Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5c/2dbe04-43a8-4963-8e86-3fe8f896e551/1/nynoVUAgve-hfFVhQ4-0uvWDH1I.mft
File: nynoVUAgve-hfFVhQ4-0uvWDH1I.mft (raw, json)
Hash identifier: +1zjo7AWJvrKvXirFkYUx6w0/NwWnbrBUnm1KoYtgLQ=
Subject key identifier: A9:4C:3F:E4:62:DC:E6:FE:0F:E1:7C:F3:6B:38:1E:65:26:26:35:95
Authority key identifier: 9F:29:E8:55:40:20:BD:EF:A1:7C:55:61:43:8F:B4:BA:F5:83:1F:52
Certificate issuer: /CN=9f29e8554020bdefa17c5561438fb4baf5831f52
Certificate serial: 019675D5281E41DB7FF3157FE61FC5D32422
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nynoVUAgve-hfFVhQ4-0uvWDH1I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5c/2dbe04-43a8-4963-8e86-3fe8f896e551/1/nynoVUAgve-hfFVhQ4-0uvWDH1I.mft
Manifest number: 0828
Signing time: Sun 27 Apr 2025 06:00:25 +0000
Manifest this update: Sun 27 Apr 2025 06:00:25 +0000
Manifest next update: Mon 28 Apr 2025 06:00:25 +0000
Files and hashes: 1: ZcSRf0HxnWHQIw5MIAf_WL9oY6A.roa (hash: cP2ZkY5lLDgrJYkw2lqKqOmENJRMWCl82XCDZbZfylY=)
2: dk4GVxnPxj9mrIWRHBmkYZR_RAY.roa (hash: eaMuW15awNbcED9U+mZfT6o28nxoJ9RTD5vuUNkkC90=)
3: nynoVUAgve-hfFVhQ4-0uvWDH1I.crl (hash: w8orOHrOoLe1+V5ZO0csxtmNhxsvZRVZjFaLUSkNwnI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5c/2dbe04-43a8-4963-8e86-3fe8f896e551/1/nynoVUAgve-hfFVhQ4-0uvWDH1I.crl
rsync://rpki.ripe.net/repository/DEFAULT/5c/2dbe04-43a8-4963-8e86-3fe8f896e551/1/nynoVUAgve-hfFVhQ4-0uvWDH1I.mft
rsync://rpki.ripe.net/repository/DEFAULT/nynoVUAgve-hfFVhQ4-0uvWDH1I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 05:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:75:d5:28:1e:41:db:7f:f3:15:7f:e6:1f:c5:d3:24:22
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9f29e8554020bdefa17c5561438fb4baf5831f52
Validity
Not Before: Apr 27 06:00:25 2025 GMT
Not After : Apr 28 06:00:25 2025 GMT
Subject: CN=a94c3fe462dce6fe0fe17cf36b381e6526263595
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:33:27:4c:b8:d1:1b:20:ec:aa:2e:17:74:63:
82:d9:d8:ff:5a:d0:3c:de:b0:d0:4b:ce:a5:c3:cb:
8b:36:3a:98:59:03:1f:e9:19:6f:61:f1:f0:32:ff:
93:09:6a:bd:44:09:1f:97:69:13:61:0d:0c:90:14:
ff:c0:ca:ea:fa:90:cc:41:ad:f6:d7:f9:c8:d3:4a:
64:36:b0:91:ec:08:99:20:a5:82:6a:8a:2f:40:2b:
32:e3:2b:d6:9c:be:76:9c:a9:39:8d:aa:3a:4a:bb:
ea:8f:fd:b8:7e:91:46:bf:5f:93:18:a9:34:9f:a0:
d0:0b:b3:dc:eb:c7:37:76:54:19:ca:03:74:91:1c:
81:53:85:1b:c5:a9:c3:7e:cb:de:22:a9:1a:15:da:
5d:53:fa:c9:78:d0:ad:1c:19:e0:ab:6c:fe:b0:79:
67:9a:77:28:37:ed:64:9a:1d:de:e8:cf:71:cf:fe:
ab:d8:36:c8:b1:6e:80:d2:4e:d0:7b:c1:15:bd:73:
1d:e4:c4:28:2e:5b:ae:75:91:60:7c:be:8a:0e:ef:
ed:69:48:0e:f2:3d:7f:12:4f:a8:6d:8e:db:e2:3b:
2a:7d:a2:94:c5:ee:17:7d:c6:3c:74:45:34:c4:69:
73:e9:2d:8a:5b:30:b7:47:39:33:23:f7:a5:4a:d1:
f0:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:4C:3F:E4:62:DC:E6:FE:0F:E1:7C:F3:6B:38:1E:65:26:26:35:95
X509v3 Authority Key Identifier:
keyid:9F:29:E8:55:40:20:BD:EF:A1:7C:55:61:43:8F:B4:BA:F5:83:1F:52
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nynoVUAgve-hfFVhQ4-0uvWDH1I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/2dbe04-43a8-4963-8e86-3fe8f896e551/1/nynoVUAgve-hfFVhQ4-0uvWDH1I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/2dbe04-43a8-4963-8e86-3fe8f896e551/1/nynoVUAgve-hfFVhQ4-0uvWDH1I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a5:dd:05:36:26:49:71:b2:e0:f1:d8:ee:c3:c5:df:54:29:00:
27:c4:63:4a:b2:84:9e:60:cb:59:ce:81:4f:f5:31:5c:5e:e6:
31:15:b9:ff:7d:23:38:a6:d6:df:cc:b1:68:c7:ee:df:3a:1a:
9a:3b:86:7e:6e:1b:6e:08:af:9e:55:23:f6:bc:6f:9b:3b:72:
76:c3:b7:e0:b7:03:b7:23:3d:bb:39:af:4a:44:94:79:cc:f0:
31:59:e5:b5:b4:08:bc:5a:f6:12:d9:62:7a:23:b0:52:98:4e:
64:79:e3:92:6e:9a:5c:f5:41:b7:7b:db:ec:00:ea:bd:fa:00:
aa:29:ab:59:72:5b:9a:d9:bb:e1:6e:c9:35:59:82:0d:96:33:
9f:15:99:b9:16:b6:b3:ec:f0:55:95:23:db:7e:d7:e0:44:37:
0e:7d:09:ef:86:e4:1f:35:69:7e:f5:d6:e7:df:f7:e2:bb:ad:
5e:c4:54:1e:0f:40:29:80:58:de:69:58:9a:ab:2b:3c:37:07:
cb:6f:33:93:19:41:ac:78:60:22:45:cf:9d:f1:ee:fa:c6:1e:
71:13:60:18:d8:da:ab:69:23:6c:60:19:46:f2:84:4d:eb:89:
1e:35:4a:59:1c:65:fa:43:54:93:a9:ea:ec:09:db:e7:c4:60:
6c:15:af:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 11:32:46 2025 by rpki-client