Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/66f829-5129-4842-a5c0-3740b0941db8/1/nSVxkIIfcFio6v1IGWl0NoutjxQ.mft
File: nSVxkIIfcFio6v1IGWl0NoutjxQ.mft (raw, json)
Hash identifier: lY2ke7V9YvlGfxVRkvoTCW8FYFUQh/3E64/KR5QyMQM=
Subject key identifier: 97:3F:13:BD:93:13:4B:C2:56:E4:90:BF:0E:60:4D:8A:EA:10:37:36
Authority key identifier: 9D:25:71:90:82:1F:70:58:A8:EA:FD:48:19:69:74:36:8B:AD:8F:14
Certificate issuer: /CN=9d257190821f7058a8eafd48196974368bad8f14
Certificate serial: 019693048E42142EFA8A6CE6F02EAB6F69C6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nSVxkIIfcFio6v1IGWl0NoutjxQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4e/66f829-5129-4842-a5c0-3740b0941db8/1/nSVxkIIfcFio6v1IGWl0NoutjxQ.mft
Manifest number: 1520
Signing time: Fri 02 May 2025 22:01:11 +0000
Manifest this update: Fri 02 May 2025 22:01:11 +0000
Manifest next update: Sat 03 May 2025 22:01:11 +0000
Files and hashes: 1: S6yD0xSsAdYMuFY-SqJP0As2TGI.roa (hash: NWiZKpb2JP7oKryMsUVnNHlDjQunxGKrj2ir9mx8k8E=)
2: lkhGtmHtTBEdKgsUVjONXoB0iQc.roa (hash: 9yZ07+0QCixTukFaKD5cKhr7FU+NHBM/0FUydctI6gg=)
3: nSVxkIIfcFio6v1IGWl0NoutjxQ.crl (hash: qmyK4OyY4MXoPtGg4wie9x4o1dlMl3b08N8HtvrBcow=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4e/66f829-5129-4842-a5c0-3740b0941db8/1/nSVxkIIfcFio6v1IGWl0NoutjxQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/4e/66f829-5129-4842-a5c0-3740b0941db8/1/nSVxkIIfcFio6v1IGWl0NoutjxQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/nSVxkIIfcFio6v1IGWl0NoutjxQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 03 May 2025 19:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:93:04:8e:42:14:2e:fa:8a:6c:e6:f0:2e:ab:6f:69:c6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9d257190821f7058a8eafd48196974368bad8f14
Validity
Not Before: May 2 22:01:11 2025 GMT
Not After : May 3 22:01:11 2025 GMT
Subject: CN=973f13bd93134bc256e490bf0e604d8aea103736
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:c3:80:46:77:50:9c:f5:18:20:a3:05:65:a1:
e7:84:de:ec:3e:fb:3b:e1:72:d9:85:1d:4b:46:10:
3f:f2:fa:1d:bd:2b:ea:73:ac:f3:7d:2d:f0:10:27:
cb:bb:b3:99:b3:e8:19:65:c1:c0:8f:8f:0b:76:ac:
7e:57:95:2e:de:7d:76:31:f4:8e:b8:2f:25:e8:6a:
3c:73:37:a4:f6:80:e8:f9:9d:c8:07:0a:81:10:46:
b8:67:40:2c:dd:5a:35:d5:3e:cf:07:e8:f6:03:f2:
22:f1:4f:b8:f9:c2:cd:f2:f4:58:49:5d:45:f8:2f:
21:03:47:2c:8e:99:64:f5:71:25:4d:c6:ea:33:89:
be:0b:f4:99:62:ab:ee:ae:f1:0b:b9:13:0f:2a:96:
a9:04:99:d9:94:42:27:de:d2:51:a6:06:35:3d:5c:
0b:e4:0b:c6:07:f0:d0:d7:94:08:36:d7:8d:2d:ba:
2d:66:9c:6b:06:4f:dd:ce:7f:7a:52:f4:88:f0:e3:
64:9f:4f:5b:dc:83:a5:c7:d4:52:4f:2c:d6:25:94:
ae:65:0d:9d:05:22:9a:02:a7:cb:27:b9:4d:64:59:
15:00:ad:d7:ba:cc:f5:52:e3:5f:dd:55:1d:67:b6:
65:5a:f2:9c:d2:e0:c7:99:01:a1:36:d5:4d:03:b1:
c3:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:3F:13:BD:93:13:4B:C2:56:E4:90:BF:0E:60:4D:8A:EA:10:37:36
X509v3 Authority Key Identifier:
keyid:9D:25:71:90:82:1F:70:58:A8:EA:FD:48:19:69:74:36:8B:AD:8F:14
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nSVxkIIfcFio6v1IGWl0NoutjxQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/66f829-5129-4842-a5c0-3740b0941db8/1/nSVxkIIfcFio6v1IGWl0NoutjxQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/66f829-5129-4842-a5c0-3740b0941db8/1/nSVxkIIfcFio6v1IGWl0NoutjxQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
45:2e:d1:6d:9a:39:aa:27:17:99:33:9a:21:e6:2a:f9:aa:0c:
01:14:1c:65:0a:75:18:5a:5d:65:3c:4d:74:c6:fa:f2:26:f6:
ef:18:a2:2f:fe:fc:4e:04:3b:d2:7a:8a:28:a6:7e:4a:40:57:
2b:aa:4f:4b:15:33:1d:49:8b:19:86:63:b6:0e:dd:25:42:1b:
3b:66:7b:f5:4c:59:7b:60:f9:e5:d9:6d:bc:56:59:f5:db:c1:
d0:4e:12:be:53:07:d0:70:33:88:ce:d7:fc:65:7c:3e:e2:d1:
b2:59:8a:17:61:65:04:19:04:26:3b:76:bb:e7:14:79:35:f1:
77:97:01:ae:05:4e:b9:a4:c6:a3:37:d9:dd:df:35:78:ea:13:
90:11:47:ce:3d:af:8c:43:1f:3f:a0:22:bd:c2:d7:4e:fd:56:
39:61:93:c9:7c:82:81:76:ac:0a:27:73:8f:5c:4a:45:45:85:
d0:99:f6:12:d1:86:e0:f4:73:1f:00:2a:76:1a:85:93:c0:c2:
f0:1f:68:39:26:c7:98:83:e7:e5:d5:9c:0f:56:7e:80:4a:9c:
68:e6:55:d0:c2:2b:53:7c:3f:98:0b:7d:da:37:63:28:ae:50:
4c:b1:0e:d0:e1:72:85:af:84:a4:e4:f7:97:cb:02:a2:bc:32:
75:8d:8e:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 3 04:13:49 2025 by rpki-client