Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/50/34011d-01bf-48a1-a8c3-c9fc5f452995/1/nfToC0ytTlC3iO3xaXZxLe7_bA0.mft
File: nfToC0ytTlC3iO3xaXZxLe7_bA0.mft (raw, json)
Hash identifier: TMrkfAPgdTDvZkWHpt+CLN7VwXKDIztiD+uWNu5WQOY=
Subject key identifier: 79:F7:DF:60:FA:AE:B2:C7:8D:A5:C4:15:39:C2:45:1B:3A:30:87:07
Authority key identifier: 9D:F4:E8:0B:4C:AD:4E:50:B7:88:ED:F1:69:76:71:2D:EE:FF:6C:0D
Certificate issuer: /CN=9df4e80b4cad4e50b788edf16976712deeff6c0d
Certificate serial: 019685EDA79F7E29174B3C993C053E0FE609
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nfToC0ytTlC3iO3xaXZxLe7_bA0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/50/34011d-01bf-48a1-a8c3-c9fc5f452995/1/nfToC0ytTlC3iO3xaXZxLe7_bA0.mft
Manifest number: 0DEB
Signing time: Wed 30 Apr 2025 09:01:06 +0000
Manifest this update: Wed 30 Apr 2025 09:01:06 +0000
Manifest next update: Thu 01 May 2025 09:01:06 +0000
Files and hashes: 1: mTtxU7O_lRz_UT2tjl3cUWas7pA.roa (hash: lHDy75xFNayt8SROCAEJF8vDi//tAi35Yjt2Fy8OX04=)
2: nfToC0ytTlC3iO3xaXZxLe7_bA0.crl (hash: PHdXYvErBZp9LW+gjyyhGrwN4f2RXf6zxPIb2eHIYVs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/50/34011d-01bf-48a1-a8c3-c9fc5f452995/1/nfToC0ytTlC3iO3xaXZxLe7_bA0.crl
rsync://rpki.ripe.net/repository/DEFAULT/50/34011d-01bf-48a1-a8c3-c9fc5f452995/1/nfToC0ytTlC3iO3xaXZxLe7_bA0.mft
rsync://rpki.ripe.net/repository/DEFAULT/nfToC0ytTlC3iO3xaXZxLe7_bA0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 01 May 2025 09:01:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:85:ed:a7:9f:7e:29:17:4b:3c:99:3c:05:3e:0f:e6:09
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9df4e80b4cad4e50b788edf16976712deeff6c0d
Validity
Not Before: Apr 30 09:01:06 2025 GMT
Not After : May 1 09:01:06 2025 GMT
Subject: CN=79f7df60faaeb2c78da5c41539c2451b3a308707
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:94:7f:2d:9c:5a:c6:7c:26:d7:1d:b3:7e:0f:
f7:88:9d:55:22:9c:87:0a:e4:2b:1a:6c:17:69:43:
29:eb:5a:09:82:3a:dd:21:f9:fd:64:84:f4:18:70:
6d:19:ec:4f:05:ac:a6:cf:80:00:59:f4:18:f7:dd:
7e:69:a3:e6:ad:02:bc:38:c6:47:9c:a2:56:26:2d:
60:8b:ca:1e:76:84:d7:dc:e6:61:71:b0:df:7c:9c:
44:98:9a:dd:4d:71:a2:8a:bd:ca:5d:92:70:2a:35:
7c:2b:53:c4:5a:49:a2:33:2d:81:8b:09:b7:67:c3:
56:f5:6d:ac:b2:3b:0b:36:72:7b:d7:c7:6c:4f:91:
46:0e:7a:cd:e5:c9:0e:79:45:cb:b9:55:92:ae:29:
96:e3:79:1b:a0:f0:27:f2:a3:5b:f1:4e:93:ef:54:
08:bf:60:d4:f7:76:08:1d:74:09:43:fc:84:7c:f0:
a1:43:6c:d9:66:ea:39:87:c6:a6:c6:72:a4:2d:21:
98:db:71:65:fc:43:40:71:25:94:ff:d5:f4:fd:69:
28:eb:82:ce:05:21:4d:a0:d0:35:07:10:bb:18:0b:
35:1f:b1:f4:6d:67:21:bb:3c:90:5b:e3:77:91:5e:
6e:a3:71:c7:b6:bd:fe:2b:7e:70:8b:4d:a4:f1:5c:
21:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:F7:DF:60:FA:AE:B2:C7:8D:A5:C4:15:39:C2:45:1B:3A:30:87:07
X509v3 Authority Key Identifier:
keyid:9D:F4:E8:0B:4C:AD:4E:50:B7:88:ED:F1:69:76:71:2D:EE:FF:6C:0D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nfToC0ytTlC3iO3xaXZxLe7_bA0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/50/34011d-01bf-48a1-a8c3-c9fc5f452995/1/nfToC0ytTlC3iO3xaXZxLe7_bA0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/50/34011d-01bf-48a1-a8c3-c9fc5f452995/1/nfToC0ytTlC3iO3xaXZxLe7_bA0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
cd:db:f5:8a:51:9b:c8:f8:9b:c3:b6:64:e7:90:df:f8:21:ce:
e9:66:eb:02:27:7e:2b:79:08:43:b6:fe:b2:45:20:81:2f:7d:
d8:2d:3e:79:e6:3c:3f:16:bc:05:6f:58:8a:26:62:a6:85:ba:
b8:20:e1:44:42:e7:0d:68:c8:33:a4:0f:6b:c9:49:09:0c:d2:
db:b6:8d:bf:64:00:b6:98:d0:26:c6:7f:6b:24:07:11:a9:4c:
b2:be:55:d4:1f:00:c7:df:36:a1:48:36:72:4c:00:20:74:20:
93:62:aa:03:96:d5:39:75:ab:6b:a1:7a:c4:8d:20:91:d6:f6:
0d:3f:0e:9a:6f:78:9c:0c:ec:f0:73:dc:e8:46:6c:ea:42:d7:
6c:c2:dc:0a:64:08:6b:7f:ca:11:19:b2:e0:7b:d9:ba:ad:8f:
40:dc:d6:96:29:6a:88:fc:64:b7:dc:11:28:80:e1:ed:59:15:
fb:d2:ff:52:de:13:6f:e6:9b:b5:7e:9b:c3:78:d6:2e:3c:71:
24:0b:33:3c:3c:6a:27:9b:d1:37:c6:10:1b:52:fd:c1:19:5d:
c2:c9:2d:6c:a7:c0:a7:4c:c0:c8:a9:38:fe:f9:68:05:15:f6:
c1:b1:c2:fb:6e:d1:02:e6:19:0c:56:35:40:97:84:f6:5f:38:
29:12:9e:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 18:45:13 2025 by rpki-client