Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/76dc25-b389-4024-bf28-f4f0561b7a57/1/nE2Gr7WfHZ3RbBElAJuZg4LjbtM.mft
File: nE2Gr7WfHZ3RbBElAJuZg4LjbtM.mft (raw, json)
Hash identifier: kXRER7ASDTJ5Sx+XdouFM15kll3eJ9hiAtxQTV6xhb8=
Subject key identifier: 6F:B8:6E:46:84:76:E9:A2:A6:56:70:EC:17:0C:E0:E1:8E:36:80:A1
Authority key identifier: 9C:4D:86:AF:B5:9F:1D:9D:D1:6C:11:25:00:9B:99:83:82:E3:6E:D3
Certificate issuer: /CN=9c4d86afb59f1d9dd16c1125009b998382e36ed3
Certificate serial: 019680FD69BEFB3616324A61E5F6E8FA3309
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nE2Gr7WfHZ3RbBElAJuZg4LjbtM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/40/76dc25-b389-4024-bf28-f4f0561b7a57/1/nE2Gr7WfHZ3RbBElAJuZg4LjbtM.mft
Manifest number: 0DD5
Signing time: Tue 29 Apr 2025 10:00:13 +0000
Manifest this update: Tue 29 Apr 2025 10:00:13 +0000
Manifest next update: Wed 30 Apr 2025 10:00:13 +0000
Files and hashes: 1: En56MrvrAc2ZjznO-sVnuE-LhdM.roa (hash: HqjVdQwx3YyRZrFCjkQ3kR6h3z6cMZaI4IEZAgx0eDw=)
2: jtPk_x887O-4U6cQtXfHslM-ta4.roa (hash: Hkg+W7TgpjHAuQZwvX5dY53K7XPP9snW8AKHjQpDkKY=)
3: nE2Gr7WfHZ3RbBElAJuZg4LjbtM.crl (hash: /RjTTXXRLYg+tmhnZAVHMdwWSrtiuAX7iUzwgS6/vXQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/40/76dc25-b389-4024-bf28-f4f0561b7a57/1/nE2Gr7WfHZ3RbBElAJuZg4LjbtM.crl
rsync://rpki.ripe.net/repository/DEFAULT/40/76dc25-b389-4024-bf28-f4f0561b7a57/1/nE2Gr7WfHZ3RbBElAJuZg4LjbtM.mft
rsync://rpki.ripe.net/repository/DEFAULT/nE2Gr7WfHZ3RbBElAJuZg4LjbtM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 30 Apr 2025 09:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:80:fd:69:be:fb:36:16:32:4a:61:e5:f6:e8:fa:33:09
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9c4d86afb59f1d9dd16c1125009b998382e36ed3
Validity
Not Before: Apr 29 10:00:13 2025 GMT
Not After : Apr 30 10:00:13 2025 GMT
Subject: CN=6fb86e468476e9a2a65670ec170ce0e18e3680a1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:32:f6:05:60:7f:a6:3b:3e:c0:58:be:b3:b2:
6a:c2:a0:0b:ee:dd:87:36:16:5f:80:ea:2e:9d:f7:
22:fe:c3:5c:40:0c:b6:7d:fa:38:9a:d7:61:0c:8b:
74:60:1d:70:3a:92:53:4e:6f:c1:70:2a:5e:62:31:
45:8c:71:df:9f:96:1f:41:84:89:92:18:a0:5a:52:
60:a9:25:92:8d:0f:0d:f0:40:a6:68:17:15:f1:dc:
4a:f8:10:2f:d3:00:c0:6e:8a:14:87:c5:6a:f6:af:
1d:89:e5:0e:34:34:4b:29:60:73:82:d7:84:d9:e4:
cb:f5:e2:dc:10:5f:ef:70:66:f9:7a:2c:96:e9:46:
d0:aa:7e:92:5d:28:68:e1:ee:9a:1a:92:e9:93:73:
d1:52:af:76:ec:46:23:5e:0e:db:ab:77:c5:dd:78:
fe:c3:ef:f6:75:43:2f:14:7e:43:44:34:60:d9:ff:
67:b3:dd:f4:eb:21:7a:63:da:33:f9:9b:f1:7d:0b:
84:c6:17:d6:c0:e2:a7:dd:d3:d9:12:78:9d:4f:cc:
ce:6d:79:ac:c0:0f:49:a6:89:c3:f1:b8:7c:fc:db:
a5:c6:20:90:e5:32:f5:be:94:1a:d8:ea:fc:bb:3f:
b8:5a:15:b4:c4:62:1b:da:e9:f0:6d:15:5d:69:ea:
39:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:B8:6E:46:84:76:E9:A2:A6:56:70:EC:17:0C:E0:E1:8E:36:80:A1
X509v3 Authority Key Identifier:
keyid:9C:4D:86:AF:B5:9F:1D:9D:D1:6C:11:25:00:9B:99:83:82:E3:6E:D3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nE2Gr7WfHZ3RbBElAJuZg4LjbtM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/76dc25-b389-4024-bf28-f4f0561b7a57/1/nE2Gr7WfHZ3RbBElAJuZg4LjbtM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/40/76dc25-b389-4024-bf28-f4f0561b7a57/1/nE2Gr7WfHZ3RbBElAJuZg4LjbtM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
84:63:74:c6:e4:9b:73:21:9d:fe:c8:11:dc:6d:4e:50:05:f0:
e7:0e:7d:9f:5d:1f:77:0c:5c:88:cb:79:72:44:87:04:7d:60:
74:f1:c8:40:6b:07:c0:e4:50:ee:d8:8c:3d:54:40:94:28:88:
89:65:86:b5:16:3f:c3:82:6f:55:76:f4:9e:a5:ac:94:05:48:
88:6d:2b:8a:de:f4:76:c7:dd:1e:61:8d:70:5a:8c:79:c6:f7:
ca:2b:ac:8c:5c:59:e8:71:00:01:d8:e2:21:08:43:43:ad:26:
e1:4c:53:bf:87:49:cd:eb:61:6a:a6:e7:37:19:36:2c:a0:f5:
9f:38:2b:2e:ca:d5:91:dd:98:77:2c:7e:7a:ce:aa:77:68:44:
9d:88:c7:ef:5e:30:c2:71:3e:a4:b0:54:6f:2b:47:89:f0:27:
27:c3:a3:a3:00:66:34:50:6c:15:57:04:25:d7:bf:ff:46:e4:
9b:c9:a3:a9:1c:47:ba:30:c0:d0:0d:fc:8d:57:fc:e8:ef:9f:
bc:6b:b9:19:fb:45:68:87:f3:6e:88:3a:49:ac:e0:e2:54:c6:
37:20:d5:6a:1e:2f:ad:ac:e4:65:84:18:14:bf:27:ad:77:74:
07:9a:e3:82:6c:7a:ae:b4:66:83:04:88:18:2f:68:ac:88:f1:
ae:ac:b6:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 12:00:32 2025 by rpki-client