Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6d/bb47c2-f10b-4a77-8b03-edc336652ed7/1/nzZA2n8bwj7UWZ-EoIU8g5nzXXI.mft
File: nzZA2n8bwj7UWZ-EoIU8g5nzXXI.mft (raw, json)
Hash identifier: gkb6pspKZ4JziQzQTFAaT62kpD0rjaNmzmRdXewgH2k=
Subject key identifier: D0:E2:FF:C4:AF:EA:29:73:D8:8D:83:67:CC:7E:DA:EB:78:4D:7E:FD
Authority key identifier: 9F:36:40:DA:7F:1B:C2:3E:D4:59:9F:84:A0:85:3C:83:99:F3:5D:72
Certificate issuer: /CN=9f3640da7f1bc23ed4599f84a0853c8399f35d72
Certificate serial: 0196892528285A80E4CB62658416CDD21DF1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nzZA2n8bwj7UWZ-EoIU8g5nzXXI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6d/bb47c2-f10b-4a77-8b03-edc336652ed7/1/nzZA2n8bwj7UWZ-EoIU8g5nzXXI.mft
Manifest number: 0660
Signing time: Thu 01 May 2025 00:00:35 +0000
Manifest this update: Thu 01 May 2025 00:00:35 +0000
Manifest next update: Fri 02 May 2025 00:00:35 +0000
Files and hashes: 1: BlYqXPvciPfdyJ-GQUZOsP4jpLI.roa (hash: LmatIhZjxo/kiezrlbpjhiTczB9qo8t5QvMaWwqWJt0=)
2: nzZA2n8bwj7UWZ-EoIU8g5nzXXI.crl (hash: LwNyseyTDCifD86WWAxvhUbKeas2Bv88qBt/ahLxllI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6d/bb47c2-f10b-4a77-8b03-edc336652ed7/1/nzZA2n8bwj7UWZ-EoIU8g5nzXXI.crl
rsync://rpki.ripe.net/repository/DEFAULT/6d/bb47c2-f10b-4a77-8b03-edc336652ed7/1/nzZA2n8bwj7UWZ-EoIU8g5nzXXI.mft
rsync://rpki.ripe.net/repository/DEFAULT/nzZA2n8bwj7UWZ-EoIU8g5nzXXI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 01 May 2025 21:27:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:89:25:28:28:5a:80:e4:cb:62:65:84:16:cd:d2:1d:f1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9f3640da7f1bc23ed4599f84a0853c8399f35d72
Validity
Not Before: May 1 00:00:35 2025 GMT
Not After : May 2 00:00:35 2025 GMT
Subject: CN=d0e2ffc4afea2973d88d8367cc7edaeb784d7efd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:97:f9:1a:48:52:46:ef:5c:3e:65:b7:49:13:
62:0f:96:b7:e7:79:8f:74:ef:30:7f:4c:1a:aa:d6:
b2:e6:f7:c0:41:f4:12:46:18:54:b6:b7:c1:a1:c9:
eb:c4:7e:44:b0:17:08:52:f5:d5:08:35:fa:31:bc:
ba:9f:34:ec:cc:22:ba:a6:79:e1:1f:fe:30:df:d4:
56:29:a7:77:9d:ba:48:ea:ce:f8:18:35:58:5d:75:
c2:b1:cd:d0:b7:f5:64:e1:d2:06:e8:cd:dd:3f:4c:
87:64:4e:c9:e8:2f:5c:2a:f6:4c:1e:86:90:ea:ea:
18:b0:c7:ef:c8:f1:f3:7e:b1:dd:4c:f4:d1:e1:49:
b0:36:52:79:c0:15:3b:05:84:a3:4a:ec:d3:85:ca:
33:74:78:f7:eb:c7:6c:b1:f5:34:0d:f2:fc:e5:09:
b7:8b:8c:01:a8:66:5a:b1:96:04:60:5d:e4:4a:66:
4d:c2:4e:79:20:70:d2:0d:37:ad:19:4f:e1:1e:aa:
c3:ef:cc:14:9f:7b:4a:e7:77:26:87:e0:db:61:ed:
34:a3:5b:23:87:d6:76:54:8e:f7:24:95:10:b7:9b:
42:a4:6f:98:d2:e6:00:ab:69:2c:9b:80:2e:ad:e6:
08:11:9f:ad:ca:7f:31:36:19:e4:c2:1f:1a:97:ae:
45:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:E2:FF:C4:AF:EA:29:73:D8:8D:83:67:CC:7E:DA:EB:78:4D:7E:FD
X509v3 Authority Key Identifier:
keyid:9F:36:40:DA:7F:1B:C2:3E:D4:59:9F:84:A0:85:3C:83:99:F3:5D:72
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nzZA2n8bwj7UWZ-EoIU8g5nzXXI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/bb47c2-f10b-4a77-8b03-edc336652ed7/1/nzZA2n8bwj7UWZ-EoIU8g5nzXXI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/bb47c2-f10b-4a77-8b03-edc336652ed7/1/nzZA2n8bwj7UWZ-EoIU8g5nzXXI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
20:4e:4b:51:49:4d:ad:61:29:65:4f:7c:96:64:69:c7:09:c8:
11:55:54:51:c5:68:b0:2c:f3:50:93:41:1a:e8:82:b8:e6:35:
6c:10:1d:26:79:7b:d7:8b:02:83:2d:e8:5e:35:d9:5c:fe:47:
59:d2:4f:e1:5d:5b:b0:ed:fa:ee:b3:87:0a:dd:7c:58:e6:e7:
3a:c1:ed:9e:87:4d:a4:40:e4:2e:ea:30:88:9d:fc:95:31:91:
ae:2a:fd:82:78:5d:ae:44:7b:8a:05:5d:9b:c6:da:89:11:35:
0b:56:b6:de:51:b5:7e:da:ee:52:64:a4:b7:33:a1:58:6e:3a:
05:27:56:b2:c8:63:ba:db:5a:db:8f:bf:4b:c4:cb:30:06:5f:
fb:dc:9b:48:b7:5c:ad:1f:82:59:b1:a8:c3:be:52:61:92:ff:
08:92:23:c1:d1:30:16:18:0f:13:50:62:e1:4b:56:ba:02:2f:
1f:9f:c7:3a:0e:0e:9f:2e:4b:fb:f6:7b:bc:54:30:f7:bb:43:
66:e7:38:ed:df:47:0c:d5:f4:80:0e:c6:ec:06:7c:08:53:43:
f1:76:53:d2:5b:47:b3:3e:49:83:d2:fe:fb:ca:aa:55:03:15:
27:94:1a:40:31:e7:04:b8:63:1c:01:3f:e5:64:31:78:57:01:
52:7f:d8:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 06:01:02 2025 by rpki-client