Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/eca327-d58f-491c-94c8-e3d045483412/1/nmFAOsaeKHT1Yi1-5Wjo5J8GTC4.mft
File: nmFAOsaeKHT1Yi1-5Wjo5J8GTC4.mft (raw, json)
Hash identifier: 0Qttmeolme2Non0pvZ8NteGQtpz4cdlwVUpo+pwR0Kw=
Subject key identifier: 7C:C4:B5:2F:8F:46:8E:09:D6:77:AF:0A:37:70:57:8A:2C:FE:F2:5D
Authority key identifier: 9E:61:40:3A:C6:9E:28:74:F5:62:2D:7E:E5:68:E8:E4:9F:06:4C:2E
Certificate issuer: /CN=9e61403ac69e2874f5622d7ee568e8e49f064c2e
Certificate serial: 01967567AD1E567B68DB5CE998764346D23A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nmFAOsaeKHT1Yi1-5Wjo5J8GTC4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/eca327-d58f-491c-94c8-e3d045483412/1/nmFAOsaeKHT1Yi1-5Wjo5J8GTC4.mft
Manifest number: 1511
Signing time: Sun 27 Apr 2025 04:00:50 +0000
Manifest this update: Sun 27 Apr 2025 04:00:50 +0000
Manifest next update: Mon 28 Apr 2025 04:00:50 +0000
Files and hashes: 1: k80BCKNHzgDvKK_3k-MEya8lNoM.roa (hash: XRBQsFrhhLJ6RMDFPAKpPWk13Lc3Ws+YcSUdoLvIOo8=)
2: nmFAOsaeKHT1Yi1-5Wjo5J8GTC4.crl (hash: wxiaX+Xn49vKopx+mKhopH/FQ1u2/7JgZVVPmvWsb5k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4c/eca327-d58f-491c-94c8-e3d045483412/1/nmFAOsaeKHT1Yi1-5Wjo5J8GTC4.crl
rsync://rpki.ripe.net/repository/DEFAULT/4c/eca327-d58f-491c-94c8-e3d045483412/1/nmFAOsaeKHT1Yi1-5Wjo5J8GTC4.mft
rsync://rpki.ripe.net/repository/DEFAULT/nmFAOsaeKHT1Yi1-5Wjo5J8GTC4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 04:00:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:75:67:ad:1e:56:7b:68:db:5c:e9:98:76:43:46:d2:3a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9e61403ac69e2874f5622d7ee568e8e49f064c2e
Validity
Not Before: Apr 27 04:00:50 2025 GMT
Not After : Apr 28 04:00:50 2025 GMT
Subject: CN=7cc4b52f8f468e09d677af0a3770578a2cfef25d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:93:77:b6:ba:41:ff:73:8b:85:cb:24:52:66:
7f:26:26:39:22:cc:03:80:39:8d:9d:78:d3:3c:bb:
24:2f:9f:ee:3d:95:f5:ee:60:62:2b:37:74:f7:fa:
24:92:9a:e7:8f:b8:17:7f:7d:e9:40:7a:52:c2:5e:
b5:62:a3:93:78:e2:d3:c0:a1:7f:82:1c:b9:18:c8:
4f:24:84:9a:03:5d:0d:09:53:55:d1:94:e9:43:02:
f4:5d:1b:2e:11:36:7f:be:c5:cf:4d:2f:c8:7e:8e:
22:19:97:73:28:f3:2d:41:fb:cb:2f:00:1a:66:d6:
a5:82:26:e1:01:72:6a:d8:19:01:e8:4b:37:6a:07:
d5:23:79:c5:ab:27:10:3c:61:1a:19:bc:52:6f:72:
ab:d7:1c:63:7c:9f:ec:3b:85:cf:f8:74:18:b1:66:
91:c9:63:f7:90:09:e7:29:8f:82:1a:5b:c2:13:56:
db:2c:56:5f:1f:f8:c3:a1:45:2a:d9:1a:d5:d7:33:
7c:53:8e:d6:93:4a:3c:1b:e9:2f:1f:fd:29:8b:f1:
bd:0a:c8:0c:99:04:e8:fb:8d:9a:07:f1:b1:15:ad:
7a:7a:c0:a8:9b:7b:eb:5f:47:52:c1:ba:d3:d1:2d:
f9:b1:f1:06:58:3a:c2:1c:0f:94:c5:9f:fa:1a:c7:
f5:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:C4:B5:2F:8F:46:8E:09:D6:77:AF:0A:37:70:57:8A:2C:FE:F2:5D
X509v3 Authority Key Identifier:
keyid:9E:61:40:3A:C6:9E:28:74:F5:62:2D:7E:E5:68:E8:E4:9F:06:4C:2E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nmFAOsaeKHT1Yi1-5Wjo5J8GTC4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/eca327-d58f-491c-94c8-e3d045483412/1/nmFAOsaeKHT1Yi1-5Wjo5J8GTC4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/eca327-d58f-491c-94c8-e3d045483412/1/nmFAOsaeKHT1Yi1-5Wjo5J8GTC4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
53:50:24:7e:62:90:6e:dd:d0:f7:83:8d:29:f7:a1:b0:e4:79:
b3:83:5e:73:be:6b:c8:a3:63:19:63:8a:27:07:0a:1c:00:4b:
71:d3:7b:5c:cf:2d:89:37:31:9b:05:96:bd:37:5a:d0:cb:9e:
fe:54:0c:7c:b2:fb:b8:ca:42:d8:a1:95:3c:2f:af:46:8c:0c:
98:38:b1:b3:21:9f:5d:a6:57:80:df:60:d0:49:f3:af:9d:68:
db:d2:ac:c0:85:40:0c:76:db:ec:7f:dc:76:26:bf:20:b2:1d:
eb:d3:a7:27:6c:36:a7:e1:9b:35:ea:eb:cb:11:1d:ec:c2:59:
61:80:1b:dd:04:0d:4e:f8:e9:91:4c:a8:f1:f3:66:c9:0b:e6:
f3:c5:cd:9e:e3:f0:0c:e4:a7:eb:df:4c:05:03:25:d4:d9:87:
ca:06:11:dc:68:f8:4d:71:87:02:87:b6:44:94:49:5f:a4:c8:
62:39:4e:09:a0:51:12:85:9d:62:17:a6:55:cb:a8:12:d8:f3:
7b:a7:55:7c:9e:66:38:58:2b:52:0e:ff:98:9b:c4:b9:3a:d9:
28:26:be:c3:19:9c:00:24:56:bc:86:75:0b:c8:7a:c2:2b:d5:
6b:a8:37:b6:ac:e4:25:fc:7e:ec:aa:f9:c0:e3:a3:70:34:70:
2f:b0:e3:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 12:16:29 2025 by rpki-client