Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3a/bec756-1dfe-4374-8607-9d8f0ef5c503/1/nV7M6Mh8Twp1uiHlyE9iQSHgjjI.mft
File: nV7M6Mh8Twp1uiHlyE9iQSHgjjI.mft (raw, json)
Hash identifier: WK9IgQkdiOZTXkMD0OmyKzSJUC02AqosnDTb+E4gwHw=
Subject key identifier: 00:82:F7:9F:5B:48:D2:F2:47:8C:9F:8E:26:58:33:77:EF:AC:27:04
Authority key identifier: 9D:5E:CC:E8:C8:7C:4F:0A:75:BA:21:E5:C8:4F:62:41:21:E0:8E:32
Certificate issuer: /CN=9d5ecce8c87c4f0a75ba21e5c84f624121e08e32
Certificate serial: 019674C29B1E4BB256B29D61F3F644F39A8E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nV7M6Mh8Twp1uiHlyE9iQSHgjjI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3a/bec756-1dfe-4374-8607-9d8f0ef5c503/1/nV7M6Mh8Twp1uiHlyE9iQSHgjjI.mft
Manifest number: 32
Signing time: Sun 27 Apr 2025 01:00:32 +0000
Manifest this update: Sun 27 Apr 2025 01:00:32 +0000
Manifest next update: Mon 28 Apr 2025 01:00:32 +0000
Files and hashes: 1: 5Be38N82i-kj4EuiNkalcK2iR3Q.roa (hash: J33WflhWlfLpbIfuokDfwd3Gd2ZFgGd5EDrdDXG7Eqc=)
2: QW6syWpnf0vqyILLjJUX4x26ONM.roa (hash: qFwWEKmzXxAiCGb5bVd4vtSjZ2jjOJwwjqw2pXbW8TQ=)
3: nV7M6Mh8Twp1uiHlyE9iQSHgjjI.crl (hash: ZF88oXWzbrtaEFfA0DBqce0Udmwr0ZEEhxw2qjdELoE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3a/bec756-1dfe-4374-8607-9d8f0ef5c503/1/nV7M6Mh8Twp1uiHlyE9iQSHgjjI.crl
rsync://rpki.ripe.net/repository/DEFAULT/3a/bec756-1dfe-4374-8607-9d8f0ef5c503/1/nV7M6Mh8Twp1uiHlyE9iQSHgjjI.mft
rsync://rpki.ripe.net/repository/DEFAULT/nV7M6Mh8Twp1uiHlyE9iQSHgjjI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Apr 2025 20:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:74:c2:9b:1e:4b:b2:56:b2:9d:61:f3:f6:44:f3:9a:8e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9d5ecce8c87c4f0a75ba21e5c84f624121e08e32
Validity
Not Before: Apr 27 01:00:32 2025 GMT
Not After : Apr 28 01:00:32 2025 GMT
Subject: CN=0082f79f5b48d2f2478c9f8e26583377efac2704
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:92:05:0e:3e:27:69:37:ec:82:26:b1:7c:8b:
d6:68:e7:58:c4:74:29:87:60:3d:d7:e6:89:5d:95:
13:ff:c2:9c:00:06:9d:c0:6c:68:44:76:52:a4:5a:
00:ad:3b:2b:ef:be:ee:52:e2:be:4a:a9:c7:f7:1b:
f7:de:7f:c1:18:e6:51:f3:a1:30:db:c8:7a:05:25:
4a:19:92:ea:0c:2e:09:9d:90:40:5a:a7:f5:c9:4d:
9d:51:38:7f:a3:4a:a9:8c:68:dc:cd:f7:53:14:1b:
6e:23:0a:df:6f:11:1b:de:aa:8d:cb:2f:4b:90:f2:
8c:4b:7e:a7:c3:09:26:d2:34:da:5f:f7:54:f9:64:
a4:6d:36:c4:9a:cf:b1:e1:ee:09:5a:0b:d1:75:bc:
f7:96:c1:55:0f:49:c0:78:27:fe:38:32:3b:39:48:
46:7d:b3:93:98:a3:55:fd:a5:24:2c:ca:25:0b:41:
45:43:95:44:7e:d8:49:eb:46:68:72:df:75:7e:83:
ca:40:40:21:23:3f:48:52:4f:99:41:9e:5e:13:07:
00:83:8d:3a:60:3d:4f:22:3d:76:7b:b0:91:04:f8:
2a:12:b4:83:3a:6c:00:8c:5d:04:8d:ec:36:cb:40:
0f:65:2f:3c:c9:7a:26:dd:0d:ca:f8:f7:d4:e7:9f:
92:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:82:F7:9F:5B:48:D2:F2:47:8C:9F:8E:26:58:33:77:EF:AC:27:04
X509v3 Authority Key Identifier:
keyid:9D:5E:CC:E8:C8:7C:4F:0A:75:BA:21:E5:C8:4F:62:41:21:E0:8E:32
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nV7M6Mh8Twp1uiHlyE9iQSHgjjI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/bec756-1dfe-4374-8607-9d8f0ef5c503/1/nV7M6Mh8Twp1uiHlyE9iQSHgjjI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/bec756-1dfe-4374-8607-9d8f0ef5c503/1/nV7M6Mh8Twp1uiHlyE9iQSHgjjI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
37:3e:f3:29:5b:95:35:bf:14:ed:4c:5f:f0:e0:36:61:87:e4:
5e:ca:13:f2:06:0e:30:60:b7:98:e5:ef:42:8d:bb:e1:cb:57:
5f:c4:9e:2e:44:2c:64:df:05:9b:4a:fd:15:82:68:18:51:f9:
90:05:da:c6:85:f2:6a:38:e1:27:54:d1:45:9e:00:c6:d5:20:
ae:05:95:c0:58:77:18:19:9f:bc:f2:b8:f2:df:41:08:38:98:
64:ad:a9:99:28:43:da:e8:b4:ec:6b:81:35:88:a3:e7:05:03:
8f:a5:2e:9d:ea:f9:38:75:7d:f4:19:e7:74:18:82:3d:4f:80:
d3:ff:36:c5:73:09:47:c8:41:04:51:73:99:ac:17:4a:f0:d5:
ab:95:f5:b8:a4:36:60:5a:5d:17:11:c3:37:25:ee:53:e1:4b:
87:0d:8c:6f:a7:42:9e:aa:18:52:f6:7e:6a:5c:3a:f9:09:85:
e1:60:83:21:81:80:37:98:0c:c9:ba:ef:45:03:1f:0d:ba:62:
bd:5a:86:18:72:67:32:71:f8:b9:72:f7:2a:71:d6:19:c3:a3:
8a:fa:f9:20:b5:a8:27:d3:6b:b1:41:be:4e:0f:b2:bb:57:61:
c4:5e:d1:ab:c0:1b:37:b1:4b:ef:f1:53:19:80:4c:1e:f0:cf:
c7:e2:2d:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 05:10:19 2025 by rpki-client