Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3d/ee84f7-af2a-46dc-b6c6-1fc89e99a0a1/1/nAN1ranF4BAN22M7Kht0fhnC7Fs.mft
File: nAN1ranF4BAN22M7Kht0fhnC7Fs.mft (raw, json)
Hash identifier: C9m/pUnrEJTfVDmPRpIa5VcLJZOTKwdfDtxlKpW8REQ=
Subject key identifier: 7E:2C:56:A5:BD:5B:E6:95:55:EF:83:7D:A9:11:A2:6F:40:6C:37:99
Authority key identifier: 9C:03:75:AD:A9:C5:E0:10:0D:DB:63:3B:2A:1B:74:7E:19:C2:EC:5B
Certificate issuer: /CN=9c0375ada9c5e0100ddb633b2a1b747e19c2ec5b
Certificate serial: 0196748B8D477FB40EE5C4D1BA9D467A0C81
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nAN1ranF4BAN22M7Kht0fhnC7Fs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3d/ee84f7-af2a-46dc-b6c6-1fc89e99a0a1/1/nAN1ranF4BAN22M7Kht0fhnC7Fs.mft
Manifest number: 03D3
Signing time: Sun 27 Apr 2025 00:00:24 +0000
Manifest this update: Sun 27 Apr 2025 00:00:24 +0000
Manifest next update: Mon 28 Apr 2025 00:00:24 +0000
Files and hashes: 1: MRDtmP98O0WNgH87Ax8nCcdZuLw.roa (hash: HrqGeHE20jy2rWDbz9uI3JnGeaBNl8AfA/5tH0i9z5o=)
2: nAN1ranF4BAN22M7Kht0fhnC7Fs.crl (hash: IYaBPYvw/m+8EjJN/FpZayo0sBwDYopf2J71bo2rZ6U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3d/ee84f7-af2a-46dc-b6c6-1fc89e99a0a1/1/nAN1ranF4BAN22M7Kht0fhnC7Fs.crl
rsync://rpki.ripe.net/repository/DEFAULT/3d/ee84f7-af2a-46dc-b6c6-1fc89e99a0a1/1/nAN1ranF4BAN22M7Kht0fhnC7Fs.mft
rsync://rpki.ripe.net/repository/DEFAULT/nAN1ranF4BAN22M7Kht0fhnC7Fs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 00:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:74:8b:8d:47:7f:b4:0e:e5:c4:d1:ba:9d:46:7a:0c:81
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9c0375ada9c5e0100ddb633b2a1b747e19c2ec5b
Validity
Not Before: Apr 27 00:00:24 2025 GMT
Not After : Apr 28 00:00:24 2025 GMT
Subject: CN=7e2c56a5bd5be69555ef837da911a26f406c3799
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:f6:aa:41:24:8e:27:51:bf:10:68:1c:f4:15:
7f:7a:14:fe:5c:7f:dd:a9:40:8e:35:e1:6c:a3:c0:
43:1d:d6:e6:a3:4e:3a:3b:d8:7b:df:18:c6:a6:d4:
15:a9:bd:dd:b8:30:f3:ec:10:ef:e1:3e:4a:b8:4d:
95:4b:a3:dd:f6:34:48:d9:05:4e:7e:2a:66:8e:b2:
3f:2c:05:4a:c7:2a:67:9b:4d:70:93:2e:36:e5:a7:
6e:e2:f3:ad:56:52:d7:e0:4b:b8:f8:e1:bd:7b:cf:
c4:f5:db:29:93:4d:f8:5e:17:57:e2:23:68:65:da:
8d:bf:39:d8:9f:9b:f1:e8:2d:78:dd:06:89:72:eb:
27:a9:90:ef:23:38:c6:87:34:88:69:bb:27:e1:ea:
fc:b7:5a:47:2f:82:9b:ca:4c:0a:7f:39:5c:fa:89:
5f:c2:a7:b0:5f:bd:4c:d2:03:c2:bb:d8:10:63:79:
7e:97:56:4b:8e:20:34:3b:61:1b:33:30:46:c4:a3:
0c:85:99:9a:1c:1a:83:5d:37:09:77:7d:1d:fa:4c:
47:b6:cf:fd:bb:80:c0:86:55:f1:d3:cf:72:78:55:
d5:ef:3f:50:0c:78:bd:3a:72:d2:da:58:54:a6:55:
35:0c:8f:8b:01:25:36:05:f4:ec:c9:a8:92:08:94:
41:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:2C:56:A5:BD:5B:E6:95:55:EF:83:7D:A9:11:A2:6F:40:6C:37:99
X509v3 Authority Key Identifier:
keyid:9C:03:75:AD:A9:C5:E0:10:0D:DB:63:3B:2A:1B:74:7E:19:C2:EC:5B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nAN1ranF4BAN22M7Kht0fhnC7Fs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/ee84f7-af2a-46dc-b6c6-1fc89e99a0a1/1/nAN1ranF4BAN22M7Kht0fhnC7Fs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/ee84f7-af2a-46dc-b6c6-1fc89e99a0a1/1/nAN1ranF4BAN22M7Kht0fhnC7Fs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
41:48:c7:3d:b9:e6:a1:a2:b7:ca:2a:83:16:e8:c5:42:0f:65:
c2:87:d6:74:52:d6:4a:24:4f:bf:9a:a5:47:e3:b7:5a:f1:76:
05:00:63:e3:4a:d0:fb:80:7c:50:69:7a:e7:e2:1b:f6:3a:3e:
24:db:ce:5f:4f:6e:64:83:0d:1a:c5:a9:e2:71:9a:e6:61:3d:
51:74:c7:9c:b2:8b:76:51:fa:da:d2:df:68:72:41:c6:ac:f7:
29:4a:94:df:7a:4f:52:d4:3a:3e:e9:03:a3:43:3c:43:56:5e:
83:5f:25:f3:8a:4d:f3:2e:05:23:fc:c9:60:63:b5:82:89:d7:
e8:e3:61:f7:e3:7d:77:29:cb:99:1c:9a:7a:8f:d8:5a:04:e8:
8b:57:e6:4c:a4:98:1f:d8:38:c3:2b:4e:c6:73:75:36:de:5b:
5b:1b:de:b6:35:48:68:66:8f:39:ca:bc:60:f2:ba:e5:2c:eb:
73:7c:b1:ce:73:b9:b2:3e:e6:a6:33:31:44:05:54:19:08:1b:
8c:fc:32:98:7d:09:ef:73:59:9b:f0:ce:88:dd:2d:0f:59:d9:
a3:18:c2:a5:ab:93:9a:3e:b9:94:9b:2c:8d:3d:42:5b:13:f1:
8e:ad:a0:d2:ee:72:2b:f7:57:d7:83:22:89:91:af:24:39:10:
4b:d6:a2:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 07:41:38 2025 by rpki-client