Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/8928f1-8618-4c19-9f3d-4b8793db7460/1/nGIPMbSZfHNFvGa0a0PWhr8Akxo.mft
File: nGIPMbSZfHNFvGa0a0PWhr8Akxo.mft (raw, json)
Hash identifier: QYGdLHzbXj+eLWfxW5ineLZn5iZd/eS4lPm+b6pvU+0=
Subject key identifier: 98:24:87:22:44:AF:9F:7D:B4:74:E0:C2:D2:B8:73:DB:71:94:FC:2E
Authority key identifier: 9C:62:0F:31:B4:99:7C:73:45:BC:66:B4:6B:43:D6:86:BF:00:93:1A
Certificate issuer: /CN=9c620f31b4997c7345bc66b46b43d686bf00931a
Certificate serial: 01968B13AECDC0DE8DA47F5CC7FEDDDD6587
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nGIPMbSZfHNFvGa0a0PWhr8Akxo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/8928f1-8618-4c19-9f3d-4b8793db7460/1/nGIPMbSZfHNFvGa0a0PWhr8Akxo.mft
Manifest number: 05E0
Signing time: Thu 01 May 2025 09:00:45 +0000
Manifest this update: Thu 01 May 2025 09:00:45 +0000
Manifest next update: Fri 02 May 2025 09:00:45 +0000
Files and hashes: 1: nGIPMbSZfHNFvGa0a0PWhr8Akxo.crl (hash: pLBKDxHVr3zOvWwQYqibToG84ebqVQ5aShgRCv055Dc=)
2: wxRtFa54V_vU8mgLHIqlXUzZMOc.roa (hash: PMULlzIWB9KqtKOtRO+7MsiWSaPQynQGmN9eXMu6mPc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/66/8928f1-8618-4c19-9f3d-4b8793db7460/1/nGIPMbSZfHNFvGa0a0PWhr8Akxo.crl
rsync://rpki.ripe.net/repository/DEFAULT/66/8928f1-8618-4c19-9f3d-4b8793db7460/1/nGIPMbSZfHNFvGa0a0PWhr8Akxo.mft
rsync://rpki.ripe.net/repository/DEFAULT/nGIPMbSZfHNFvGa0a0PWhr8Akxo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 02 May 2025 07:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:8b:13:ae:cd:c0:de:8d:a4:7f:5c:c7:fe:dd:dd:65:87
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9c620f31b4997c7345bc66b46b43d686bf00931a
Validity
Not Before: May 1 09:00:45 2025 GMT
Not After : May 2 09:00:45 2025 GMT
Subject: CN=9824872244af9f7db474e0c2d2b873db7194fc2e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:0f:ff:e7:99:7a:b5:e4:a4:07:4e:9b:94:02:
53:e9:1d:ea:6a:9c:d7:5e:87:25:2b:c9:3f:d4:10:
8a:4b:42:7a:7b:1d:cc:25:bb:46:7c:95:ee:c5:72:
1e:8c:e3:34:60:6f:ab:cd:b3:eb:a5:76:84:9e:3b:
ff:3e:75:ac:bc:a3:17:72:01:ee:2e:fa:54:39:60:
d2:fe:0c:a7:2f:51:4f:c7:34:60:d3:73:0b:f7:6d:
6f:fa:59:f4:9d:b6:a8:bb:37:dd:95:31:8d:a6:07:
90:79:5d:5b:58:e5:02:06:6c:71:8c:c2:2a:97:83:
65:83:23:af:cb:e3:59:44:2d:4d:38:0b:43:ad:8a:
1e:b9:a2:7b:a0:93:4b:45:49:fc:58:8b:62:8b:52:
17:6e:ed:01:0b:12:5c:8f:fc:f0:dc:06:c9:75:ae:
00:a3:4a:9d:cb:51:8d:61:1f:15:f1:b7:1b:06:8d:
68:74:3a:4f:6e:5a:99:9b:5a:36:8c:bb:09:39:8f:
25:2d:cd:04:0f:ef:f4:c4:90:73:92:58:52:47:41:
b4:e3:cc:e3:d9:73:3b:e4:d7:61:d1:ed:4a:ea:d8:
49:82:db:65:b9:cf:c3:55:5f:59:9c:76:dd:76:18:
96:7c:56:59:6a:a0:83:cd:08:70:a8:57:34:b6:32:
a7:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:24:87:22:44:AF:9F:7D:B4:74:E0:C2:D2:B8:73:DB:71:94:FC:2E
X509v3 Authority Key Identifier:
keyid:9C:62:0F:31:B4:99:7C:73:45:BC:66:B4:6B:43:D6:86:BF:00:93:1A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nGIPMbSZfHNFvGa0a0PWhr8Akxo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/8928f1-8618-4c19-9f3d-4b8793db7460/1/nGIPMbSZfHNFvGa0a0PWhr8Akxo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/8928f1-8618-4c19-9f3d-4b8793db7460/1/nGIPMbSZfHNFvGa0a0PWhr8Akxo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7b:4b:cf:10:5f:6e:63:ba:a2:fb:3d:a3:38:14:b1:c0:16:90:
49:57:1f:5b:21:72:14:43:cf:7a:e5:f9:42:78:f4:01:c0:8a:
52:0b:b8:ec:93:e3:58:c2:ba:1e:6e:1f:6a:dd:d6:cb:00:51:
13:44:1e:4e:9b:8c:b2:ea:d8:94:d3:41:fc:f6:c6:d7:b2:16:
6c:c1:8e:c1:94:85:68:ad:1e:f9:c5:d3:c9:b0:33:7a:be:85:
73:90:91:84:ef:a0:03:b0:b7:8a:3d:f4:c1:6c:cc:b8:2b:8b:
f2:e2:3c:a9:6e:d0:64:4a:26:4b:24:9a:a5:75:2f:ff:96:a7:
20:21:72:6b:36:2e:51:14:d0:5c:f5:58:74:ae:e4:8e:01:4a:
d1:90:36:0d:12:13:6b:d1:d0:f3:f2:17:6e:d0:10:99:e4:9d:
8e:bd:ef:c1:52:31:37:c9:a1:7a:61:11:08:7f:c0:ff:ca:f7:
6f:37:f9:01:d2:f2:02:e9:b1:96:0b:fa:9a:52:cf:87:65:69:
6f:b2:3f:e3:eb:82:0d:91:29:5e:dd:70:29:e5:27:3e:af:e2:
72:7d:93:ef:7e:94:e4:20:73:31:c8:f0:80:77:37:89:b5:c1:
e2:10:73:14:0c:fd:8b:16:c5:d4:0a:8d:b0:4a:45:c4:c6:6b:
62:a1:32:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 11:18:32 2025 by rpki-client