Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3b/981b50-03ab-414b-a310-bdc5d6cb2141/1/ntoJbbyNWaRCchzBadautkn1_T8.mft
File: ntoJbbyNWaRCchzBadautkn1_T8.mft (raw, json)
Hash identifier: odMp/qXLBxuVDbZWg4KbfewDaOEcgJC+MgG7Dig6UjI=
Subject key identifier: C5:B7:5C:BE:85:FE:5B:18:25:52:BC:D7:9E:AB:D4:56:7F:A9:C9:B2
Authority key identifier: 9E:DA:09:6D:BC:8D:59:A4:42:72:1C:C1:69:D6:AE:B6:49:F5:FD:3F
Certificate issuer: /CN=9eda096dbc8d59a442721cc169d6aeb649f5fd3f
Certificate serial: 01967C459A523F07A219211A26A251707EFC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ntoJbbyNWaRCchzBadautkn1_T8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3b/981b50-03ab-414b-a310-bdc5d6cb2141/1/ntoJbbyNWaRCchzBadautkn1_T8.mft
Manifest number: 09C5
Signing time: Mon 28 Apr 2025 12:00:58 +0000
Manifest this update: Mon 28 Apr 2025 12:00:58 +0000
Manifest next update: Tue 29 Apr 2025 12:00:58 +0000
Files and hashes: 1: lBu7CwE3UJV_l_-xHUG1qoahCTQ.roa (hash: fQvVs4QYMOjRdLpo5ySosD6udSmF5lBQB4/GrAlIHkM=)
2: ntoJbbyNWaRCchzBadautkn1_T8.crl (hash: gSvjjZgOqk78AbK7eQ0hoX2cHXpIBivTeyVy5YXgNIY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3b/981b50-03ab-414b-a310-bdc5d6cb2141/1/ntoJbbyNWaRCchzBadautkn1_T8.crl
rsync://rpki.ripe.net/repository/DEFAULT/3b/981b50-03ab-414b-a310-bdc5d6cb2141/1/ntoJbbyNWaRCchzBadautkn1_T8.mft
rsync://rpki.ripe.net/repository/DEFAULT/ntoJbbyNWaRCchzBadautkn1_T8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Apr 2025 12:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:7c:45:9a:52:3f:07:a2:19:21:1a:26:a2:51:70:7e:fc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9eda096dbc8d59a442721cc169d6aeb649f5fd3f
Validity
Not Before: Apr 28 12:00:58 2025 GMT
Not After : Apr 29 12:00:58 2025 GMT
Subject: CN=c5b75cbe85fe5b182552bcd79eabd4567fa9c9b2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:6e:45:61:f4:6d:bb:69:09:f0:f6:a4:63:6e:
a1:12:19:7d:be:8c:ed:56:33:c3:e2:4e:dd:0a:88:
65:3d:25:5b:98:e4:dd:12:e8:71:58:e0:09:0e:81:
3e:e5:96:68:d7:fc:89:ad:24:24:cc:dd:dc:f0:4a:
7f:e3:de:f4:80:b1:fc:25:36:c1:e2:67:82:aa:64:
2b:6e:21:83:11:9c:04:46:e2:e4:69:b9:9f:ce:b9:
2a:95:c3:4b:90:a0:3d:c2:c0:24:17:7c:f7:2c:3b:
9e:a5:06:df:01:f9:b3:78:70:0e:2e:12:81:c8:e8:
30:9c:bf:3c:52:5f:07:f4:10:e9:19:8e:63:e2:ef:
9d:b5:cf:19:40:68:f3:3a:1b:2c:7d:c7:4a:3d:d0:
7e:9b:a1:cf:92:a0:09:70:20:ea:be:5f:bf:11:c1:
d7:f7:8e:02:d5:8a:ca:11:14:7e:41:8c:61:4b:3c:
b9:31:1d:7e:74:1d:b9:b0:40:98:95:fb:25:d0:f1:
c0:a7:5e:ed:f2:c1:16:b5:4e:92:1d:4e:6c:45:18:
a7:58:d7:a9:65:0a:6c:8c:9e:7f:05:a2:c5:6b:8b:
e7:43:05:c4:53:7a:e0:c5:cb:94:32:f5:1c:d5:35:
77:75:8a:52:e7:27:d3:ed:de:b9:ef:f9:76:a7:cb:
13:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:B7:5C:BE:85:FE:5B:18:25:52:BC:D7:9E:AB:D4:56:7F:A9:C9:B2
X509v3 Authority Key Identifier:
keyid:9E:DA:09:6D:BC:8D:59:A4:42:72:1C:C1:69:D6:AE:B6:49:F5:FD:3F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ntoJbbyNWaRCchzBadautkn1_T8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/981b50-03ab-414b-a310-bdc5d6cb2141/1/ntoJbbyNWaRCchzBadautkn1_T8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/981b50-03ab-414b-a310-bdc5d6cb2141/1/ntoJbbyNWaRCchzBadautkn1_T8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
66:09:d3:bb:c3:dd:33:37:21:e7:16:5a:6a:22:af:f8:05:a9:
6b:ca:48:99:2b:0e:4f:51:be:30:71:d0:da:2e:59:ce:36:e4:
0b:0b:ee:de:fe:83:1f:e6:4e:76:ef:65:fb:aa:a7:2e:50:b2:
ea:11:f7:74:71:75:22:04:25:52:e5:a2:82:b4:0c:81:1f:e1:
c7:a0:bb:89:ab:6f:88:91:96:a2:32:12:c7:06:54:cb:06:5e:
4a:1d:34:9e:72:29:a0:1c:af:03:88:2b:29:ac:8a:22:de:73:
78:9e:75:73:0e:90:a8:8a:81:d4:e4:e2:f6:92:bf:02:f6:30:
58:f1:e9:9b:31:e5:de:93:48:96:25:30:47:3b:1e:a9:e7:13:
13:03:6e:ab:9f:d3:6f:aa:f1:3e:04:0c:5e:8c:0c:1a:62:ab:
7f:8d:c3:44:83:09:8d:d8:52:0c:84:0a:68:ee:49:3d:1c:1b:
bb:11:cb:b7:df:ef:b4:31:c1:9a:62:ef:cb:dc:95:ee:8a:45:
15:7c:5c:61:a0:ee:a8:29:1d:a7:ee:1e:f9:2b:78:df:07:ad:
4a:56:97:c4:89:8e:e8:f3:09:30:e5:d3:54:1e:16:b1:8f:11:
2d:9d:52:0e:38:50:66:07:a2:67:2c:93:73:55:ac:d6:a4:70:
fc:61:c7:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 19:59:18 2025 by rpki-client