Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6a/832edd-488f-44d8-810b-f7ad97c0ecbd/1/nj3BkwnmeMFIJfxyCDyh3seEP00.mft
File: nj3BkwnmeMFIJfxyCDyh3seEP00.mft (raw, json)
Hash identifier: vbr/dut551UaS53dsSWudwEZrIKA+me4T7cG1v9zz1I=
Subject key identifier: 25:75:C6:31:F5:B1:B8:82:D4:56:A2:F5:1F:CA:97:65:1E:31:DA:AD
Authority key identifier: 9E:3D:C1:93:09:E6:78:C1:48:25:FC:72:08:3C:A1:DE:C7:84:3F:4D
Certificate issuer: /CN=9e3dc19309e678c14825fc72083ca1dec7843f4d
Certificate serial: 0196A16468B5C6E9A47AC289FAC6342CF332
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nj3BkwnmeMFIJfxyCDyh3seEP00.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6a/832edd-488f-44d8-810b-f7ad97c0ecbd/1/nj3BkwnmeMFIJfxyCDyh3seEP00.mft
Manifest number: 1342
Signing time: Mon 05 May 2025 17:00:34 +0000
Manifest this update: Mon 05 May 2025 17:00:34 +0000
Manifest next update: Tue 06 May 2025 17:00:34 +0000
Files and hashes: 1: JbUoXDLL57xF-6BVNBln0RftcZM.roa (hash: t8EC2530fZ+9x7+BNfg3gfNISOK9q19vZC97hYMQk9g=)
2: nj3BkwnmeMFIJfxyCDyh3seEP00.crl (hash: O0C67FT60madqFKPDvveI4O0DsxHYFxI9/NvNcEnswI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6a/832edd-488f-44d8-810b-f7ad97c0ecbd/1/nj3BkwnmeMFIJfxyCDyh3seEP00.crl
rsync://rpki.ripe.net/repository/DEFAULT/6a/832edd-488f-44d8-810b-f7ad97c0ecbd/1/nj3BkwnmeMFIJfxyCDyh3seEP00.mft
rsync://rpki.ripe.net/repository/DEFAULT/nj3BkwnmeMFIJfxyCDyh3seEP00.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 06 May 2025 10:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:a1:64:68:b5:c6:e9:a4:7a:c2:89:fa:c6:34:2c:f3:32
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9e3dc19309e678c14825fc72083ca1dec7843f4d
Validity
Not Before: May 5 17:00:34 2025 GMT
Not After : May 6 17:00:34 2025 GMT
Subject: CN=2575c631f5b1b882d456a2f51fca97651e31daad
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:77:8d:0c:80:7f:a2:0b:4d:a4:f6:38:3e:e5:
3a:6d:65:59:85:d2:47:f3:5c:81:6a:90:78:aa:c4:
9e:58:3c:fb:a3:79:6d:e2:99:6e:3c:52:7a:31:7d:
7c:b0:54:0b:ae:00:78:a1:f2:8c:96:1f:c2:7c:47:
37:5f:b2:23:be:3a:2f:cd:d1:9b:e5:4d:75:ce:f8:
c8:f3:85:fd:53:bf:ac:52:fc:93:20:ef:d8:f1:14:
1f:da:d6:fb:15:f1:2b:9f:a9:1b:da:90:f8:33:f8:
2c:7e:a7:72:cc:f0:0b:44:18:24:d9:a8:11:a4:d7:
bc:00:f7:dc:47:ba:fd:cf:b5:71:b3:de:1b:66:47:
fa:80:8b:b8:f5:f7:ad:9d:e0:3f:3b:49:5c:b8:68:
f1:29:e9:47:ff:89:3c:38:09:d3:23:0c:b9:00:d6:
9f:08:03:75:52:b4:4c:54:be:63:93:0f:29:9c:94:
03:b1:e8:82:3b:33:07:8a:5c:9e:9b:ff:21:90:fd:
b0:cc:bb:41:d8:fd:56:06:02:84:80:6f:3b:f1:99:
f2:70:da:b2:c3:1d:58:f4:58:71:30:25:67:c6:e8:
5e:3e:69:bc:58:a8:7e:21:95:07:ea:a5:b5:17:e4:
f3:02:9f:13:3d:3b:36:2d:f7:a7:1e:0e:33:05:09:
7b:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:75:C6:31:F5:B1:B8:82:D4:56:A2:F5:1F:CA:97:65:1E:31:DA:AD
X509v3 Authority Key Identifier:
keyid:9E:3D:C1:93:09:E6:78:C1:48:25:FC:72:08:3C:A1:DE:C7:84:3F:4D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nj3BkwnmeMFIJfxyCDyh3seEP00.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/832edd-488f-44d8-810b-f7ad97c0ecbd/1/nj3BkwnmeMFIJfxyCDyh3seEP00.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/832edd-488f-44d8-810b-f7ad97c0ecbd/1/nj3BkwnmeMFIJfxyCDyh3seEP00.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
37:cd:07:c9:6c:21:09:43:d6:be:66:02:3b:32:ce:88:4b:dd:
b8:9a:59:5a:3b:7a:a3:84:e0:59:d7:61:78:a4:b3:48:b2:d3:
bd:0d:93:57:2b:f7:b0:ad:ec:54:46:06:b6:81:f9:43:5f:26:
17:c5:2a:e2:37:93:dd:58:7d:d8:ca:59:d5:bd:bf:23:76:b3:
61:4a:b7:35:61:98:ef:64:e1:07:bf:64:6b:32:73:55:4f:46:
20:2f:e7:89:cb:05:ca:d1:9a:c4:0b:b1:fd:a3:16:e5:fe:b8:
5f:86:ef:d1:6d:7f:53:12:73:07:4f:0c:fc:1a:34:d2:05:b6:
c6:94:c5:47:54:23:1a:d3:28:6d:13:c3:a7:5d:a5:fd:e1:95:
c5:58:79:d0:4f:bf:16:cc:ae:a7:a6:26:ba:6a:83:9e:4f:c5:
c7:93:9f:0b:8d:6b:42:6c:da:5f:32:ae:4e:c3:04:8b:81:3a:
2a:8c:da:78:0f:07:99:68:f8:3a:78:0c:d0:4c:f2:e4:8a:e2:
86:85:c6:70:8c:80:e6:e1:3e:f3:33:98:e5:ad:40:0b:54:83:
8a:0e:6d:d2:ad:b8:03:35:d0:3f:ab:b8:e4:ca:d2:b0:e3:77:
0b:9f:70:bb:86:4f:e1:fc:da:df:8d:ad:d8:1c:82:4d:80:e4:
b1:21:22:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 5 20:23:11 2025 by rpki-client