe:70:cb:12:85:9b:2f:7c:c0:
41:c4:c5:de:b1:7c:8f:a0:4f:27:21:f5:82:3a:ae:
1a:ab:8b:58:22:19:ee:4d:1c:f1:84:b8:a4:9f:c2:
6b:5b:7b:31:4e:c2:b6:de:b4:2c:60:3c:c9:ad:3f:
63:d1:a5:3b:48:eb:87:14:65:62:86:0a:e7:21:8a:
84:3a:f2:8f:93:6d:a9:1b:69:d0:3b:31:ff:f8:1f:
05:38:ce:4b:6c:7e:7e:48:6c:0e:09:75:38:a1:86:
38:08:eb:2c:e1:3c:42:2a:52:aa:e1:7d:33:60:86:
28:46:b1:e4:18:ab:11:c8:9d:b1:69:da:90:52:38:
48:68:54:14:24:f1:73:95:8a:87:a7:8e:af:c4:99:
63:0e:76:1e:5b:53:ee:af:f6:f0:b0:3f:c4:0f:8c:
28:65:c2:d7:15:8c:ff:49:6a:e3:72:d6:6b:74:fd:
db:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:6E:0B:78:6C:F1:FC:59:45:40:CA:4A:62:5C:44:F1:A3:9B:92:15
X509v3 Authority Key Identifier:
keyid:9F:03:38:B7:DB:54:40:02:94:10:39:75:15:C9:30:EB:45:2D:75:B0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nwM4t9tUQAKUEDl1Fckw60UtdbA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/16661c-e77b-41c3-80e4-14ee32fc5d06/1/nwM4t9tUQAKUEDl1Fckw60UtdbA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/16661c-e77b-41c3-80e4-14ee32fc5d06/1/nwM4t9tUQAKUEDl1Fckw60UtdbA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6b:d5:47:73:c7:30:c0:5a:a7:e7:9c:f5:05:9d:64:0c:1b:49:
43:13:40:ea:de:da:c5:1e:d7:6d:62:eb:e0:27:91:5e:9e:9d:
b5:7e:22:5f:a4:50:41:84:6c:0e:e6:25:92:a4:ec:56:77:2a:
34:aa:a6:8d:29:4e:78:ba:8f:17:de:97:c1:bb:08:e4:05:63:
8a:fe:04:bf:3f:5b:63:63:2c:f4:0f:15:6b:f7:f3:74:e5:7e:
09:d6:be:e9:3e:b2:c5:9b:73:50:fa:38:21:04:a5:c3:0e:aa:
25:aa:a2:73:04:fc:61:67:e4:f1:60:dd:ac:d7:a5:b7:54:44:
c3:14:5e:2d:df:e1:d0:4f:74:2d:84:0e:a6:54:05:5c:7a:4e:
40:68:9b:43:87:ae:eb:df:44:80:c1:64:0e:d9:1e:45:61:82:
99:cc:ef:57:8c:25:47:e9:ff:32:94:cf:4a:ee:86:d5:ef:cc:
93:1d:1d:ca:ef:c9:2f:ff:93:97:5b:1e:e6:9b:35:98:03:e5:
ba:49:4e:bc:e2:81:c5:05:ae:d5:11:79:fb:5c:34:de:d8:d1:
c1:0b:44:77:92:ed:fa:6d:c2:b0:e0:7b:60:7c:71:1f:d9:aa:
33:fd:f0:17:dc:a7:89:7b:da:6e:ab:0e:92:ce:db:ba:b1:3f:
1c:86:8b:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 2 12:03:06 2025 by rpki-client